Privacy & AI notice
This English page is a translation provided for convenience. The Korean notice is the reference text if the two differ.
This notice is for the beta. Sections 9 to 14, on the community and WORIT member reviews, will be finalized after legal review before those features are turned on.
To make better recommendations, the WORIT beta uses the tastes you choose, your saving and visiting behavior, and consumption data you enter yourself.
1. What data do we use?
This covers your taste choices, likes, “not for me” and visit feedback on recommendations, places you save, and receipt information you enter or upload yourself. We use it only to the minimum extent needed for the features you use.
2. What does the AI do?
The AI generates recommendations and explanations from the place information provided and your tastes and situation. It is designed not to invent facts or prices it could not verify; where price information is missing, it is shown as “coming soon”. AI answers follow the language of the screen you are using.
3. Receipts and photos
Receipts are used to create verified consumption data. In production, automatic masking of personal information, retention periods and a deletion policy must be applied clearly; the final policy will be fixed before the beta is released.
4. Payment and subscription information
Premium subscription payments are processed by Toss Payments. WORIT does not store the original payment method details such as card numbers. The payment-related information WORIT keeps is limited to the order number, amount, payment status and payment method type (for example, card), and is used only to check subscription status (plan, next billing date, cancellation) and to handle refunds and inquiries.
5. Partner (merchant) information
For users who apply as a partner, we additionally store the business name, business registration number and contact details for reservation management. Reservation requests sent by consumers (party size, preferred time, requests) are shared only with the partner that manages that place, and are not provided to other partners or third parties.
6. Processing that needs consent, and processing that does not
The data WORIT processes falls into the four groups below by purpose. Consent is requested only for item 1, usage analytics. Items 2 to 4 are processed to the extent needed to provide those features, regardless of your analytics choice. If you do not consent, items 2 to 4 are processed as before, and only item 1 is not collected.
- Usage analytics and behavior events (consent required) — to improve the service we record visits, screen use and type-test progress. Details are in section 7 below. Signed-in users are not collected either unless they have consented.
- Data used to run the recommendation feature (no consent needed; purpose is providing the feature) — when you sign in, each recommendation request is stored against your account with the recommendation list identifier, the selected situation values, the identifier of the top recommended place and the request type; reactions such as likes, “not for me”, visits and saves, and the places you save, are stored against your account to personalize recommendations. The sentence you type in the search box is sent to the server to produce recommendation and AI results, and may be passed to the AI and place-search service providers. Newly stored recommendation records do not contain the raw search text. Recommendation records stored before this change may still contain search text, and whether to clean them up has not yet been decided.
- Audit records of agent features (no consent needed; purpose is operating the feature) — when you use agent actions such as previewing or confirming a reservation, saving a place or changing a trip plan, we record against your signed-in account the action type, progress status, provider, success or failure result (with the error reason on failure) and the target place or trip identifier. They are used to prevent duplicate execution, to check results and to handle problems; original payment method details are designed not to be stored in these records. Some of these records are stored in the same database table as usage-analytics events, but they are handled as feature records, not analytics, and are recorded regardless of your analytics choice.
- Test results you save to MY WORIT (only if you press the save button) — see section 8 below. This is separate from analytics consent.
The retention period and deletion method for items 2 to 4 have not been decided yet; they will be fixed before the official launch and reflected on this page.
Community posts and comments, WORIT member reviews and public nicknames are, separately from the four groups above, content you write yourself and choose to publish; they are explained separately in sections 9 to 14.
7. Usage analytics collection
We collect usage analytics only if you consent. If you decline or have not chosen yet, we do not collect or send usage analytics, and you can use every feature the same way, including sign-in, search, recommendations and the WORIT type test. The same applies to signed-in users.
What we collect: service-use events such as home visits, category selection, whether search was used and the number of characters in the search text, and viewing, clicking or saving recommendation results; the time and screen path of each event; the source of your visit (UTM values and the referring site’s domain and path); and WORIT type-test progress (start, question position, completion with result type and the four axis scores, result screen views, save attempts, share attempts and method, and visits through a share link).
What we do not collect: the raw search text, the answer you chose for each type-test question, and personally identifying information such as name, email or phone number are not collected as usage analytics.
Anonymous identifier: if you consent, we store a randomly generated anonymous identifier in this browser to tell visits from the same browser apart. It is not derived from your email or user ID and is not automatically linked to your account when you sign in. Events that happen while you are signed in are stored as that account’s usage records without the identifier.
Where it is stored: some recent events and visit-source information are stored on this device (browser storage); on the server (Supabase database), signed-in users’ events are stored against their account. Storing usage analytics of visitors who are not signed in on the server only works if the operator turns it on separately. This service does not use external analytics tools such as Google Analytics. If search text was left in the event log stored in this browser by an earlier version, that part is erased when you open the site (deletion only; nothing new is stored).
Withdrawal: you can withdraw or give consent again at any time with the buttons below. If you withdraw, this browser’s anonymous identifier, visit-source information and stored events are erased and no further usage analytics are sent. We do not yet provide a way to find and delete anonymous usage analytics already stored on the server by identifier.
Retention: the retention period and disposal method for usage analytics have not been decided yet; they will be fixed before the official launch and reflected on this page.
8. WORIT type-test data
The answers you choose for the 24 type-test questions exist only in memory while the screen is open and are not saved; they disappear when you reload. If you press ‘Save to MY WORIT’ on the result screen, the result type code and the four axis scores are saved on this device and, if you are signed in, to your account as well. Saving a result is a separate feature from the usage analytics above and works regardless of your analytics choice. A result share link contains the result type and the four axis scores in its address, so anyone who receives the link can see that result.
9. Community posts, comments and public nicknames
When you write a community post or comment, its text, type, language, the place or area you link and the time of writing are stored and shown as public content that anyone can see (including visitors who are not signed in). Public posts and comments do not show your email or account ID; they show the public nickname you chose. If you have not chosen a nickname, they are shown without one. Before you post, please take care not to write personal information such as your name, email or phone number in the text. Posts containing an email address or phone number are designed not to be saved.
- Public nickname — a name you choose yourself. The same name cannot be held by two accounts across the service (differences in letter case and in spaces, underscores, dots and hyphens are treated as the same name). There are limits on the characters and length you can use, and a minimum interval between changes. Names that could be mistaken for the operator, such as WORIT, operator, admin or official, cannot be used, and having a nickname does not mean the account is official or verified.
- Information only you see — your list of saved posts is visible only to you. ‘Helpful’ reactions are counted and shown as a count.
- Editing and deleting — you can edit or delete your own posts and comments at any time. If you delete a post, the comments and replies under it disappear with it.
- Images — the community currently has no image upload feature.
10. WORIT member reviews
When you write a review of a place, its rating, text, visit information and per-aspect ratings are stored in your account. A review is private and visible only to you by default; it is shown under that place’s ‘WORIT member reviews’ with your public nickname only if you explicitly choose to publish it. You can set a published review back to private, or edit or delete it, at any time; once it is private it disappears from the public list.
What other users can see in a public review is the nickname, rating, text, per-aspect ratings, visit date, the time it was written and published, and the ‘helpful’ count. Your email, account ID and the people who reported it are not shown. Private reviews are designed not to be readable by other users or with moderator permissions (access by system administrators for running the service is excluded). The review analysis feature may send the review text to an AI service provider (OpenAI), where that feature is connected.
11. Reports and moderation
Signed-in users can report posts, comments and public reviews they consider inappropriate. A report stores the reason and the optional detail you enter, and the identity of the reporter is not shown to the author or other users. The same person cannot report the same content twice, and you cannot report your own content.
- Automatic hiding — when open reports from different reporters reach a set number, the content is not deleted but put in a ‘hidden’ state and no longer appears on public screens. Only reports from reporters whose accounts are older than a certain period count toward that number. A report count alone does not permanently delete content or sanction a user.
- Operator judgment — an operator (moderator) decides whether to hide or restore content. There is currently no moderator screen and this is handled only through server-side functions, so we do not guarantee how quickly a report is handled. The appeal procedure and handling time have not been decided yet.
- Abuse-prevention records — to stop repeated posting, commenting, publishing of reviews or reporting in a short time, we briefly record the kind of action and its time (no text) against your account; it is deleted along with the account. The server is designed to clear old records so they do not accumulate, but the specific retention period needs review before it is fixed.
12. External platform information and source attribution
On a place’s detail page we may show review summary information from external platforms (for example Google), separately from WORIT member reviews. External information is not mixed with WORIT member reviews and always shows its source; because it belongs to that platform, WORIT does not guarantee its accuracy. External information integrations (Google reviews, Naver blog search, Kakao local search) are off by default and work only when the operator turns them on. When they are on, place information such as the place name and address, and the phrases used for searching, are sent to that external service; your account ID and email are not included in this request.
13. Processing of recommendation and insight data
The reviews and ratings you write, and records such as saves and reactions, are used to understand your tastes and to show recommendations and insight cards. This is processing to provide the feature; it happens regardless of your analytics choice (the same kind as ‘data used to run the recommendation feature’ in section 6 above) and is separate from usage analytics (section 7). Per-place review aggregates (rating distribution, frequently mentioned aspects and so on) are built without the review text or author-identifying information, and one account counts only one review per place. Private reviews may also be reflected in these aggregates and in taste analysis, but their text is not shown on public screens.
14. Deletion and contact
You can run ‘Permanently delete account’ on the account page. When you do, the following happens.
- What is deleted — your profile, taste and behavior records, saved places, receipts (including uploaded images), reviews (including public reviews), community posts, comments, saves and reactions, trip plans, subscription information, AI activity records, and the sign-in account itself. Replies that other users left under your posts and comments also disappear. Per-place review aggregates are recalculated without your reviews.
- What remains — report records remain as safety records without content, with only the link to the reporter removed. Payment, reservation, hotel booking and service-usage event records remain with their link to the account removed and personally identifying information erased.
- Posts and comments are not kept anonymously — when you delete your account, posts and comments are deleted, not kept under a name such as ‘deleted member’.
- Limits of deletion — when content that other people saw, copied or captured before deletion, server backups and logs, and content already passed to external AI and place-service providers will be deleted has not been decided yet.
The retention period and disposal method for the ‘What remains’ records above and for backups and logs, and the formal wording of a privacy policy, have not been decided yet; they will be fixed before the official launch and reflected on this page. The content of sections 9 to 14 must be finalized after legal review before the community and WORIT member review features are turned on. This page is a beta notice and does not replace legal advice. For inquiries, see the business information at the bottom of the page.
WORIT · Before you go, WORIT.