Privacy Policy

1. Information We Collect

When you sign in with Google OAuth, we collect your Google account subject identifier, email address, and display name; we do not collect profile photos. Searches store the text you submit and related diagnostic information. Depending on the request, records may also include an IP-based quota key, acquisition cohort, and session identifier. For signed-in searches, the same record may also include your account identifier.

We set a first-party pseudonymous session identifier (aidd_session_id), an opaque token with a 30-minute rolling lifetime, for search-session continuity, abuse and error diagnosis, and operational log correlation. It is not a persistent visitor identifier, but it may be stored in the same search record as an account identifier after sign-in; therefore we do not describe it as anonymous or non-personal information.

2. Purpose of Collection

• Service convenience features such as search history, favorites, and quota management.
• Abuse prevention.
• Service improvement statistics when analytics cookies are allowed.

3. Retention and Deletion

Upon account deletion request, your account identifiers (email, Google account ID, display name) are immediately removed or replaced with non-reversible values, and the support tickets stored in the service are deleted. IP quota data is automatically deleted after 7 days.

The remaining de-identified account record is removed by a periodic clean-up process. We do not commit to a fixed date for removing that residual record: the clean-up runs on an operational schedule, and an account that owns a project shared with other people is kept until those projects have been reassigned.

Copies of a support enquiry that were already delivered to our internal support channels (for example an operator email or alert) are not covered by the deletion above. Under our internal retention practice, those copies are deleted within 90 days of the ticket being resolved, or immediately upon a separate deletion request; access to them is limited to the service operator.

At account deletion, account, project, and session links are cleared from search logs. The log entries themselves, including text typed into a search or feedback box, are retained separately. Removing structural links does not by itself guarantee that free text is anonymous. Do not enter names, contact details, patient information, or confidential project information in search or feedback fields.

4. Third-Party Disclosure and Processing Delegation

We use Google LLC as a service processor to operate the product. Natural-language search text and related request context may be sent to the Gemini API to interpret the query, generate database searches, and improve answer quality. If you allow analytics cookies, Google Analytics (GA4) receives measurement events and cookie identifiers for usage statistics. We do not sell personal information or provide it for third-party marketing.

We use Gabia Inc. (Hiworks, a domestic Korean provider) as a service processor for the privacy enquiry mailbox. Mail you send to privacy@aiddsoln.com — including its sender address, contents and attachments — is received and stored on Gabia's mail service so that we can respond to your enquiry or rights request. This is a domestic processing delegation and does not involve transfer outside Korea.

5. Cookie Policy

The first-party cookies this service sets are as follows, and they are issued at different times. May be set before you sign in — a pseudonymous session cookie (aidd_session_id, 30-minute rolling) for search session continuity and abuse or error diagnosis, and a consent-confirmation cookie (aidd_consent, 10 minutes) plus an OAuth state cookie (aidd_oauth_state, 10 minutes) issued when a Google sign-in begins. Set after a successful sign-in — authentication cookies (access_token, refresh_token) and a request-forgery protection cookie (csrf_token). All are HttpOnly, Secure and SameSite=Lax, and because the features you requested cannot work without them they are set when each feature is used, regardless of analytics consent. Acquisition measurement — the acq_cohort cookie, which recorded how you first reached the service, is currently not in use. It is not issued, and a previously issued value left in your browser is neither read nor recorded alongside your account. You may delete any leftover value in your browser with no effect on the service. Analytics — GA4 measurement cookies load only if you allow analytics. Display language — if you choose a display language, that choice (aiddlab_lang) is saved both in browser localStorage and in a first-party cookie; while language selection is enabled, the server reads that cookie to decide the language it renders on later requests. Simply opening pages neither creates these values nor extends their expiry. The cookie lasts 1 year from the last time it was saved, with Path=/ and SameSite=Lax, and is marked Secure over HTTPS; it is not HttpOnly because the page writes it. The localStorage value has no expiry and stays until you clear this site's data or remove that entry. A value stored automatically by an earlier version of the service remains on the same terms. Unlike the cookies listed above, it is written by the page rather than issued by the server. Separately from cookies, some values are stored in browser localStorage and are never sent to the server: your cookie consent settings (aiddlab_cookie_consent), display theme (aiddlab_theme), search display preferences (aiddlab_search_view, aiddlab_col_label), and — only if you allow analytics — up to 8 recently viewed items (aiddlab_recent_viewed). See the cookie consent banner for details.

6. Your Rights

7. Children Under 14

The service is available only to people aged 14 or older and does not provide a parental-consent registration path. Before Google sign-in, you must confirm that you are at least 14. If you are under 14, do not use the service or provide personal information. If we learn that an under-14 account or related information was collected, we disable the account and handle the information under Section 3, except where retention is required by law.

8. International Data Transfers

Some data is transferred outside your country of residence to Google LLC, including the United States. For Gemini API processing, transferred items may include natural-language search text and related request context, for query interpretation, database-search generation, and response-quality improvement. For Google Analytics (GA4), transferred items may include measurement events and cookie identifiers, only when analytics cookies are allowed, for usage statistics. Contact privacy@aiddsoln.com for information about applicable transfer safeguards.

9. Policy Changes

Changes to this policy will be announced on the site at least 7 days before taking effect. Material changes may also be notified through additional channels where appropriate.

10. Contact