Keasy — Privacy Policy

Last updated: 13 July 2026

Keasy ("the extension") is a browser extension that helps Korean Air employees plan staff (ZED) travel. It shows a seat-availability calendar for a chosen route and cabin, the destination's weather forecast, and an optional AI ranking of candidate trips. This policy explains exactly what data the extension touches and where it goes.

The short version

• The extension has no backend server of its own and performs no analytics or tracking. The developer does not receive, store, or have access to any of your data.
• Data is only ever sent to the services required to make a feature work: Korean Air's ZED system, Google Cloud (Vertex AI), and OpenWeather.
• Your data is never sold or shared for advertising or any purpose unrelated to the extension's function.

What data the extension accesses, and why

1. Your ZED session (cookies)

To load seat availability and your trip listings, the extension makes requests to zed.koreanair.com using your existing signed-in ZED session cookies. These cookies are sent only back to zed.koreanair.com — the same server that issued them. The extension does not read, copy, or transmit your cookies anywhere else.

2. Your employee number

On zed.koreanair.com, the extension reads your employee number from the page (where ZED itself already stores it after you log in). It is kept locally in the browser's extension storage and included in requests to the ZED "My Trips" API so ZED can return your own listings. It is not sent to the developer or to any third party other than ZED.

3. Trip and route information (optional AI ranking)

If you use the optional AI ranking feature, the extension sends the candidate trips' airport codes, cabin class, and seat-availability counts to Google Cloud Vertex AI (Gemini) to rank them. No names, contact details, payment information, or other passenger data are included — only itinerary and seat figures needed for the ranking. Authentication for this call uses a Google OAuth token obtained through your browser; the token is held in memory for the session and is not stored persistently or shared.

4. Destination weather

To show the forecast, the extension sends the destination airport's city name (not your location) to OpenWeather's public API. Your own device location is never accessed or transmitted.

5. Local configuration

Non-secret runtime configuration (the Google Cloud project and model to use) is fetched from an internal Korean Air address and cached in the browser's local extension storage. No personal data is contained in it.

Data storage and retention

The only data stored on your device (via the browser's chrome.storage.local) is your employee number and the non-secret runtime configuration. This data never leaves your browser except as described above, and it is removed when you uninstall the extension or clear its storage.

Data we do not collect

The extension does not collect or transmit your browsing history, page content, keystrokes, mouse activity, device location, health data, financial or payment data, or personal communications.

Third-party services

Requests made to provide the features above are subject to the privacy policies of those services:

• Korean Air ZED (zed.koreanair.com)
• Google Cloud / Vertex AI — https://policies.google.com/privacy
• OpenWeather — https://openweather.co.uk/privacy-policy

Changes to this policy

If this policy changes, the "Last updated" date above will be revised.

Contact

Questions about this policy or the extension's data handling can be sent to 허공이 at lambrosopos@gmail.com.