Privacy Policy
Last modified: January 30, 2026
1. Purpose of Personal Information Processing
Storyweaver Co., Ltd. (hereinafter "the Company") processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those listed below. If the purpose of use changes, necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act will be taken.
- Service provision: AI phone answering service, dedicated phone number issuance, call connection
- Call record management: Call recording and text conversion, call summaries, call log retention
- Member management: Identity verification for membership services, prevention of service misuse
- Service improvement: Call quality enhancement, AI model training and improvement
- Dispute resolution: Customer inquiry and complaint handling, evidence for dispute resolution
- Customer support: Inquiry handling, notice delivery
- Marketing: New service announcements, event information (with consent)
2. Personal Information Collected
The Company collects the following personal information for service provision:
A. User (Business Owner) Information
※ Required items are necessary for service use; optional items do not affect service availability if not provided.
- Required: Name, email, password, mobile phone number
- Optional: Gender, age group, business registration number
B. Marketing Information (Optional)
※ Service use is not restricted even without marketing consent.
- Purpose: New service and feature announcements, event and promotion information, personalized offers
- Items collected: Email opt-in status, push notification opt-in status, consent/withdrawal timestamp
- Retention period: Until consent is withdrawn
- Withdrawal method: You can withdraw consent anytime via Settings > Marketing Preferences
C. Business Information
- Business name, address, existing phone number, business hours, menu information, etc.
- Information directly entered by users or publicly available information collected from external services
D. Call-Related Information
※ Collected to perform phone answering services delegated by the user (business owner).
- Caller phone number
- Voice recording files
- Call content text transcriptions
- AI-based call summaries
- Call date/time and duration
E. Device Contact Information (Optional)
※ Collected only when the user manually clicks the sync button in the mobile app.
- Items: Contact phone numbers and names
- Purpose: Display caller information in call logs
- Method: Collected only when user clicks "Sync Contacts" in settings (no automatic collection)
- Retention: Stored during service use period; immediately deleted upon account termination
F. Automatically Collected Information
- Access IP, browser type, access time, service usage records
3. Retention and Use Period
The Company promptly destroys personal information after the purpose of collection and use has been achieved. However, the following cases are retained for the specified periods:
- Member information: Until account termination (immediately deleted upon termination)
- Call text records: 7 days to unlimited per plan (deleted within 30 days of cancellation)
- Payment information: 5 years per E-Commerce Act
- Service usage records: 3 months per Communications Privacy Act
- Marketing consent information: Until consent withdrawal (immediately deleted upon withdrawal)
- Marketing consent/withdrawal history: Retained for 3 years for legal evidence
4. Third-Party Provision
The Company does not provide personal information to third parties in principle. However, exceptions apply in the following cases:
- When the user has given prior consent
- When required by law or when investigative agencies request information through legally prescribed procedures
5. Outsourcing of Personal Information Processing
The Company outsources personal information processing as follows for service provision:
| Service Provider | Outsourced Tasks |
|---|---|
| Cloud service provider | Data storage and server operations |
| Telecommunications provider | Phone number issuance and call connection |
| AI service provider | Speech recognition (STT), text conversion, AI model operation |
| Payment processor | Payment processing |
6. Call Recording and Data Processing
The Company records and processes call contents to perform phone answering services delegated by the user (business owner).
A. Legal Basis for Recording
- The user (business owner) delegates phone answering services to the Company, and the Company conducts calls on behalf of the user.
- Under the Communications Privacy Act, recording by one party to the call (the user or their agent, the Company) for business purposes is lawful.
- Recording is conducted for service quality improvement, dispute resolution, and call record management.
B. Collection and Processing
- Voice recording: All calls made through the service are voice recorded.
- Text conversion: Recorded audio is converted to text via AI-based speech recognition (STT).
- Call summary: Converted text is summarized by AI and provided to the user.
C. Scope of Use
- Call record and history management (provided via user dashboard)
- Service quality improvement and AI model enhancement
- Customer inquiry and complaint handling, evidence for disputes
- Call record review and provision as requested by user
D. Storage and Deletion
- Recording files and text are stored from 7 days to unlimited based on user's plan.
- All call-related data is destroyed within 30 days of service cancellation.
- Users may request deletion of individual call records at any time.
E. Rights of Callers (Call Recipients)
- Callers may request to view, correct, or delete their call records.
- Requests are processed through the relevant business (user) or the Company (privacy@callva.ai).
7. User Rights
Users may exercise the following rights as data subjects:
- Request to view personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
Rights may be exercised via written request, phone, or email to the Company, and the Company will take action without delay.
8. Destruction of Personal Information
The Company promptly destroys personal information when it is no longer needed, such as when the retention period has expired or the processing purpose has been achieved. Electronic files are permanently deleted using irrecoverable methods, and printed personal information is shredded or incinerated.
9. Security Measures
The Company takes the following measures to ensure the security of personal information:
- Encryption of personal information
- Technical measures against hacking
- Access restrictions to personal information
- Storage and tamper prevention of access logs
10. Privacy Officer
Privacy Officer
- Department: Privacy Protection Team
- Email: privacy@callva.ai
For reports or consultations regarding privacy violations, please contact the following organizations:
- Privacy Violation Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Crime Division (www.spo.go.kr / +82-2-3480-3571)
- National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)
11. Changes to Privacy Policy
This Privacy Policy is effective from January 30, 2026. Any changes will be announced on the website at least 7 days before taking effect.