How Aents collects, uses, and protects the personal information of end users.
About this translation. This is an English translation of the Privacy Policy of Aents Co., Ltd., originally written in Korean. It is provided for reference. If there is any difference between this translation and the Korean original, the Korean original prevails.
Aents Co., Ltd. (the “Provider”) values the protection of the personal information of data subjects (“End Users”) and complies with the personal information protection provisions of the laws that apply to information and communications service providers, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, and the Act on the Protection, Use, etc. of Location Information of the Republic of Korea. This Privacy Policy explains for what purposes and in what ways the personal information you provide is used, and what measures are taken to protect it.
A. The Provider collects personal information in order to provide its services to End Users. At initial sign-up, the Provider collects only the minimum information strictly necessary to perform the essential functions of the service, and may collect additional information as needed depending on how the services are used.
B. When collecting personal information, the Provider separates the minimum information necessary to provide the service (“required items”) from other information (“optional items”) and provides a procedure for consenting to each separately. The Provider does not refuse to provide its services because an End User declines to provide information beyond the required minimum.
C. The Provider may collect and use personal information for the purposes below. The Provider does not use personal information for any purpose other than those stated, and does not provide it to third parties without the End User’s consent.
| Category | Items collected | Purpose | Retention period |
|---|---|---|---|
| Sign-up (all End Users) | Email sign-up: (required) name, email, password, company name, affiliation / (optional) phone number, department, job title | Sign-up and login, member management, service provision by joining a company account | Until membership is withdrawn (subject to applicable laws) |
| Corporate sign-up | (required) name of registrant, password, phone number, email, business registration number, company name, company address, position or team, year founded, industry, number of employees, company/service description / (optional) website, purpose of use, revenue or investment amount | Sign-up and login, member management, service provision | Until membership is withdrawn (subject to applicable laws) |
| Aentscope service (entered by administrators or generated during use) | (optional) name, email, phone number, company name, employee number, job function, department, job title, site address | Providing the Aentscope service, user guidance, service usage statistics | Until the company requests deletion (end of service use) (subject to applicable laws) |
| Service usage records | (required) access logs, IP information, device information, etc. | Improving service quality, security and fraud prevention, user experience analysis | Up to 14 months after collection |
| Customer support | (required) name, company or organization name, email, phone number | Providing customer support | 1 year after the inquiry is closed |
| Demo and purchase inquiries | (required) name, company or organization name, email, phone number | Responding to inquiries about adopting the service | 1 year after the inquiry is closed |
| Other inquiries | (required) name, job title, company or organization name, email, phone number | Responding to partnership and business inquiries | 1 year after the inquiry is closed |
| Pseudonymized data for statistics and analysis | (identifiers removed) content of consultations/inquiries, usage statistics | Improving service quality and statistical analysis (only when needed) | Retained separately when pseudonymized |
D. The following information may be automatically generated, collected, stored, combined, and analyzed while the service is used or business is conducted.
E. The Provider always obtains the End User’s consent when collecting personal information unless there is a legal basis to do otherwise. The Provider does not collect information that could infringe on an End User’s fundamental human rights, such as race, place of origin, registered domicile, ideology, political views, criminal records, or health, except with the End User’s consent or as required by law.
F. The Provider may collect personal information in the following ways: (1) through the website (sign-up, customer inquiries, demo and purchase inquiries, other inquiries, etc.), email, phone, written documents, or fax; (2) from customer companies; (3) from partner companies; (4) automatically, through tools that collect generated information.
G. The Provider does not accept sign-ups from children under the age of 14, which would require the consent of a legal guardian.
H. End Users are responsible for any problems arising from personal information they enter themselves into the service that the Provider did not collect, use, or request.
I. In principle, the Provider destroys personal information related to consultations and inquiries one year after the inquiry is closed. However, only where necessary, the Provider may create and retain pseudonymized information with personal identifiers removed for service quality improvement and statistical analysis, on the basis of Article 28-2 (Processing of Pseudonymized Information) of the Personal Information Protection Act.
A. In principle, the Provider uses personal information or provides it to third parties only within the scope described in “Collection and use of personal information,” and does not use or provide it beyond that scope. Exceptionally, personal information may be provided without consent in the following cases: (1) where the End User has consented in advance; (2) where required by law, or where an investigative or supervisory authority requests it in accordance with the procedures and methods prescribed by law for investigation purposes; (3) where necessary for settling fees; (4) where necessary to protect the urgent life, physical safety, or property of the End User or a third party but consent cannot be obtained.
B. Personal information is currently provided to third parties as follows.
| Recipient | Purpose | Items provided | Retention period |
|---|---|---|---|
| Customer companies and End Users granted access | Viewing member profiles of the customer company within the Aentscope service (viewing and management for administrators) | Name, email, phone number (optional) | Until the customer company is deleted |
| Sentry.io | Collecting error information during service use | Device information, IP information, user ID | Until the customer company is deleted |
| Google Analytics | Improving service quality, security and fraud prevention, user experience analysis | Access logs, IP information, device information, etc. | Up to 14 months after collection |
A. The Provider outsources part of the work needed to provide its services to the companies below. In accordance with applicable laws, the outsourcing contracts set out what is needed to keep personal information secure, and the Provider supervises compliance.
| Processor | Outsourced work |
|---|---|
| Channel Corporation | Customer support via chat (demo, purchase, and other inquiries); server operation and management |
| Amazon Web Services, Inc. | Operation and management of cloud servers storing personal information during the retention period |
| MongoDB Inc. | Operation and management of cloud servers storing personal information during the retention period |
B. The following outsourced work involves transferring personal information outside Korea. The items transferred are those listed in “1. Collection and use of personal information.”
| Recipient / contact | Country | Items transferred | Purpose | Retention period |
|---|---|---|---|---|
| Twilio Inc. / privacy@twilio.com | United States | Email address | Sending email | Until the customer company is deleted or the outsourcing contract ends |
| Sentry / compliance@sentry.io | United States | Device information, IP information, user ID | Collecting error information | Until the customer company is deleted or the outsourcing contract ends |
| Google LLC | United States | Device information, IP information, user ID | Improving service quality, security and fraud prevention, user experience analysis | Up to 14 months after collection |
※ Time and method of transfer: transmitted over the network when the service is used. For Google, please refer to the Google Privacy Help Center.
A. In principle, the Provider retains and uses End Users’ personal information for the period notified and agreed, and destroys it without delay once the purpose of collection and use has been achieved or the End User requests destruction. However, where applicable laws require retention, member information is kept for the period set by those laws, as follows.
| Records retained | Legal basis | Retention period |
|---|---|---|
| Records of labeling and advertising | Act on the Consumer Protection in Electronic Commerce, Article 6 | 6 months |
| Records of contracts or withdrawal of subscriptions | Act on the Consumer Protection in Electronic Commerce, Article 6 | 5 years |
| Records of payment and supply of goods | Act on the Consumer Protection in Electronic Commerce, Article 6 | 5 years |
| Records of consumer complaints or dispute resolution | Act on the Consumer Protection in Electronic Commerce, Article 6 | 3 years |
| Website visit records | Protection of Communications Secrets Act | 3 months |
B. Method of destruction: (1) personal information printed on paper is shredded or incinerated; (2) personal information stored in electronic files is deleted using technical methods that make the records unrecoverable.
A. Purpose of cookies — The Provider uses cookies, which store and retrieve End User information, to provide personalized services. A cookie is a very small text file that the server running a website sends to the End User’s browser and that is stored on the End User’s device. When the End User visits the website, the server reads the cookie stored on the device to maintain the End User’s settings.
B. Installing, operating, and refusing cookies — End Users can choose whether to accept cookies. By adjusting the options in your web browser, you can accept all cookies, be asked each time a cookie is stored, or refuse all cookies. If you refuse cookies, some services may be difficult to provide. (Internet Explorer: Tools > Internet Options > Privacy tab > Advanced / Chrome: Settings > Advanced > Content settings in the Privacy section > Cookies)
C. Google Analytics — We use Google Analytics to collect and analyze data in order to improve user experience and service quality. The collected data is sent to Google’s servers and processed in accordance with Google’s privacy policy.
D. You can refuse cookies through your browser settings, or install the Google Analytics opt-out browser add-on to block data collection. For further questions, please contact our privacy officer.
A. End Users may at any time exercise their rights regarding personal information, including access, correction, deletion, and suspension of processing, and the Provider will act on such requests without delay. Until a correction or deletion has been completed, the Provider will not use or provide the personal information concerned, and if incorrect personal information has already been provided to a third party, the Provider will notify the third party of the correction without delay so that it can be corrected. (How to request: by phone, in writing, or by email to the Provider’s customer service.)
B. Along with the right to have their personal information protected, End Users have a duty to protect themselves and not to infringe on others’ information. Please take care that your personal information is not leaked, and do not damage others’ posts or personal information.
C. End Users must keep their personal information up to date and are responsible for problems caused by entering inaccurate information.
D. If the Provider becomes aware that an End User has signed up using another person’s personal information, it may immediately take necessary measures such as suspending service use or terminating membership for that account. If an End User who becomes aware that their personal information has been misused requests suspension or termination of the account concerned, the Provider will take the necessary measures immediately after verification.
A. The Provider may provide End Users with links to other companies’ websites or materials. Because the Provider has no control over external sites and materials, it cannot be responsible for or guarantee the usefulness of the services or materials provided by them.
B. When you follow a link to another site, that site’s privacy policy is unrelated to the Provider, so please review the policy of the newly visited site.
A. The Provider does not send commercial advertising messages without the End User’s prior consent. However, where the Provider has collected contact information directly from an End User through a transaction for goods or services, it may send advertising messages about the same type of goods or services without prior consent within six months from the end of that transaction.
To prevent the loss, theft, leakage, alteration, or damage of personal information, the Provider takes the following technical and administrative measures.
A. End Users’ personal information is encrypted. Personal information is transmitted over encrypted channels, and important information such as passwords is stored in encrypted form.
B. The Provider works to prevent personal information from being leaked through hacking or other intrusions into information and communications networks. Data is backed up regularly in case personal information is damaged, personal information is transmitted securely over the network using encrypted communication, and unauthorized access from outside is controlled with intrusion prevention systems.
C. Access to personal information is limited to the minimum number of people, and employees who handle personal information receive regular training on their data protection obligations.
D. The Provider prevents information leaks through continuous monitoring and has internal procedures to audit the implementation of this Privacy Policy and employees’ compliance with it.
A. To protect End Users’ personal information and to handle complaints and remedies related to personal information, the Provider has designated a Chief Privacy Officer.
| Role | Department | Name | Phone | |
|---|---|---|---|---|
| Chief Privacy Officer | CEO | Gwangbeen Park | +82-2-6956-1130 | security@aents.co |
B. You may contact the Chief Privacy Officer or customer service with any privacy questions, complaints, or requests for remedies arising from your use of the Provider’s services, and the Provider will respond promptly and fully.
C. If you need to report or seek advice on a privacy infringement, you can also contact the following Korean authorities.
This Privacy Policy applies from its effective date. If any content is added, deleted, or corrected due to changes in applicable laws or the Provider’s policies, the Provider will announce it on the website or by email at least seven days in advance.
Tell us a little about your team. We'll reply within one business day to set up a time.
Our team will get back to you within one business day.