Privacy Policy

version: 1.0.0 (Global)

Important Notice Regarding Jurisdictional Application

This Privacy Policy has been primarily drafted in accordance with the laws and regulations of the Republic of Korea, including but not limited to the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. While we strive to protect the privacy rights of all our users globally, the specific terms, rights, and obligations outlined in this Policy may differ from those provided under the laws of other jurisdictions. Users outside the Republic of Korea acknowledge and agree that this Policy shall be interpreted and enforced in accordance with Korean law, except where mandatory local laws take precedence. If any provision of this Policy conflicts with the mandatory laws of your jurisdiction, such local laws shall govern to the extent of the conflict.

‍

‍

‍

Article 1 (Purpose)

AiderX Inc. (hereinafter referred to as the "Company") establishes this Privacy Policy (hereinafter referred to as the "Policy") to protect the personal information of individuals (hereinafter referred to as "Users" or "Individuals") who use the services provided by the Company (hereinafter referred to as "Services"), in compliance with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as "Information and Communications Network Act"), and other relevant laws and regulations, and to handle Users' personal information protection-related grievances promptly and efficiently.

‍

Article 2 (Principles of Personal Information Processing)

The Company may collect Users' personal information in accordance with relevant laws and regulations and this Policy, and the collected personal information may be provided to third parties only with the Individual's consent. However, in cases where it is legally enforced by laws and regulations, the Company may provide the collected User's personal information to third parties without prior Individual consent.

‍

Article 3 (Disclosure of this Policy)

1. The Company discloses this Policy through its homepage's main screen or connected screen so that Users can easily access it at any time.
2. When disclosing this Policy, the Company uses font sizes, colors, and other elements to ensure Users can easily review the Policy.

‍

Article 4 (Changes to this Policy)

1. This Policy may be revised due to changes in relevant laws, guidelines, notices, or government or Company service policies or contents.
2. When the Company revises this Policy pursuant to Paragraph 1, it shall notify Users through one or more of the following methods: a. Notification through the notice section or separate window on the Company's website b. Notification to Users via written document, facsimile, email, or similar methods
3. The Company shall provide notice of such changes at least 7 days prior to the effective date of the Policy revision. However, for significant changes affecting Users' rights, notice shall be provided at least 30 days in advance.

‍

Article 5 (Information for Membership Registration)

The Company collects the following information for Users' membership registration:

1. Required information: Email address and name

‍

Article 6 (Information for Payment Services)

The Company collects the following information to provide payment services to Users:

1. Required information: Card number, card password, expiration date, phone number and birth date (yy/mm/dd)

‍

Article 7 (Information for Company Service Provision)

The Company collects the following information to provide Company services to Users:

1. Required information: ID, email address, name, and contact information

‍

Article 8 (Information for Service Usage and Fraud Prevention)

The Company collects the following information for statistical analysis of service usage and verification/analysis of fraudulent use. (Fraudulent use refers to actions such as repeatedly joining after membership withdrawal, repeated purchase cancellations, improper receipt of economic benefits such as discount coupons and event benefits provided by the Company, violations of terms of service, identity theft, and other improper activities.)

1. Required information: Service usage records, cookies, access location information, and device information

‍

Article 9 (Methods of Personal Information Collection)

The Company collects Users' personal information through the following methods:

1. Users entering their personal information on the Company's website
2. Users entering their personal information through services other than the Company's website, such as applications

‍

Article 10 (Use of Personal Information)

The Company uses personal information in the following cases:

1. When necessary for Company operations, such as delivering notices
2. For service improvement for Users, such as responding to inquiries and handling complaints
3. To provide Company services
4. To implement usage restrictions for members who violate laws and Company terms, and to prevent and sanction activities that interfere with smooth service operation, including fraudulent use
5. For marketing purposes, such as event and promotional notifications

‍

Article 11 (Outsourcing of Personal Information Processing)

1. The Company may outsource the processing of personal information to provide efficient services and conduct business operations effectively. The Company maintains and regularly updates a list of its data processors on its website at [URL of detailed outsourcing page].
2. Current major outsourcing arrangements include:
   • Payment processing and related services
   • Customer support services
   • IT infrastructure and security services
3. For a detailed and current list of our data processors and their respective processing activities, please visit [URL]. This list is kept up to date and reflects our current outsourcing arrangements.
4. When the Company outsources the processing of personal information:
   • The Company shall select qualified contractors who can handle personal information safely
   • The Company shall specify the scope and purpose of outsourced processing through contracts
   • The Company shall supervise contractors to ensure they process personal information appropriately
   • The Company shall immediately update the list of contractors on its website when changes occur
5. The Company shall be responsible for any damage to Users caused by its contractors' violation of relevant personal information protection laws.

‍

Article 12 (Retention and Usage Period of Personal Information)

1. The Company retains and uses Users' personal information for the period necessary to achieve the purpose of collecting and using personal information.
2. Notwithstanding the preceding paragraph, pursuant to internal policy, the Company may retain records of service misuse for up to 1 year from the point of membership withdrawal to prevent fraudulent registration and use.

‍

Article 13 (Retention and Usage Period of Personal Information Under Laws)

The Company retains and uses personal information in accordance with relevant laws as follows:

1. Information retained under the Act on Consumer Protection in Electronic Commerce: a. Records of contracts or subscription withdrawals: 5 years b. Records of payment and supply of goods: 5 years c. Records of consumer complaints or dispute handling: 3 years d. Records of advertisements and promotions: 6 months
2. Information retained under the Protection of Communications Secrets Act: a. Website log records: 3 months
3. Information retained under the Electronic Financial Transactions Act: a. Electronic financial transaction records: 5 years
4. Information retained under the Location Information Protection Act: a. Personal location information records: 6 months

‍

Article 14 (Principles of Personal Information Destruction)

The Company shall, in principle, destroy personal information without delay when it is no longer necessary, such as upon achievement of the purpose of processing or expiration of the retention and usage period.

‍

Article 15 (Personal Information Destruction Procedure)

1. Information entered by Users for membership registration and other purposes shall be transferred to a separate DB (or paper files to a separate filing cabinet) after the achievement of its processing purpose and stored for a certain period as required by internal policies and other relevant laws (refer to retention and usage period) before destruction.
2. The Company shall destroy personal information subject to destruction after obtaining approval from the personal information protection officer.

‍

Article 16 (Methods of Personal Information Destruction)

The Company shall delete electronic files containing personal information using technical methods that prevent recovery and shall destroy printed personal information by shredding or incineration.

‍

Article 17 (Access to Personal Information and Withdrawal of Collection Consent)

1. Users and their legal representatives may at any time access or modify their registered personal information and request withdrawal of consent for personal information collection.
2. To withdraw consent for personal information collection, Users and their legal representatives may contact the personal information protection officer or person in charge via written document, telephone, or email address, and the Company shall process such requests without delay.

‍

Article 18 (Modification of Personal Information)

1. Users may request correction of errors in their personal information through the methods specified in the preceding Article.
2. The Company shall not use or provide personal information until the correction is completed, and if incorrect personal information has already been provided to third parties, the Company shall notify such third parties of the correction results without delay to ensure the correction is implemented.

‍

Article 19 (Users' Obligations)

1. Users must maintain their personal information up to date, and Users shall be responsible for any issues arising from the input of inaccurate information.
2. Users who register for membership using another person's personal information may lose their membership eligibility or be subject to penalties under relevant personal information protection laws.
3. Users are responsible for maintaining the security of their email addresses and passwords and may not transfer or lend these to third parties.

‍

Article 20 (Company's Personal Information Management)

The Company implements necessary technical and administrative protective measures to ensure security and prevent loss, theft, leakage, alteration, or damage of personal information when processing Users' personal information.

‍

Article 21 (Processing of Deleted Information)

Personal information terminated or deleted at the request of Users or their legal representatives shall be processed as specified in the "Retention and Usage Period of Personal Information" section of this Policy and shall not be accessed or used for other purposes.

‍

Article 22 (Password Encryption)

Users' passwords are stored and managed using one-way encryption, and personal information confirmation and modification are only possible by the individual who knows the password.

‍

Article 23 (Countermeasures Against Hacking)

1. The Company makes its best efforts to prevent the leakage or damage of Users' personal information through network intrusion such as hacking or computer viruses.
2. The Company uses the latest anti-virus programs to prevent Users' personal information or data from being leaked or damaged.
3. The Company employs an intrusion prevention system to ensure optimal security against potential incidents.
4. The Company ensures safe transmission of personal information over networks through encryption communication for sensitive personal information collection and retention.

‍

Article 24 (Minimization of Personal Information Processing and Training)

The Company minimizes the number of personnel handling personal information and emphasizes compliance with laws and internal policies through administrative measures such as training for personal information processors.

‍

Article 25 (Measures for Personal Information Leakage)

When the Company becomes aware of any loss, theft, or leakage of personal information (hereinafter referred to as "leakage, etc."), it shall notify affected Users of all of the following matters without delay and report to the Korea Communications Commission or Korea Internet & Security Agency:

1. Items of personal information that have been leaked
2. Time of the leakage occurrence
3. Actions Users can take
4. Countermeasures taken by the information and communications service provider
5. Department and contact information for User consultation

‍

Article 26 (Exception to Measures for Personal Information Leakage)

Notwithstanding the preceding Article, if there are legitimate reasons such as inability to contact Users, the Company may substitute the notification requirements of the preceding Article by posting the information on the Company's homepage for 30 days or more.

‍

Article 27 (Protection of Personal Information Transferred Overseas)

1. The Company operates its services globally and may store and process your personal information in various countries, including but not limited to the Republic of Korea, where the Company or its service providers maintain facilities.
2. By using our Services, you acknowledge and agree that: a. Your personal information may be transferred to and processed in countries other than your country of residence b. These countries may have different data protection laws and requirements than your country c. The Company will handle your personal information in accordance with this Privacy Policy and the laws of the Republic of Korea d. The level of data protection in other countries may not be equivalent to that provided under Korean law
3. When transferring personal information internationally, the Company implements reasonable security measures, including: a. Technical safeguards to protect the security of the information b. Organizational measures to limit access to personal information c. Contractual requirements for service providers regarding data protection
4. The Company provides transparency regarding international data transfers by disclosing: a. Types of personal information transferred b. Primary locations where data is processed c. Purpose and duration of processing d. Basic security measures implemented

‍

Article 28 (Installation, Operation, and Rejection of Personal Information Automatic Collection Devices)

1. The Company uses personal information automatic collection devices (hereinafter referred to as "cookies") that store and retrieve usage information to provide individualized customized services. Cookies are small amounts of information sent by the server (http) operating the website to Users' web browsers (including PC and mobile) and may be stored in Users' storage space.
2. Users have control over cookie installation. Users can allow all cookies, require confirmation when cookies are saved, or reject all cookies by setting options in their web browser.
3. However, if Users reject cookie storage, they may experience difficulties using some Company services that require login.

‍

Article 29 (Methods for Setting Cookie Installation Permissions)

Cookie permissions can be set through web browser option settings:

1. Edge: Settings menu in upper right > Cookies and site permissions > Manage and delete cookies and site data
2. Chrome: Settings menu in upper right > Privacy and security > Cookies and other site data
3. Whale: Settings menu in upper right > Privacy protection > Cookies and other site data

‍

Article 30 (Designation of Company's Personal Information Protection Officer)

1. The Company designates the following department and personal information protection officer to protect Users' personal information and handle related complaints:

a. Personal Information Protection Officer

1. Name: Kwangseob Kim
2. Position: CEO
3. Phone Number: 070-8657-1149
4. Email: support@aiderx.io

‍

Addendum

Article 1. This Policy shall be effective from November 19, 2024.

‍

‍