1. Controller and scope

FixAiFlow (픽스에이아이플로우) operates LabelVerify and controls the account, service-operation, support, and website information described here. When an organization uploads personal information for its own work, that organization remains responsible for the content and we process it to provide the service.

This policy covers the current hosted workspace, browser-local comparison tools, optional local AI and Slack connection, support, and public website.

2. Information, purposes, and retention

We process the information below to create and secure accounts, provide collaboration and comparison tools, follow workspace-administrator instructions, answer requests, and meet legal obligations.

Account and legal records

Name, work email, authentication identifiers and sessions, profile and display settings, company or team membership, role, security records, and the accepted Terms and acknowledged Privacy version, timestamp, language, and signup source. We keep account and profile data until account deletion and limited security logs or backups for their operational or legal period. The authentication provider handles credentials; we do not receive plaintext passwords.

Workspace and projects

Membership, project and folder metadata, uploaded project files, assignments, comments, issues, annotations, approvals, finalization records, and audit history. We keep these until an authorized workspace administrator deletes them or the service relationship ends. Shared records may remain after one user deletes an account, with direct account references removed or detached where supported.

Browser-local and AI processing

Selected files, extracted content, locally generated results, review choices, and preferences may be processed or stored in your browser. Active IndexedDB job bundles expire after 24 hours; other localStorage or IndexedDB records remain until you clear them or reset the tool. AI-assisted matching runs on your device. Model files may be downloaded from LabelVerify’s configured model host, but the compared document text remains in your browser. AI suggestions may be inaccurate and require qualified human review. The configured provider receives network and download-request metadata, but not compared text. We do not use customer files, workspace content, compared text, or results to train shared or public models.

Support

Email address, message, necessary attachments, and follow-up information. We keep these until the request is resolved and afterward only as needed for security, disputes, or law.

3. Processors, disclosures, and international transfers

We disclose information only to the processors below, authorized members of your workspace, a connection you enable, or when legally required. We do not sell personal information or use it for targeted or cross-context behavioral advertising.

For users in Korea, required hosting transfers support performance of the service contract. Optional transfers occur only when the feature is enabled. Data is transferred over encrypted connections when the service or feature is used. If you decline required processing, the hosted service cannot be provided; optional processing can be avoided by not using that feature.

Supabase · United States

Authentication, hosted workspace data, project-file storage, and optional AI asset delivery; account, legal-acceptance, workspace, project-file, and request metadata. Service data follows Section 2 and limited provider records follow its retention practices. Required for hosted accounts and workspaces.

Vercel · United States and global network

Hosting, security, content delivery, and cookie-free aggregate analytics; network, request, device, and aggregate usage metadata. Analytics does not receive form values or document contents. Provider records follow its retention practices. Required to deliver the site.

Hugging Face · United States and delivery network

Optional AI asset delivery; network and download-request metadata, but not compared text. Provider records follow its retention practices. Avoid this transfer by not using the relevant AI-assisted feature.

Slack · United States and other provider locations

Optional workspace notifications; connection and channel information and selected notification content only when a PM owner or Admin connects Slack. The connection remains until removed, replaced, or its project is deleted; delivered messages follow the connected workspace’s settings and Slack’s policies. Avoid this transfer by not connecting Slack.

4. Browser storage, rights, and account deletion

LabelVerify uses essential authentication storage, a one-year language cookie, and localStorage or IndexedDB for preferences, comparison jobs, and local results. Blocking authentication storage prevents sign-in; clearing local storage removes locally saved data. Aggregate analytics uses no analytics cookies, advertising pixels, or cross-site advertising.

Subject to applicable law, you may request access, correction, deletion, restriction or suspension of processing, withdrawal of consent, or review of a denied request by emailing us. We may verify identity and authority, and an authorized workspace administrator controls shared project content.

Account deletion removes the authentication user, personal profile, and signup acceptance record. Shared project files, comments, issues, approvals, and audit history may remain for the workspace, with direct account references removed or detached where supported.

5. Security, destruction, contact, and changes

We use role-based access, encrypted transport, limited operational access, service logs, and provider safeguards. When information is no longer required, we delete or de-identify it; controlled backups expire through the applicable backup cycle.

Privacy contact: FixAiFlow Privacy Contact. Email: fixaiflow@gmail.com. Address: Suite 902-3-39, Hwaseong Gold Plaza, 36 Geonwon-daero, Inchang-dong, Guri-si, Gyeonggi-do, Republic of Korea. Korean data subjects may also contact the Personal Information Infringement Report Center (118) or Personal Information Dispute Mediation Committee (1833-6972). We will post revisions with a new effective date and provide additional notice or consent when required.