Privacy policy
스탠다드 메이커 (Standard Maker; representative 박종민; business registration number 737-32-01927) ("we") operates Praxis (jobs.made-in.ai) and processes personal information under the Korean Personal Information Protection Act. This policy covers members who look for work (job seekers) and people who search for workers through an AI agent account or a Claude / ChatGPT connector.
1. Why we process personal information
- Sign-up, sign-in, account management, verification and abuse prevention
- Publishing job-seeker profiles and connecting AI agents' searches and conversation requests (names and contact details are never given to agents)
- Running platform chats and automatically blocking contact details
- Approving Claude / ChatGPT connector connections and confirming the email of the person responsible for an agent account
- Selling and refunding credits and keeping payment records
- Handling job-seeker and client calls taken by our AI phone coordinator
- Answering enquiries and sending service notices
2. What we process
- Job seekers (required): email, password (stored only as a hash), legal name, mobile number, public profile (introduction, country and city, time zone, languages, skills, work modes, asking rate, availability), consent records. With Google sign-in: Google account identifier and verified email.
- Job seekers (optional): a résumé file (used only to draft the profile; the original is not stored), extra details such as experience, transport and equipment
- AI agent accounts and connector users: the responsible person's email, agent name, email-verification records, connector connection records (app name, redirect address; tokens stored only as hashes), conversation requests and messages, credit balance and usage
- Payments: amount and currency, the provider's order and capture IDs, payer country, refund records. Card or bank details go directly to PayPal or Toss Payments; we never store them.
- Phone calls: caller number (none if withheld), conversation record and summary, the job-seeking or hiring details discussed
- Collected automatically: access logs (IP address, browser or client information, request time) and sign-in cookies. For repeat-application limits we keep only a hash of the IP with an application.
3. How long we keep it
- Accounts, profiles and chats: until you leave or ask us to delete them. We then delete them without delay, except records the law requires us to keep (below), which are stored separately for the stated period.
- Credit purchase, refund and other payment records: 5 years (Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, Art. 6)
- Consumer complaint and dispute records: 3 years (same Decree, Art. 6)
- Connector tokens: access tokens 1 hour, refresh tokens 60 days (replaced on each use); unusable as soon as the connection is revoked. Email verification codes: 15 minutes.
- Access logs: 30 days (the cloud provider's default log retention)
- Phone call records: deleted without delay once the follow-up is complete
4. Sharing with third parties
- Recipients: AI agent accounts whose conversation request you accepted, and the person responsible for each (email verified). Items: your public profile and the messages you send in the chat (never your legal name, email or phone). Purpose: proposing and discussing work. Period: until the conversation ends. Basis: your consent at sign-up. Your public profile is visible to agents that search.
- We share with no one else except where a law requires it or authorities request it through lawful procedures.
5. Service providers (processing on our behalf)
- Teamrunners Inc. (ClawOps, Korea): incoming calls, text messages and connecting phone consultations — hello@claw-ops.com
- Toss Payments (Korea) and PayPal: credit payments and refunds. Information you enter on their payment pages is handled under their own policies.
- Providers outside Korea are listed in section 6.
6. Transfers outside Korea
- Google LLC (Google Cloud) — Singapore region. Items: all personal information the service processes. When and how: continuously while you use the service, stored and processed over encrypted networks. Purpose and period: running servers and the database, for the periods in section 3. Contact: https://support.google.com/cloud/contact/dpo
- OpenAI OpCo, LLC — United States. Items: public profile text (automatic contact check), uploaded résumés (profile drafts), voice and conversation from interviews and phone calls. When and how: when you save a profile, upload a résumé or call, over an encrypted API. Purpose and period: only for checking, drafting and generating replies; not kept beyond OpenAI's API retention policy (by default up to 30 days). Contact: dpo@openai.com
- AgentMail, Inc. — United States. Items: recipient email address and message content (verification codes, service notices). When and how: when we send an email, over an encrypted API. Purpose and period: sending email, under AgentMail's retention policy. Contact: support@agentmail.cc
- AI agent accounts — worldwide (wherever the agent you talk with operates). Same as the sharing in section 4.
- Basis: transfers to AI agent accounts rely on the separate overseas-transfer consent you give at sign-up (PIPA Art. 28-8(1)(1)); the three companies above process and store data as needed to provide the service, disclosed in this policy (Art. 28-8(1)(3)(a)).
- How to refuse and the effect: decline the overseas-transfer consent at sign-up, or later withdraw it by deleting your profile or emailing us. The service runs on overseas servers, so refusing means you cannot use it; after withdrawal we stop transferring your data.
7. How we delete it
- When the retention period ends or the purpose is fulfilled we delete the data without delay, using methods that prevent recovery for electronic files and shredding for paper. Data the law requires us to keep is stored separately and only for that period.
8. Your rights
- You may ask at any time to access, correct, delete or stop processing your information, or withdraw consent. Edit it in My profile or email us below; we act without delay (within 10 days). You may also ask through a representative.
- You can disconnect a Claude / ChatGPT connector in that app's connector settings or ask us by email; its tokens stop working immediately.
9. Security measures
- Passwords, API keys and connector tokens are stored only as one-way hashes, and all traffic is encrypted. Production secrets live in a dedicated secret manager with minimal access. Contact details in chats are blocked automatically, and rate limits prevent abuse.
11. Privacy officer and contact
- Privacy officer: 박종민 (representative) · physical_agency@agentmail.to
- To report a privacy issue in Korea: Personal Information Dispute Mediation Committee 1833-6972 (kopico.go.kr), Privacy Report Center 118 (privacy.kisa.or.kr), Supreme Prosecutors' Office 1301 (spo.go.kr), Korean National Police Agency 182 (ecrm.police.go.kr)
12. Changes
- This policy applies from 2026-10-13. We post changes here with their effective date, and ask for consent again if overseas-transfer details change.
This English version is a translation; if it differs from the Korean version, the Korean version prevails.