Skip to content
Policies and information

Data Subject Access Request (DSAR)

Last updated: May 16, 2026 (Effective date)

On this page
  1. 1. Rights you can exercise
  2. 2. How to make a request
  3. 3. Identity verification
  4. 4. Processing time
  5. 5. Grounds for refusal
  6. 6. Fees
  7. 7. Appeals
  8. 8. Data Protection Officer (DPO)
  9. 9. Contact

This page explains how to exercise your rights as a Data Subject under the Republic of Korea's Personal Information Protection Act (PIPA), the EU GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

  • Right of Access — see what personal data we hold about you.
  • Right to Rectification / Erasure — correct or delete inaccurate or unnecessary data.
  • Right to Restriction of Processing — temporarily pause specific processing.
  • Right to Withdraw Consent — for optional processing.
  • Right to Data Portability — export your KB content in a portable format.
  • Right to Object — to specific processing under GDPR.
  • Right not to be subject to Automated Decision-Making (GDPR Art. 22) — Servan does not currently make legally significant automated decisions about users.
  • Right to Damages — through the Personal Information Dispute Mediation Committee (Korea) or your local court.
  • Data download: Profile → Download data → ZIP of KB and account data.
  • Account deletion: Profile → Account → Delete account.
  • Consent management: Profile → Privacy → Disable analytics / AI processing.
  • Disconnect integration: Workspace → Integrations → Disconnect (OAuth tokens immediately revoked).
  • To: support@tyrannoapartment.com
  • Subject: [DSAR] <Request type> — e.g. [DSAR] Access request
  • Body: signup email, right being exercised, details of the request

To prevent fraudulent requests we verify that the requester is the actual Data Subject. Identity verification is a mandatory step for the protection of personal data.

  • Step 1: send the request from the email address registered to the account.
  • Step 2: we send a verification link to that email.
  • Step 3: you click the link to confirm.
  • Step 4: if additional verification is required, we may verify limited identity attributes (name, date of birth) — sensitive data is discarded immediately after use.

For requests made through a representative, please provide a power of attorney and the representative's ID.

  • PIPA (Korea): within 10 days of receipt.
  • GDPR (EU/EEA): within 30 days of receipt (extendable up to 60 days for complex requests, with prior notice).
  • CCPA (California): within 45 days (extendable by another 45 days).
  • The processing period starts from the moment identity verification is completed.

We may refuse or partially fulfill a request, with reasons, when:

  • The information is required to be retained by law (e.g. E-Commerce Act transaction records).
  • Fulfilling the request would endanger another person's life, body, or property.
  • The request is manifestly unfounded, repetitive, or excessive (GDPR Art. 12).
  • Identity verification has not been completed.

Rights are exercised free of charge in principle. For manifestly unfounded or excessive requests we may charge a reasonable fee or refuse the request.

If you disagree with our handling, you may file a complaint with:

  • Personal Information Protection Commission (Korea): privacy.go.kr / 1833-6972
  • Personal Information Infringement Reporting Center: privacy.kisa.or.kr / 118
  • Personal Information Dispute Mediation Committee: kopico.go.kr
  • EU/EEA: your local Data Protection Authority (DPA)
  • California: California Privacy Protection Agency (cppa.ca.gov)
  • DPO Name: GiYeong UM
  • Email: support@tyrannoapartment.com

Email: support@tyrannoapartment.com (subject [DSAR])

Note: This document is provided as general guidance. For specific legal advice, please consult a qualified attorney.

Back to top