Privacy policy
GOONIES Co., Ltd. (the “Company”) processes users’ personal information as follows under the Personal Information Protection Act while operating the Alfred 3x5 web app (https://alfred3x5.com), Windows app and ChatGPT/Claude connection features (the “Service”).
The automatic keyword classification provisions are a proposed amendment, not yet applied in production. They will apply after TypeSafe retention/overseas-transfer conditions and the effective date are finalized, and required notices and consent are completed.
The website membership and optional email-contact policy takes effect on October 14, 2026; the consent-record version is 2026-10-14. You can review this policy during registration and separately consent to optional email contact. The automatic-classification amendment’s conditions and effective date are independent of this membership policy.
1. Purposes of processing personal information
We process personal information only for the following purposes. If a purpose changes, we give prior notice and obtain necessary consent.
- Identify users and maintain sign-in
- Store, search, read and edit uploaded work documents and manage revision history
- Invite members and manage organization-workspace permissions
- Automatic classification of Markdown keywords as people, projects, materials or topics when enabled by the workspace owner
- Connect to external AI services such as ChatGPT and Claude with the user’s direct approval
- Prevent misuse and investigate/respond to security incidents
- Website membership administration and inquiry support (under section 15)
- Updates, news, promotions and marketing emails to members who separately opt in (under section 15)
We do not sell personal information or use it for ad-network targeting, tracking users or AI model training. Company-sent informational/marketing email uses only the email and name of members who separately consent under the membership policy below. Work documents are not used for marketing.
2. Personal information items and collection methods
| Category | Items | Collection method |
|---|---|---|
| Account information | Unique social account identifier, supplied email address and verification status, name and profile image URL | Received from the selected social sign-in service |
| Service materials | Workspace names, Markdown documents, attached images, original PDF/Office files and server-extracted text, document history, organization names and invited members’ email addresses | Entered/uploaded by the user |
| Sign-in and connection information | Sign-in sessions and approval information for external apps such as ChatGPT/Claude (app name, approved scopes and approval time) | Generated when signing in or approving a connection |
| Keyword classification information | Automatic-classification settings and approval, keywords, related document paths and results | Entered by the owner in settings or generated during classification |
| Access logs | Request time, request type, outcome and pseudonymized account/app identifiers | Generated during service use |
We do not receive or store passwords or access Google data other than sign-in information, such as mail or Drive. To prevent misuse, the AI authorization page uses the connecting IP address only in server memory for up to 15 minutes without storing it separately.
3. Retention and use periods
| Items | Retention period |
|---|---|
| Account information | Until the user requests deletion |
| Sign-in sessions | 30 days after issuance or until sign-out |
| Documents, files and revision history | Until user deletion. Earlier content remains in history for restoration after individual document deletion. Deleting or emptying a workspace deletes its history too. |
| External AI approvals | Until disconnection. Connections expire 30 days after approval and require reauthorization. |
| Keyword classification settings/indexes | Until the workspace is deleted or emptied. Disabling classification stops transfers; it does not delete stored materials. |
| Access logs | Oldest logs are deleted automatically when server log capacity is exceeded (20 MB per file, up to 10 files) |
| Disaster-recovery backups | 30 days from backup creation |
Information required by law to be retained is kept for the legally specified period.
4. Third-party disclosure
We do not disclose personal information to third parties except in the following cases.
- External AI connected directly by the user: When a user approves Alfred 3x5 in ChatGPT (OpenAI), Claude (Anthropic) or similar services, document content searched/read at the user’s request and the account’s email/name are sent to that service. Its privacy policy applies. Disconnect at any time in Settings › MCP connectors; further transfers stop immediately.
- Where specifically required by law or requested by investigative authorities through legally prescribed procedures
TypeSafe automatic keyword classification is separate from external AI connections. Disconnecting MCP does not stop it; the owner must disable it or request suspension from us. External requests already started cannot be recalled.
5. Outsourcing and overseas transfers
Service servers are in the Republic of Korea. We outsource the following work to provide the service, which involves overseas transfers.
| Recipient | Cloudflare, Inc. (contact: cloudflare.com/privacypolicy) |
|---|---|
| Destination countries | United States and countries where Cloudflare operates |
| Outsourced work | Secure relay for website/API connections (encrypted connections) |
| Transferred items | Connecting IP addresses and service requests/responses |
| Timing and method | Over the network whenever accessing the service |
| Retention period | Deleted without delay after relay processing; information retained under Cloudflare policy is kept for its stated period |
| How to decline | Essential to service access; declining requires stopping use of the service. |
TypeSafe AI — automatic keyword classification in selected workspaces
| Recipient | TypeSafe AI (contact: privacy@typesafe.ai) |
|---|---|
| Destination countries | United States |
| Outsourced work | Classify keyword types as people, projects, materials and topics using the Jev API |
| Transferred items | Selected keywords, document titles and related context excerpts. Excerpts may contain personal information, paths or identifiers present in the document. Account/workspace identifiers and full document paths are not added as separate identifying information. |
| Timing and method | Sent via HTTPS API when existing Markdown is first processed after owner enablement, or when relevant context, candidates or classification criteria change |
| Retention period | TypeSafe privacy policyand data-processing termsfor the period needed for service provision, security and legal compliance. Public policies specify no fixed retention days; this service does not guarantee zero retention. |
| How to decline | Classification is off by default. Owners can leave it off or disable it separately. Declining does not prevent saving, searching or MCP. Stopping does not automatically delete sources or existing classification data. |
TypeSafe’s public policy states API inputs are not used for model training. No training does not mean no retention; separate enterprise zero-retention terms are not promised for the general API.
Social sign-in authenticates directly with the service you choose; it is not our outsourcing of personal-information processing to that service.
6. Destruction procedures and methods
- Personal information is destroyed without delay when retention ends or its purpose is fulfilled.
- Electronic files are deleted irrecoverably from the database. Backup remnants are destroyed when the backup retention period ends.
- We do not retain personal information on paper.
7. Your rights and how to exercise them
You may request access, correction, deletion or suspension of processing at any time.
Actions available directly in the app
- Edit documents, replace source files, restore earlier versions
- Sign out (immediately ends the server session)
- Disconnect external AI in Settings › MCP connectors
- Leave an organization yourself
Requests through the membership page or email
On the signed-in membership pageyou can request withdrawal/account deletion. For deletion of accounts, workspaces and materials, access, correction or processing suspension, contact sales@goonies.kr. We may verify your account further if needed. We process requests and notify results within 10 days of receipt. Legal representatives or authorized agents may also apply.
To revoke Alfred 3x5 sign-in access in your Google account, use Google third-party connections management. Revoking this alone does not delete materials stored in the service.
9. Security safeguards
- All communications use HTTPS; sign-in cookies are HttpOnly/Secure so scripts cannot read them.
- Sessions and external AI tokens are stored only as hashes, not plaintext.
- Document permissions are rechecked on every request. Accounts leaving or removed from an organization cannot access it through existing AI connections.
- AI connections use OAuth 2.1/PKCE with separate approval for reading and writing.
- Access logs exclude bodies, search terms, paths and tokens; account identifiers are pseudonymized.
- Server secrets and operational privileges are restricted to the minimum necessary personnel.
10. Google user data
For Google sign-in, the service requests only openid, email, profile scopes and uses the information only for section 1 purposes. Alfred 3x5’s use and transfer to other apps of information received from Google APIs complies with Google API Services User Data Policy, including Limited Use requirements.
11. Children under 14
This is a work service, not intended for children under 14. If we learn their personal information was processed, we destroy it without delay.
12. Privacy officer
| Privacy officer | Lee Yoon-jae (CEO) · sales@goonies.kr |
|---|---|
| Responsible department | GOONIES · Responsible person: CEO · sales@goonies.kr |
Contact the above officer for privacy inquiries, complaints and remedies arising from service use.
13. Remedies for rights violations
For privacy-infringement consultation or dispute mediation, contact the following organizations.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Privacy Infringement Report Center: 118, no area code (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301, no area code (www.spo.go.kr)
- National Police Agency: 182, no area code (ecrm.police.go.kr)
14. Changes to this policy
The existing policy applies from September 29, 2026. The automatic-classification amendment’s effective date is undecided and will be finalized separately after the pre-production conditions above are satisfied. Changes are announced on the service’s first screen at least 7 days before effect, or 30 days if unfavorable to users.
Section 15 membership and optional contact applies from October 14, 2026; the consent-record version is 2026-10-14.
15. Website membership and optional contact
Effective: October 14, 2026 · Consent-record version: 2026-10-14. This section governs website membership. It does not change the automatic-classification/TypeSafe amendment or its conditions; that amendment is not yet effective.
Items and purposes
- Basic profile: We use social account identifiers, email and verification status, name, profile image URL and service-generated creation time for identification, membership administration and inquiry support. We do not additionally collect passwords, Google mail/Drive or work documents for registration.
- Registration and consent records: We record registration time, terms/privacy versions, marketing consent and its grant/withdrawal times. An existing app account alone does not imply agreement to website terms or marketing.
- Operational contact: Inquiry responses, account management, security and terms notices are operational purposes, separate from optional marketing.
Email information/marketing only to opted-in members
We use separately opted-in members’ verified email/name for Alfred 3x5 updates, news, promotions and marketing sent directly by us. Not used for third-party sales, ad-network targeting, AI training or work-document marketing.
The optional checkbox is off by default. Declining causes no disadvantage to registration/use. Withdraw any time by unchecking and saving on the membership page. This stops future marketing use; it does not delete the account or profile.
Retention, withdrawal and deletion
- Basic profiles and registration/consent records remain until completed withdrawal/account deletion. Optional marketing use of email/name ends on consent withdrawal or account deletion.
- Membership-page withdrawal deletes the account. If workspaces/organizations remain owned, the request is blocked rather than deleting automatically. Retain needed materials, transfer ownership or delete those resources, then request again.
- Account deletion removes social identifiers, email/name/image URL, registration/email consent and sign-in information. Automatically copied author profile names in shared materials are removed, leaving opaque internal references. Other members’ shared materials and authorship/approval histories remain; bodies, attachments and separately user-entered names are not bulk-edited.
- Backup remnants are destroyed after the existing 30-day period. Downloaded CSV copies follow the operator process below; automatic deletion is not guaranteed.
Operator access and CSV-copy management
Authorized operators view profiles, registration and consent through lists, details and CSV. Full-account exports are only for administration/inquiries; marketing exports include current opt-ins only. Social unique identifiers, passwords, mail/Drive/work documents and sign-in/AI tokens are excluded from member views/CSV.
Withdrawal or deletion does not automatically recall/delete downloaded CSV. Operators must check current consent before sending, reflect withdrawal/deletion and separately delete fulfilled-purpose copies. For access, correction, deletion or suspension requests, contact sales@goonies.kr.
16. Private feedback
For feedback, we process the following to receive/respond to bug reports, suggestions and usage questions and display conversations. Existing website sign-in/registration is used; no separate post password is collected.
- Items: Author internal account ID, category, title, body, follow-ups/operator replies, status, creation/update times and conversation authors’ internal account IDs. Form content entered by users is stored on the server.
- Visibility: Signed-in authors see their own inquiries/replies. Operators designated by internal account ID can view all and manage replies/status. Other ordinary members cannot see titles, content, lists or counts. This is an access policy, not E2EE unreadable even to operators.
- Separate from archives/external AI: Inquiries are stored separately. Posting does not grant archive access or add them automatically to AI/MCP. Access logs do not record inquiry titles, bodies, replies or forms.
- Additions and changes: Sent inquiries and replies are appended to, not edited or individually deleted. Author follow-ups reset status to Received. Read replies on the feedback page; no attachments or automatic email notifications are offered.
- Retention and deletion: Retained for support and conversation review without a promised fixed number of days. Completed account deletion removes your inquiries, follow-ups and operator replies in the same deletion. If ownership/other withdrawal restrictions block deletion, inquiries remain. Your operator replies in others’ inquiries remain with those inquiries and may keep only opaque references. Names/emails are not copied separately into reply authorship.
Backup remnants follow the existing backup retention period. For access, correction, deletion or processing suspension, contact sales@goonies.kr. Do not include passwords, authentication tokens or unnecessary personal information.