CoSprint Privacy Policy
Effective 2026-10-08
CT Corp. ("we") operates CoSprint (the "Service") under Korea's Personal Information Protection Act and related laws. The Korean version of this policy governs.
1. Why we process data
- Running sprints: identifying participants, running the sprint, receiving hand-ins and keeping the passport
- Supporting hiring review: sending a participant's hand-in to the company that opened the sprint, and receiving an application when the participant chooses to apply
- AI analysis: reading hand-ins and conversations to record working style and AI fluency (CoSprint PAIR)
- Serving business customers: setting up sprints, billing and support
- Keeping the Service secure and working
2. What we process
| Who / what | Items |
|---|---|
| Participants | Name, email address |
| Sprint record | Conversations with the AI (Jello) and virtual colleagues; hand-ins (text, image captions, attachment names and extracted text); hand-in and application status and time |
| AI analysis | Working-style type, AI fluency levels with quoted evidence, short notes |
| Company contacts | Company name, contact name and email (if entered), brief and attached material |
| Collected automatically | IP address, browser and device information, access times, error logs |
There are no accounts or passwords. We never ask for phone numbers, national ID numbers, or information unrelated to hiring such as hometown or family.
3. How long we keep it
A participant's record is kept until they ask for deletion or the Service ends, then deleted without delay. A record sent to a company is kept by that company for hiring and handled under its own process and Korea's Fair Hiring Procedure Act.
Some records are kept for periods set by law: contract, payment and supply records — 5 years; complaint and dispute records — 3 years; access logs — 3 months.
4. Sharing with third parties
We share personal data only with the participant's consent:
| Recipient | Purpose | Items | Retention |
|---|---|---|---|
| The company that opened the sprint you handed in | Hiring review | Name, email, hand-in, conversations, AI analysis | Until that company's hiring purpose is met |
| A company you allow to view your passport | Hiring review | What your passport holds | Until you withdraw access |
A company's scores and decisions are its own and are never added to your passport.
5. Processors and overseas transfer
| Recipient (country) | Task | Items | Retention |
|---|---|---|---|
| Cloudflare, Inc. (US) | Hosting and data storage | All items in section 2 | Until the contract ends or the purpose is met |
| Google LLC (US) | AI conversation and analysis (Gemini API) | Conversations, hand-ins, brief material | Deleted after processing or brief retention under the provider's policy |
Data is transferred over encrypted connections as the Service is used. The AI provider is used under paid-API terms that exclude customer data from model training.
6. AI analysis and automated decisions
The Service uses generative AI. AI reads hand-ins and conversations to record working style and AI fluency and to suggest a reading order for the hiring team. Every read quotes its evidence; anything without evidence is left unscored.
AI does not decide who is hired. Advance, hold or decline is decided by people at the company that opened the sprint. You can ask for an explanation of any AI read, or object to it.
7. Deletion
Data past its retention period is deleted without delay, using methods that cannot be recovered.
8. Your rights
You can ask to access, correct, delete or stop processing your data, or withdraw consent, at support@ctcorp.ai. We act after verifying your identity, within 10 days for access requests. Deleting a record already sent to a company may also need a request to that company; we will help.
9. Cookies and local storage
This site uses no cookies or analytics. The Service stores your name, email and sprint progress in your browser so you can pick up where you left off; you can clear it at any time.
10. Security
- Encryption in transit (HTTPS)
- Least-privilege access and access logs
- Contracts that bar processors from other uses
11. Children
The Service is for people aged 14 and over. We do not knowingly collect data from children under 14.
12. Privacy officer
- Privacy officer: Jaesang Yoo (R&D Center, CTO)
- Contact: support@ctcorp.ai
- CT Corp., 12F, 34 Yeongdong-daero 85-gil, Gangnam-gu, Seoul, Korea
13. Changes
We post changes on this page 7 days before they take effect (30 days for changes against your interest).