ibou.ai Inc. (주식회사 아이보에이아이, the "Company") collects only the minimum personal data needed to run the ibouPCB service and never sells it to third parties. This document explains what we store, why, and for how long.
1. What we collect
| Item | Details |
|---|---|
| Email address | Account identification, login, payment receipts and important notices |
| Password | Stored only as a hash (bcrypt). The plaintext is never stored and is unknown to the Company |
| Sketches, source code, project settings | Parsing, compiling, simulating, converting, storing. This is the substance of your project |
| Run artifacts | Compiled binaries, netlists, KiCad projects, Gerbers, BOMs, CPLs, verification reports, simulation recordings — kept so you can download and reproduce them |
| Payment data | Handled by the payment processor. The Company stores no card numbers, only a payment identifier, amount and timestamp |
| Access logs | IP address, browser type, request time — for security and incident analysis; deleted after 90 days |
2. What we do not collect
- Name, postal address, phone number or date of birth
- Advertising identifiers or third-party tracking cookies — the Service uses no ad networks
- The contents of in-browser simulation runs — simulation happens in your browser; only the summary needed for verification (pin directions, whether pins toggled, serial output) is sent to the server
3. Why we use it
- Providing the Service: account management, project storage, running compile / simulation / conversion / verification, file downloads
- Processing payments and refunds, issuing invoices
- Security: detecting abnormal access, analysing incidents
- Improving the Service: statistics that cannot identify an individual (part usage frequency, verification failure types, conversion duration)
4. Retention
| Item | Details |
|---|---|
| Account data (email, hashed password) | Deleted immediately when the account is deleted |
| Sketches, projects, artifacts | Deleted within 30 days of account or project deletion (grace period for recovery requests); purged from backups within 90 days |
| Payment records | 5 years, as required by applicable commerce law |
| Access logs | 90 days |
5. Third parties and processors
The Company does not sell personal data or share it for marketing.
We use the following processors: cloud hosting and storage (project files and artifacts), a payment processor (payments), and an email delivery service (verification, receipts, notices). Each processes data only for that purpose.
When the AI proposer is used, only part catalog IDs and a pin-contract summary are sent to the external model API — never your source code or email address. AI proposals are adopted only after passing the deterministic verifier.
6. Your rights
- Access and correction: change your email and password on the settings page.
- Export: every project and artifact can be downloaded at any time in standard formats (KiCad · Gerber · CSV). No lock-in.
- Deletion: delete your account on the settings page or email hello@ibou.ai.
- Users under 14 (Korea) or under 13 (Japan) may not register.
7. Cookies and local storage
Only a session token and UI preferences (theme, language) are stored in your browser. No tracking cookies are used.
8. International transfers
Servers and storage are located in Korea or Japan; depending on the payment processor and email provider, some data may be processed abroad. A list of processors is available on request.
9. Changes and contact
Changes to this policy are announced at least 14 days before they take effect.
Data protection officer: Kim Sun Ho (Representative) · ibou.ai Inc. · hello@ibou.ai
Business information
| Company | ibou.ai Inc. (주식회사 아이보에이아이) |
|---|---|
| Representative | Kim Sun Ho |
| Business registration no. (KR) | 295-87-03310 |
| Mail-order business report no. (KR) | 제2026-인천부평-1516호 |
| Address | 1-316, 3F, 34 Gyeongwon-daero 1344beon-gil, Bupyeong-gu, Incheon, Republic of Korea |
| hello@ibou.ai |