Privacy Policy
Effective: June 15, 2026 | Last revised: June 15, 2026
SmartMind AI Inc. (the “Company”) establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 (Items and Methods of Collection)
The Company collects the minimum personal information in the following cases.
| Category | Items collected | Method |
|---|---|---|
| Adoption inquiry | Company, name, title, email, phone, inquiry details | Website contact form |
| Job application | Name, email, phone, resume file, portfolio URL, introduction | Website application form |
| Service use (Qurify) | ID (email), password, company, department, usage records, access logs, IP address | Sign-up and service use |
| Automatic collection | Visit date/time, IP address, browser, OS, pages visited, cookies | Generated automatically on visit |
Article 2 (Purposes of Collection and Use)
The Company uses collected personal information only for the following purposes.
- Adoption inquiries: solution consultation, quotations, PoC execution, follow-up contact
- Recruitment: application screening, interviews, result notification, talent pool management (with consent)
- Service use: identity verification, service provision and operation, usage analytics, customer support
- Automatic collection: usage analytics, security threat detection, service improvement
Article 3 (Retention Period and Destruction)
The Company destroys personal information without delay once the purpose of collection and use has been achieved, except where retention is required by applicable laws for the periods below.
| Category | Retention period | Basis |
|---|---|---|
| Adoption inquiry data | 1 year after inquiry is resolved | Internal policy |
| Job application data | 90 days after posting closes (2 years with consent) | Internal policy |
| Service usage records | 1 year after contract termination | Internal policy |
| Contract and payment records | 5 years | E-Commerce Act, Art. 6 |
| Access logs | 3 months | Protection of Communications Secrets Act, Art. 15-2 |
| Consumer complaint/dispute records | 3 years | E-Commerce Act, Art. 6 |
Destruction method: electronic files are permanently deleted using technical methods that prevent recovery, and paper documents are shredded or incinerated.
Article 4 (Provision to Third Parties)
The Company processes personal information only within the scope specified in Article 2 and, in principle, does not provide it to third parties without the data subject's prior consent, except in the following cases.
- Where the data subject has given separate prior consent
- Where required by specific legal provisions, or requested by competent authorities for investigation purposes in accordance with legally prescribed procedures
- Where the data subject or their legal representative is unable to express intent or prior consent cannot be obtained due to unknown address, and it is clearly deemed necessary for the urgent protection of life, body, or property of the data subject or a third party
Article 5 (Outsourcing of Processing)
The Company outsources personal information processing as follows to provide the Service smoothly.
| Contractor | Outsourced work | Retention |
|---|---|---|
| Naver Cloud Platform | Cloud infrastructure operation and data storage | Until termination of the outsourcing contract |
Any change in the outsourced work or contractor will be promptly reflected in this policy and announced.
Article 6 (Rights of Data Subjects and How to Exercise Them)
Data subjects (or their legal representatives) may exercise the following rights at any time.
- Request access to personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
Rights may be exercised in writing or by email pursuant to Article 41 of the Enforcement Decree of the Personal Information Protection Act, and the Company will act without delay (within 10 days).
When a data subject requests correction or deletion of errors, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
Article 7 (Cookies)
The Company uses cookies for user convenience. Cookies are small pieces of information sent by the server operating the website to the user's browser and stored on the user's computer.
- Purpose: measuring visit frequency, analyzing usage patterns, providing tailored services
- Opt-out: via browser settings, users may allow all cookies, confirm each time a cookie is saved, or refuse all cookies. Refusing cookies may make some parts of the Service difficult to use.
Article 8 (Security Measures)
The Company takes the following measures to secure personal information.
Administrative
Internal management plans, regular employee training
Technical
Access rights management, access control, encryption of unique identifiers, security software
Physical
Access control to server rooms and data storage areas
Encryption in transit
All data transmitted over HTTPS (TLS 1.2 or higher)
Access records are retained and managed for at least 1 year.
Article 9 (Automated Decision-Making)
The Company's Qurify service includes AI-based data analysis features. However, AI analysis results are reference information to assist users' business decisions; the Company does not perform automated decision-making with legal effect on individuals.
Users who wish to request an explanation of the AI service's processing logic or object to automated processing may contact the Privacy Officer below, and we will respond in good faith.
Article 10 (Privacy Officer)
The Company designates the following Privacy Officer to oversee personal information processing and to handle related complaints and remedies.
Privacy Officer
Data subjects may direct all privacy-related inquiries, complaints, and requests for remedy arising from use of the Service to the Privacy Officer. The Company will respond and act without delay.
Article 11 (Remedies for Infringement)
Data subjects may apply for dispute resolution or consultation with the following Korean institutions to obtain remedies for privacy infringement.
Personal Information Dispute Mediation Committee
1833-6972 (no area code) · www.kopico.go.kr
Personal Information Infringement Report Center
118 (no area code) · privacy.kisa.or.kr
Supreme Prosecutors' Office Cyber Investigation
1301 (no area code) · www.spo.go.kr
National Police Agency Cyber Bureau
182 (no area code) · ecrm.cyber.go.kr
Article 12 (Changes to This Policy)
This Privacy Policy applies from June 15, 2026. Previous privacy policies are superseded by this policy.
Any additions, deletions, or amendments will be announced via website notices at least 7 days before taking effect.
SmartMind AI Inc.
Business registration no. 552-81-01061
4F, 11 Nonhyeon-ro 16-gil, Gangnam-gu, Seoul 06307, Korea