Privacy Policy
Last modified: July 25, 2026
1. Purpose of Personal Information Processing
Storyweaver Co., Ltd. (hereinafter "the Company") processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those listed below. If the purpose of use changes, necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act will be taken.
- Service provision: AI phone answering service, dedicated phone number issuance, call connection
- Call record management: Call recording and text conversion, call summaries, call log retention
- Member management: Identity verification for membership services, prevention of service misuse
- Service improvement: Call quality enhancement, AI model training and improvement
- Dispute resolution: Customer inquiry and complaint handling, evidence for dispute resolution
- Customer support: Inquiry handling, notice delivery
- Marketing: New service announcements, event information (with consent)
- Processing of pseudonymized information: Pseudonymization or anonymization for statistical compilation, scientific research (including the development, training, and evaluation of artificial intelligence models), and public-interest archiving
2. Personal Information Collected
The Company collects the following personal information for service provision:
A. User (Business Owner) Information
※ Required items are necessary for service use; optional items do not affect service availability if not provided.
- Required: Name, email, password, mobile phone number
- Optional: Gender, age group, business registration number
B. Marketing Information (Optional)
※ Service use is not restricted even without marketing consent.
- Purpose: New service and feature announcements, event and promotion information, personalized offers
- Items collected: Email opt-in status, push notification opt-in status, consent/withdrawal timestamp
- Retention period: Until consent is withdrawn
- Withdrawal method: You can withdraw consent anytime via Settings > Marketing Preferences
C. Business Information
- Business name, address, existing phone number, business hours, menu information, etc.
- Information directly entered by users or publicly available information collected from external services
D. Call-Related Information
※ Collected to perform phone answering services delegated by the user (business owner).
- Caller phone number
- Voice recording files
- Call content text transcriptions
- AI-based call summaries
- Call date/time and duration
E. Device Contact Information (Optional)
※ Collected only when the user manually clicks the sync button in the mobile app.
- Items: Contact phone numbers and names
- Purpose: Display caller information in call logs
- Method: Collected only when user clicks "Sync Contacts" in settings (no automatic collection)
- Retention: Stored during service use period; immediately deleted upon account termination
F. Automatically Collected Information
- Access IP, browser type, access time, service usage records
3. Retention and Use Period
The Company promptly destroys personal information after the purpose of collection and use has been achieved. However, the following cases are retained for the specified periods:
- Member information: Until account termination (immediately deleted upon termination)
- Call text records: 7 days to unlimited per plan (deleted within 30 days of cancellation)
- Payment information: 5 years per E-Commerce Act
- Service usage records: 3 months per Communications Privacy Act
- Marketing consent information: Until consent withdrawal (immediately deleted upon withdrawal)
- Marketing consent/withdrawal history: Retained for 3 years for legal evidence
- Pseudonymized or anonymized Derived Datasets: Anonymized information does not constitute personal information pursuant to Article 58-2 of the Personal Information Protection Act of Korea and may therefore be retained and used without a separate retention-period limitation. Pseudonymized information is retained until its processing purpose is achieved; additional information is separately stored and then destroyed.
4. Third-Party Provision
The Company does not provide personal information to third parties in principle. However, exceptions apply in the following cases:
- When the user has given prior consent
- When required by law or when investigative agencies request information through legally prescribed procedures
- When information pseudonymized pursuant to Article 28-2 of the Personal Information Protection Act of Korea is provided for statistical compilation, scientific research, or public-interest archiving
- When information anonymized so that no particular individual can be identified, and which therefore no longer constitutes personal information pursuant to Article 58-2 of the Personal Information Protection Act of Korea, is provided
5. Outsourcing of Personal Information Processing
The Company outsources personal information processing as follows for service provision:
| Service Provider | Outsourced Tasks |
|---|---|
| Cloud service provider | Data storage and server operations |
| Telecommunications provider | Phone number issuance and call connection |
| AI service provider | Speech recognition (STT), text conversion, AI model operation |
| Payment processor | Payment processing |
| Pseudonymization/anonymization service provider | Pseudonymization or anonymization of call data and quality verification |
6. Call Recording and Data Processing
The Company records and processes call contents to perform phone answering services delegated by the user (business owner).
A. Legal Basis for Recording
- The user (business owner) delegates phone answering services to the Company, and the Company conducts calls on behalf of the user.
- Under the Communications Privacy Act, recording by one party to the call (the user or their agent, the Company) for business purposes is lawful.
- Recording is conducted for service quality improvement, dispute resolution, and call record management.
B. Collection and Processing
- Voice recording: All calls made through the service are voice recorded.
- Text conversion: Recorded audio is converted to text via AI-based speech recognition (STT).
- Call summary: Converted text is summarized by AI and provided to the user.
C. Scope of Use
- Call record and history management (provided via user dashboard)
- Service quality improvement and AI model enhancement
- Customer inquiry and complaint handling, evidence for disputes
- Call record review and provision as requested by user
D. Storage and Deletion
- Recording files and text are stored from 7 days to unlimited based on user's plan.
- All call-related data is destroyed within 30 days of service cancellation.
- Users may request deletion of individual call records at any time.
E. Rights of Callers (Call Recipients)
- Callers may request to view, correct, or delete their call records.
- Requests are processed through the relevant business (user) or the Company (privacy@callva.ai).
F. Pseudonymization/Anonymization and Derived Datasets
- The Company may pseudonymize or anonymize call recordings, transcripts, and summaries for statistical compilation, scientific research (including the development, training, and evaluation of AI models), and public-interest archiving.
- Before processing, the Company removes telephone numbers, names, addresses, unique identifiers, bank account and card numbers, the user’s business name and store name, and other information identifying an individual or business, or replaces such information with values that cannot be restored.
- When processing pseudonymized information, the Company separately stores any additional information needed to restore the information to its original state, segregates access permissions, and destroys the additional information once the processing purpose has been achieved.
- The Company does not use pseudonymized information to identify a particular individual. If a particular individual is identified during processing, the Company immediately ceases the processing and retrieves and destroys the relevant information.
- Pseudonymized or anonymized outputs and any statistics, metrics, conversation patterns, evaluation criteria, and training or evaluation datasets derived therefrom may be provided or licensed to third parties. In such cases, no information capable of identifying a particular individual or business is included.
- A user (business owner) may opt out of the use of call data from the user’s store for the above purposes by contacting privacy@callva.ai or through the dashboard.
7. User Rights
Users may exercise the following rights as data subjects:
- Request to view personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
Rights may be exercised via written request, phone, or email to the Company, and the Company will take action without delay.
8. Destruction of Personal Information
The Company promptly destroys personal information when it is no longer needed, such as when the retention period has expired or the processing purpose has been achieved. Electronic files are permanently deleted using irrecoverable methods, and printed personal information is shredded or incinerated.
9. Security Measures
The Company takes the following measures to ensure the security of personal information:
- Encryption of personal information
- Technical measures against hacking
- Access restrictions to personal information
- Storage and tamper prevention of access logs
10. Privacy Officer
Privacy Officer
- Department: Privacy Protection Team
- Email: privacy@callva.ai
For reports or consultations regarding privacy violations, please contact the following organizations:
- Privacy Violation Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Crime Division (www.spo.go.kr / +82-2-3480-3571)
- National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)
11. Changes to Privacy Policy
This Privacy Policy is effective from August 5, 2026. Any changes will be announced on the website at least 7 days before taking effect.