Privacy Policy
Effective: November 2, 2026
Digitalnative (“we”), which runs BigbangOffice, handles personal information under the Korean Personal Information Protection Act and publishes this policy to protect it and to resolve concerns quickly.
1. What we collect and how
The website and the app have no sign-up. We receive personal information that you write or send yourself only through the website contact page, Help → Contact Us in the app, email sent to support@bigbangoffice.app, and sign-in to the operator’s admin console. We receive a contact form message only when you fill in the form, agree to the collection notice and send it. Separately, an access record of every request is kept automatically, as described under “Web server access log” below.
- Messages, required: type, subject and message; IP address; browser details (for messages from the app, the app’s connection details)
- Messages, optional: reply email
- Bug reports and questions: app version and OS (on the website only if you fill them in; the app adds them by itself)
- Email sent to support@bigbangoffice.app: the sender’s email address and display name, and the message
- Admin console (/admin) sign-in: signing in with a Google account stores its Google account identifier, email, name, profile picture address, language setting and sign-in session records. The admin console is for the operator; accounts without administrator rights cannot use its functions.
- Web server access log: every request from the website and the app (visits, downloads, update checks, app usage signals, messages, direct share signals) passes through our front web server. For each request, this server automatically writes to a file the IP address and port, time, request method and address, response code and size, processing time, connection type, and request and response headers (browser or app details, language, the page you came from and so on). The values of cookies and authentication headers are masked. Request bodies (message content, app signal content) and the messages exchanged inside a direct share signal connection are not recorded. The web server’s operation and error log can also contain IP addresses. Our statistics and the app server do not read this log.
2. Why we use it
We use this information only to:
- read and answer your messages and emails
- reproduce and check bugs
- block spam and abuse
- sign in to the admin console and check administrator rights
- web server access log: run the service, investigate failures and respond to abuse
3. How long we keep it and how we delete it
A message is kept until it is handled and deleted automatically 6 months after that. If you ask us to delete it, we do so without delay, whatever the period.
Mail exchanged with support@bigbangoffice.app (emails received and replies sent) is kept in a Google mailbox for 1 month and then deleted.
Admin console sign-in details are kept until you ask us to delete them. A sign-in session can no longer be used after 30 days.
The web server access log is split and compressed each time a file reaches 100 MiB. At most 10 split files are kept, and each is deleted automatically 90 days after it was split. If there are more than 10, the oldest is deleted even before 90 days. The file in current use is not split until it reaches 100 MiB, so records in it can stay longer than 90 days.
Deleting a message or sign-in details removes the record from our database; a deleted record cannot be brought back in any screen or service. The web server access log is deleted a whole file at a time.
4. Information we do not keep in statistics or the app server
The following is not kept in a form that can identify you in our statistics or the app server’s database. The front web server’s access log is separate and follows “Web server access log” above.
- Visit statistics: we count the pages viewed and the names of referring sites. To count daily visitors, we hash your IP address and browser details with a random value used for that day only and keep the result in the app server’s memory; that hash is never stored and is cleared when the day changes.
- App diagnostics: only when “Send usage and error diagnostics” is on in the app settings, we receive the app version, release channel, OS type, CPU architecture and what happened (app start, error, failed update step). No account or error text is received, the IP address is not put in diagnostic records, and those records are deleted after 30 days.
- App usage signal: while the app is running, it sends a short signal once an hour with only the OS type, release channel, CPU architecture, app version and the minutes since that app’s previous signal. The server keeps only how many signals arrived each hour and, to count the apps used in a day, 7 days and 30 days, how many arrived at each interval since the previous signal. No account or device identifier is received, and the app server uses the IP address in memory only to look up its country and, for one minute, to limit excessive requests; the app server does not store it.
- Requests such as update checks, fetching the AI model list policy and installer downloads: the app puts no account or device identifier in them. The app server uses the IP address in memory only to look up its country and, for one minute, to limit excessive requests; the app server does not store it.
- Direct backup sharing: when you send or receive a backup file with a share code, your IP address, connection details (IP address, port, DTLS encryption fingerprint), room number (the first 8 characters of the code) and connection time pass through our signaling server to link the two PCs. The signaling server program holds connection details in memory only while passing them to the other PC and does not store IP addresses or connection times. The front web server’s access log records this connection’s IP address and time like any other request, but not the connection details or room number. So that a used code cannot be used again, the program keeps the room number and expiry time in the app server’s memory until about 7 days after the share expires. The file travels directly between the two PCs, encrypted with DTLS; it does not pass through or get stored on our server.
- Country statistics: when a visit, installer download, update or app usage signal arrives, we look up only the country of the IP address and add it to hourly counts per country. The lookup checks a country list kept on our server (DB-IP Lite), so the IP address is not sent anywhere, and our statistics keep neither the address nor the result per person.
- Work you create in the app, what you exchange with the AI models you connect, API keys and web account details are stored on your PC, in the app’s data folder and the folders you choose (SQLite databases and files), and are not sent to our servers. API keys and web account passwords are encrypted with your operating system’s secure storage.
- App crash records: crash dumps the app writes when it stops unexpectedly stay on your PC and are not sent to our servers.
5. Sharing, processors and transfers abroad
We do not give personal information to third parties, except where a law specifically requires it or it is unavoidable to meet a legal obligation.
The website and server run on servers we manage ourselves. Only replies to messages and the support@bigbangoffice.app mailbox are entrusted to the companies below. Replies are sent from support@bigbangoffice.app; mail to and from that address is received and kept in a Google mailbox, and outgoing replies are delivered through SMTP2GO.
Both companies are outside Korea, so the information below is transferred abroad over the network when we send a reply or receive an email.
- Google LLC (United States): receives and keeps mail for support@bigbangoffice.app. Transferred: email addresses, display names, and the content of emails received and replies sent. Kept for 1 month. Contact: policies.google.com/privacy
- Sand Dune Mail Ltd (SMTP2GO, a New Zealand company; country of its sending servers: United States): delivers our reply emails. Transferred: the recipient’s email address and the reply’s subject and content. SMTP2GO keeps email headers (including recipient and subject) for 35 days, and the body of 1 in 1,000 emails for 35 days for abuse review, before deleting them. Contact: ticket@smtp2go.com
- If you do not want your information transferred abroad, you can send a message without a reply email. You then cannot get a reply by email.
6. Outside services you connect
The app connects to these services directly from your PC, not through our servers. What it sends is handled between you and each service, under that service’s terms and privacy policy. We do not receive or see it.
- AI models: your conversations and work are sent to the providers you connect (OpenAI, Anthropic, Google and others) with your own API key or account. With Ollama running on your PC, nothing leaves your PC.
- Web search and web tasks: search terms go to search services (DuckDuckGo, Bing, Brave Search with your key, and others). Actions on websites and posts to social media or blogs happen on those sites with the accounts you signed in with.
- Search model downloads: the search model files you choose are downloaded from Hugging Face (huggingface.co).
- Site icons: to show site icons in the web account list in Settings, the app sends the site address (domain) to Google’s icon service.
- Direct backup sharing connection check: to find the public IP address and port needed to link the two PCs, the app connects to Google’s STUN server (stun.l.google.com). Google receives the IP address, port and connection time; the share code and the file are not sent.
7. Your rights
You may at any time ask to see, correct, delete or stop the processing of your personal information, or withdraw your consent. Write to the address below with details that identify your message, such as the date and subject. We act on the request and reply within 10 days.
Someone acting for you may also make the request, with proof of the authorization.
8. Cookies
When you use the language link in the site header or footer, a cookie (bbo_lang) remembers your choice (Korean or English) for one year. We use no advertising or tracking cookies.
You can delete or block cookies in your browser settings. Without the cookie, the page language follows your browser language setting.
9. How we protect it
We take these measures to keep personal information safe:
- Messages can be read only with operator accounts that have administrator rights.
- The website and the app send data over HTTPS.
- We collect only what is needed and delete it automatically when the period ends.
- Each IP address can send at most 5 messages a minute.
10. Privacy contact
For questions about personal information, requests to see or delete it, complaints and remedies, contact:
- Business name: Digitalnative
- Representative: Gyugwang Lee
- Address:
- Team: BigbangOffice operations team
- Email: support@bigbangoffice.app
11. Remedies
For advice or dispute resolution about a privacy infringement, you can contact these Korean agencies:
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Supreme Prosecutors’ Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
12. Changes to this policy
This policy applies from November 2, 2026. It adds to the policy effective November 1, 2026 what passes through our signaling server and Google’s STUN server when you use direct backup sharing, and that the file itself does not pass through a server. It also states the access log of the front web server that every request passes through (IP address, requested address, time and more) and how that log is kept, and corrects the sentences that said this information is not stored so that they cover only our statistics and the app server. When it changes, we post the new version here with its effective date.