Legal
Privacy Policy
Last updated: 21 August 2026. Document version 2026-08-21.
1. Who we are
Itaimi Global Inc. (이타이미글로벌 주식회사) operates Cara Web at web.caraaichat.com. Contact support@karakoa.io for privacy requests. Operator details are on the Contact page.
2. What this policy covers
This policy describes personal data processed to operate Cara Web. Public product, pricing, and legal pages can be read without creating an account. Chat, sign-in, and paid subscriptions process additional data when those features are used.
This version of the public site does not use advertising cookies, marketing pixels, or a non-essential analytics platform.
3. Data we process
Depending on how you use Cara Web, we may process:
- Public website and security: request logs such as IP address, user agent, URL, and timestamps generated by Google Cloud Platform (Google Cloud). These logs are used to operate, secure, and debug the site.
- Account: a user identifier. After sign-in, an email address and the sign-in provider identifier.
- Age and terms confirmation: that you confirmed you are 16 or older, the time of confirmation, and the age-gate and Terms versions you accepted. We do not collect date of birth or birth year.
- Chat: your messages, AI replies, selected friend, and conversation metadata needed to provide history and support.
- Usage and operations: quota counts, token and cost records, error and security logs, and short-lived IP-based abuse throttling.
- Payments: Paddle customer, subscription, and transaction references. Cara does not store full payment card numbers. Paddle processes payment details as Merchant of Record.
4. Purposes and legal bases
We process data to:
- provide and secure the website, Chat, history, and customer support
- confirm 16+ eligibility and Terms acceptance
- apply free and paid usage limits
- process subscriptions, invoices, taxes, cancellations, and refunds through Paddle
- detect abuse, debug failures, and meet legal obligations
Where data-protection law requires a legal basis, we rely on performance of a contract, legitimate interests in operating a secure service, legal obligation, and consent where we specifically ask for it.
5. Processors and international transfers
We use service providers to operate Cara Web, including:
- Google Cloud Platform (Google Cloud) for hosting, databases, authentication, and related infrastructure
- AI model providers that generate Chat replies from the prompts we send them
- Paddle for checkout, invoices, taxes, and refunds
These providers may process data outside the Republic of Korea, including in the United States. We use them only as needed to provide the service.
6. Retention, access, and deletion
Account and conversation data are kept while the account is active and as needed to provide history, support, security, and legal records. Hosting and security logs are kept for a short operational period. Paddle retains payment records according to Paddle’s own obligations.
To request access or deletion, email support@karakoa.io from the address associated with your account. We may need to verify the request. Some records may be retained where the law requires it.
7. Users under 16
Cara Web is not for people under 16. If we learn that we have collected personal data from someone under 16, we will delete it. Contact support@karakoa.io to request that deletion.
9. Changes
We may update this policy when our processing changes. The new date and version will appear at the top of this page.