Privacy Policy

ENF Advisor Inc. operates BlackTurtle and is responsible for this Privacy Policy.

This policy applies to the BlackTurtle website, workspace, AI search, file analysis, project storage, subscription requests, and customer support.

BlackTurtle is an AI-powered information service that connects industry problems, patents, national R&D projects, and company candidates. Technical descriptions, patent/R&D materials, files, and project records you submit may be processed to provide the service.

Account data: email address, name, profile image, login provider identifier, user ID, account status, and language settings.

Service data: search queries, prompts, project names, project notes, saved reports and artifacts, technology/company/patent interests, AI outputs, usage quota, plan, and feature usage records.

Files and extraction data: uploaded documents, images, audio, or other files, file names, file size, extracted text, analysis results, and error logs.

Billing data: plan, payment status, payment date, amount, refund/cancellation records, and information required for invoices or receipts. Raw card numbers are handled by PortOne and connected PGs, card issuers, or e-wallet providers and are normally not stored by us.

Access and security data: IP address, browser and device data, cookies, access time, session identifiers, error/security logs, and abuse detection records.

Support data: name, email, phone number, company, inquiry content, attachments, and support history.

Account authentication, session management, account administration, support verification, abuse prevention, and security incident response.

AI search, idea concretization, patent/R&D/company candidate discovery, file analysis, report generation, project storage, and sharing features.

Usage metering by plan, subscription approval, PortOne payment authorization, recurring billing, refunds, invoice/receipt issuance, customer support, and dispute handling.

Service quality improvement, error analysis, model-routing improvement, and usage statistics, using de-identified or aggregated data where reasonably possible.

Legal compliance, terms enforcement, rights-infringement handling, and protection of the rights of the company, users, and third parties.

Do not submit resident registration numbers, passport numbers, bank account numbers, card numbers, health data, unpublished trade secrets, customer personal data, unpublished patent strategy, or third-party confidential materials unless you have authority and have removed unnecessary sensitive data.

To generate AI search results and reports, your inputs may be sent to AI model providers such as OpenAI, Anthropic, and Google, or to search and analysis infrastructure. We limit transfer to what is necessary to process the request.

We do not sell your input data. However, processing may vary depending on the selected model provider, model policy, and service configuration. For highly confidential materials, anonymize the data before upload or do not upload it.

AI outputs are automatically generated and should be verified against original sources, patent documents, public filings, government notices, and professional review.

Account and project data is retained until account deletion or a deletion request. Backups may remain for up to 30 days for recovery and security purposes.

Usage records and security logs are retained as necessary for abuse prevention, error response, and dispute handling. Access logs may be retained for periods required by applicable law.

Records related to contracts, withdrawal, billing, supply, and refunds may be retained for up to five years under e-commerce and related laws.

Consumer complaint and dispute records may be retained for up to three years.

Tax invoices, receipts, and accounting records are retained for periods required by tax and accounting laws.

Where legal disputes, investigations, or rights-infringement reports require preservation, relevant data may be retained until the reason is resolved.

We do not sell personal data or provide it to third parties without consent as a general rule.

We may disclose data where required by law, lawful requests from authorities, protection of life/body/property, or protection of our rights.

If you use shared links, shared projects, or export features, project names, inputs, outputs, and attachments may be disclosed to the recipients you choose. Do not share projects containing personal or confidential information.

In a business transfer, merger, split-off, investment diligence, or service transition, personal data may be transferred as necessary, subject to required notice or consent procedures.

We may use service providers for hosting, databases, AI models, authentication, email, payment processing, error monitoring, customer support, and analytics. Payment processing may be handled by PortOne and PGs, card issuers, or e-wallet providers connected through PortOne.

Major processing categories include hosting infrastructure such as Railway, databases such as MongoDB, AI model providers such as OpenAI, Anthropic, and Google, and email, authentication, PortOne payment, and analytics services. Providers may change as the service evolves.

If AI model providers, cloud providers, or database providers are located overseas, account data, usage records, prompts, extracted file text, AI outputs, and error logs may be transferred, stored, or processed in their countries to provide the service.

We require reasonable safeguards from processors, including contractual controls, access control, encryption where appropriate, logging, and security review.

You may request access, correction, deletion, suspension of processing, withdrawal of consent, and account deletion.

Requests can be sent to contact@enfadvisor.com or 02-332-3728. We may verify your identity before processing the request.

Deletion may be limited where retention is required by law, necessary for dispute handling, or necessary to protect other users.

You can block or delete cookies through browser settings, but login, language settings, and some security features may not work properly.

We apply technical and organizational safeguards such as least-privilege access, administrator access control, encrypted transmission, masking of sensitive data, security logging, backups, external access restrictions, and vulnerability checks.

You are responsible for keeping your account credentials, sessions, and sharing links secure, and must notify us immediately of suspected unauthorized use.

The service depends on external infrastructure such as AI model providers, hosting, databases, PortOne, and connected payment methods, so temporary delays or feature limits may occur due to external incidents or security updates.

BlackTurtle is not directed to children under 14.

If we learn that a child under 14 provided personal data without legal guardian consent, we will delete the data or take other necessary steps.

Privacy contact: Junho Shin

Email: contact@enfadvisor.com

Phone: 02-332-3728

Address: 703, Sinsong Building, 67 Yeouinaru-ro, Yeongdeungpo-gu, Seoul, Republic of Korea

This Privacy Policy applies from the effective date above.

If laws, service structure, processors, payment methods, or AI model providers change, we will update this policy and post the effective date.

Material changes affecting user rights will be announced with reasonable prior notice.