Privacy Policy

Effective October 27, 2026

CoNode (conode.net, app.conode.net and mcp.conode.net) is operated by Second Korea Inc. (주식회사 세컨드코리아). This policy explains what we collect, why, where it is stored, who it is shared with and how long we keep it.

What we collect

• Account: email address, name, password (stored only as a salted hash), language and time zone.
• Sign-in with Google or GitHub: if you choose it, the provider account ID, email address and name that the provider shares with us.
• Workspace content: the spaces, tables, fields and records that you, your teammates or your AI agents store, including every record version.
• AI connections: the AI app name and client ID, the permissions you granted, and when the connection was created, last used and expires.
• Activity log: who changed what and when, whether from the web or from which AI agent, including requests that were refused.
• Technical data: session cookies and the network information (such as IP address) that our hosting provider processes to deliver and protect the service.

What we do not collect

• We do not receive your conversations with your AI app. CoNode only receives the requests your AI agent sends to read or change your tables.
• We do not sell personal data, show advertising, or use your workspace content to train AI models.

How we use it

• To provide the service: sign-in, workspaces, permissions, AI connections, change history and support.
• To send service email such as sign-up codes, password resets and invitations. We do not send marketing email without your consent.
• To keep the service secure, prevent abuse and meet legal obligations.

Where it is stored and who processes it

• Cloudflare, Inc. hosts the service, its database and service email. Data may be processed in Cloudflare data centers outside your country.
• Google LLC and GitHub, Inc. only if you choose to sign in with them.

Who can see your data

• Members of your workspace, according to their roles and space permissions.
• AI agents you connect, only within the permissions you granted to that connection. Once your AI app receives data, that AI provider's own privacy policy also applies.
• Authorities, when the law requires us to disclose it.

How long we keep it

• Account data is kept while your account exists. Workspace content, record versions and the activity log are kept while the workspace exists.
• Sign-in sessions end after 14 days without use. Sign-up and password reset codes expire within hours.
• When you ask us to delete your account or workspace, we delete it within 30 days, except for records we must keep by law.

Security

• All traffic uses HTTPS. Passwords are hashed with PBKDF2 and sign-in sessions are stored only as hashes.
• Each AI connection has its own permissions and can be paused or revoked at any time from the web.

Your rights

• You can view and correct your profile in the app, and ask us to access, export or delete your data by emailing support@conode.net.
• CoNode is a business service and is not intended for children under 14.

Contact and changes

• Privacy questions and requests: support@conode.net, Second Korea Inc.
• If we change this policy, we will update this page and the effective date, and notify workspace owners of significant changes.