Privacy Policy

AI connections and team bots

When you connect an external AI service such as Claude or ChatGPT, messages, author display names, meeting summaries and transcripts from the teams and conversations you authorize are sent to that service on request. If you grant write permission, messages can be posted as you or a team bot. API keys and connection tokens are stored only as hashes. Connection names, permissions and creation, expiry and last-use times are used to manage connections. Activity records contain action names, success status and timestamps and are retained for 30 days; they do not contain message bodies or keys. Connections can be revoked in Settings and are deleted when their owning account is deleted. Data already received by an external AI service is handled under its policies and your settings.

When automatic message translation is on, the text of messages to be displayed is sent to OpenAI for translation into your selected language. Code, link URLs, and mentions are excluded before sending, and the original messages remain unchanged. Translations are temporarily stored for reuse and removed when the message is edited or deleted. You can turn off automatic translation in settings.

Undermilli processes the following information to provide EKKOZULU account management, friend and team features, text chat, and real-time voice and video calls. Privacy inquiries and requests to access, correct, or delete personal information can be sent to support@undermilli.com.

Transcripts and summaries are created automatically after recording. ElevenLabs transcribes the audio, and OpenAI summarizes and translates the transcript. When microphone audio is saved separately, the account name is shown; names are not guessed for speakers in mixed audio. Generated records use the same access permissions as the recording and are deleted with it.

1. Information processed and purposes

• Account: We use your email address, login identifier, password hash (when signing up with email), nickname, tag, and sign-up and access times to identify members, enable login, and protect accounts. We do not store passwords in plain text.
• Google login: We use your Google account identifier, verified email address, name, and profile photo URL to log you in, link an existing account, and set up your initial profile. Your name and photo do not overwrite an existing profile.
• Apple login: We use your Apple account identifier and provided name and email address, including any hidden address, to authenticate your account. The team stores the refresh token used to revoke authorization in encrypted form and revokes Apple authorization when you delete your account.
• Profile and community: We use the bio and photo you provide, friend relationships, requests and notes, team creation, membership and invitation information, messages, and sending times to provide the relevant features.
• Virtual office: We save character customization, last location, assigned seat, and meeting participation status. Space layouts, furniture, and meeting and focus areas are shared with team members.
• Safety: We use the version of the terms you agreed to, block lists, reported subjects, report details and outcomes, and records of acknowledged recording notices to provide safety features. Only authorized staff review reports.
• Calls: When you turn on your microphone, camera, or screen sharing, the corresponding audio, video, or screen content and connection status are transmitted to call participants. Calls are not recorded automatically. When a team administrator starts a recording, participants’ video, audio, shared screens, and participant information shown on the recording screen are saved as an MP4, and participants are notified that recording is in progress.
• Service operation: We use access IP addresses, request times, browser and device information, and error and security logs to handle connections, resolve errors, and prevent misuse.
• App error diagnostics: We use app and operating system versions, progress stages such as call connection and microphone activation, error codes, and binary identifiers and location information from crash stacks to analyze errors. When sent, this information is linked to your logged-in account. Diagnostic information does not include audio, video, screen or chat content, passwords, or authentication tokens. You can turn off automatic sending in app settings.
• Inquiries: We use the contact information and inquiry details you provide by email to respond and resolve issues.

2. Use of Google account information

Google login is optional; email login is also available. We do not receive your Google password or request access to Gmail, Drive, contacts, or calendars. Information received from Google is used only for account authentication, linking, and profile provision. We do not sell it or use it for personalized advertising or AI model training.

If the email address whose ownership Google verifies matches an existing sign-up email, we link it to the existing account. If the email requires additional verification, we link it after confirming the existing account's password. Linking preserves your existing nickname, profile, friendships, and chat history.

You can revoke access in your Google account's third-party connections settings. Unlinking and deleting your EKKOZULU account are separate actions. You can request deletion of information stored in the service by deleting your account or contacting the support email address.

The Google Sign-In SDK for iOS may process Google account information and approximate IP-based location for authentication and abuse prevention. The SDK's privacy declaration also includes phone numbers, device identifiers, and SDK usage and diagnostic information. This processing is for Google's authentication, functionality, and analytics purposes. For details, see the Google Sign-In SDK privacy information and Google's Privacy Policy.

3. Information visible to other users

Your nickname, tag, profile, and online status may be visible to friends or users on the same team. Messages you send can be seen by the other person in the conversation or participants in the relevant team. Voice, video, and screen sharing are transmitted in the call you are participating in. EKKOZULU cannot retrieve or delete content that others have saved separately. Friend notes are for the author's own use.

Only current members of the team can view the list of meeting recordings and download them. Recording files are kept in private storage. When a download is requested, team membership is verified before a short-lived link is issued. When recording starts, a small recording indicator and a notice are displayed. Until a participant acknowledges the notice, their voice, video, and shared screen are excluded from the recording. If you do not wish to be recorded, you can leave the call.

4. Retention and deletion

Account and service usage information is retained while we provide the account and relevant features. If you delete your account or request deletion, we verify your identity and delete personal information whose purpose has ended. Information required by law or needed to resolve disputes is stored separately only for the relevant reason and period, then destroyed in a manner that makes recovery difficult once its purpose has ended.

One-time values used to verify Google login are valid for 10 minutes. Login refresh information is valid for up to 30 days from its most recent use and is refreshed while you remain signed in. Refresh information is stored by the team as a hash, and the relevant session is revoked on logout. Service logs and backups are deleted according to the hosting provider's retention schedule; deletion requests are handled after checking these as well.

A limited amount of app diagnostic information is stored on the device for up to 7 days. If transmission fails, it is retried on the next launch or after the connection is restored. The team clears diagnostic records more than 30 days after receipt every hour. Turning off automatic transmission or logging out deletes diagnostic records remaining on the device. An abnormal termination alone is not treated as a confirmed crash; crash reports provided by the operating system are sent separately when available.

Meeting recording files and records such as the recording time, duration, and administrator who started it are retained so the team can review them until an administrator deletes them or deletion is handled through support. Administrators can delete files from the recording list. Participants can request access to or deletion of recordings in which they appear via the support email address. Copies already downloaded by other members cannot be retrieved when deleted from the service.

You can request account deletion through Delete Account in the app settings or the web deletion page. We delete authentication information, friendships, block lists, personal office locations and avatars, and the contents of messages you wrote. Report evidence is retained for up to one year after receipt for dispute and safety investigations; you can separately request its deletion from the operations team.

5. Service providers

We use the following providers' infrastructure to provide the service. The primary storage region for the account database is Seoul, South Korea. Information may be processed outside South Korea for authentication, network delivery, and security support for the global service.

• Supabase: Account and chat database, profile and meeting recording file storage, and real-time message delivery. Login verification is handled by our own Hono API. Privacy information
• Vercel: Website and API hosting, request routing, and operational logs. Privacy information
• LiveKit: Real-time voice, video, and screen sharing connections and delivery, and processing of meeting recordings started by an administrator. Privacy information
• Resend: Sends email verification codes and invitation and support notifications requested by users. Privacy information
• Apple: Used to authenticate the selected Apple account and revoke login authorization. Privacy information
• Google: Authenticates the Google account selected by the user and provides profile information. Privacy information

We do not provide personal information to third parties except for information sharing selected by the user, processing necessary to provide the service, or requests required by law. You can contact the support email with specific inquiries about processors, the scope of transfers, and storage, or to request that processing stop. Refusing essential processing may limit access to related features.

6. Device permissions and browser storage

Microphone, camera, and screen sharing work according to your actions and browser permissions. The camera is off by default when you join a video call. You can revoke permissions in your browser settings and continue using text features.

We use browser storage to keep you signed in and save your language and call device selections. You can remove your login information by signing out or deleting site data. Google's authentication-related storage and cookie policies may apply separately to the Google sign-in screen.

7. User rights and safeguards

You can edit your information in profile settings and request access, correction, deletion, or suspension of processing of your personal information by deleting your account or contacting the support email. We perform the minimum verification necessary to confirm that you own the account. The contact for personal information inquiries is the 언더밀리 EKKOZULU support team (support@undermilli.com).

We apply access restrictions, encrypted connections, hashing of passwords and refresh information, login verification, and request limits. For advice or to report a personal information breach, contact the Personal Information Infringement Report Center or Personal Information Dispute Mediation Committee.

8. Policy changes

If our information processing practices change, we will update this page and its effective date and announce important changes in the service. If separate consent is required, we will request it before the changes take effect.