Effective: March 18, 2026
QA Note Co., Ltd. (hereinafter "Company") processes personal information for the following purposes. Personal information collected will not be used for any purpose other than those stated below. If the purpose of use changes, the Company will obtain separate consent and take other necessary measures.
The Company collects the following personal information for service provision:
Required Items:
Social Login:
Automatically Collected During Service Use:
Payment:
Personal information is retained until account deletion. Upon account deletion, it is destroyed without delay.
However, if retention is required by applicable laws, the information is retained for the legally mandated period:
The Company does not provide personal information to third parties without user consent, except as required by law.
If the user has configured integrations, data may be transmitted to the following external services:
The Company outsources personal information processing as follows for service provision:
| Service Provider | Outsourced Tasks | Retention Period |
|---|---|---|
| PortOne, Inc. | Payment processing | 5 years after payment completion |
| Cloudflare, Inc. | File storage (R2) | Until account deletion |
| Resend, Inc. | Email delivery | Upon delivery completion |
| OpenAI, LLC | AI issue analysis (reproduction step generation, root cause analysis) | Immediately deleted upon analysis completion |
| Supabase, Inc. | Database hosting | Until account deletion |
| Vercel, Inc. | Web application hosting | Duration of service use |
The Company transfers personal information overseas as follows for service provision:
| Recipient | Country | Items Transferred | Purpose | Retention Period |
|---|---|---|---|---|
| OpenAI, LLC | United States | Issue content (screenshot metadata, console log summary) | AI-based reproduction steps and root cause analysis | Immediately deleted upon analysis completion |
| Cloudflare, Inc. | Global (edge network) | Screenshots, attachments | File storage and CDN delivery | Until account deletion |
| Supabase, Inc. | United States (AWS us-east-1) | All service usage data | Database hosting | Until account deletion |
| Vercel, Inc. | United States | Web request logs | Web application hosting | Duration of service use |
| Resend, Inc. | United States | Email address, name | Email delivery | Upon delivery completion |
Users (data subjects) may exercise the following rights:
The Company destroys personal information without delay when the retention period has expired, or when the processing purpose has been achieved and the information is no longer needed.
Destruction Procedures:
Destruction Methods:
The Company takes the following measures to ensure the security of personal information:
The Company may collect behavioral information through the session replay feature for QA purposes. This is collected only when the user has explicitly activated the feature.
Behavioral Information Collected:
Purpose of Collection:
How to Opt Out:
The QA Note Chrome Extension collects technical metadata solely for the purpose of creating QA reports. All data collection begins only after the user's explicit consent.
Prerequisites for Data Collection:
Technical Metadata Collected:
Data Storage and Transmission:
Sensitive Information Protection Measures:
The Company uses AI technology to perform the following automated processing:
Automated Processing:
User Rights:
Due to the nature of the B2B SaaS service, the Company restricts service use by children under 14 years of age.
If a user is confirmed to be under 14, service registration is denied without the consent of a legal guardian, and any collected personal information is immediately destroyed.
The Company has designated a Privacy Officer to oversee personal information processing operations and to handle complaints and remedies related to personal information:
The QA Note Chrome Extension is distributed through the Google Chrome Web Store and complies with Google's Chrome Web Store User Data Policy.
QA Note's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Limited Use Compliance:
This Privacy Policy may be amended due to changes in laws, policies, or services. Any changes will be announced through in-service notices at least 7 days in advance.
Significant changes (addition of collected items, changes to third-party provision, etc.) will be announced at least 30 days in advance.