Indigo Agent Privacy Policy
Effective: November __, 2026
Locus Korea Co., Ltd. ("we") operates Indigo Agent (agent.indition.im, the "Service"). This policy explains what personal information we process and why.
1. What we collect and why
| Category | Data | Purpose |
|---|---|---|
| Sign-up and login | Email address, login records (time, IP) | Create your account, send login links and codes, prevent abuse |
| Company details (optional) | Company name, contact name, phone | Support and onboarding |
| Service use | Connected system types, messenger connection details, questions and answers, usage counts | Send alerts, answer questions, manage usage limits, fix errors |
| Referral | UTM parameters, referral code | Referral rewards, channel reporting |
| Prize draw (optional) | Email, and name, phone and address of winners | Notify winners and ship prizes |
Inventory and order data read from the systems you connect is treated as your company's business data. Alerts and operating records do not use or keep buyers' names, phone numbers or addresses.
2. Retention
- Account data: until you delete your account
- Disconnected systems: collection stops immediately; stored data is deleted on request, and automatically after 90 days with no active connection
- Prize shipping details: 3 months after delivery
- Records we must keep by law are kept for the legally required period
3. Sharing
We do not sell or share your personal information with third parties, except where required by law or with your consent.
4. Service providers and international transfers
| Provider | Location | Data | Purpose |
|---|---|---|---|
| Supabase, Inc. | Singapore (AWS ap-southeast-1) | All data in section 1 | Database, authentication, server functions |
| Vercel Inc. | United States and others | Access logs | Web hosting |
| Anthropic, PBC | United States | Your question and the inventory/order figures needed to answer it | Generating answers. Used under API terms that exclude model training |
| NAVER Cloud (NAVER WORKS) | Republic of Korea | Email address | Sending login emails |
Alerts sent to the messenger you connect (Slack, LINE, Microsoft Teams, etc.) are delivered at your request and are also subject to that messenger's policies.
5. Your rights
You can ask to access, correct, delete or restrict processing of your personal information at any time by emailing cs@locuskorea.kr. We respond within 10 days. Depending on where you live (for example the EU/UK, California, India, Japan or Thailand), you may have additional rights under local law; contact us and we will handle your request under the law that applies to you.
6. Security
- Connection keys are stored encrypted (Vault) and never shown again after entry
- Each company's data is isolated at the database level (row-level security)
- We request read-only access only
- Admin access is limited and logged
7. Cookies and browser storage
We use cookies and browser storage to keep you signed in and remember your language. You can block them in your browser, but sign-in may not persist.
8. Shopify, Shopee and other platform apps
When you install Indigo through a platform app store, we access only the read scopes shown on the install screen (products, inventory, orders). When you uninstall, we stop collection and delete store data within 30 days. We respond to platform data-request and redaction requests (for example Shopify's customers/data_request, customers/redact and shop/redact).
9. Contact
Privacy officer: Lee Jun Hyun, CEO
Email: cs@locuskorea.kr
Locus Korea Co., Ltd., Geumjeong-gu, Busan, Republic of Korea
10. Changes
We will post changes on the Service at least 7 days before they take effect, or 30 days before for material changes.