Privacy Policy for Archivy by FourBrains
Last Updated: June 30, 2025
Product: Archivy (by FourBrains)
Company: FourBrains (Individual Proprietor, South Korea)
Representative / CEO: Minjae Lee
Business Registration Number: 213‑16‑75239
Address: 15 Jeongbalsan‑ro 166beon‑gil, Ilsandong‑gu,
Goyang‑si, Gyeonggi‑do 10411, Republic of Korea
Contact Email: [email protected]
Website: www.fourbrains.xyz
Table of Contents
1.
Scope & Applicability
2.
Personal Data We Collect
3.
Legal Basis & Purpose of Processing
4.
Data Retention
5.
Third-Party Processing & International Transfers
6.
Instagram Compliance & Content Handling
7.
Your Rights & How to Exercise Them
8.
Children’s Privacy
9.
Security Measures
10.
Cookies & Tracking
11.
Policy Updates
12.
Contact & Legal Disclosures
1. Scope & Applicability
This Privacy Policy governs Archivy, a personal organization service by FourBrains. It applies to Archivy web, iOS, and Android applications (the “Service”). It addresses data practices in compliance with applicable global laws: EU GDPR, CA CCPA/CPRA, KR PIPA and others .
2. Personal Data We Collect
•
Email Address: Collected for OTP-based login, account access, notifications, and subscription management.
•
Location Data: Processed on-device only for personalized experiences; not transmitted to or stored on our servers.
No additional personal or sensitive categories are collected or stored.
3. Legal Basis & Purpose of Processing
Purpose | Legal Basis (GDPR Art. 6) |
Authentication & Account Access | Consent / Contractual Necessity |
Location-Based Features & Recommendations | Legitimate Interest |
Email Marketing & Retargeting (Opt-In Only) | Explicit Consent |
Service Analytics (Crashlytics, Google Analytics) | Legitimate Interest |
Purposes include user verification, personalized service delivery, subscription billing, marketing (if opted in), and crash/usage analytics.
4. Data Retention
•
User data, including email, is deleted immediately upon account termination.
•
Anonymized backups may persist up to seven (7) days before secure deletion.
5. Third-Party Processing & International Transfers
Service | Function | Data Shared | Region |
Supabase (Seoul Region) | Storage & Authentication | Email Address | South Korea |
Google Places API | Location information service | None | Global |
Google Vision API | Image/Text metadata extraction | None | Global |
Google Gemini API | AI-based content summarization | None | Global |
•
No full Instagram content or private data is collected or stored.
•
For EU-based users, international transfers comply with GDPR’s Standard Contractual Clauses (SCCs) .
6. Instagram Compliance & Content Handling
•
Archivy uses only user-submitted Instagram post links; it does not store, cache, copy, or reproduce original media or text.
•
Only metadata—such as place names, keywords, and brands—extracted via Google Gemini API or on-device processing is used.
•
Every displayed item always hyperlinks back to the original Instagram post, ensuring content attribution and honoring copyright.
•
Archivy does not scrape Instagram in violation of its Terms of Service, and does not store protected content—thus minimizing legal risk under policies prohibiting automated scraping and content storage .
•
If copyright infringement is alleged, Archivy will promptly remove all associated metadata and links.
7. Your Rights & How to Exercise Them
Under GDPR, CCPA, and PIPA, users may:
•
Access, amend, correct, or delete personal data.
•
Object to or restrict our processing.
•
Withdraw consent at any time.
•
Under CCPA: opt-out of “sale” or sharing of personal information.
•
Request data portability.
Exercise such rights by emailing minjae‑[email protected] or via unsubscribe links in marketing emails.
8. Children’s Privacy
Our Service is intended for users aged 13 and above. We do not knowingly collect data from younger children. Guardians may request data deletion if their minor’s personal data was collected in error.
9. Security Measures
We implement robust safeguards including:
•
SSL/TLS encryption for data in transit.
•
Access control and encryption via Supabase.
•
Anonymization and encryption for crash analytics.
•
Secure, time-limited backups.
10. Cookies & Tracking
•
Archivy does not currently use cookies or web trackers.
•
If retargeting technologies such as Meta Pixel or Google Ads are introduced, we will obtain opt-in consent and provide clear opt-out mechanisms .
11. Policy Updates
Changes to this Policy will be communicated at least 30 days prior via email and on our website/app. Continued use after updates constitutes agreement to the revised terms.
12. Contact & Legal Disclosures
For privacy-related matters:
•
Company: FourBrains (Product: Archivy)
•
Representative: Minjae Lee
•
Email: [email protected]
•
Address: 15 Jeongbalsan‑ro 166beon‑gil, Ilsandong‑gu, Goyang‑si, Gyeonggi‑do 10411, Republic of Korea
•
Business Reg. No.: 213‑16‑75239