Privacy Policy

To provide online-comment records and AI analysis, KeyBust processes the following information. Phone numbers, advertising identifiers, and separately tracked behavioral analytics are not included in the categories described in this policy.

1. Registration and sign-in

• Supabase Auth user identifiers and email addresses
• OAuth identity information processed between Google and Supabase Auth when signing in with Google
• Authentication session information used to maintain sign-in status

2. Information you submit or connect

• URLs submitted for analysis and case or evidence names and descriptions
• Protection settings, including sensitive topics, manual or excluded keywords, related descriptions, and setting values
• Channel identifiers, channel names, authorized scopes, and encrypted refresh tokens needed to maintain connections to YouTube or CHZZK accounts you choose to connect

3. Information created or stored during analysis and retention

• Content titles, URLs, platforms, channel names, content or broadcast identifiers, and collection status
• Comment text, author name and channel ID, comment or reply identifiers, timestamps, like counts, comment URLs, and parts of relevant original responses returned by providers
• AI and rule-based analysis results, including classification, risk level, rationale, model, processing time, error information, and your review or correction feedback
• Reference information about repeated activity and comment analysis used for repeat-account classification
• Case and evidence records, collection history, PDF export requests, and selected evidence identifiers in the KeyBust Evidence Vault
• AI analysis usage and credit-processing records where applicable

4. Automatically processed operational information

The application database is not implemented to separately collect or store IP addresses, device identifiers, user agents, or advertising identifiers. Vercel may process technical operational information such as request, error, and runtime logs while hosting the service. KeyBust server logs may contain processing identifiers, counts, and error messages, but are not designed to intentionally record comment text.

• To identify members, manage sign-in, and manage service access
• To collect URL-based content and comments, perform AI analysis, and provide reference information about risky expressions and repeated activity patterns
• To manage Evidence Vault records and provide PDF report creation and downloads
• To provide live monitoring and chat collection for connected channels
• To respond to service errors, maintain security, prevent misuse, and improve operations

AI analysis and repeat-account classifications are reference information about risky expressions or activity patterns. They are not used to determine a person’s identity, criminal conduct, or legal status.

Information may be transmitted to and processed by the following external services where necessary to provide the service. Each provider’s policy governs its processing location and detailed retention standards.

OpenAI API requests are not implemented to send a comment author name, author ID, analysis URL, and KeyBust member ID together. YouTube and CHZZK connections are used only when you choose to connect them.

Member and Evidence Vault data are retained as needed to provide the service and manage your records. When you delete a case or evidence item, associated evidence, sources, comments, and related data are designed to be deleted together.

Some automatically created URL-analysis cases with no risky comments, saved evidence, or PDF exports, and which you have not chosen to keep or reopen, may be automatically deleted after 24 hours. When you delete your account, KeyBust keeps no separate account-linked retention record for legal, billing, or security purposes, and account-linked data are deleted as part of the deletion process. Payment records at Google Play and backup or security logs of external providers such as Supabase and Vercel may be subject to those providers’ legal and operational retention policies.

PDFs are generated on the server when requested and are not implemented to be stored as separate files in the KeyBust database. A PDF export request record and selected evidence identifiers may be recorded.

When an account is deleted, original uploaded files are first deleted from private storage and the Supabase Auth user is permanently deleted. Personal vault data, YouTube and CHZZK OAuth connections and encrypted refresh tokens, live monitors and sessions, and personal protection settings associated with that user identifier are then deleted. Certain shared review and classification data may be retained after the user identifier is set to NULL so that it can no longer be associated with your account, for service-quality improvement. This applies to profanity-variant dictionary submissions and reviews, human review results for other records, and classification corrections and review information. Our Account and data deletion guide is publicly available.

KeyBust does not sell personal information or disclose it to third parties for advertising or marketing. Transfers to the external services listed in Section 3 occur only as necessary for authentication, data storage, AI analysis, platform connections you select, and hosting.

KeyBust uses Supabase for authentication and database services, Vercel for hosting and operations, and the OpenAI API for AI analysis. Google, YouTube, and CHZZK are connected through sign-in or channel connections you choose. The legal classification of each relationship, relevant agreements, and details of international transfers will be reflected in this policy after confirmation against actual operational settings and contracts.

You may request access, correction, deletion, or suspension of processing of your personal information. You can change protection settings directly in the settings screen and delete individual cases in the Evidence Vault. You may delete your account after final confirmation in the account-deletion area of your protection settings. When deletion is complete, your sign-in session ends and you are returned to the main screen. The publicly accessible Account and data deletion guide explains the deletion process and scope. For privacy requests, contact support@keybust.kr.

• Access to cases and evidence is restricted based on authenticated-user and ownership verification.
• We use Supabase authentication, authorization, and row-level security (RLS).
• Server-only service-role keys are not exposed to browsers, and refresh tokens for YouTube and CHZZK connections are stored encrypted.
• PDF downloads are provided through short-lived signed links and generated responses include cache-prevention settings.

For privacy inquiries or requests for access, correction, or deletion, contact us at:

• Privacy email: support@keybust.kr
• Privacy officer name and telephone number: designation and public disclosure in preparation

This policy may be updated due to changes in service features, external integrations, retention periods, or applicable laws. For material changes, we will provide notice of the effective date and the changes through the service or this page.

KeyBust uses YouTube API Services to provide its services.

Through YouTube API Services, KeyBust may process YouTube data necessary to provide its services, including public comments and live chat messages associated with YouTube content selected or connected by the user.

Information processed through YouTube API Services may also be subject to Google's Privacy Policy.

Google Privacy Policy: https://policies.google.com/privacy

This Privacy Policy is effective as of August 8, 2026.