1. Information and purposes
| Activity | Information | Purpose |
|---|---|---|
| Inquiry | Name, email, category, subject, message, pseudonymous IP value, User-Agent, and consent time. Company/organization and phone only with separate optional consent | Reviewing and responding to inquiries, maintaining handling records, and preventing spam and abuse |
| Software download | Product and asset identifiers, pseudonymous IP value, User-Agent, and download time | Distribution statistics and abuse detection |
| Access logs | IP address, country and city, request path, referrer, User-Agent, and access time | Service reliability, security monitoring, and usage analysis |
We process inquiry information with the data subject's consent, and store company/organization and phone only when separate optional consent is given. Download records and access logs are processed without consent to keep the service reliable and secure (Article 15(1)(6) of the Personal Information Protection Act).
For inquiries and downloads, IP addresses are stored only as HMAC-SHA-256 pseudonymous values derived with a secret key. Raw IP addresses in access logs are stored in a separate database restricted to administrators.
2. Retention and deletion
- Access logs: 90 days after collection
- Download logs: one year after collection
- Inquiry records: one year after completion; pending inquiries until completion or a deletion request
- Inquiry records deleted during retention: 30 days after deletion
An automated daily cleanup deletes electronic records after these periods and inquiries that have been in the trash for 30 days. Deleted records can no longer be recovered once the retention period of the database recovery feature (up to 30 days) has passed. Where applicable law requires retention, records are kept separately for the period that law sets.
3. Entrusted processing
We entrust Cloudflare, Inc. with website delivery, storage of inquiry and download data, access log processing, and Turnstile security verification. We entrust Mailplug with sending, receiving, and storing company email, including inquiries received by email. We supervise these processors to prevent use of personal information beyond these tasks.
4. International transfers
Information listed in Section 1 about access, inquiries, and downloads may be processed or stored in the United States and other countries where Cloudflare operates data centers, through the global infrastructure of Cloudflare, Inc. (based in the United States; dpo@cloudflare.com). It is transmitted over encrypted connections when the service is used and processed only for the entrusted purposes and for the periods stated in Section 2. You may ask the privacy officer below about international transfers or request that processing stop; this may limit your use of services such as the web inquiry form.
5. Security measures
We restrict access to personal information to administrators and authenticate and log administrative access. Data is encrypted in transit and at rest; inquiry and download IP addresses are stored as secret-key-based pseudonymous values. We review security logs and regularly delete records whose retention periods have expired.
6. Automatic collection and third-party disclosure
We collect access logs to operate the website and use Turnstile to verify automated traffic. After a Cloudflare security challenge, a cf_clearance cookie may be issued to retain verification status. You can reject or delete cookies in your browser settings, but security checks may repeat or access may be limited. We do not use separate analytics or advertising cookies. We do not disclose personal information to third parties unless required by law or separately agreed to by the data subject.
7. Your rights and privacy officer
You or your legal representative may request access, correction, deletion, restriction of processing, or withdrawal of consent. Contact us below; we will verify your identity or authority and respond under applicable law.
- Privacy officer
- Sunghyun Park, CEO
- info@cubiware.co.kr
- Phone
- +82-2-6952-5754
8. Remedies
For privacy concerns, contact our privacy officer above. You may also seek assistance from the Personal Information Infringement Report Center (118 in Korea) or the Personal Information Dispute Mediation Committee (1833-6972 in Korea).
9. Policy history
When we change this policy, we post the changes and their effective date on this page. Changes that add collected items or purposes are posted seven days before they take effect. Previous versions are available on request from the privacy officer.
- September 27, 2026: Expanded the privacy officer, entrusted processing (added Mailplug), international transfer countries, separate optional consent, legal basis, security measures, deletion timing, and rights sections
- July 12, 2026: First effective date