RoboTom Inc.
Privacy Policy
Robotom Co., Ltd. (hereinafter referred to as the "Company") legally processes and securely manages personal information in compliance with the "Personal Information Protection Act" and related statutes. Accordingly, in accordance with Article 30 of the "Personal Information Protection Act," we guide information subjects on the procedures and standards for processing and protecting personal information and establish and disclose the following privacy policy to ensure that related complaints can be processed promptly and smoothly.
Purpose of processing personal information, collected items, retention, and usage period
The company collects and uses personal information to the minimum extent necessary for providing the service in accordance with the 'Personal Information Protection Act.'
The company processes the following personal information items with the consent of the data subject.
Classification
Purpose of Collection and Use
Collected Items
Retention and Usage Period
Essential
Membership registration and management, user identification, prevention of misuse by delinquent members and unauthorized use, confirmation of subscription intent.
Name, Email (including anonymous email for Apple login), UUID
Until the purpose is achieved or membership is withdrawn
Essential
Verify service stability, prevent issues, detect risks, and alert warnings.
Mobile device information, registered product information, operation logs
Until the purpose is achieved or membership is withdrawn
Essential
Product installation and service support
[For product installation and service requests] Name, Phone number, Address
Until the purpose is achieved or membership is withdrawn
Essential
Event and Promotion Participation
[Name, Phone Number, Email, ID, Nickname, Address]
Until the purpose is achieved or the event/promotion ends
Essential
Providing and analyzing service-related promotions, marketing, and other advertising information
[Name, Date of Birth, Gender, ID, Nickname, Phone Number, Email, Address, Location Information]
Until the purpose is achieved, membership is withdrawn, or consent is revoked
In accordance with relevant laws, the company sets the retention and usage period of personal information as the end point of the applicable period when it corresponds to any of the following reasons.
Relevant Regulations
Item
Retention and Usage Period
Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc., Article 6
Records regarding contracts or withdrawal of offers
5 years
Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc., Article 6
Records concerning payment and the supply of goods, etc.
5 years
Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc., Article 6
Records on consumer complaints or dispute handling
3 years
Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc., Article 6
Records related to display and advertising
6 months
Article 41 of the Enforcement Decree of the Protection of Communications Secrets Act
Records on website visits
3 months
Provision of Personal Information to Third Parties
The company processes personal information of data subjects only within the scope specified for processing and provides personal information to third parties only in cases corresponding to Article 17 and 18 of the 'Personal Information Protection Act', such as with the consent of the data subject or special legal provisions, and does not provide personal information to third parties otherwise.
Currently, the company does not provide personal information to third parties and manages it internally. If it becomes necessary to provide personal information to third parties in the future, the company will obtain the prior consent of the data subjects and notify them through these terms and conditions.
Entrustment of Personal Information Processing
The company outsources the handling of personal information to specialized firms to facilitate smooth business operations, such as providing better services and enhancing user convenience.
(1) Domestic Consignment
Trustee
Content of the entrusted task
Certi Co., Ltd.
Delivery and product installation
(2) Overseas Commission
Relevant Laws
Article 28-8, Paragraph 1 of the Personal Information Protection Act
Contractor Name
Supabase (Supabase Inc.)
Contact
privacy@supabase.com
Content of the entrusted task
Storage and Protection of User's Personal Information Data
Name, Email (including anonymous email for Apple login), UUID, Mobile Device Information, Registered Product Information, Operation Log
Country of Personal Data Transfer
United States
Timing of Personal Information Transfer
Service usage time
Methods of Transferring Personal Information
Frequent transmission over the network
Retention and Usage Period
Until the end of the contract
How to refuse the transfer of personal information, procedures, and consequences
You may proceed with account cancellation or request data transfer refusal through our customer service, but please note that this data transfer is essential for using our services. Refusal will result in the inability to use the service.
Procedure and Method of Destroying Personal Information
Installation, operation, and rejection of automatic personal information collection devices
Our company uses Google Analytics to store and retrieve user information in the form of 'cookies' to provide personalized services and convenience.
Cookies are small pieces of information sent by the server (http) used to operate the website to the user's browser, and they are stored on the user's PC or mobile device. They include connection IP address, service usage records, website visit records, device information (hardware model, operating system, unique device identifiers, etc.), and personally identify the user.
(1) Purpose of using cookies: They are used to understand visit and usage patterns, popular search terms, security access status, and user preferences on each service and website the user visits, thereby improving service performance and providing optimized marketing information.
(2) Our company collects behavioral information on the website we operate in the following manner.
Collected Items
Collection Method
Purpose of Collection
Retention and Usage Period
Website visit history
Automatic collection when a data subject visits the website
User preference storage, service analysis and performance improvement, marketing and targeted advertising
Until the purpose of processing is achieved, upon membership withdrawal, or until collection refusal.
(3) Methods to Install, Operate, and Reject Cookies:
For Internet Explorer: Set options in the [Tools] > [Internet Options] > [Privacy] menu at the top of the web browser.
For Google Chrome: Adjust settings in the [Settings] > [Privacy and security] tab > [Cookies and other site data] > within the General settings at the upper right of the Chrome browser.
For Safari: Choose Safari > select Preferences and click Privacy, then adjust cookie and website data settings.
If the information subject refuses to store cookies as explained above, difficulties may arise in using the personalized services provided by the company.
Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them
The data subject may exercise the following rights.
(1) Request to access personal information: Users can request to view the personal information held by the company. However, access may be restricted if prohibited or limited by law, or if there is a concern that it might harm the life or physical safety of others, or unfairly infringe upon another's property or other interests.
(2) Request for correction or deletion of personal information: Users can request correction or deletion of the personal information held by the company. However, deletion cannot be requested if other laws specify that the personal information is a target of collection.
(3) Withdrawal of consent for personal information processing or request for suspension: Users can request the suspension of personal information processing or withdraw consent for it with the company. However, if prohibited or limited by law, or if there is a concern that it might harm the life or physical safety of others, or unfairly infringe upon another's property or other interests, or if the non-processing of personal information makes it difficult to fulfill the contract agreed with the data subject, and the data subject has not clearly expressed an intention to terminate the contract, the request for withdrawal of consent or suspension may be denied.
Users may exercise their rights via a representative (such as a legal representative or someone granted authority). In this case, a power of attorney proving the authority must be submitted in the manner determined by the company (such as email, FAX, etc.).
Measures to Ensure the Security of Personal Information
The company is taking the following measures to ensure the security of personal information.
(1) Administrative measures: Minimizing personnel access to personal information, establishing (planned) internal management plans, regular employee training, etc.
(2) Technical measures: Management of access privileges to personal information processing systems, installation of access control systems, encryption of unique identifiers, etc.
(3) Physical measures: Access control to document storage rooms, storing documents and auxiliary storage media containing personal information in locations with locks.
In the case of overseas entrustment, the entrusted company implements the following security measures to safely protect users' personal information while providing services.
(1) Data transmission protection: Encryption technology is used to safely protect user information when it moves through the internet, preventing eavesdropping or tampering during transmission.
(2) Data storage protection: Users' personal information is securely stored, and all stored data is encrypted to prevent unauthorized external access.
(3) Access privilege management: Through authentication procedures, only authorized users can access personal information, blocking unauthorized user access.
(4) Secure server environment: Users’ data is stored on secure servers, with ongoing implementation of various measures for data protection.
Privacy Officer
The company takes full responsibility for handling personal information and has designated a Personal Information Protection Officer as follows to handle complaints and provide remedies related to personal information processing.
(1) Personal Information Protection Officer
Name: Se-Yong Yoon
Position: Co-CEO
Contact: 02-6953-2593
(2) Personal Information Protection Department
Department Name: Software Engineering Team
Manager: Min-Kyu Choi
Contact: 02-6953-2593
Users may contact the Personal Information Protection Officer for all inquiries, complaints, and remedy requests related to personal information protection that arise during their use of the company's services. The company will respond to such inquiries without delay.
In addition, the company strives to guarantee the data subject's right to self-determination over personal information and to provide consultation and remedies for personal information infringement. If you need to report or consult, please contact the Personal Information Protection Officer mentioned above.
Remedies for infringement of user rights
Users can contact the following organizations for inquiries about personal data protection issues, counseling, and remedies. These organizations are separate from the company. Please contact them if you are not satisfied with the company's personal information complaints handling and remedies, or if you need more detailed assistance.
(1) Personal Information Dispute Mediation Committee
Website: www.kopico.go.kr
Phone: 1833-6972 (without area code)
(2) Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
Main Tasks: Reporting and consulting on personal information infringements
Website: privacy.kisa.or.kr
Phone: 118 (without area code)
(3) Supreme Prosecutors' Office Cyber Crime Investigation Division
Website: www.spo.go.kr
Phone: 1301 (without area code)
(4) Cyber Safety Keeper of the National Police Agency
Website: http://www.police.go.kr/www/security/cyber.jsp
Phone: 182 (without area code)
We strive to provide counseling and remedies for issues related to personal information infringement. If you need to report or consult about such issues, please contact the personal information protection officer mentioned above.
Request for Personal Information Access
The data subject can request access to personal information under the "Personal Information Protection Act" by contacting the department below.
Department: Software Engineering Team
Contact: Min Kyu Choi
Phone: 02-6953-2593
Additionally, those who have suffered rights or interests infringement due to actions or inactions of public institution heads, in accordance with the provisions of Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), and Article 37 (Suspension of Processing, etc.) of the "Personal Information Protection Act," can file an administrative appeal as prescribed by the Administrative Appeals Act (Central Administrative Appeal Commission: 110 (www.simpan.go.kr) without area code).
Privacy Policy Changes
If the company revises this Privacy Policy, it will be announced through the company's website. The revised Privacy Policy will take effect 7 days after the announcement.
[Appendix]
(Effective Date) This Privacy Policy will take effect on February 1, 2025.
[Privacy Policy Revision History]
[2025. 1. 20] Initial Date of Establishment