K-Export AI — Privacy Policy
Version: 1.0 Effective date: 30 September 2026
1. Who we are
This Privacy Policy explains how Onaru Co., Ltd. (주식회사 온아루) ("Onaru", "we", "us") handles personal information on K-Export AI (k-exportai.com and its subdomains) and through our official WhatsApp and email channels.
- Business registration number: 778-86-04025
- Address: Room 308 (P20), 3F, Dankook Plaza, 172 Jukjeon-ro, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea
We comply with the Korean Personal Information Protection Act (PIPA) and other applicable laws.
In short: Onaru buys vehicles from Korean sellers and resells and exports them to overseas buyers. Buyers and sellers never receive each other's personal information. We do not sell personal information, and we do not use it for advertising.
2. What we collect, why, and how long we keep it
Sellers
| Information | Purpose | Kept until |
|---|---|---|
| Login email and name (via Google sign-in) | Account and login | Account closure |
| Name or business name, business registration number, business address, tax status | Identifying who we buy from; tax documents | Account closure; transaction records 5 years |
| Korean mobile number, notification consent and consent date | Contacting you by phone, SMS or KakaoTalk about your listings and sales | Account closure, or withdrawal of consent |
| Payout account: account holder, bank name, account number | Paying you for vehicles we buy | Account closure; payment records 5 years |
| Vehicle listings, photos and vehicle documents | Listing, buying and exporting the vehicle | Account closure; documents of purchased vehicles 5 years |
Buyers
| Information | Purpose | Kept until |
|---|---|---|
| Name, email, phone or WhatsApp number, country | Answering enquiries, selling and delivering the vehicle | 3 years after last contact; purchase records 5 years |
| Messages with us (including automatic translations) | Customer service and handling your purchase | Same as above |
| Consignee and shipping details, invoices, payment records | Invoicing, export clearance, shipping documents | 5 years |
| Email and vehicle preferences for new-listing alerts (only if you opt in) | Sending new-listing alerts | Until you unsubscribe |
Collected automatically
| Information | Purpose | Kept until |
|---|---|---|
| IP address, request and security logs | Security, fraud and abuse prevention | 3 months |
| Vehicle page views (not linked to your identity) | Basic statistics | Aggregated only |
| Language and login settings stored in your browser | Keeping you signed in and remembering your language | Until you clear them |
We use no advertising or tracking cookies.
Why records are kept for 5 years. Contract, payment and tax records are kept for 5 years because Korean tax and e-commerce law requires it. These include the Framework Act on National Taxes and the Act on Consumer Protection in Electronic Commerce. Consumer complaint records are kept for 3 years.
We do not collect resident registration numbers, card numbers or passport numbers. Korean vehicle documents can show an owner's personal details. Please cover any resident registration number before uploading. We process such documents only as far as needed to buy and export the vehicle.
3. Sharing with third parties
We share personal information only where needed to complete a purchase, or where the law requires it:
| Recipient | Information | Purpose |
|---|---|---|
| Shipping lines, freight forwarders, customs brokers | Buyer's name, address and consignee details; vehicle details | Export clearance and shipping of the buyer's vehicle |
| Korea Customs Service and other authorities | As required by law | Export declaration and legal obligations |
| Banks | Payment details | Receiving buyer payments and paying sellers |
We never share a seller's information with a buyer, or a buyer's information with a seller.
4. Service providers (processing on our behalf)
The following providers process personal information for us. They may use it only to provide their service to us.
| Provider | Service | Location |
|---|---|---|
| Base44 | Website hosting and database | United States |
| Resend | Sending emails | United States |
| Zoho | Our business mailbox | United States |
| Meta Platforms (WhatsApp Business) | WhatsApp messaging with buyers | United States / Ireland |
| Sign-in | United States | |
| Base44 AI services, using models from Google (Gemini) and other AI providers chosen by Base44 | Automatic translation of messages; reading vehicle registration documents | United States |
| Kakao (Daum Postcode) | Address search | Republic of Korea |
5. Transfer of personal information outside Korea
Our buyers are outside Korea, and several providers above store data outside Korea. Personal information is therefore transferred abroad:
- When: at the time of collection, over the network.
- Why: to operate K-Export AI and to communicate with buyers.
- To whom and where: the providers and locations listed in Section 4.
- What: the information needed for that provider's service.
- How long: as stated in Section 2.
If you do not want your information transferred abroad, contact us. Because the service depends on these providers, you may then be unable to use K-Export AI.
6. Your rights
You may at any time:
- ask to see the personal information we hold about you;
- ask us to correct it;
- ask us to delete it, or to stop processing it; and
- withdraw your consent to optional processing (for example, new-listing alerts or seller notifications).
To do so, email contact@k-exportai.com. We will reply without undue delay, and in any case within 10 days. Information we must keep by law (Section 2) is kept until that period ends, and is not used for anything else.
7. How we delete information
When the retention period ends, or the purpose is fulfilled:
- electronic records are permanently deleted in a way that cannot be restored; and
- paper documents are shredded.
Information we must keep by law is stored separately until its legal period ends.
8. How we protect information
- Access control: each seller can access only their own data, and all sales records (enquiries, messages, orders) are accessible to Onaru administrators only.
- Security: encrypted connections (HTTPS), secure random tokens for buyer links, and rate limits on public forms.
- Minimum access: only the staff who need personal information can access it.
No system is completely secure, but we work to protect your information and will notify you and the authorities of any data breach as required by law.
9. Children
K-Export AI is for adults aged 18 and over. We do not knowingly collect information from anyone under 18.
10. Privacy officer
- Name: DIAGNE OUSMANE, CEO
- Email: contact@k-exportai.com
11. Getting help
If you have a privacy concern that we have not resolved, you may contact:
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office cybercrime unit: 1301, www.spo.go.kr
- Korean National Police Agency cyber bureau: 182, ecrm.police.go.kr
12. Changes to this Policy
We will announce any change to this Policy on K-Export AI at least 7 days before it takes effect. If the change affects your rights significantly, we will announce it at least 30 days before.
13. Language
This Policy is published in Korean and English. If the versions differ, the Korean version prevails.