Privacy Policy

Soulit (the "Service") collects the following personal information to provide its services.

Collected personal information is used for the following purposes:

• User identification and authentication
• Service provision and operation (AI character chat, image generation, etc.)
• Credit payment and transaction management
• Service improvement and statistical analysis
• Customer inquiry and complaint handling
• Delivering necessary notices such as terms of service updates

1. Conversations between users and AI characters are stored on our servers for service provision and conversation history management.
2. Conversation data may be used in anonymized form for service quality improvement analysis.
3. Users may delete their conversation history at any time.
4. Character settings entered during AI character creation (name, personality, description, etc.) are stored for service provision.

We do not disclose personal information to third parties without user consent, except in the following cases:

Personal information may also be disclosed when required by law or requested by investigative authorities.

The Service uses an overseas provider to generate AI character replies. A separate, currently disabled Telegram moderation capability is described as a planned transfer below; it cannot be activated until the missing transfer details are reviewed and published.

AI reply provider

• Recipient — Featherless AI (api.featherless.ai)
• Country — outside the Republic of Korea (the provider's country of establishment)
• Purpose — generating the AI character's reply
• Data transferred — the message you send and the immediately preceding conversation context. Account data such as your email or payment details is not transferred.
• Retention — for the time needed to produce the reply. Any retention beyond that is governed by the provider's own policy.
• How to refuse, and what happens — you may decline by not using the chat feature. Everything else in the Service continues to work normally.

Time-limited Telegram moderation alerts

Raw-text transfer is currently disabled. This advance notice does not authorize a transfer. Before activation, Soulit must publish the exact destination country or countries, a verified Telegram recipient contact, a definite provider retention period, and the applicable lawful basis or separate-consent path in a new in-service notice and Privacy Policy revision.

• Recipient and service provider — Telegram Messenger Inc. (Telegram; Telegram Bot API)
• Country and recipient contact — not yet verified. Raw-text mode must remain disabled until the exact destination country or countries and verified Telegram recipient contact are published here.
• Purpose — temporarily delivering ordinary chat message text to a private 1:1 chat with the administrator for abuse and safety moderation
• Data transferred — ordinary chat message text. Messages detected by Soulit’s local explicit-crisis intervention filter and image-generation prompts are excluded and are not sent as raw text.
• Timing and method — raw-text alerts are sent through the Telegram Bot API only for the configured, time-limited period while raw delivery is enabled.
• Processing and retention — Telegram states that cloud-chat messages may be stored across data centres in different jurisdictions under Telegram's Privacy Policy. A definite provider retention period has not yet been verified, so raw-text mode remains disabled. Deleting your Soulit account would not by itself guarantee deletion of a Telegram copy.
• How to refuse, effect, and your rights — you may decline this transfer by not using chat while raw-text mode is active; other Service features remain available. Questions or requests for access, correction, deletion, or suspension of processing may be sent to customer@soulit.app. What can be completed depends on Soulit's and Telegram's respective systems and policies.

Photo generation stays on our servers. Images are rendered on infrastructure the Service operates directly; neither the generated image nor the request behind it is sent to an outside provider.

1. Personal information is destroyed without delay once the purpose of collection has been fulfilled. However, when retention is required by applicable law, the information is securely stored for the required period before destruction.
2. Retention periods:
   • Records of contracts or withdrawal of offers: 5 years (E-Commerce Act)
   • Records of payment and supply of goods: 5 years (E-Commerce Act)
   • Records of consumer complaints or dispute resolution: 3 years (E-Commerce Act)
   • Access logs: 3 months (Protection of Communications Secrets Act)
3. Deletion methods: Electronic personal information is deleted using irreversible methods; paper documents are shredded.

Users may exercise the following rights:

• Request to view personal information
• Request to correct or delete personal information
• Request to suspend processing of personal information
• Delete account (available directly from the profile page)

These requests can be made through your profile settings or by contacting customer@soulit.app.

We implement the following measures to ensure the security of personal information:

• Encrypted storage of passwords and authentication tokens
• Data transmission encryption via SSL/TLS
• Minimized access rights to personal information
• Regular security audits

1. The Service uses cookies for user authentication and service provision.
2. Users may refuse cookies through browser settings; however, some Service features may be limited.

Product analytics are enabled by default so we can understand feature use, reliability, and performance. They remain enabled until your browser sends a Do Not Track (DNT) signal or you explicitly turn them off in Settings. DNT applies to product analytics; it is not advertising consent.

To apply your choices and connect a campaign visit to your account, internal consent receipts and first-party attribution visits may be linked to your account ID. Those account-linked records are removed when you delete your account. Data sent to advertising providers and advertising-conversion payloads do not contain chat messages, generated images, safety-related data, month or year of birth, manually selected crisis-support country, email, nickname, or raw account ID.

• Telegram operational alerts notify administrators of sign-ups, payments, and key activities. The time-limited raw-text moderation and overseas transfer boundaries are described in Section 4-1.

This Privacy Policy may be updated in response to changes in laws, policies, or services. Any changes will be announced through in-Service notices.