Effective Date: December 15, 2025
Welcome! You have arrived at the wba.chat website powered by FriendliAI (“FriendliAI”, “we”, “our” or “us”). Our mission is to empower organizations to harness the full potential of their generative AI models with ease and cost-efficiency.
At FriendliAI, we take your privacy seriously. This Privacy Policy ("Policy") explains what information we collect about you, how we obtain it, how we share it, and how you may limit the ways in which we use your Personal Information. If you have questions about this Policy after you review it, feel free to contact us at privacy@friendli.ai.
This Policy governs https://wba.chat, its subdomains, and all subdomains or portals that link to this Policy ("Site"); or when you provide Personal Information or interact with us online or when you call or otherwise communicate with us. For the purpose of this Policy, "Personal Information" or “Personal Data” means any information relating to an identified or identifiable individual that is protected by applicable privacy laws. The definition of Personal Information does not include publicly available information from federal, state, or local government records, such as professional licenses and real estate or property records.
We refer to all the above as our “Services.”
Any Personal Information so collected will be used solely for the purposes for which your consent has been specifically given, and the provision of such Personal Information to, and handling by, third parties will be limited specifically to authorized persons only.
By using our Sites or otherwise using our Services, you acknowledge this Policy and agree to our https://wba.chat/terms-of-service (“Terms”).
As a rule, we limit the Personal Information we collect to that which is adequate, relevant and reasonably necessary for us to provide our Services to you.
As you interact with our Site or Services, we collect the following Personal Information via the online chat function and webforms or inputs/uploads on our Site, when you use an authentication token to access the Services, and through telephone calls, letters, emails and other communications with you.
Like many businesses, we and our service providers automatically collect and/or store certain information when you visit or interact with the Site or Services (“Usage Information”), including via cookies and other tracking technologies (see Use of Cookies and Other Tracking Technologies section below). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone or other device (a “Device”) whenever you visit or interact with our Site. Usage Information includes:
The Site includes functionality that allows certain kinds of interactions between the Site and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, we might obtain information about the traffic and usage of wba.chat from third parties. We might also allow you to login to the Site using third-party platforms such as Google and GitHub or provide links to facilitate sending postings to social media or via email (like a "Share" or "Forward" button). These third parties also use cookies and other tracking technologies to capture information about your interactions with wba.chat.
FriendliAI does not have control over the information that is collected, used, and shared by these third parties. We encourage you to review the privacy statements of these third parties to understand their privacy practices.
We use various methods and technologies ("Tracking Technologies") to store or collect Usage Information, to recognize your browser or device, learn more about your interests to personalize your experience and deliver our Site and Services to you. These tracking technologies allow us and other third parties to collect information such as your device type, browser type, interactions with our App, geographic location, your request, the date and time of your request, your Internet Protocol or MAC address, the domain name of your Internet service provider and other data. If you can be identified from this information, for example by combination with other pieces of information, then we will treat this information as Personal Information. Tracking Technologies may set, change, alter or modify settings or configurations on your Device. By using our Site, you consent to our use of Tracking Technologies as described in this Policy. A few of the Tracking Technologies used on the Site, include, but are not limited to, the following (as well as future-developed tracking technology or methods that are not listed here):
We may use the following types of cookies:
We use Google Analytics to help us understand how our customers use the Site. Read more about how Google uses your Personal Information or opt-out of Google Analytics.
We also use third-party advertising and affiliate services to support our work, including Microsoft Bing Ads. These services may use cookies, tracking pixels, and similar technologies to deliver ads that are more relevant to you or to track referrals for purchases made through affiliate links.
You can opt out of Microsoft Bing Ads here. Please note that opting out will not stop you from seeing ads; it will, however, limit the personalization and tracking associated with them.
We use the information we collect about you in a variety of ways, including the following:
We process certain Personal Information when you access or use our services, including to:
We process certain information to communicate with you in relation to your accounts, our services, our marketing, and your requests, including to:
We want to ensure that our Site and Services are continually improving and expanding so that we meet and exceed your needs and expectations. To do so, we may process certain Personal Information, including to:
We may be required to process certain Personal Information under certain laws and regulations, such as tax laws, as well as to:
To maintain a safe, secure, and trusted environment for you when you use our Site and Services, we use your Personal Information to ensure our terms, policies, and agreements with you and any third parties are enforced.
We process certain Personal Information to fulfill any other business or commercial purposes at your direction or with your consent.
To the extent permitted by law, certain Personal Information about you may be disclosed in the following situations:
Customer data may be used for any purpose, including without limitation for FriendliAI’s and third-parties’ products, services, and business purposes and the testing, development, maintenance and improvement of the Friendli Services and FriendliAI’s and third parties’ other products and services. Please see our Terms of Service for more information.
Finally, we may aggregate, de-identify, and/or anonymize any information collected through the Site or Services such that such information is no longer linked to your personally identifiable information. We may use and share this aggregated and anonymized information (non-Personal Information) for any purpose, including without limitation, for research and marketing purposes, and may also share such data with our affiliates and third parties, including advertisers, promotional partners and others.
Automated decision making refers to a decision that is taken solely on the basis of automated processing of your Personal Information. We may use automated decision-making software for security reasons, such as to detect fraudulent or illegal actions, or to protect consumer safety. When we do so, you cannot opt out of the use of the decision-making technology. We do not make any automated decision making technologies to produce an adverse legal effect on you.
FriendliAI will retain your Personal Information only for as long as necessary for the purposes set out in this Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
All information you provide to us is stored on our secure servers or those of our third-party data storage providers.
We retain Personal Information as follows:
We utilize the following criteria to determine the length of time for which we retain Personal Information:
When the purpose of collection and use of Personal Information is finally achieved, FriendliAI will destroy the personal data without delay after a predetermined period in line with its internal policy and applicable laws and regulations, unless the Personal Information must be retained in accordance with the relevant laws and regulations.
Notwithstanding the above, if the applicable laws and regulations require us to retain any Personal Information collected hereunder, we will have the right to retain any user’s Personal Information for such prescribed duration.
We prefer to keep your Personal Information accurate and up to date. If you would like to change your contact information, please contact us using the information in the Contact Us section below. We will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable (but we may retain prior information as business records).
You can opt out of receiving marketing emails from us at any time. You will still receive transactional messages from us. To manage your email preferences with us, please click on the unsubscribe link in any email you receive from us or contact us using the information in the Contact Us section below. Your choice will not affect our ability to share information in the other ways described in this Policy.
You can opt-out of cookies by enabling an opt-out preference signal on your browser or opting-out of cookies in our Sites’ cookie preference centers.
On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below to learn how to modify your web browser’s settings on the most popular browsers:
Note that if you turn cookies off, you may be unable to access certain parts or benefit from the full functionality of the Sites. To learn more about cookies and similar technologies or to opt-out of targeted advertising cookies, visit resources from the Digital Advertising Alliance (“DAA”). We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs.
Please note that even if you exercise the opt-out choices above, you may continue to receive advertisements, for example, ads based on the website you are viewing (e.g., contextually based ads), or ads that are not targeted at you and may be less relevant. Also, if your browser (like some Safari browsers) is configured to reject opt-out cookies when you opt out on the DAA website, your opt out may not be effective.
Do Not Track ("DNT") is a web browser setting that requests that a web application disable its tracking of an individual user. When you choose to turn on the DNT setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and other web services you encounter while browsing to stop tracking your activity. Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer's online activities over time and across third-party websites or online services (e.g., browser do not track signals), but there is no universally agreed upon standard for what an organization should do when it detects a DNT signal. Currently, we do not monitor or take any action with respect to these signals or other mechanisms. You can learn more about Do Not Track here.
Some browsers and browser extensions support opt-out preference signals such as the Global Privacy Control ("GPC") that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web browser-level setting, maintained by either a browser or a browser extension, that a user or privacy-focused technology can set. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices as required by applicable law.
Users in some jurisdictions may have additional privacy rights as set forth below. Please review the applicable sections for your state or country and follow the directions to exercise your available privacy rights.
Our Site is not intended for use by children under the age of 16. We do not request, or knowingly collect, any personally identifiable information from children under the age of 16. If you are the parent or guardian of a child under 16 who you believe has provided her or his information to us, please contact us using the information in the Contact Us section below to request the deletion of that information.
If you are visiting the Site from a location outside of the U.S., your connection will be through and to servers located in the U.S. All information you receive from the Site will be created on servers located in the U.S., and all information you provide will be maintained on web servers and systems located within the U.S. The data protection laws in the United States may differ from those of the country in which you are located, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Site or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information in the United States and in other countries, as set forth in this Policy.
For your convenience, the Site and this Policy may contain links to other websites. FriendliAI is not responsible for the privacy practices, advertising, products, services, or the content of such other websites. None of the links on the Site should be deemed to imply that FriendliAI endorses or has any affiliation with the links.
We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from the Site, and you provide us with your information at your own risk.
This section of the Policy applies solely to California residents. We adopt this Section to comply with the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”). Any terms defined in the CCPA or CPRA have the same meaning when used in this Section.
California residents have the following rights:
California residents have the right to request, under certain circumstances, that a business that collects Personal Information about them disclose the information listed below for the preceding 12 months:
Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.
You can also request that we correct or delete your Personal Information. There may be certain exceptions to our obligation to correct or delete your information such as if you have an existing account or transaction with us or if we have a legitimate business reason to keep your information.
We have collected the following categories of Personal Information from consumers within the last twelve (12) months:
| Category of Personal Information | Examples of this Category | Sources of Personal Information | Business Purpose for Collection |
|---|---|---|---|
| Identifiers | Real name, alias, postal address, unique personal identifier, online identifier, Internal Protocol address, email address, account name, social security number, driver’s license number, passport number or other similar identifiers. | You, Automatically, Third Parties | To provide, improve and market our products and Services, To provide information you requested, To identify potential customers, To verify identity, To prevent fraud, To comply with law |
| Personal information described in California Civ. Code § 1798.80(e) | Name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. | You, Automatically, Third Parties | To provide, improve and market our products and Services, To provide information you requested, To identify potential customers, To verify identity, To prevent fraud, To comply with law |
| Characteristics of protected classifications under California or federal law | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or credit, marital status, medical condition (AIDS/HIV status, cancer), physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information), political activities or affiliations, familial status, source of income status, status as a victim of domestic violence, assault, or stalking. | N/A | N/A |
| Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | You, Automatically | To provide, improve and market our products and Services, To provide information you requested, To identify potential customers, To verify identity, To prevent fraud, To comply with law |
| Biometric information | An individual’s genetic, physiological, biological or behavioral characteristics. | N/A | N/A |
| Internet or other electronic network activity information | Browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. | Automatically | To provide, improve and market our products and Services, To provide information you requested, To identify potential customers, To verify identity, To prevent fraud, To comply with law |
| Geolocation data | Physical location and/or movements. | N/A | N/A |
| Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. | N/A | N/A |
| Professional or employment related information | Current or past job history or performance evaluations | You | To provide, improve and market our products and Services, To provide information you requested, To identify potential customers, To verify identity, To prevent fraud, To comply with law |
| Non-public education information (per the Family Educational Rights and Privacy Act - 20 U.S.C. § 1232g, 34 CFR Part 99) | Education records directly related to a student maintained by an educational institution or party acting on its behalf. | N/A | N/A |
| Inferences drawn from other Personal Information | Information used to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | You, Automatically, Third Parties | To provide, improve and market our products and Services, To provide information you requested, To identify potential customers, To verify identity, To prevent fraud, To comply with law |
| Sensitive Personal Information | Social security number, driver’s license number, account log-in, debit, or credit card number in combination with password or PIN, precise geolocation (less than 1850 square foot radius), racial/ethnic origins, religious or philosophical beliefs, union membership, contents of e-mails or texts to others, genetic/biometric data, health information, sex life/sexual orientation data | N/A | N/A |
Information related to how long we retain each category of Personal Information is included in the Retention of Personal Information section above.
We have sold or shared (as those terms are defined in the CCPA) to third parties the following Categories of Personal Information in the last twelve (12) months:
| Category of Personal Information | Recipient Categories | Purpose for Sale/Sharing |
|---|---|---|
| Identifiers | Advertising, marketing, and analytics providers | Marketing |
| Commercial information | Advertising, marketing, and analytics providers | Marketing and analytics |
| Internet or other electronic network activity information | Advertising, marketing, and analytics providers | Marketing and analytics |
| Inferences drawn from other Personal Information | Advertising, marketing, and analytics providers | Marketing and analytics |
We do not sell or share the Personal Information of consumers under 16 years of age.
We have disclosed the following categories of Personal Information for business purposes in the last twelve (12) months:
| Category of Personal Information | Recipient Categories | Business Purpose for Disclosure |
|---|---|---|
| Identifiers | Service Providers | Helping to ensure the security and integrity of Personal Information, Performing services on behalf of the business, Internal research for technological development and demonstration, Activities to verify or maintain the quality of, improve, upgrade, and/or enhance our Services |
| Commercial information | Service Providers and Advertising Partners | Helping to ensure the security and integrity of Personal Information, Performing services on behalf of the business, Internal research for technological development and demonstration, Activities to verify or maintain the quality of, improve, upgrade, and/or enhance of our Services |
| Internet or other electronic network activity information | Service Providers and Advertising Partners | Helping to ensure the security and integrity of Personal Information, Performing services on behalf of the business, Internal research for technological development and demonstration, Activities to verify or maintain the quality of, improve, upgrade, and/or enhance of our Services |
As a California resident, you also have the right, at any time, to tell us not to sell Personal Information - this is called the “right to opt-out” of the sale of Personal Information. We do not sell Personal Information, but we recognize that some privacy laws define “Personal Information” in such a way that making available identifiers linked to you for a benefit may be considered a “sale.” To opt out of this, please click on Cookie Preferences in our footer.
California residents have the right to limit the use of each type of Sensitive Personal Information for each purpose with each type of third-party partner. Currently, we do not provide your Sensitive Personal Information to any third parties.
We will not discriminate against you for exercising any of your rights under the CCPA. Unless permitted by California law, we will not:
California Civil Code Section 1798.83 permits our users who are California residents and who have an established business relationship with us to request and obtain from us a list of what Personal Information (if any) we disclosed to third parties for their own direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. We do not currently disclose Personal Information protected under this section to third parties for their own direct marketing purposes.
You or your authorized agent may make a request to access, correct, delete, opt-out of the sale of your Personal Information, or limit the use of your Sensitive Personal Information by contacting us using the information in the Contact Us section below.
If you use an authorized agent to submit your request, we may require proof of the written authorization you have given. We also may require you to confirm your identity and your residency to obtain the information, and you are only entitled to make this request twice in a 12-month period. For emails, please include “California Privacy Rights” as the subject line. You must include your full name, email address, and attest to the fact that you are a California resident. We will acknowledge your request within 10 days and respond to your request within 45 days or let you know if we need additional time. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.
If you live in certain other U.S. states, such as Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights under applicable privacy laws.
Based on the applicable law in the state where you live, you may have the following rights with respect to your Personal Information:
To exercise any of these rights, you may make a request to confirm, access, correct, delete, obtain a copy, or opt-out of the processing of your Personal Information for targeting advertising, sale, or profiling by using this link or contacting us using the information in the Contact Us section below. Please include your state of residence. Some states may allow you to use an authorized agent to make this request. If you use an authorized agent to submit your request, we may require proof of the written authorization you have given, or we may decline it if applicable law does not provide for authorized agents to make such a request in your state.
We may require you to confirm your identity and your residency in order to obtain the information, and you are only entitled to make this request up to twice annually. For emails, please include "Privacy Rights" as the subject line. You must include your full name, email address, and attest to the state in which you are a resident. We will process your request within 45 days or let you know if we need additional time or cannot process your request. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.
You may have the right to opt out of the processing of your Personal Information for purposes of (i) targeted advertising, (ii) the sale of Personal Information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To exercise your right, please click on the Cookie Preferences link on the bottom of the webpage where your information is being collected.
Some browsers and browser extensions support opt-out preference signals such as the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web browser-level setting, maintained by either a browser or a browser extension, that a user or privacy-focused technology can set. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices as required by applicable law.
In some jurisdictions (Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas or Virginia), you may appeal to us if we refuse to take action on your exercise of certain choices described above. In order to appeal such a refusal, please contact us using the information in the Contact Us section below with the subject line “Appeal of Refusal to Take Action on Privacy Request” and provide the relevant information in the email.
If we decline to take action on any request you make, we will provide you with the information required by the applicable law where you live. This may include an explanation of why we declined your request, information on how to appeal our decision, and/or how to make a complaint to your state Attorney General.
This section of the Policy applies if you are a data subject who resides or is located in the European Economic Area (“EEA”). We adopt this section to comply with European privacy laws, including the General Data Protection Regulation (“GDPR”). Any terms defined in the GDPR have the same meaning when used in this section.
Under applicable law, we are considered the “data controller” of the Personal Information we handle under this Policy. In other words, we are responsible for deciding how to collect, use and disclose this information, subject to applicable law.
We want to ensure that the Personal Information we possess is always accurate and therefore we encourage you to update your information in case any changes have occurred. We have listed below the rights that you may be able to exercise in respect of the processing of your Personal Information, subject to applicable law. We take reasonable steps to ensure that the Personal Information that we process is limited to the Personal Information that are required in connection with the purposes set out in this Policy.
If you are a resident of or located within the EEA, you have certain data protection rights. These rights include:
We rely on the following legal bases for processing your Personal Information:
If applicable, you may exercise any of your rights under the GDPR by submitting a verifiable data subject request to us by using the contact details below. You may make a request related to your Personal Information or on behalf of someone for which you have authorization. You must include your full name, email address, and attest to the fact that you are a citizen or resident of the EEA by including your country of citizenship or residence in your request. We may require you to confirm your identity and/or legal standing for the request as well as your residency in the EEA to obtain the information. We will respond to your request within 30 days or let you know if we need additional time.
Please note that we will ask you to verify your identity before responding to such requests, and we may deny your request if we are unable to verify your identity or authority to make the request.
Should you wish to raise a concern about our use of your data (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority; however, we hope that we can assist with any queries or concerns you may have about our use of your Personal Information first by contacting us using the information in the Contact Us section below.
If you are based in the United Kingdom, the following provisions also apply:
If we share your Personal Information within FriendliAI or with third parties located outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place to guarantee the continued protection of your Personal Information, such as by entering into the international data transfer addendum to the European Commission’s Standard Contractual Clauses, adopted by the UK Government under section 119A of the Data Protection Act 2018.
You have the same data subject rights as those for the EU listed above, except that references to the "GDPR" should be read as references to the "UK GDPR" and complaints should be filed with the UK supervisory authority, the Information Commissioner’s Office.
We may change this Privacy Policy at any time. We will post all changes to this Policy on this page and will indicate at the top of the page the modified policy’s effective date. We therefore encourage you to refer to this page on an ongoing basis so that you are aware of our current privacy policy. If required by the applicable law, we will notify you of the changes.
By continuing to use the Site or Services or providing us with information following such a replacement Policy being uploaded, you agree that you will be bound by the Privacy Policy as changed.
If you have any questions or suggestions regarding this Policy, please contact us as follows:
FriendliAI is the data controller of Personal Information processed in relation to the Service. You may contact us through the following contact information:
FriendliAI
Address: 303 Twin Dolphin Drive, Suite 600 Unit 6009, Redwood City, CA 94065
Phone Number: (650) 563-5047
Email Address: privacy@friendli.ai
ANNEX 1: ADDITIONAL CLAUSES FOR KOREAN RESIDENTS
Notwithstanding the Retention of Personal Information section of the Privacy Policy, FriendliAI may use and retain Korean residents’ personal data until the end of the relevant retention period in the below cases:
| Cases | Retention Period |
|---|---|
| Investigation is necessary to find out the reason for termination in case FriendliAI terminates the relevant service agreement due to a reason attributable to user | Three (3) years from the date of termination |
| Investigation in progress due to violation of any applicable laws and regulations | Until the completion of the investigation |
| Existence of claims and/or obligations | Until the settlement of the claims and/or obligations |
| Records related to resolution of user’s complaints or settlement of disputes | Three (3) years |
| Records related to payment for and provision of services | Five (5) years |
The following applies to the consignment of processing personal data of Korean residents:
| Consignee | Destination Country | Time and Method of Transfer | Personal Data | Purpose of Use | Period of Retention and Processing |
|---|---|---|---|---|---|
| Amazon Web Service Inc. (aws-korea-privacy@amazon.com) | U.S. | Transferred through server | Any personal data processed | Data management | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Neon, Inc. (security@neon.tech) | U.S. | Transferred through server | Any personal data processed | Data management | Until member's membership withdrawal; or until the consignment agreement is terminated |
| Nebius B.V. (privacy@nebius.com) | U.S. | Transferred through server | Any personal data processed | Data management | Until member's membership withdrawal; or until the consignment agreement is terminated |
| Vercel (privacy@vercel.com) | U.S. | Transferred through server during bot detection and latency tracking | IP address, user agent, request metadata used for bot detection and latency measurement | Bot detection (automated traffic identification), latency tracking, and security | Until member's membership withdrawal; or until the consignment agreement is terminated |
| WorkOS, Inc. (support@workos.com) | U.S. | Transferred through server | Name, email, organization name, authentication and identity provider information, login data | Authentication, and Identity Management | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Microsoft Clarity (clarity@microsoft.com) | U.S. | Transferred through server when Service usage history occurs | Service usage history | Analysis of usage patterns | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Stripe, Inc. (privacy@stripe.com) | U.S. | Transferred through server | Name, email, billing address, credit card information, purchase amount, date of purchase | Electronic payment processing | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Google LLC (googlekrsupport@google.com) | U.S. | Transferred through server when Service usage history occurs | Service usage history | Analysis of usage patterns | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Amplitude, Inc. (privacy@amplitude.com) | U.S. | Transferred through server when Service usage history occurs | Service usage history | Analysis of usage patterns | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Functional Software, Inc. (compliance@sentry.io) | U.S. | Transferred through server during error monitoring and performance tracking | No personal data collected; only error logs and performance metadata (such as stack traces, timestamps, request paths without identifiers) | Application error monitoring and performance tracking | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| HubSpot, Inc. (privacy@hubspot.com) | U.S. | Transferred through server when Service usage history occurs | Service usage history | Analysis of usage patterns | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Twilio Inc. (privacy@twilio.com) | U.S. | Transferred through server when sending emails | Email address | Sending email | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| OpenRouter, Inc (support@openrouter.ai) | U.S. | Transferred through server | Personal information contained in user inputs | Third party AI service | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| X Corp. (https://xai-privacy.relyance.ai) | U.S. | Transferred through server | Personal information contained in user inputs | Third party AI service | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| OpenAI OpCo, LLC (privacy@openai.com) | U.S. | Transferred through server | Personal information contained in user inputs | Third party AI service | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Anthropic PBC (privacy@anthropic.com) | U.S. | Transferred through server | Personal information contained in user inputs | Third party AI service | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Upstage Co., Ltd. (contact@upstage.ai) | KR | Transferred through server | Personal information contained in user inputs | Third party AI service | Until member’s membership withdrawal; or until the consignment agreement is terminated |
In the event the personal data needs to be retained by Korean Data Protection laws, such personal data will be segregated, moved to a separate database and safely stored in a different location.
The process and method of Korean residents’ personal data destruction are as follows:
The Chief Privacy Officer and the department responsible for handling privacy inquiries are designated as below to oversee all matters related to customer privacy and handle complaints, as well as to address any damage from privacy-related issues. For the avoidance of doubt, the Chief Privacy Officer is not the Data Protection Officer under the European General Data Protection Regulation (GDPR):
| Chief Privacy Officer | Staff Responsible for Privacy Inquiries |
|---|---|
| Name: Byung Gon Chun Title: CEO | Department: Legal Phone number: +1(650)563 5047 Email address: privacy@friendli.ai Contact Person: Elizabeth Yoon |
The users may contact the above department and staff for all personal data protection inquiries, complaint handling, damage relief, etc., that occurred while using FriendliAI's Service. FriendliAI will endeavor to respond and process any inquiry promptly.
A Korean resident may submit a complaint to the below institutions:
Personal Data Breach Reporting Center: 118 (www.privacy.kisa.or.kr);
Personal Data Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr);
Cybercrime Investigation Division at the Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr);
Cybercrime Investigation Bureau at the National Police Agency: 182 (http://cyberbureau.police.go.kr).