Privacy Policy

Article 1 (Purposes of Processing Personal Data)

The Company processes personal data for the purposes set out below. Personal data is not used for any purpose other than those listed, and if the purpose of use changes, the Company will take the necessary measures, including obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Providing information about promotions, upcoming events, and solutions
2. Providing and advising on hardware and software products or services
3. Producing statistics and analyses of service usage
4. Improving the service environment based on customer insights

Article 2 (Processing and Retention Period of Personal Data)

The Company retains and processes personal data within the period of use consented to by the data subject at the time of collection. Unless there is an obligation to preserve the data under relevant laws, the data may be retained and used until the purpose of collection and use has been achieved.

If you have purchased a product or service from the Company, we may continue to retain your personal data for the period necessary to provide customer service, or for compliance purposes (for example, to meet record-keeping requirements).

However, in the following cases the data is retained until the relevant circumstance ends.

1. Where an investigation or inquiry is underway due to a violation of relevant laws — until that investigation or inquiry concludes
2. Where claims or obligations arising from use of the website remain outstanding — until those claims or obligations are settled

Article 3 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

1. Data subjects may at any time exercise rights against the Company, including the right to access, correct, delete, or suspend the processing of their personal data.
2. The rights under paragraph 1 may be exercised in writing, by email, or by facsimile in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on such requests without delay.
3. The rights under paragraph 1 may also be exercised through a legal representative or an authorized agent. In that case, a power of attorney in the form prescribed in Annex 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
4. Requests to access personal data or to suspend its processing may be restricted under Article 35(5) and Article 37(2) of the Personal Information Protection Act.
5. A request to correct or delete personal data may not be made where other laws expressly require that the personal data be collected.
6. When a data subject requests access, correction, deletion, or suspension of processing, the Company verifies that the requester is the data subject or a duly authorized representative.

Article 4 (Categories of Personal Data Processed)

The Company processes the following categories of personal data for the purpose of providing goods or services and conducting marketing activities.

1. Required: mobile phone number, user ID, device identifier (UUID)
2. Optional: name, email address, company name, department name

Article 5 (Procedures and Methods for Destroying Personal Data)

1. When personal data becomes unnecessary — for example because the retention period has elapsed or the purpose of processing has been achieved — the Company destroys it without delay.
2. Where personal data must continue to be preserved under other laws even though the consented retention period has elapsed or the purpose of processing has been achieved, the Company moves that data to a separate database or stores it in a different location.
3. The procedures and methods for destroying personal data are as follows.
   • Destruction procedure
     The Company identifies the personal data for which grounds for destruction have arisen and destroys it with the approval of the Company's data protection officer.
   • Destruction method
     Personal data recorded and stored in electronic file form is destroyed so that the records cannot be recovered, and personal data recorded and stored on paper is shredded or incinerated.

Article 6 (Measures to Ensure the Security of Personal Data)

The Company takes the following measures to ensure the security of personal data.

1. Administrative measures: establishing and implementing an internal management plan, conducting regular employee training, and similar measures
2. Technical measures: managing access privileges to personal data processing systems, and encrypting unique identifying information

Article 7 (Data Protection Officer)

The Company has designated the data protection officer below to take overall responsibility for personal data processing and to handle complaints and remedies for data subjects in relation to that processing.

Data subjects may direct any inquiry, complaint, or request for remedy relating to personal data protection arising from use of the Company's services to the data protection officer and the responsible department. The Company will respond to and handle such inquiries without delay.

Article 9 (Remedies for Infringement of Rights)

Data subjects may contact the organizations below for remedies or advice regarding infringement of personal data rights. These organizations are separate from the Company; please contact them if you are not satisfied with the Company's own handling of a complaint or remedy, or if you need more detailed assistance.

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Korea Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (cyberbureau.police.go.kr)

A person whose rights or interests have been infringed by a disposition or omission by the head of a public institution in response to a request under Article 35 (access to personal data), Article 36 (correction or deletion of personal data), or Article 37 (suspension of processing) of the Personal Information Protection Act may request an administrative appeal as provided by the Administrative Appeals Act.

* For details on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

If you need assistance, wish to exercise the rights above, or have questions about them, please call +82-2-464-8048. We will consider every request and respond as quickly as possible. In certain circumstances, however, a request may be exempt — for example where we must continue processing your personal data for legitimate interests or to comply with a legal obligation. We must verify your identity before providing or deleting personal data.

Article 10 (Changes to This Privacy Policy)

This privacy policy takes effect on July 31, 2025.