Carrotly ("we", "our", "the service") is a personal AI work assistant. This page explains what information we collect when you use it, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
Information we collect
- Your email address, used to create and identify your account.
- The content of files you upload — documents, lecture materials, and images you attach or add to the service — including the text extracted from them.
- Your conversation history — the prompts you send and the responses you receive.
- Your IP address, collected when you use the login-free trial (file analysis, AI chat, etc.), for abuse prevention.
Why we collect it
We use this information to:
- Provide and operate the service — authenticate you, save your files and deadlines, and keep your conversation history available across devices.
- Generate AI-powered analysis you request — summarizing documents, extracting deadlines, drafting answers to expected questions, and similar features.
Who we share it with
We do not sell your data. We share it only with the service providers that make Carrotly work:
- OpenAI — receives the text of your prompts, attached documents, and images so it can generate the AI analysis and responses you ask for. This processing happens in the United States, which is also a transfer of your data outside the EU/EEA — see "International data transfers" below.
- Supabase — our database and authentication provider, used to store your account, files, and conversation history. Your data is hosted in Supabase's Northeast Asia (Seoul), South Korea region.
- Polar — our payment processor, used to handle Pro subscription checkout and billing. Polar receives the information needed to process your payment (such as your email address); we do not send them your files or conversation history.
- Vercel Analytics — collects anonymous page-view statistics to help us understand which pages are visited. It doesn't use cookies and doesn't identify individuals.
How long we keep it
- Your account data (email, files, deadlines) is kept until you delete your account.
- On the free plan, conversation history is kept for 30 days and then automatically deleted. Pro accounts have no automatic deletion — conversation history is kept until account deletion, same as everything else.
- IP addresses collected for login-free trial abuse prevention are automatically deleted after 30 days.
International data transfers
Your data is stored and processed in South Korea (Seoul), where Supabase hosts our database — this is outside the EU/European Economic Area (EEA). If you're located in the EU/EEA, this means your personal data is transferred to a third country.
We rely on the Standard Contractual Clauses (SCCs) included in our Data Processing Agreement (DPA) with Supabase as the legal basis for this transfer. The same applies to the transfer to OpenAI (see above), which processes data in the United States.
If you have questions about these transfers, contact us at the address below.
Your rights
You can request a copy of the data we hold about you at any time by emailing us at the address below — we'll respond as soon as we can.
To delete your account, use the "Delete Account" button at the bottom of the sidebar once you're logged in — it immediately and permanently deletes your uploaded files, lecturer or professor materials, conversation history, and your login credentials (email, sign-in info) themselves, with no need to email us first. If you'd rather have us do it for you, email us and we'll delete it manually.
If you have an active Pro subscription, deleting your account does not cancel it — Polar (our Merchant of Record, see Terms of Service) handles billing independently of your Carrotly login, so we have no way to cancel it on your behalf. You'll need to cancel your subscription first (via the link in the receipt/confirmation email Polar sent you, or by emailing us) before we can delete your account.
Contact
Questions about this policy, or requests to access or delete your data, can be sent to kcw022@naver.com.