Effective date: October 19, 2026
1. Purposes of processing
- Responding to enquiries and demo requests, and providing quotations
- Concluding and performing service agreements, payments and refunds
- Issuing and managing platform accounts, identity verification and security (preventing misuse, keeping access records)
- Customer support and service notices
2. Personal information processed
- Enquiries and contracts: name, affiliation (institution, laboratory), email, phone number
- Platform accounts: user ID, name, email, password (stored encrypted), access records, IP address
- Payment: payments are processed by the payment gateway (Toss Payments) and card companies; the Company does not store card numbers. The Company keeps transaction records such as the date, amount and payment method.
3. Retention period
Personal information is destroyed without delay once the purpose is achieved or the service agreement ends, except for the following records, kept as required by law:
- Records of contracts or withdrawals, payments and supply: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records of consumer complaints or disputes: 3 years (same Act)
- Access records (log-in records, IP addresses): 3 months (Protection of Communications Secrets Act)
4. Provision to third parties
The Company processes personal information only within the purposes in section 1 and, in principle, does not provide it to third parties, except with the data subject’s separate consent or where the law specifically requires it.
5. Outsourcing of processing
| Toss Payments Co., Ltd. | Payment processing |
|---|---|
| EuchroGene, LLC | Hosting and operation of the platform servers and data |
| Postmark (ActiveCampaign, LLC) | Sending service emails (accounts, notifications, password resets) |
The Company sets out in its outsourcing agreements what is needed to keep personal information safe and supervises the processors.
6. Transfer abroad
The Company transfers personal information abroad as follows to provide the Services. Transfers for the AI features take place only when a User uses them.
| Recipient (contact) | EuchroGene, LLC (support@euchrogene.com) |
|---|---|
| Country · purpose | United States · hosting and operation of the platform servers and data |
| Items | Account information, access records, data stored by the User |
| Recipient (contact) | Postmark (ActiveCampaign, LLC) (support@postmarkapp.com) |
|---|---|
| Country · purpose | United States · sending service emails |
| Items | Name, email address, message content |
| Recipient (contact) | Anthropic, PBC (Claude) (support@anthropic.com) / OpenAI, L.L.C. (Codex) (chat support at help.openai.com) — the provider the User connected |
|---|---|
| Country · purpose | United States · providing the AI features |
| Items | Questions and the material the User attaches or selects |
| Timing and method (all) | Sent over an encrypted network when the Services are used |
|---|---|
| Retention (all) | For the period the Services are used (destroyed when the agreement ends, except records the law requires to be kept, for the periods in section 3) |
Please avoid including personal information in AI questions.
7. Rights of data subjects
Data subjects may at any time ask the Company to access, correct, delete or stop processing their personal information, or withdraw consent, by email (minkju3003@gmail.com) or phone (+82-10-7912-9678); the Company acts without delay. Platform accounts offer data export and account-deletion requests.
8. Destruction
Personal information whose retention period has passed or whose purpose has been achieved is destroyed without delay: electronic files are deleted so that they cannot be recovered, and paper documents are shredded or incinerated.
9. Security measures
- A separate server and database per laboratory, and role-based access control
- Passwords stored encrypted; stored credentials such as AI connection keys encrypted
- Two-factor authentication, log-in attempt limits and automatic sign-out of idle sessions
- Security access records and regular backups
10. Cookies
The Company’s website uses no visitor-analytics tools or advertising cookies. The tour video is served from the Company’s own website, with no external video service. The platform uses the cookies needed to keep you signed in.
11. Privacy officer
| Name | Minkyu Park |
|---|---|
| Title | Representative Director |
| Phone | +82-10-7912-9678 |
| minkju3003@gmail.com |
12. Remedies
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
13. Changes to this policy
This Privacy Policy applies from October 19, 2026. Additions, deletions or changes are announced on the website at least 7 days before they take effect.