Privacy Policy

Translation notice

Article 1 (Personal data collected and how)

The Company provides the Site without membership registration and collects personal data only in the cases below. All items are entered directly by the user or generated automatically while using the services.

The Company does not collect sensitive data (such as beliefs, health or sex life) or unique identifiers such as resident registration numbers.

Article 2 (Purposes of processing)

• Reviewing inquiries and estimate requests, consultation, and replying with estimates and proposals
• Contact and preliminary discussion for concluding and performing a contract
• Usage statistics and site improvement
• Preventing abuse (automated repeated requests, abnormal access) and responding to security incidents
• Tracing errors and improving the quality of the AI estimate feature

The Company does not use personal data for purposes other than the above; if the purpose changes, separate consent is obtained under Article 18 of the Personal Information Protection Act.

Article 3 (Retention and use period)

Where a contract is concluded, transaction records are kept for the periods required by law:

• Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on payment and supply of goods: 5 years (same Act)
• Records on consumer complaints or dispute handling: 3 years (same Act)

Personal data whose retention period has expired or whose purpose has been achieved is destroyed without delay.

Article 4 (Provision to third parties)

The Company does not provide personal data to third parties, except where specifically required by law or requested by an investigative agency under the procedures and methods prescribed by law.

Article 5 (Outsourcing and overseas transfer)

The AI estimate feature uses an external AI provider’s API, so the requirements text entered by the user is transmitted abroad. Under Article 28-8 of the Personal Information Protection Act the details are disclosed as follows.

Article 6 (Destruction procedure and method)

1. The Company destroys personal data without delay once the retention period has expired or the purpose has been achieved.
2. Electronic files are deleted in a way that prevents recovery or reproduction; printed documents are shredded or incinerated.
3. Personal data that must be retained by law is stored and managed separately from other personal data.

Article 7 (Rights of data subjects and how to exercise them)

1. Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal data.
2. Requests may be made to the privacy officer in Article 10 by email, phone or in writing; the Company acts without delay and informs you of the result.
3. Where correction of an error is requested, the Company does not use or provide the data until the correction is complete.
4. Requests through an agent require a power of attorney in the form prescribed by the Korean Notice on Personal Information Processing Methods (Annex Form 11).

Article 8 (Security measures)

• Administrative: the number of staff handling personal data is kept to a minimum and access rights are adjusted immediately when staff change
• Technical: login authentication for screens that handle personal data (admin pages), encryption in transit (HTTPS/TLS), retention of access logs, automatic blocking of known attack paths
• Physical: servers storing personal data are kept in a controlled area in the office with restricted access

Details of the security measures the Company applies are in the Security Policy.

Article 9 (Cookies and automatic collection)

1. Public pages do not use cookies for advertising or behavioral analytics and do not embed third-party advertising or analytics scripts.
2. A session cookie is used only when an administrator logs in, to keep the login state.
3. For visit statistics and detection of automated access, a script on the page reports access time, time on page, screen resolution and time zone. This information is not stored in cookies or browser storage.
4. You may refuse cookies in your browser settings; only the administrator login is affected.

Article 10 (Privacy officer)

The Company designates the following privacy officer who is responsible for personal data processing and handles inquiries, complaints and remedies from data subjects.

Data subjects may direct all inquiries regarding personal data processing to the contact above, and the Company responds and acts without delay.

Article 11 (Remedies for infringement)

Data subjects may apply for dispute resolution or consultation with the following Korean agencies to obtain remedies for infringement of personal data.

• Personal Information Infringement Report Center (KISA): 118 (no area code) / privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972 / kopico.go.kr
• Supreme Prosecutors’ Office Cybercrime Investigation Division: 1301 (no area code) / spo.go.kr
• National Police Agency Cybercrime Reporting System: 182 (no area code) / ecrm.police.go.kr

A person whose rights or interests have been infringed by a disposition or omission of the head of a public institution regarding requests under Articles 35 (access), 36 (correction and deletion) and 37 (suspension of processing) of the Personal Information Protection Act may file an administrative appeal under the Administrative Appeals Act.

Article 12 (Changes to this policy)

This Privacy Policy applies from October 14, 2026. If content is added, deleted or amended due to changes in law, policy or the services, notice is given on the Site at least 7 days before the change takes effect.

Business information