Privacy Policy

1. Who is responsible

The controller of your personal information is:

2. What we collect

We collect the minimum needed to run the website and service:

• Account & identity — when you sign in to the Console, your email address and authentication identifiers (via our identity provider). We do not receive or store your password.
• Service metadata — machine names, network membership, health status, capability grants and usage counts needed to coordinate your private mesh and to meter usage. This is operational metadata, not the content of your AI traffic.
• Billing — if you subscribe, payment is processed by our payment provider; we receive transaction status and the minimum needed to issue and reconcile invoices. We do not store full card numbers.
• Website usage — cookies and analytics events as described in section 4, only after you consent.
• Communications — messages you send to our contact addresses (e.g. support, security reports).

We do not collect your prompts, model inputs/outputs, or the data your services process. That traffic stays inside your encrypted mesh.

3. Why we use it

• To provide, secure and operate the service (mesh coordination, access control).
• To meter usage and process billing.
• To respond to your inquiries and security reports.
• To understand and improve the website (analytics), only with your consent.
• To comply with legal obligations.

4. Cookies & analytics

Essential cookies needed to keep you signed in and to remember your cookie choice are always active. With your consent, we use Google Analytics 4 to understand aggregate website usage; it sets cookies and processes usage events. You can accept or decline analytics cookies in the banner shown on your first visit, and change your choice at any time. Declining leaves only the essential cookies. See our Cookie Policy for the full list.

5. Sharing & processors

We do not sell your personal information. We share it only with processors who help us run the service, under contract and only as needed:

• Cloud & hosting infrastructure (service backend and this website).
• Identity/authentication provider (sign-in).
• Payment provider (billing).
• Analytics provider (Google Analytics), only with your consent.

We may disclose information where required by law or to protect our rights, users and the public.

6. Retention

We keep personal information only as long as needed for the purposes above or as required by law (e.g. records related to payments and tax). Service metadata is retained while your account is active and deleted or anonymized within a reasonable period after account closure, except where a longer period is legally required.

7. Your rights

Subject to applicable law, you may request to access, correct, delete, or restrict the processing of your personal information, withdraw consent, and object to processing. To exercise these rights, contact privacy@falconoon.com. You also have the right to lodge a complaint with the Personal Information Protection Commission (PIPC) of the Republic of Korea.

8. Security

We apply administrative, technical and physical safeguards appropriate to the risk, including encryption in transit, access controls, and audit logging. No method of transmission or storage is perfectly secure, but the service is designed so your AI content never reaches us in the first place. To report a vulnerability, see our Security page.

9. International transfers

Our infrastructure providers may process data in regions outside the Republic of Korea. Where personal information is transferred internationally, we rely on appropriate safeguards and your consent as required by applicable law.

10. Changes

We may update this policy. Material changes will be posted here with a new effective date, and where required, notified to you.

11. Contact & Privacy Officer