Privacy Policy

Who is responsible

Vetter AI (베터에이아이) (representative: Hyeon Seok Oh), 701-N181, Skyplaza, 322 Byeollae 3-ro, Namyangju-si, Gyeonggi-do, Republic of Korea. Contact: [email protected].

What we collect

• Account: your email address and a password hash (never the password itself).
• Billing: your credit balance, top-ups, usage records per bowl, and, for sellers, earnings and settlements. Card details are handled by the payment provider; we do not store card numbers.
• Bowls: the bowl's name, address, size, status, and the SSH public key you give us. We store the root password and any SSH private key we generate for you encrypted, so we can show them to you again.
• Sellers: display name and description, listings, fish setup scripts, and the date you confirmed your internet plan's terms.
• Logs: request logs and security events (sign-ins, sign-ups, admin actions) for up to 90 days.

What we do not collect

We do not read the contents of your bowl except as described in the Terms of Service. We do not use advertising trackers or sell personal data.

Why

To run your account, bill usage, pay sellers, keep the service secure, handle abuse reports, and meet legal obligations such as tax and e-commerce record keeping.

Where it is stored

Account and billing data is stored on our servers in the Republic of Korea. Our website is delivered through Cloudflare, which processes requests in its global network. A bowl's data stays on the bowl seller's machine; the location of each bowl is shown in the market.

Who we share it with

• Bowl sellers see the bowls running on their machine (name, size, status, time) but not your email or payment details.
• Fish sellers see how much their fish is used, not who uses it.
• Our payment provider, to process payments.
• Cloudflare, which delivers the website.
• Authorities, when the law requires it.

How long

We keep account data while your account exists. Billing records are kept for 5 years after the transaction, as Korean e-commerce and tax law requires. When you delete your account we delete the rest within 30 days.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it, by emailing [email protected]. We answer within 30 days. If you are in the EU, UK or another place with data protection law, you can also complain to your local regulator.

Security

Passwords are hashed with Argon2id, secrets are encrypted at rest, and the service is reached only over HTTPS.