Privacy Policy

1. Personal Information Collected and Collection Methods

Refind Inc. (the "Company") does not operate a public sign-up or community board on this website, and does not collect personal information directly from general visitors.

Information is processed only in the following limited cases.

· Administrator login: email and password (stored encrypted) — issued solely to Company staff for managing Notice and Card News posts. External users cannot register an account.

· Automatically collected information: access logs such as IP address, access time, and browser information generated by the server while using the site.

· Inquiries: the "Inquiry" menu links to an external Naver Form (a service provided by NAVER Corporation) in a new tab. Any name, email, phone number, or message entered there is collected and stored directly by NAVER, not by this website, and is governed by NAVER's own privacy policy.

2. Purpose of Collection and Use

· Administrator account information: authenticating administrators and verifying content-management permissions

· Access logs: preventing misuse of the service, maintaining server security, and responding to incidents

· Inquiry content (via Naver Form): reviewing and responding to inquiries

3. Retention Period

· Administrator account information: retained while the staff member's administrator role remains active, and destroyed without delay upon revocation.

· Access logs: retained for 3 months in accordance with applicable law (e.g. the Protection of Communications Secrets Act), then destroyed.

· Inquiry information submitted via Naver Form is not stored by the Company and is managed according to NAVER's policies.

4. Provision to Third Parties

The Company does not provide personal information to third parties in principle. Inquiries are submitted directly to NAVER by the user via Naver Form, and the Company only reviews that content for the purpose of responding.

5. Outsourcing of Personal Information Processing

The Company outsources the following operations:

· Supabase, Inc. — cloud database and image file storage

· NAVER Corporation — operation of the inquiry form (Naver Form)

6. Rights of Data Subjects

Users may request access to, correction of, deletion of, or suspension of processing of their personal information held by the Company (e.g. administrator account information) by contacting the address below; the Company will act without delay. Rights relating to information submitted via Naver Form follow NAVER's own procedures.

7. Use of Cookies

This website does not use advertising or analytics cookies for visitors. Only an essential session cookie for maintaining login state is used during administrator login, and it does not apply to general visitors.

8. Security Measures

· Administrator passwords are stored encrypted (bcrypt), and access to administrator functions is restricted to authenticated accounts.

· Communication between the website and server is encrypted via HTTPS.

9. Personal Information Protection Officer

The Company designates the following contact for matters concerning personal information processing and for handling user complaints and requests.

· Company: Refind Inc.

· Phone: 070-4837-2829

· Email: refind@refind.kr

10. Notice of Changes

This privacy policy may be amended to reflect changes in law, policy, or the service, and any changes will be announced on this website.

This policy is effective as of August 7, 2026.