Privacy Policy

The Company processes personal information for the purposes below. It does not use the personal information for any purpose other than these; if the purpose of use changes, the Company takes the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. ①Responding to service adoption inquiries and consultations: receiving sales and adoption inquiries, and providing consultation, guidance, demos, and proposals
2. ②Operating the website and handling inquiries: providing website content, and receiving and responding to customer inquiries
3. ③Improving and reliably operating the service: improving service quality by analyzing access frequency and usage, preventing misuse, and ensuring security and stability

The Company processes only the minimum information required for its business, in the following categories.

[Automatically collected information] In the course of website use, the following may be generated and collected automatically: IP address, cookies, access date and time, website usage records (pages visited, access path), device information (OS, browser type and version), and access logs.

[Sensitive and unique identifying information] The Company does not collect or process sensitive information under Article 23 of the Personal Information Protection Act (such as ideology, beliefs, or health) or unique identifying information under Article 24-2 of the same Act (such as resident registration numbers).

[Personal information of children under 14] The Company does not provide services to children under the age of 14 and does not collect or use their personal information. If any such information is found to have been collected, it is destroyed without delay.

[Methods of collection] ① Adoption inquiries and consultations through the website inquiry form, email, or phone ② Information entered directly by the user during customer support ③ Automatic generation and collection by automated tools (cookies, logs) in the course of service use

The Company processes and retains personal information within the retention and use period required by law or the period consented to by the data subject.

Personal information whose retention period has elapsed or whose processing purpose has been achieved is destroyed without delay (see Section 8).

The Company processes the personal information of data subjects only within the scope of the purposes set out in Section 1, and provides personal information to third parties only where Article 17 or 18 of the Personal Information Protection Act applies, such as with the data subject's consent or under specific provisions of law.

The Company currently does not provide the personal information of data subjects to any third party.

To provide its services reliably, the Company entrusts personal information processing tasks to external parties as set out below. As all entrusted parties (processors) are located outside Korea, the details of the cross-border transfer (destination country, items, retention and use period, etc.) are provided together in Section 6.

In accordance with Article 26 of the Personal Information Protection Act, when entering into an entrustment contract the Company specifies in the contract or other documents matters such as the prohibition of processing personal information beyond the purpose of the entrusted tasks, technical and administrative safeguards, restrictions on re-entrustment, management and supervision of the processor, and liability including damages; and supervises whether the processor handles personal information safely. If the entrusted tasks or the processors change, the Company will disclose the changes through this Privacy Policy.

To provide its services and respond to inquiries, the Company entrusts personal information processing tasks to overseas processors as set out below. Pursuant to Article 28-8(1)(3) of the Personal Information Protection Act, the Company discloses the following matters regarding the cross-border transfer in this Privacy Policy, which serves in place of separate consent to the transfer.

Time and method of transfer: the information is transmitted over information and communications networks whenever a data subject accesses the website or submits an inquiry or consultation. Details of each transferee's processing of personal information are available in its privacy policy (Google: policies.google.com/privacy, Cloudflare: cloudflare.com/privacypolicy, Slack: slack.com/trust/privacy).

Data subjects may refuse collection via cookies (Google Analytics) in accordance with Section 10; in that case, the use of some services may be limited.

1. ①A data subject may, at any time, request access to, correction of, deletion of, or suspension of the processing of their personal information.
2. ②These rights may be exercised in writing, by email, or by other means, and the Company acts on them without delay.
3. ③If a data subject requests the correction or deletion of an error in their personal information, the Company does not use or provide that personal information until the correction or deletion is complete.
4. ④Rights may be exercised through the data subject's legal representative or an authorized agent; in that case, a power of attorney must be submitted.
5. ⑤Requests to access or to suspend the processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act, and requests for correction or deletion may be restricted where other statutes require the collection of the personal information concerned.

These rights may be exercised through the Privacy Officer named in Section 12.

When personal information becomes unnecessary (for example, because the retention period has elapsed or the processing purpose has been achieved), the Company destroys it without delay.

• Destruction procedure: the Company identifies the personal information subject to destruction and destroys it with the approval of the Privacy Officer.
• Destruction method: electronic files are deleted using technical means that make the records unrecoverable, and paper documents are shredded or incinerated.

In accordance with Article 29 of the Personal Information Protection Act and the Standards for Measures to Ensure the Safety of Personal Information, the Company takes the following security measures.

• Administrative measures: establishing and implementing an internal management plan, minimizing the number of staff who handle personal information, and providing regular training
• Technical measures: managing access privileges to the personal information processing system and controlling access, encrypting important information in storage and in transit, installing and updating security programs, retaining access logs and preventing their forgery or alteration, and operating intrusion prevention and detection systems
• Physical measures: controlling access to areas such as the server room and data storage room

1. ①The Company may use cookies and other automatic collection devices to provide customized services and analyze usage.
2. ②A cookie is a small piece of information that the website server sends to the user's browser, and it is stored on the user's device.
3. ③Users may refuse to accept cookies, or delete them, through their web browser settings. However, if cookie storage is refused, some services may not function properly.
4. ④The Company uses Google Analytics 4, Google's web analytics tool, to analyze website usage. This tool uses cookies to collect users' website usage information (such as pages visited, access paths, and device and browser information) in de-identified, aggregated form. Users may block cookies in their browser settings or refuse collection by installing the opt-out tool provided by Google (tools.google.com/dlpage/gaoptout); for details, see Google's Privacy Policy (policies.google.com/privacy).

• Behavioral information: the Company does not collect or use behavioral information for purposes such as online targeted advertising.
• Automated decision-making: the Company does not make decisions by means of fully automated systems (including profiling) that significantly affect the rights or obligations of data subjects, within the meaning of Article 37-2 of the Personal Information Protection Act. If the Company introduces such decision-making in the future, it will disclose the criteria, procedures, and manner of processing personal information, and will explain how to exercise rights such as refusal and requests for an explanation.

The Company designates a Privacy Officer, as set out below, to take overall responsibility for personal information processing and to handle data subjects' complaints and remedies related to that processing.

Privacy Officer

Hwayong Shin

Contact (email)

[email protected]

Data subjects may contact the Privacy Officer with any inquiries, complaints, or requests for remedy related to personal information protection that arise while using the Company's services, and the Company responds to and handles them without delay.

To obtain remedies for personal information infringement, data subjects may apply to the bodies below for dispute mediation or consultation.

1. ①This Privacy Policy takes effect on June 25, 2026.
2. ②If any additions, deletions, or corrections are made to this Privacy Policy, the changes and the reasons for them will be announced through the website's Privacy Policy page at least 7 days before they take effect.