Datumo Co., Ltd. ("the Company," "we," "us," or "our") complies with relevant data protection laws, including the Korean Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws. This Privacy Policy describes how we collect, use, retain, and protect personal information of users in connection with our AI model evaluation service, DATUMO ("the Service").
This Privacy Policy applies to all users of the Service, regardless of location. Where local laws provide additional rights or impose additional obligations, those provisions are addressed in the relevant sections below.
The data controller responsible for your personal information is:
Datumo Co., Ltd.
8, 8~11th floor, Teheran-ro 38-gil, Gangnam-gu, Seoul, 06221, Rep. of KOREA
Email: privacy@selectstar.ai
We are in the process of appointing a representative in the European Union in accordance with Article 27 of the GDPR. Until such appointment is finalized, please direct any GDPR-related inquiries to our primary contact at privacy@selectstar.ai. This Policy will be updated once a representative has been designated.
For users in the United Kingdom, please direct any inquiries regarding your personal data to privacy@selectstar.ai. We will update this Policy if a UK representative is appointed.
We collect and process the following personal information for the purposes stated below:
| Items | Purpose | Retention Period |
|---|---|---|
| Name, Email, Organization Name, Position, Workspace Name | Account registration and verification, user authentication, customer support, service provision, and withdrawal confirmation | 5 days after withdrawal from membership |
| Items | Purpose | Retention Period |
|---|---|---|
| Login logs, evaluation execution history, task and model names, API call logs, browser/OS information | Service operation, performance monitoring, and troubleshooting | 3 months after collection |
| Items | Purpose | Retention Period |
|---|---|---|
| Evaluation datasets, prompts, model outputs, result metrics, and uploaded files (e.g., text, CSV) | Conducting AI model evaluation, computing metrics, and providing analytics dashboards | 3 months after collection |
| Items | Purpose | Retention Period |
|---|---|---|
| Payment information, business registration number, transaction records | Payment processing, accounting, and legal compliance | 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc. |
We will not use personal information for purposes other than those specified above. If the purpose of processing changes, separate consent will be obtained in accordance with applicable law.
We process personal information based on one or more of the following legal grounds:
For users located in the European Economic Area (EEA) or the United Kingdom, we process your personal information based on the following legal grounds under the GDPR:
| Processing Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Account registration and authentication | Performance of contract (Art. 6(1)(b)) |
| Service provision and AI evaluation execution | Performance of contract (Art. 6(1)(b)) |
| Service operation and troubleshooting | Legitimate interests (Art. 6(1)(f)) |
| Analytics and service improvement | Legitimate interests (Art. 6(1)(f)), with opt-out available |
| Payment processing | Performance of contract (Art. 6(1)(b)) / Legal obligation (Art. 6(1)(c)) |
| Compliance with legal requirements | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests by contacting us at privacy@selectstar.ai.
We do not disclose or provide users' personal information to third parties without consent, except as required by law.
For clarity, transfers to our processors under Article 5 are processing on our behalf and are not considered third-party sharing.
However, personal information may be provided to third parties in the following cases:
To ensure stable operation of the Service, we may entrust certain personal information processing tasks to external vendors as follows:
| Category | Contractor | Purpose | Location |
|---|---|---|---|
| Cloud infrastructure | Amazon Web Services, Inc. | Service hosting and data storage | Republic of Korea (Seoul Region) |
| Analytics and logging | Google LLC (Google Analytics) | Usage analytics, performance monitoring, and error tracking | United States |
| AI API processing | OpenAI LLC | AI model API calls and response delivery | United States |
| AI API processing | Google LLC | AI model API calls and response delivery | United States |
| AI API processing | Meta Platforms, Inc. | AI model API calls and response delivery | United States |
When entering into outsourcing agreements, we clearly stipulate in the contract the purpose of processing, data protection obligations, restrictions on re-outsourcing, and liability for data breaches.
We regularly supervise subcontractors to ensure secure handling of personal information. Any changes to contractors or outsourced tasks will be publicly disclosed through this Privacy Policy.
We primarily operate all services and data processing within the Amazon Web Services (AWS) Seoul Region located in the Republic of Korea.
When you use the Service, certain personal data may be transferred to countries outside your jurisdiction, including the Republic of Korea and the United States, in the following circumstances:
For users in the EEA and UK, when your personal data is transferred outside the European Economic Area or United Kingdom to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards to protect your data, including:
We assess each transfer destination to ensure that the legal framework in the recipient country does not impair the effectiveness of the safeguards.
Certain cross-border transfers occur only when you choose to utilize specific AI model APIs. You may limit such transfers by selecting alternative processing options where available within the Service.
You may request a copy of the relevant safeguards by contacting privacy@selectstar.ai.
We destroy personal information without delay when it becomes unnecessary for the purpose for which it was collected or when the retention period expires.
If retention is required by law, the information is stored in a separate database or physical location until the legal period expires.
All personal information is destroyed using secure methods that prevent restoration or recovery, including:
All users may exercise the following rights regarding their personal information:
To exercise these rights, please contact us at privacy@selectstar.ai.
If a user requests correction or deletion, we will not use or disclose that information until the process is completed. However, deletion requests may not apply to data already anonymized or included in aggregated evaluation statistics.
If you are located in the European Economic Area or the United Kingdom, you have the following additional rights under the GDPR:
We will respond to your request within one (1) month. This period may be extended by two (2) further months where necessary, taking into account the complexity and number of requests.
In most cases, you will not have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
If you are located in Japan, you have the right to request disclosure, correction, suspension of use, or deletion of your personal information in accordance with the Act on the Protection of Personal Information (APPI).
To exercise any of your rights, please contact:
Email: privacy@selectstar.ai
We may need to verify your identity before processing your request.
We take the following administrative, technical, and physical measures to safeguard personal information:
Administrative Measures:
Technical Measures:
Physical Measures:
The Service may use cookies or SDK-based analytics tools to improve user experience and measure performance.
Purpose:
You can control cookies through your browser settings. Most browsers allow you to:
Please note that disabling cookies may limit certain features of the Service.
We have designated a Personal Information Protection Manager responsible for overseeing data protection and handling user inquiries related to personal information:
Name: Yoonteak Lee
Position: Head of BizOps Team
Email: privacy@selectstar.ai
We are in the process of appointing an EU representative in accordance with Article 27 of the GDPR. Please direct all inquiries to privacy@selectstar.ai until this appointment is complete.
For any data protection inquiries, please contact our Personal Information Protection Manager at privacy@selectstar.ai.
If you have any concerns about how we handle your personal information, we encourage you to contact us first at privacy@selectstar.ai. We will investigate and attempt to resolve any complaints promptly.
You may contact the following organizations for inquiries or resolution regarding data protection violations:
If you are located in the EEA, you have the right to lodge a complaint with your local data protection supervisory authority. You can find your local authority at:
European Data Protection Board Member Authorities:
https://edpb.europa.eu/about-edpb/about-edpb/members_en
If you are located in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Website: https://ico.org.uk
Helpline: 0303 123 1113
If you are located in Japan, you may contact the Personal Information Protection Commission:
Personal Information Protection Commission (PPC)
Website: https://www.ppc.go.jp
If you are located outside the jurisdictions listed above, you may have the right to lodge a complaint with your local data protection authority. Please contact us at privacy@selectstar.ai for guidance.
This Privacy Policy may be amended to reflect legal, technical, or operational changes.
Material changes will be announced on our official website or within the Service at least seven (7) days prior to the effective date. For changes that significantly affect your rights, we will provide at least thirty (30) days' notice.
Effective Date: January 15, 2026
Last Updated: January 15, 2026