This Privacy Policy takes effect on November 17, 2026. Until then, the previous policy applies.

Previous terms

CURI AI Privacy Policy

Blackhoods Inc. (hereinafter referred to as 'the Company') makes every effort to safely protect your personal information. We comply with relevant laws such as the 'Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.' and the 'Personal Information Protection Act,' as well as guidelines set forth by related organizations like the Korea Communications Commission, the Ministry of Science and ICT, and the Ministry of the Interior and Safety. Through this Privacy Policy, we disclose how your personal information is used and what measures we take to protect it.

This policy may change due to amendments to laws or guidelines, or for the purpose of providing better services. If changes occur, we will notify you via announcements on our website, SMS, email, or notification messages. We kindly ask that you regularly review the policy, which is displayed at the bottom of the homepage.

1. Items of Personal Information Collected and Collection Methods

A. Collected Information Items

  • Account-related: Email address, password, nickname
  • Job-related (when entered by user): Company name, industry, company size, department
  • Service usage: Usage history, access logs, payment history, device identifiers (device ID, IMEI, etc.)
  • For credit card payments: Card company, card number, etc.
    • For bank transfers: Bank name, account number, etc.
  • For tax invoice issuance:
    • Individuals: Full name, resident registration number, etc.
  • Corporations: Company name, business registration number, etc.

B. Collection Methods

  • Through the website
  • Provided by affiliates
  • Through information collection tools

2. Purpose of Collection and Use of Personal Information

The Company collects personal information to verify users' identities and service intent, enabling optimized and personalized service. Only essential information is collected at registration, and further information may be collected for billing, user management, marketing, or refunds.

Uses include:

  1. Fulfilling service contracts and billing
    • Providing surveys and customized services based on statistical traits
  2. Verifying identity and eligibility for membership-based services
    • Preventing misuse and unauthorized access
  3. Offering age-appropriate services
    • Marketing and advertising, including personalized promotions, usage statistics, and event opportunities

3. Retention and Usage Period of Personal Information

  1. In principle, personal information is retained and used only while services are provided. Upon membership termination, personal information is deleted. However, the following is retained:
    • Misuse history (to prevent recurrence): 6 months
    • Reward point records (to prevent misuse): 6 months
  2. Under legal obligations:
    • Visit logs: 3 months (Communications Secrets Protection Act)

4. Destruction of Personal Information

Once the purpose of personal information collection is fulfilled, it is promptly destroyed.

  1. Destruction process:
    • Moved to a separate DB and stored for the required period, then deleted.
    • Electronically stored data is deleted using unrecoverable methods.

5. Provision of Personal Information

We do not provide personal information to third parties unless:

  1. The user has given prior explicit consent
  2. It is required by law or an investigative agency under due process

6. User Rights and How to Exercise Them

  • Users and legal guardians can view, modify, or request deletion of their personal data at any time.
  • No membership is allowed for users under 14.
  • Access and modification are available via account settings or by contacting the Data Protection Officer.

7. Use of Automatic Information Collection (Cookies)

We use cookies to store and track user information.

A. Purpose of Cookies:

  • Analyze user behavior and frequency
  • Provide personalized services and targeted marketing

B. Rejecting Cookies:

You may configure your browser to accept, confirm, or reject all cookies.

For Internet Explorer: Tools > Internet Options > Privacy

Rejecting cookies may hinder service quality.

8. Technical and Managerial Measures for Protection

A. Against hacking:

  • Regular backups and use of updated antivirus software
  • Encrypted communication and intrusion prevention systems

B. Staff training:

  • Access limited to specific personnel
  • Regular password changes and training to ensure policy compliance

9. Customer Service for Personal Data

  • Privacy Officer: Eunho Lee, CEO
  • Department: Blackhoods Customer Center
  • Phone: +1-415-231-8209
  • Email: peter@askcuri.com

10. Policy Changes

  • The policy is publicly posted on the homepage for easy access.
  • In case of changes, we announce the reasons and details in advance.
  • Please check regularly for updates.

11. Claude Connectors (channel and signal)

channel and signal each provide an MCP connector for Claude, letting a signed-in user read their own data and create drafts from inside Claude. In connection with this, we process personal information as follows.

  • Data processed: account email and name, a hash of the connection token (the token itself is never stored), and tool-call records (which tool, which survey or team, when, and the result). For signal, the connector also reads the user's surveys, response results with personal details masked, and results report PDFs, and receives the goal, audience and source text the user gives for an AI draft.
  • Retention: when you disconnect, tokens are revoked immediately and can no longer be used; a record of the revoked token (its hash and connection timestamps) and the tool-call records are kept for security auditing. Even without disconnecting, the refresh token expires after 30 days of inactivity and access ends automatically.
  • Third-party provision: processed data is returned only to the user's own connected Claude session, and is not separately provided to any third party, including Anthropic
  • How to disconnect: channel web > Settings > "Claude 연결" (Claude connection) > disconnect, signal web > Account > Connected apps > disconnect all, or remove the connector from Claude. See the Claude connector docs (/docs/claude) for details.
  • Example workspace (signal): an account with no team that connects the signal connector gets an isolated example team containing a sample survey and synthetic responses. These contain no personal information of real people.
  • Overseas transfer (Personal Information Protection Act, Articles 28-8 and 30): when a user connects the channel or signal connector to Claude and makes a request, the connector's response (the data described in this Section) is sent through the user's own Claude to the servers of Anthropic, PBC in the United States. Recipient: Anthropic, PBC. Country: United States. When and how: each time the user makes a request, over HTTPS. Items: the connector's response. Purpose: letting the user use signal and channel from within Claude. Retention: according to Anthropic's privacy policy (https://www.anthropic.com/legal/privacy). Refusal and effect: the user can refuse by not connecting the connector, or by disconnecting it at any time; the only effect is that the connector cannot be used, and use of signal and channel is otherwise unaffected.

12. Processors of Personal Information and Payment Information

  • Payment processing: once paid plans are available, Toss Payments Co., Ltd. processes card payments and recurring payments (billing key issuance).
  • Cloud operations: Microsoft Corporation (Azure) operates the infrastructure that stores service data and sends email.
  • The Company does not receive or store card information such as card number, expiry date or CVC. If you use recurring payments, it keeps only the billing key issued by the payment service provider (stored encrypted), the card issuer and the last 4 digits of the card number.
  • Once a payment is made, payment and billing records are kept for 5 years, separately from other information, under the Act on the Consumer Protection in Electronic Commerce and related laws, and then destroyed.

Effective date: November 17, 2026