Privacy Policy
Anthropic added a new Korea-specific privacy addendum disclosing that it now collects identity-verification data (name, birthdate, sex, national/foreign-resident status, and a duplicate-check ID) from users in South Korea, shares that data with the Korea Credit Bureau domestically and with a US company (Persona) internationally for fraud and identity checks, and that Persona keeps this data for three years. Anthropic also switched its Korean legal representative from Bae, Kim & Lee to Kim & Chang and updated two internal settings-page links (no functional change).
New collection of sensitive ID data from Korean users
If you're in South Korea, Anthropic now collects sensitive personal details about you — your name, birthdate, sex, whether you're a national or foreign resident, and a special verification ID — that weren't collected before. This is kept until you delete your account.
“Name, birthdate, sex, native-foreigner-code, and DI (duplication information)”
What you can do — If you're a Korean user going through identity verification, you can email privacy@anthropic.com with questions about what's collected before proceeding.
Identity data now shared with a credit bureau and a US company
Your identity-verification data is now shared with the Korea Credit Bureau domestically and sent to Persona, a US-based verification company, for fraud checks — new third parties that weren't disclosed before.
“Recipient's Name (Contact Information):** Persona (privacy@withpersona.com)”
What you can do — You can opt out of the overseas transfer by emailing privacy@anthropic.com and dpo@anthropic.com, though Anthropic says this may prevent it from providing you some services.
Verification data kept by a third party for 3 years
Persona, the US company handling identity checks, keeps your name, birthdate, sex, and verification ID for three years, separate from Anthropic's own account-deletion timelines.
“Period of Retention and Use by Recipient:** 3 years”
| 101 | 101 | - Right to know: the right to know what personal data Anthropic processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it. |
| 102 | 102 | - Access & data portability: the right to request a copy of the personal data Anthropic processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information. |
| 103 | 103 | - Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to [delete individual conversations](https://support.anthropic.com/en/articles/8230524-how-can-i-delete-or-rename-a-conversation), which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days. Learn more [here](https://privacy.anthropic.com/en/articles/10023548-how-long-do-you-store-personal-data). |
| 104 | 104 | - Correction: the right to request that we correct inaccurate personal data Anthropic retains about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request and we will make a reasonable effort to correct this information-but due to the technical complexity of our large language models, it may not always be possible for us to do so. |
| 105 | 105 | - Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications. |
| 106 | 106 | - Restriction: the right to restrict our processing of your personal data in certain circumstances. |
| 107 | - Withdrawal of consent: Where Anthropic's processing of your personal data is based on consent, you have the right to withdraw your consent. For example, you can disconnect your health app integration and withdraw your consent in your [settings](https://claude.ai/redirect/website.v1.59123ece-ab25-4b41-895b-1a1025bd7240/settings/connectors). The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. | |
| 107 | - Withdrawal of consent: Where Anthropic's processing of your personal data is based on consent, you have the right to withdraw your consent. For example, you can disconnect your health app integration and withdraw your consent in your [settings](https://claude.ai/redirect/website.v1.fcdad973-8067-426a-a1be-ed0bbb8a3f98/settings/connectors). The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. | |
± CHANGEDPrivacy settings link updated The web addresses for your account privacy settings pages were updated. The settings themselves work the same as before. | ||
| 108 | 108 | - Automated decision-making: Anthropic does not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services). |
| 109 | 109 | - Sale & targeted Anthropic marketing of its products and services: Anthropic does not "sell" your personal data as that term is defined by applicable laws and regulations. You can opt-out of sharing your personal data for targeted advertising to promote our products and services, and we will honor global privacy controls. To learn more, [click here](https://www.anthropic.com/legal/cookies). |
| 110 | 110 | |
| 111 | Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your [Privacy Settings](https://claude.ai/redirect/website.v1.59123ece-ab25-4b41-895b-1a1025bd7240/new). | |
| 111 | Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your [Privacy Settings](https://claude.ai/redirect/website.v1.fcdad973-8067-426a-a1be-ed0bbb8a3f98/new). | |
| 112 | 112 | |
| 113 | 113 | ## 5\. Data Transfers |
| 114 | 114 | |
| 115 | 115 | Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area ("EEA") and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. You can find more details about the [affiliates](https://trust.anthropic.com/faq) and [third parties](https://trust.anthropic.com/subprocessors) we transfer data to, including their locations, in our Trust Center. |
| 116 | 116 | |
| 117 | 117 | Where Anthropic transfers information outside the EEA or the UK, we ensure it benefits from an adequate level of data protection by relying on: |
| 368 | 368 | Please keep in mind that these rights are not absolute and may not apply in certain circumstances. For example, in certain cases we may continue to process and retain data regardless of your request for deletion, objection, blocking or anonymisation, in order to comply with legal, contractual and regulatory obligations, safeguard and exercise rights, including in judicial, administrative and arbitration proceedings and in other cases provided for by law. |
| 369 | 369 | |
| 370 | 370 | International Data Transfers. You acknowledge that Anthropic is a company based and headquartered in the United States. Any information we hold about you will be transferred to, used, processed, and stored in the United States and other countries and territories, which may not have data privacy or data protection laws equivalent to those in your country or territory. For the proper operation of the Services, Anthropic needs to carry out international transfers of personal data. In the case of Brazil, we will rely on standard contractual clauses (SCCs) for our data transfers where required and in instances where they are not covered by an adequacy decision. These SCCs have been approved by the Brazilian Data Protection Authority (ANPD), which is the "competent supervisory authority" for these transfers, as governed by Brazilian Data Protection Laws. You can view the SCCs adopted by the ANPD [here](https://www.in.gov.br/en/web/dou/-/resolucao-cd/anpd-n-19-de-23-de-agosto-de-2024-580095396). |
| 371 | 371 | |
| 372 | 372 | ### Supplemental Disclosures for Residents of the Republic of Korea |
| 373 | 373 | |
| 374 | Domestic Representative in the Republic of Korea | |
| 374 | This section applies to the extent that Anthropic is subject to the Personal Information Protection Act ("PIPA"), and supplements the information in the Privacy Policy. This is an addendum to the Privacy Policy and should be read in conjunction with the Privacy Policy. In case of any inconsistency between the Privacy Policy and this Addendum, this Addendum prevails for users in the Republic of Korea. This Addendum may be amended or updated from time to time. | |
+ ADDEDNew addendum added for South Korean users A new section was added explaining that Korean users are covered by a special addendum under South Korea's Personal Information Protection Act (PIPA), which overrides the main policy for those users if the two conflict. | ||
| 375 | 375 | |
| 376 | **Items of Personal Data Collected and Purpose of Use** | |
| 377 | ||
| 378 | In addition to "1. Collection of Personal Data", we collect and use your information as follows: | |
| 379 | ||
| 380 | - **Purpose:** Identity verification, Fraud and abuse monitoring | |
| 381 | - **Items of Data:** Name, birthdate, sex, native-foreigner-code, and DI (duplication information) | |
+ ADDEDNew identity-verification data collected from Korean users For users in South Korea, Anthropic now collects your name, birthdate, sex, a code showing whether you're a Korean national or foreign resident, and a 'duplication information' (DI) ID, to verify your identity and check for fraud. This is kept until your account is deleted. | ||
| 382 | - **Period of retention and use:** Until account deletion | |
| 383 | ||
| 384 | **Delegation of Processing of Personal Data** | |
| 385 | ||
| 386 | Anthropic delegates the processing of personal data as described [here](https://trust.anthropic.com/subprocessors) and below, and the delegatees may process personal data according to the purpose of the delegation. | |
| 387 | ||
| 388 | - **Korea Credit Bureau:** Fraud and abuse detection and identity verification | |
+ ADDEDNew third parties process Korean users' data Anthropic now discloses it delegates fraud/identity-verification processing to the Korea Credit Bureau, and delegates domestic-representative duties to the law firm Kim & Chang. | ||
| 389 | - **Kim & Chang:** Assisting with the domestic representative related duties | |
| 390 | ||
| 391 | **Overseas Transfer of Personal Data** | |
| 392 | ||
| 393 | Anthropic delegates the processing of personal data to [affiliates](https://trust.anthropic.com/faq) and [third parties](https://trust.anthropic.com/subprocessors), all of whom are located overseas. In addition, Anthropic transfers personal data overseas as follows: | |
| 394 | ||
| 395 | - **Recipient's Name (Contact Information):** Persona (privacy@withpersona.com) | |
+ ADDEDIdentity data sent to a US company for verification Anthropic now discloses that it sends Korean users' name, birthdate, sex, national/foreign status code, and DI to Persona, a US identity-verification company, which keeps the data for three years. Users can ask Anthropic not to transfer their data overseas, though this may limit access to some services. | ||
| 396 | - **Country to which Personal Data to be Transferred:** United States | |
| 397 | - **Items of Personal Data to be Transferred:** Name, birthdate, sex, native-foreigner-code, and DI (duplication information) | |
| 398 | - **Recipient's Purpose of Use:** Fraud and abuse detection and identity verification | |
| 399 | - **Period of Retention and Use by Recipient:** 3 years | |
| 400 | - **Legal Basis for Overseas Transfer:** PIPA Article 28-8(1)(iii) delegation | |
| 401 | ||
| 402 | Following collection, personal data is transferred to the overseas recipients listed below from time to time, as necessary, via a dedicated network. You may have the right to request that your personal data not be transferred overseas as described above. If so, you may request this by email us at [privacy@anthropic.com](mailto:privacy@anthropic.com) and contact our Data Protection Officer at [dpo@anthropic.com](mailto:dpo@anthropic.com). However, in doing so, Anthropic may not be able to provide you with all or any of the services we make available through our website. | |
| 403 | ||
| 404 | **Domestic Representative in the Republic of Korea** | |
| 405 | ||
| 376 | 406 | The domestic representative of Anthropic PBC for data protection and related regulatory purposes under Article 31-2 of the Personal Information Protection Act and Article 32-5 of the Act on Promotion of Information and Communications Network Utilization and Data Protection, Etc. in the Republic of Korea is as follows: |
| 377 | 407 | |
| 378 | 408 | Entity Name and Representative: Anthropic Korea, Limited (Representative Patrick Azubike Ekeruo) |
| 379 | 409 | |
| 380 | 410 | Registered Address: (Yeoksam-dong), 41F, 152 Teheran-ro, Gangnam-gu, Seoul, South Korea |
| 381 | 411 | |
| 382 | Telephone: \[+82-2-6252-2080\] | |
| 412 | Telephone: +82 2 734 0940 | |
± CHANGEDKorean legal representative changed Anthropic's designated privacy representative in South Korea changed from the law firm Bae, Kim & Lee to Kim & Chang, with a new phone number and email address. | ||
| 383 | 413 | |
| 384 | Email: \[anthropicprivacy@bkl.co.kr\] | |
| 385 | ||
| 386 | Data Processors: | |
| 387 | ||
| 388 | <table><tbody><tr><th><strong>Trustees and Contacts</strong></th><td>Bae, Kim & Lee LLC (02-3404-0001)</td></tr><tr><th><strong>Entrusted Data</strong></th><td>Name, ID, phone number, email, address, and other information that you may provide to the domestic representative</td></tr><tr><th><strong>Purpose</strong></th><td>Assisting with the domestic representative duties</td></tr><tr><th><strong>Recipient Location</strong></th><td>South Korea</td></tr><tr><th><strong>Retention period</strong></th><td>The period necessary to process your request</td></tr><tr><th><strong>Times and methods of transfer</strong></th><td>Telephone, text, or email</td></tr></tbody></table> | |
− REMOVEDOld Bae, Kim & Lee data-processor table removed The previous table describing how Bae, Kim & Lee handled your name, ID, phone number, email, and address for domestic-representative purposes was removed, replaced by the new Kim & Chang delegation entry. | ||
| 414 | Email: anthropic\_privacy@kimchang.com | |