Privacy Policy
Effective Date: October 23, 2026 (announced October 16, 2026)
Notice of amendment · From October 23, 2026, we add or revise the articles on workspaces (Article 4), third-party provision and processing delegation (Article 5), and overseas transfer (Article 6). The previous policy took effect on February 23, 2025; you can request a copy at 9way@futuretalent.co.kr.
Future Talent Lab (hereinafter "the Company") complies with the Personal Information Protection Act and related laws, and is committed to protecting the personal information of data subjects (hereinafter "Users") who use the 9WAY Strength Assessment Service (hereinafter "the Service").
Article 1 (Purpose of Collection and Use of Personal Information)
- Member management: Registration, identity verification, user identification and service management
- Service provision and operation: Strength assessment and AI coaching services
- Payment and settlement: Processing payments and refunds for paid services
- Customer support: Handling inquiries, complaints, and delivering notices
- Service improvement and marketing: Enhancing service quality and providing personalized advertisements
- Workspaces (group use): Showing members' diagnosis results together and supporting team strength analysis and coaching in workspaces run by institutions, schools, companies, coaches, and others
- CareerTech account linking: Creating a CareerTech (careertech.ai.kr) account with your name and email at sign-up, so you can use this service, also run by the Company, with the same account, and granting points
Article 2 (Items and Methods of Personal Information Collection)
- Registration and service use: Name, email, phone number
- Service usage records: 9WAY assessment results, AI coaching records
- Payment and settlement: Payment information (credit card number, transaction history)
- Automatically collected: IP address, cookies, device information (OS, browser)
- Information entered while using the Service: Profile (birth year, gender, affiliation, field, job), career canvas entries, coaching questionnaire answers, coaching recordings uploaded by coaches
Article 3 (Retention and Usage Period of Personal Information)
| Category | Retention Period |
|---|---|
| Member information | 6 months after account deletion |
| Assessment results | 6 months after account deletion |
| Payment information | 5 years (E-Commerce Act) |
| Customer inquiry records | 3 years (Consumer Protection Act) |
Article 4 (Processing of Personal Information in Workspaces)
- When an institution, school, company, coach, or similar organization (the "Operator") creates a workspace and invites members, the Company processes members' personal information within the scope entrusted to it by the Operator.
- When a member joins a workspace, the Operator's administrators and people the administrators have granted access (such as leaders and coaches) can view the following information. The Operator decides who is granted which access.
- Name, email, and profile information
- Diagnosis results linked to that workspace (including the report, if one was provided)
- If the Operator uses the coaching feature: coaching records, questionnaire answers, and the completed career canvas from the linked diagnosis
- The Operator may use this information only to understand members' strengths and support their growth (such as team strength analysis, coaching, and growth conversations). The same applies when a coach uses AI tools to prepare for coaching; the text the Company generates for this does not include email addresses or contact details.
- The Operator is responsible for informing members of paragraphs 2 and 3 and obtaining their consent. For members under the age of 14, the Operator obtains consent from their legal guardian.
- Diagnoses a user has taken on their own are visible only if the user links them to the workspace; unlinked diagnoses are not visible.
- When a member leaves a workspace, the Operator can no longer view that member's diagnosis results. To stop participating, contact the Operator's administrator or the Company's Privacy Officer (9way@futuretalent.co.kr).
Article 5 (Third-Party Provision and Processing Delegation)
The Company does not provide personal information to third parties unless the user has consented or the law requires it. To operate the Service, the Company delegates the following tasks.
| Delegate | Task |
|---|---|
| Vultr (The Constant Company, LLC) | Server operation and data storage (servers in Seoul) |
| NAVER Cloud Corp. | Sending email, text messages, and KakaoTalk notifications |
| Kakao Corp. | Delivering KakaoTalk notifications |
| Toss Payments Co., Ltd. | Payments, cancellations, and refunds |
| Linkhub Co., Ltd. (Popbill) | Issuing electronic tax invoices and verifying settlement account holders |
Article 6 (Overseas Transfer of Personal Information)
To provide the Service, the Company sends personal information to the companies below. It is sent over the internet when you use the relevant feature. If you do not want your information transferred, you can ask the Privacy Officer (9way@futuretalent.co.kr). If you refuse, you will not be able to use the related features (such as AI analysis and coaching recording transcription).
Anthropic, PBC
United States
privacy@anthropic.com
- Items sent
- Diagnosis results; age group, affiliation, field, and job; AI coaching conversations; career canvas entries; coaching transcripts (name and email are not sent)
- Purpose
- AI analysis, coaching, and summaries
- Retention
- Deleted within 30 days of receipt (up to 2 years if a usage policy violation is suspected)
Google LLC (Gmail)
United States and other countries with Google data centers
googlekrsupport@google.com
- Items sent
- Email address, name, and notification email content
- Purpose
- Sending notification emails
- Retention
- Kept until the Company deletes it; erased within 180 days after deletion
Google LLC (Gemini API)
United States and other countries with Google data centers
googlekrsupport@google.com
- Items sent
- Answers written in the strength challenge
- Purpose
- Generating challenge feedback
- Retention
- Kept for 55 days, then deleted (not used for AI training)
Google LLC (Analytics and Ads)
United States and other countries with Google data centers
googlekrsupport@google.com
- Items sent
- Visit records (cookies, IP address, browser information, pages visited)
- Purpose
- Visit analysis and ad performance measurement
- Retention
- Analytics: 2 or 14 months depending on settings. Ads: part of the IP address is removed after 9 months and cookie information after 18 months, making the records anonymous
AssemblyAI, Inc.
United States
legal@assemblyai.com
- Items sent
- Audio recordings of coaching sessions
- Purpose
- Transcribing recordings
- Retention
- Audio files deleted within 48 hours; transcripts deleted after 30 days
Meta Platforms, Inc.
United States, Ireland, and other countries
korealocalagent@support.facebook.com (Korean local agent)
- Items sent
- Hashed email, phone number, and name; IP address; browser information; pages visited; conversion records (such as sign-ups and payments)
- Purpose
- Measuring ad performance
- Retention
- Up to 2 years (hashed contact information is deleted right after matching)
| Recipient | Items sent | Purpose | Retention |
|---|---|---|---|
| Anthropic, PBC United States privacy@anthropic.com | Diagnosis results; age group, affiliation, field, and job; AI coaching conversations; career canvas entries; coaching transcripts (name and email are not sent) | AI analysis, coaching, and summaries | Deleted within 30 days of receipt (up to 2 years if a usage policy violation is suspected) |
| Google LLC (Gmail) United States and other countries with Google data centers googlekrsupport@google.com | Email address, name, and notification email content | Sending notification emails | Kept until the Company deletes it; erased within 180 days after deletion |
| Google LLC (Gemini API) United States and other countries with Google data centers googlekrsupport@google.com | Answers written in the strength challenge | Generating challenge feedback | Kept for 55 days, then deleted (not used for AI training) |
| Google LLC (Analytics and Ads) United States and other countries with Google data centers googlekrsupport@google.com | Visit records (cookies, IP address, browser information, pages visited) | Visit analysis and ad performance measurement | Analytics: 2 or 14 months depending on settings. Ads: part of the IP address is removed after 9 months and cookie information after 18 months, making the records anonymous |
| AssemblyAI, Inc. United States legal@assemblyai.com | Audio recordings of coaching sessions | Transcribing recordings | Audio files deleted within 48 hours; transcripts deleted after 30 days |
| Meta Platforms, Inc. United States, Ireland, and other countries korealocalagent@support.facebook.com (Korean local agent) | Hashed email, phone number, and name; IP address; browser information; pages visited; conversion records (such as sign-ups and payments) | Measuring ad performance | Up to 2 years (hashed contact information is deleted right after matching) |
Article 7 (Destruction Procedures and Methods)
- Electronic files: Permanently deleted beyond recovery
- Paper documents: Shredded or incinerated
Article 8 (User Rights and How to Exercise Them)
Users may view, modify, or delete their personal information.
To request modification or withdrawal: Contact via email (9way@futuretalent.co.kr)
Article 9 (Privacy Officer and Contact Information)
- Privacy Officer
- Bongjun Kim
- 9way@futuretalent.co.kr