2026-05-08

Korean PIPA and Card Management Apps — What's Legal

Korean PIPA boundaries for card management and AI use. Why ZDR matters.

Korean PIPA (Personal Information Protection Act) and Card Management Apps — What's Legal

A business card is "public info", but the moment it's digitized, PIPA applies.

PIPA Key Provisions

  • Collection/use consent: Cards themselves count as implied consent (2021 guidelines)
  • Third-party transfer: Explicit consent required → sending cards to external AI is a gray zone
  • Purpose limitation: Use beyond sales = violation
  • Deletion right: Full deletion within 30 days on user request

What Happens If AI Trains on Your Cards

Generic ChatGPT/Gemini APIs may use input for model improvement. That risks:

  • Card data ending up in training sets
  • Unintended exposure in model outputs
  • PIPA possibly classifying this as "purpose-limit violation"

ZDR Is the Answer

OpenRouter Zero Data Retention:

  • Discarded immediately after inference
  • Not used for training
  • No logs retained

NameGood routes every AI call through ZDR mode.

Checklist — Is Your Card App PIPA-Compliant?

  • Can you export your data (right to portability)
  • Account deletion removes cards (right to deletion)
  • No AI-training reuse (purpose limitation)
  • Explicit consent for any third-party transfer
  • Korean data center or GDPR-equivalent transfer (cross-border)

Bottom Line

Before "what features", ask: "Will my cards end up in AI training data?"

NameGood with ZDR →

Turn cards into relationships with AI

NameGood automates deep person analysis, message generation, and relationship ROI tracking from a single card. ✦120 credits free, no monthly fee.

Get started free →

More articles