Effective Date: 2026-04-30
Last Updated: 2026-05-02
Laight AI Inc. ("Laight AI", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (https://laight.ai), use our services (https://laightai.com), or interact with us in any way (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Who We Are
Laight AI Inc. is a company that provides digital advertising performance analytics services. We help advertisers connect to digital advertising platforms (such as Meta, Google, TikTok, and others) via official APIs, ingest performance data through our proprietary ETL pipeline, and deliver analytical insights to optimize advertising performance.
- Company Name: Laight AI Inc.
- Address: H101, Offices 904-905, Cheongsu 5-ro, Dongnam-gu, Cheonan-si, Chungcheongnam-do, Republic of Korea 31157
2. Information We Collect
We collect the following categories of information:
2.1 Information You Provide Directly
- Account Information: Name, email address, company name, job title, and password when you register an account.
- Billing Information: Payment details, billing address, and tax information processed through trusted third-party payment processors.
- Communications: Information you provide when you contact us, request support, or respond to surveys.
2.2 Information Collected Automatically
- Usage Data: Pages viewed, features used, click activity, session duration, and referral URLs.
- Device & Log Data: IP address, browser type, operating system, device identifiers, and timestamps.
- Cookies and Similar Technologies: As described in our Cookie Policy section below.
2.3 Information Collected via Third-Party Advertising Platforms
With your explicit authorization (for example, through OAuth-based login on Meta, Google, or other advertising platforms), we access and process advertising performance data via official APIs, including but not limited to:
- Ad account IDs, campaign, ad set, and ad-level metadata
- Performance metrics such as impressions, clicks, conversions, spend, CTR, CPM, CPA, and ROAS
- Audience and creative metadata (non-personal, aggregated)
We do not collect end-user personally identifiable information (PII) of consumers who interact with your advertisements unless explicitly authorized and requested by you and permitted by the applicable platform's terms.
3. How We Use Information Collected
We use the information we collect for the following purposes:
- To provide, operate, and maintain our Services
- To process advertising performance data through our ETL pipeline and generate analytics
- To authenticate users and manage accounts
- To process payments and transactions
- To communicate with you regarding service updates, technical notices, and customer support
- To improve, personalize, and develop new features and services
- To detect, investigate, and prevent fraudulent or illegal activities
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, our legal bases for processing your personal data include:
- Contractual Necessity: To perform our agreement with you.
- Legitimate Interests: To operate, secure, and improve our Services.
- Consent: Where you have given clear consent (e.g., marketing communications, OAuth authorizations).
- Legal Obligation: To comply with applicable laws and regulations.
5. How We Share Information
We do not sell your personal information. We may share information in the following limited circumstances:
- Service Providers / Sub-processors: Cloud hosting (e.g., AWS, Google Cloud), data warehousing, analytics, customer support, and payment processing partners under strict confidentiality obligations.
- Advertising Platforms: When you authorize, we exchange data with platforms such as Meta, Google, etc., solely to provide the Services.
- Legal Compliance: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
- With Your Consent: For any other purpose disclosed to and agreed by you.
6. International Data Transfers
Laight AI Inc. is headquartered in the Republic of Korea. Your information may be processed in countries outside your country of residence. We implement appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data is protected in accordance with applicable data protection laws.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, it is securely deleted or anonymized.
Typical retention periods:
- Account data:For the duration of your active account, plus up to 3 years thereafter.
- Advertising performance data: Up to 3 years, unless otherwise instructed by you.
- Log data: Up to 12 months.
8. Data Security
We implement industry-standard technical and organizational safeguards, including:
- Encryption in transit at rest AWS’s certified cloud environment
- Role-based access controls and least-privilege principles
- Regular security audits, vulnerability scans, and penetration testing
- Secure software development lifecycle (SSDLC)
- Employee training on data protection and confidentiality
While we strive to protect your information, no method of transmission or storage is completely secure.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access to your personal data
- Correction of inaccurate or incomplete data
- Deletion of your data ("right to be forgotten")
- Restriction or objection to certain processing
- Data portability
- Withdrawal of consent at any time
- Lodging a complaint with a supervisory authority
Meta Platform Data Deletion:
Users may request the deletion of their data retrieved from Meta Platforms at any time. To do so, please follow the instructions in our User Data Deletion Instructions or contact us at contact@laight.ai. We will process the request and delete the data from our servers within 30 days.
To exercise these rights, contact us at contact@laight.ai. We will respond within the timeframe required by applicable law.
10. Remedies and Dispute Resolution for Korean Data Subjects
If you are located in the Republic of Korea, you may seek consultation, dispute mediation, or report any infringement of your personal information rights to the following independent agencies. These organizations operate separately from Laight AI and provide neutral support for data subjects.
1) Personal Information Infringement Report Center (KISA)
For reporting privacy violations and receiving advisory consultation regarding the misuse of personal information.
Phone: 118 (no area code required)
Scope: Reporting, consultation, and guidance on personal information breaches
2) Personal Information Dispute Mediation Committee (KOPICO)
For civil-level mediation of disputes involving personal information, including collective disputes.
Phone: 1833-6972 (no area code required)
Scope: Mediation of individual and collective privacy-related disputes
3) Supreme Prosecutors' Office — Cybercrime Investigation Division
For reporting criminal matters related to personal information, including unlawful access, hacking, or data theft.
Phone: 1301 (no area code required)
4) Korean National Police Agency — Cyber Bureau
For reporting cybercrimes such as identity theft, illegal data collection, or unauthorized use of personal information.
Phone: 182 (no area code required)
In addition, if your rights or interests have been violated due to actions or omissions by a public agency in connection with your personal information, you may file an administrative appeal under the Administrative Appeals Act. For further details, please refer to the Central Administrative Appeals Commission at https://www.simpan.go.kr.
For inquiries that can be resolved directly with Laight AI, we strongly encourage you to first contact our privacy team at contact@laight.ai, and we will make our best efforts to address your concerns promptly.
11. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate properly, analyze traffic, and improve user experience. You may manage cookie preferences through your browser settings. For more details, please refer to our Cookie Policy.
12. Children's Privacy
Our Services are not directed to children under 16. We do not knowingly collect personal data from children. If we become aware of such data, we will delete it promptly.
13. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these third parties.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last Updated" date. Material changes will be notified via email or through prominent notice on our Services.
15. Meta Platform Compliance
In accordance with Meta's Developer Policies, we explicitly state that Meta-derived data is used only for the purpose of providing advertising performance analytics to the respective user. We do not sell, license, or purchase any Platform Data. Furthermore, we do not use Meta Platform Data to build, improve, or train any machine learning or AI models without explicit separate consent.
16. Contact Us
If you have questions or concerns about this Privacy Policy, please contact:
- Email: contact@laight.ai
- Postal Address: H101, Offices 904-905, Cheongsu 5-ro, Dongnam-gu,Cheonan-si, Chungcheongnam-do,Republic of Korea 31157
- Personal Information Protection Officer: Sungjoo Kang, sung.kang@laight.ai