This translation is provided for convenience only. If there is any discrepancy, the Korean version prevails.
Privacy Policy
In accordance with Article 30 of the Personal Information Protection Act (개인정보 보호법), Knowverse discloses this Policy to protect the personal information and rights of data subjects and to handle their complaints.
The only mandatory sign-up information is your email address. Your company name, service logs, order records, and the materials you choose to upload are processed in the course of providing the Service. We do not send advertising information without your optional consent.
1. Purposes, Items, and Retention Periods of Processing
| Purpose | Items processed | Retention period |
|---|---|---|
| Sign-up, identity verification, and account management | Email address (mandatory), password hash, company name | 30 days after account deletion; if a dispute or fraud investigation is underway, until it concludes |
| Orders, payment, refunds, and performance of the agreement | Order number, plan, amount, payment and refund status, receipt identifier | Records of contracts or withdrawals: 5 years; records of payment and supply: 5 years |
| Providing technical assessments | Name of the company assessed, time of the self-assessment pledge, uploaded materials, repository links and encrypted read-only tokens, analysis results | Source code originals, repository links, and tokens are purged immediately upon completion of the assessment. Other source materials: until the deletion point under our policy, or up to 30 days. Reports and audit trails: for the period necessary to perform the agreement and respond to disputes |
| Security and incident response | Access IP, request time, browser and device information, error and security logs | 3 months; if an incident investigation is underway, until it concludes |
| Customer inquiries and dispute handling | Email, inquiry content, handling records | Records of consumer complaints or dispute handling: 3 years |
| Marketing (optional) | Email, time of consent to receive | Until consent is withdrawn or the account is deleted |
The Company does not require resident registration numbers or sensitive information as mandatory sign-up items. Members must delete or mask any unnecessary personal information in documents before uploading them.
2. Legal Basis for Processing and Refusal of Consent
Mandatory information is processed to conclude and perform the service agreement and to comply with legal obligations. If you refuse mandatory consent, you cannot create an account. Marketing consent is optional, and refusing it does not affect your use of the Service.
3. Retention Required by Law
- Records of contracts and withdrawals, payment, and supply of goods: 5 years
- Records of consumer complaints and dispute handling: 3 years
- Records of labeling and advertising: 6 months
- Access records subject to the Protection of Communications Secrets Act (통신비밀보호법): the statutory period
4. Provision of Personal Information to Third Parties
As a rule, the Company does not provide personal information to third parties. Where there is a legal basis or the data subject has given separate consent, the Company will notify the recipient, purpose, items, and period in advance.
5. Outsourcing of Processing
| Processor | Task |
|---|---|
| Oracle Corporation / Oracle Cloud Infrastructure | Hosting of web, database, and object storage; backup and security operations |
| Plus Five Five, Inc. (Resend) | Sending transactional emails such as sign-up verification, payment, and assessment completion |
6. Cross-Border Transfer of Personal Information
| Recipient | Country, timing, and method | Items and purpose | Retention period |
|---|---|---|---|
| Oracle Corporation (contact: privacy_ww@oracle.com) | Japan · Continuously transmitted and stored over an encrypted network when the Service is used | Service data described in Section 1 · Hosting, storage, backup, security | Until the end of the Service retention period or the outsourcing agreement |
| Plus Five Five, Inc. / Resend (privacy@resend.com) | United States · Transmitted via API when emails are sent | Recipient email address, email subject and body, sending metadata · Sending transactional emails | For the period necessary to provide the sending service and fulfill legal obligations |
If you do not want your information transferred abroad, you may request this at support@knowverse.net. However, because email verification and overseas-region hosting are essential to providing the Service, it may be difficult to conclude the agreement or use the Service. The Company implements encryption, access control, contractual safeguards, and management and supervision of processors.
7. Deletion Procedure and Method
When the retention period ends or the purpose is achieved, personal information is deleted without delay. Working copies of source code are deleted when static analysis ends, and submitted source ZIP files, repository links, and encrypted tokens are automatically purged once the assessment is completed by generating the report. Electronic files are deleted in a manner that makes them unrecoverable, and printed materials are shredded or incinerated. The results of purging uploaded source materials may be kept as an audit trail.
Submitted materials and source code are used only to generate assessment results and are not used as training or fine-tuning data for general-purpose AI models.
8. Rights of Data Subjects
You may request access to, transmission, correction, deletion, or suspension of processing of your personal information, or withdraw your consent. Requests made to support@knowverse.net or 070-4442-6680 will be handled within the statutory time limit after identity verification.
9. Security Measures
- One-way bcrypt password hashing and TLS encryption in transit
- Organization-level access control, least privilege, and two-factor authentication for administrators
- Isolation of uploaded materials, malware scanning, and automatic purging after analysis
- Retention of access records, audit log integrity, and regular vulnerability checks
10. Cookies and Automatic Collection
We use essential cookies to maintain login sessions. We do not currently use cookies for personalized advertising. Servers may automatically generate IP and request logs for security and incident response.
11. Chief Privacy Officer
| Name | 문근영 |
|---|---|
| Contact | support@knowverse.net · 070-4442-6680 |
For consultation on privacy infringements: Personal Information Infringement Report Center 118, Personal Information Dispute Mediation Committee 1833-6972, Korean National Police Agency 182.
12. Changes and Notice
This Policy takes effect on July 18, 2026. Material changes will be announced on the website 30 days before they take effect, and other changes 7 days before.