AI disclosure wording kit

0Legal background — Read without omitting the conditions 【Legal review】

1Initial support screen wording — Already included

The support page displays the following text above the chat window. Visitors can collapse the notice, but the “AI support notice” line remains visible, and response bubbles carry an “AI support agent” label.

The support page has Korean and English notices — browsers using other languages display the English notice (AI answers themselves are in the visitor's language). Tell us during setup if you want different wording — the two elements “AI answers” and “overseas transfer” must remain.

2Paragraph for the client's privacy policy Priority 1

Insert this into the “Outsourced personal data processing” and “Overseas transfers” sections of the client's privacy policy. It covers all items required for disclosure under Article 28-8 of the Personal Information Protection Act (data transferred, countries, timing, method, recipients and contact details, purpose, retention period, and how to refuse and the consequences). The recipient list must match the register (D-2).

【Outsourced personal data processing】 The company outsources personal data processing as follows to operate its AI support service. · Processor: AlienPeoples (support@alienpeoples.com) · Outsourced tasks: operating the AI support page (receiving inquiries · generating AI answers · retaining support records · forwarding requests to contact a staff member) · Sub-processors: Anthropic (answer generation) · Google (backup answer generation · data storage in the Seoul region · email delivery) · OpenAI (backup answer generation) · Retention: support records 90 days · staff contact requests 90 days, then automatic deletion (deleted without delay when the processing agreement ends) 【Overseas transfer of personal data】 The company transfers personal data overseas as follows to generate AI support answers. · Data transferred: messages entered into AI support (copies with strings resembling resident registration numbers, card numbers, bank account numbers, passwords, phone numbers and email addresses masked) · Destination countries: United States and others · Timing and method: sent via encrypted communication (HTTPS) each time a support message is sent · Recipients and contact details: Anthropic, PBC 【Contact details】 · Google LLC 【Contact details】 · OpenAI 【Legal entity and contact details】 (Anthropic normally answers; Google or OpenAI is used only during an outage) · Purpose: generating AI answers (recipients do not use this information to train AI models) · Retention and use: recipients retain data for abuse monitoring for up to 30 days (Anthropic and OpenAI) or 55 days (Google), then delete it (exceptions apply under each provider's policies, including suspected policy violations) · How to refuse and consequences: instead of AI support, contact 【Phone ○○○-○○○○ / Email ○○@○○】 for support without an overseas transfer. If you refuse, you cannot use the AI support page. · Legal basis: 【Legal review — choose consent / disclosure of outsourced processing and storage necessary to perform the contract】 【Overseas transfer of staff contact emails】 The company transfers personal data overseas as follows to forward submissions made through “Leave a message for a staff member” in AI support to the company's staff. · Data transferred: name (optional) · contact details (email or phone number — unmasked originals, needed for a reply) · submitted message · recent conversation (masked copy) · Timing and method: immediately upon submission, the processor's server sends an email via encrypted communication (the email contact is included in the message's “Reply-To” field so the staff member can reply directly) · Recipient and contact details: Google LLC (Gmail SMTP · email delivery) 【Contact details】 · Processing country 【Confirm — location of email infrastructure】 · Purpose: forwarding submissions to the company's staff · Retention and use: original submissions on the processor's server are retained for 90 days · email queue copies are automatically deleted after 30 days · sent emails remain in the company's staff mailbox and are deleted by the company (Google's retention of sent emails follows the sending account's policy) · How to refuse and consequences: contact 【Phone ○○○-○○○○】 without leaving contact details for support without an email transfer. Without leaving contact details, you cannot receive a reply from staff.

“Anthropic normally” is the current routing default. If it changes, we notify the client in advance together with the register (D-2).

3Paragraph for the client's terms

Article ○ (AI support) ① On the company's customer support page, generative artificial intelligence (AI) answers based on materials supplied by the company. ② AI answers provide guidance and may contain errors. Matters requiring confirmation, including prices, refunds and contracts, are subject to confirmation by the company's staff. ③ For inquiries AI cannot answer, leave your contact details and the company's staff will reply. ④ Content entered into AI support may be sent to overseas AI services to generate answers; see the privacy policy for details.

4“AI-generated” labels in handoff and transcript emails Planned · Not in the current template

Staff contact emails and conversation exports (CSV) contain both visitors' messages and AI answers. To prevent them from being mistaken for human-written answers, we plan to use the following labels — as of 2026-10-31, the handoff email template does not yet include the introductory sentence or “(AI)” labels below (only the CSV “Speaker” column currently uses this wording).

Whether email labeling is “a legal obligation in every case” depends on the assessment of who is covered and how outputs must be labeled (§0). We label them to prevent misunderstanding regardless of whether it is mandatory.