GaiA Labs
Get in touch

Privacy Policy

Effective as of October 27, 2026

Gaia Labs Co. (the "Company") processes personal information lawfully and manages it securely in accordance with the Personal Information Protection Act of Korea and related laws. Under Article 30 of that Act, we publish this Privacy Policy to explain how personal information is processed and protected, and to handle related concerns promptly. This policy applies to all websites and applications for all devices (each, an "Application" or "Website") provided by Gaia Labs Co.

1. Purpose of Processing

We process personal information only for the following purpose and will not use it for any other purpose. If the purpose changes, we will obtain separate consent as required by Article 18 of the Act.

  • Handling adoption inquiries: verifying the inquirer, reviewing the inquiry, contacting and replying to the inquirer, and notifying the outcome

2. Personal Information We Process

We process only the minimum personal information needed for the purpose above, and always with the data subject's consent (Article 15(1)(1) of the Act).

  • Required: clinic or hospital name, contact person's name, phone number, solution of interest, inquiry message
  • Optional: email address
  • Generated or collected automatically when you submit an inquiry: language used, the page path the inquiry was sent from, and IP address (to prevent excessive requests and spam)

Please do not enter patient information, resident registration numbers, or other unnecessary or sensitive personal information in the message field.

3. Retention Period

We retain personal information only within the period required by law or the period consented to at collection.

  • Adoption inquiry information: retained for up to one year after the inquiry is resolved, then destroyed. If you ask us to delete it, we will destroy it without delay.
  • Where an investigation or inquiry into a violation of law is in progress, the information is retained until it ends.

4. Destruction Procedure and Method

When personal information is no longer needed, for example because the retention period has expired or its purpose has been fulfilled, we destroy it without delay. If the law requires us to keep it, we store and manage it separately from other personal information.

  • Procedure: information subject to destruction is selected and destroyed with the approval of the Data Protection Officer.
  • Method: electronic files are destroyed so that they cannot be restored; paper records are shredded or incinerated.

5. Provision to Third Parties and Outsourcing

The Company outsources personal information processing as follows. Under Article 26 of the Act, our outsourcing contracts prohibit processing for any purpose other than the outsourced work, require technical and administrative safeguards, restrict sub-outsourcing, and we supervise the processor.

  • Processor: Google LLC (Google Cloud Platform) / Outsourced work: providing cloud infrastructure for operating the service, and storing personal information

We do not provide personal information to third parties except as permitted by Articles 17 and 18 of the Act, such as with consent or where the law specifically provides. We do not currently provide personal information to any third party.

The "Apply" button on a job posting links to an external recruiting site designated for that posting. Applications and applicants' personal information are handled directly by that site, not through our website, and that site's own privacy policy applies.

6. Automatic Collection Devices (Cookies)

Our websites and applications do not use cookies to track your activity or deliver personalized advertising, and does not allow third parties to collect behavioral information. A cookie may be stored to remember the language you selected (Korean or English).

You can allow or block cookies in your browser settings. If you block cookies, your language setting may not be kept.

  • Chrome: top-right "⋮" > Settings > Privacy and security > Third-party cookies
  • Edge: top-right "···" > Settings > Privacy, search, and services > Cookies
  • Safari: Settings > Apps > Safari > Advanced > Block All Cookies

7. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

You may at any time ask us to let you view, correct, delete, or suspend the processing of your personal information, or withdraw your consent ("exercise your rights"). Our services are not directed to children under 14, and we do not collect personal information from children under 14.

  • You may exercise your rights by email (support@gaiacorp.ai) or other means under Article 41(1) of the Enforcement Decree, and we will act without delay.
  • You may exercise your rights through a legal representative or an authorized agent, who must submit a power of attorney in the form prescribed by the Personal Information Processing Methods Notice.
  • Your right to request access or suspension of processing may be restricted under Articles 35(4) and 37(2) of the Act.
  • You cannot request deletion of personal information that another law specifies as subject to collection.
  • We verify that the requester is the data subject or a proper representative, and reply within 10 days of receiving the request.

You may refuse consent to the collection and use of personal information when submitting an inquiry. If you refuse consent for the required items, however, we cannot accept your inquiry.

8. Security Measures

We take the following measures to keep personal information secure.

  • Administrative: limiting the staff who handle personal information, managing access rights, and providing data-protection training
  • Technical: access-rights management for systems that process personal information, encryption in transit (HTTPS), access control, and security updates
  • Physical: access control for systems where personal information is stored

9. Data Protection Officer and Contact

The Company has designated the following Data Protection Officer and department to oversee personal information processing and to handle complaints and remedies. You may direct any privacy-related inquiry, complaint, or remedy request below, and we will respond without delay.

  • Data Protection Officer and complaint-handling department: Management Support Team
  • Contact: support@gaiacorp.ai

10. Remedies for Infringement of Rights

If you need dispute resolution or counseling for a personal-information infringement, you may contact the following organizations (Korea).

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • National Police Agency: 182 (ecrm.police.go.kr)

11. Changes to This Policy

This policy applies from October 27, 2026. We will publish any additions, deletions, or changes on this page before they take effect, and will show a before-and-after comparison for changes that significantly affect data subjects' rights, such as changes to the items or purposes of processing.