Privacy Notice

ComePass Agent Information Service (https://agents.comepass.xyz) provides source-verified Korean company information for AI agents and developers without user accounts, cookies, or login sessions.

1. What We Collect (Request Telemetry)

To measure service demand by request category, each incoming request records only the following fields in the events table:

• Timestamp (ts): Request time in UTC ISO-8601 format.
• Path & Status (route, status, module, class): Normalized URL path (without query strings), HTTP status code, target module ID, and traffic class (e.g., agent_user, mcp_call, api_call, ai_search_crawler, ai_training_crawler, search_engine, human, internal, unknown_bot).
• Bot / Client Family (ua_family): Sanitized family identifier only (e.g., chatgpt-user, claude-user, browser, api-client, mcp-client).
• Weekly Rotating Pseudonymous Key (client_key): One-way SHA-256 hash sha256(class | ua_family | ip | YYYY-Www | TELEMETRY_SALT) that automatically rotates every UTC ISO week (Monday–Sunday).
• Referer Domain (referer_host): Hostname of the HTTP Referer header only (path and query parameters are stripped; null if absent).

2. What We Do Not Collect or Store

• Raw IP addresses: Client IP is read transiently in memory solely to compute the weekly client_key hash and is never written to storage or logs.
• Full User-Agent strings: Only the short ua_family token is stored.
• Cookies or session identifiers: This service sets no cookies and requires no login.
• Queried business registration numbers: Korean 10-digit business registration numbers submitted to /api/v1/kr-business-status or the kr_business_status MCP tool are forwarded on demand to the National Tax Service API and are never stored in events or cached.

3. Retention Period

• 90-day event retention: Rows in events older than 90 days are automatically purged by a daily scheduled job (0 3 * * * UTC).
• Daily rollups (daily_rollup): Aggregated daily counts (date, module, class, demand units, and daily unique client counts) contain no individual client keys and are retained beyond 90 days.

4. Public Data Sources & Contact

• Public Sources: Corporate filings and financial statements from Korea's Financial Supervisory Service (OpenDART); business registration status from Korea's National Tax Service (NTS).
• Contact: {CONTACT_EMAIL}