Privacy Policy

Angelswing Inc. (hereinafter referred to as the "Company") thoroughly complies with domestic personal information protection laws and regulations, such as the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as the "Information and Communications Network Act") and the Personal Information Protection Act. To this end, the Company has established and disclosed the following Privacy Policy to do its utmost to protect users' rights and interests.

This Privacy Policy applies to all related services provided by the Company, including the Angelswing Drone Data Platform (hereinafter referred to as the "Service"), and contains the following details:

Collection of Personal Information
Purpose of Use of Personal Information
Retention and Use Period of Personal Information
Provision and Entrustment of Personal Information
Inspection, Revision, Deletion, and Misappropriation of Personal Information
Destruction of Personal Information
Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
Rights and Obligations of Members
Technical/Administrative Protection Measures for Personal Information
Contact Information of Personal Information Protection Officer and Manager
Revision and Notice of Privacy Policy

1. Collection of Personal Information

All users can use the services provided by the Company, and richer services are available through membership registration. When collecting personal information from users, the Company will notify users in advance and obtain their consent. Collection methods include the website (membership registration), service usage, customer service consultation, inquiry email, phone, and written forms. The personal information collected from users is as follows.

A. Personal Information Collected

1. Website Membership Registration and Management

A. Required Information

Login ID (Email), Password
Workplace information such as company/department/position, Name, Contact information such as mobile phone number/email
Information generated during service usage, such as usage patterns and frequency of use
Operating system and hardware environment information, such as OS version and device information

B. Optional Information

Profile picture, profile information entered by the member

2. Service Usage, etc.

A. Required Information

Login ID (Email), Password
Workplace information such as company/department/position, Name, Contact information such as mobile phone number/email
Information generated during service usage, such as usage patterns and frequency of use
Operating system and hardware environment information, such as OS version and device information

B. Optional Information

Profile picture, profile information entered by the member

3. During service usage, the following information may be automatically generated and collected:

IP Address, cookies, device information, date and time of visit, service usage records, records of improper use, etc.

4. When inevitably required for payment during the use of paid services, the following information may be collected:

Credit card payment: Credit card company name, credit card number, etc.
Bank transfer: Bank name, account number, etc.

5. For a free trial by test users, the following information may be collected:

Name, company name, contact information such as mobile phone number/email

6. Personal information may be collected through webpages, email, fax, phone, etc., during consultation with customer service.

B. Method of Collecting Personal Information

The Company collects personal information through the following methods:

Collection through voluntary provision by users during service registration or use
Generated information such as device information and service usage records are automatically collected during the service usage process

2. Purpose of Use of Personal Information

The Company collects personal information of users for the following purposes. The collected personal information will not be used for purposes other than the following, and prior consent will be sought if the purpose of use changes.

A. Membership Registration and Management

User identification, confirmation of intent to join, restriction on registration and registration frequency, etc.
Securing smooth communication channels, responding to customer inquiries, etc.
Notices of new feature releases, delivery of announcements, etc.
Prevention of fraudulent use and unauthorized use by bad members, record retention for identity verification and dispute resolution, processing of grievances/complaints, etc.

B. Provision of Service Features

Providing services available through member accounts within the service, such as project upload, management, sharing, and using features within projects

C. Execution of Contract Regarding Service Provision and Fee Settlement for Paid Services

Providing promised services to users, fee settlement upon purchasing and using services

D. Service Improvement and New Service Development

Discovering new service elements based on the analysis of service visit and usage records, and using them to improve existing services

E. Utilization for Customized Services and Prevention of Misuse

Analysis of service usage records and access frequency, statistics on service usage, provision of customized services, utilization for service improvement, etc.
Fulfillment of prescribed obligations, prevention of improper use that violates laws or terms of use and causes damage to users, etc.

F. Grievance Handling

Verification of the complainant's identity, checking complaint details, contact and notification for fact-finding, and notification of processing results

3. Retention and Use Period of Personal Information

The Company uses users' personal information strictly within the scope of the purpose of collection and use, and for the specified usage period. When a user requests withdrawal or withdraws consent, the information is destroyed without delay.

However, information required to be retained under relevant laws and regulations will be kept for the period specified by law.

A. Retention of Information Under Internal Company Policies

1. Website membership registration and management: Until withdrawal from the business/organization website.

However, in the case of the following reasons, until the corresponding reason ends:

In cases where an investigation or inquiry due to a violation of relevant laws is ongoing: Until the end of the investigation or inquiry
In cases where claims and debt relationships remain due to website use: Until the settlement of such claims and debt relationships

2. Retention of improper use records: 1 year (to prevent improper use)

B. Retention of Information Under Relevant Laws

If there is a need to retain information for a certain period under the provisions of relevant laws such as the Act on Consumer Protection in Electronic Commerce, etc. and the Protection of Communications Secrets Act, the Company retains the stored information for a specified period as follows:

1. Records on transactions such as display, advertisement, contract details, and performance under the "Act on Consumer Protection in Electronic Commerce":

Records on contract or subscription withdrawal, payment, supply of goods, etc.: 5 years
Records on customer complaints or dispute resolution: 3 years
Records on display and advertisement: 6 months

2. Retention of communication fact confirmation data under the "Protection of Communications Secrets Act":

Computer communication, internet log data, access location tracking data: 3 months

4. Provision and Entrustment of Personal Information

The Company uses members' personal information strictly within the scope specified in 'Purpose of Collection and Use of Personal Information' and does not provide personal information to external parties without member consent. Accordingly, the following information may be disclosed during service use:

A. Disclosure of Personal Information

While using web services, a member's business card information and other information entered by selective consent may be disclosed between connected members. Furthermore, when a member shares a project with another party, certain information such as name and profile picture may be disclosed to the recipient for identifier confirmation.

B. Entrustment of Personal Information

The Company entrusts personal information as follows to improve services. In accordance with relevant laws (specifying matters regarding prohibition of personal information processing outside the purpose of entrusted tasks, technical/administrative protection measures, re-entrustment restrictions, management/supervision of trustees, liability for damages, etc., in documents such as contracts pursuant to Article 25 of the Personal Information Protection Act upon entering into an entrustment contract), the Company regulates necessary matters so that personal information can be safely managed. If the trustee changes, the Company will disclose it through this Privacy Policy without delay.

Trustee Name & Contact: Amazon Web Services, Inc. (https://aws.amazon.com/compliance/contact/)
Entrusted Work & Purpose: Data storage and system operation
Country of Personal Information Transfer: Republic of Korea (AWS Seoul Region)
Items of Transferred Personal Information: All personal information collected during the service provision process
Date & Time of Personal Information Transfer: Upon initial membership registration or service usage
Method of Personal Information Transfer: Storing personal information in AWS cloud computing environment
Retention and Use Period of Personal Information: Operating and managing cloud servers where personal information is stored during the personal information retention period

In principle, the Company does not disclose users' personal information to external parties except for the items specified above. However, exceptions are made when requested by investigative agencies according to procedures and methods prescribed by laws for investigation purposes, or with user consent. In addition, when necessary for statistics preparation, academic research, or market research, information may be provided in a form processed so that specific individuals cannot be identified.

5. Inspection, Revision, Deletion, and Misappropriation of Personal Information

Members may inspect, disclose/undisclose, or revise their personal information at any time, and request deletion or destruction.

A. Request for Inspection and Revision of Personal Information

Members can view and modify their registered personal information at any time. To view or modify such personal information, members can click 'My Page' in the service to directly view or modify registered personal information such as accounts.
If the user is a minor under 14 years of age, their legal representative (parents, etc.) has the right to view or modify the minor's personal information, and withdraw consent for collection and use.

B. Deletion of Personal Information (Membership Withdrawal)

If a member wishes to withdraw membership, they can log in to the website and directly withdraw via 'MYPAGE-Delete Account'. If direct withdrawal is difficult, please contact the personal information manager via phone or email, and measures will be taken without delay.

C. Misappropriation of Personal Information

If the Company discovers a person who registered as a member or used the service by misappropriating another person's phone number, email address, affiliated organization ID, or other personal information, the Company will immediately take necessary measures, such as suspending service use for the ID or withdrawing membership.

6. Destruction of Personal Information

In principle, members' personal information is destroyed without delay once the purpose of collection and use of personal information is achieved. The Company's procedures and methods for destroying personal information are as follows:

A. Destruction Procedure

Information entered by members for service registration, etc., is moved to a separate DB or storage location after the purpose is achieved, stored for a certain period according to internal policies and other related laws for information protection reasons (refer to Retention and Use Period of Personal Information), and then destroyed. The personal information stored separately will not be used for purposes other than those specified.

B. Destruction Deadline

If the retention period of the user's personal information has expired, it shall be destroyed within 5 days from the end date of the retention period. When the personal information becomes unnecessary due to achievement of the processing purpose, abolition of the service, or termination of business, it shall be destroyed within 5 days from the date it is recognized that processing is no longer necessary.

C. Destruction Method

Personal information printed on paper is destroyed by shredding with a shredder or by incineration. Personal information stored in electronic file format is deleted using a technical method that cannot reproduce the records.

7. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses 'cookies' to store and frequently retrieve user information in order to provide individualized, customized services. A cookie is a special text file sent to the user's storage device when visiting a website, transmitted in a format that can only be read by the website server, and stored in a sub-directory of the browser used by the individual. In environments where cookie technology cannot be used, such as mobile applications, technologies performing functions similar to cookies (such as advertising identifiers) may be used.

A. Purpose of Using Cookies

Cookies are used to provide optimized information to users by identifying visit and usage patterns, popular search terms, secure connection status, etc., for each service and website visited by the user.

B. Refusal of Cookie Settings

Users have the right to choose whether to set cookies. By selecting web browser options, users can decide to allow all cookies, allow cookies through consent, or block all cookies. However, if cookie storage is refused, use of some services requiring login may be restricted.

8. Rights and Obligations of Members

Members have the right to be protected regarding their personal information, as well as the obligation to protect themselves and not infringe on others' information. Please take care so that members' personal information, including passwords, is not leaked, and be careful not to damage others' personal information, including posts.

Responsibility for accidents arising from inaccurate information entered by members lies with the user. Members have an obligation to prevent unforeseen accidents by entering personal information accurately and keeping it up to date.

If members fail to fulfill the above responsibilities and damage others' information and dignity, they may be punished under related laws such as the "Act on Promotion of Information and Communications Network Utilization and Information Protection".

9. Technical/Administrative Protection Measures for Personal Information

In accordance with Article 29 of the Personal Information Protection Act, the Company makes the following efforts to protect users' valuable personal information:

A. Minimization and Training of Personal Information Processing Staff

Employees handling personal information are strictly limited to designated managers, and compliance with the Company's Privacy Policy is always emphasized through frequent training for designated managers.

B. Technical Measures Against Hacking, etc.

The Company does its best to prevent leakage or damage of members' personal information caused by hacking, computer viruses, etc. The Company prevents leakage or damage of members' personal information or data, and ensures safe transmission of personal information over networks through encrypted communications.

C. Encryption of Personal Information

Users' personal information and passwords are encrypted, stored, and managed so that only the user knows them. Important data uses separate security functions, such as encrypting files and transmission data or using file lock functions.

D. Retention of Access Records and Prevention of Forgery/Alteration

Records of access to the personal information processing system are retained and managed for at least 6 months, and security functions are used to prevent access records from being forged, altered, stolen, or lost.

10. Contact Information of Personal Information Protection Officer and Manager

You may report all personal information protection-related complaints arising from using the Company's web services to the Personal Information Protection Officer or responsible department. The Company will promptly respond to members' reports.

Personal Information Protection Officer

Name: Jeongseok Lee
Affiliation: Angelswing Inc.
Position: Chief Information Security Officer (CISO)
Phone: 070-8098-1040
Email: support@angelswing.io

If you need reports or consultation regarding personal information infringement, you may contact the following organizations for help:

Personal Information Infringement Report Center: (Without area code) 118 | http://privacy.kisa.or.kr
Supreme Prosecutors' Office Cybercrime Investigation Unit: 02-3480-3571 | cybercid@spo.go.kr
National Police Agency Cyber Terror Response Center: (Without area code) 182 | http://www.ctrc.go.kr

11. Revision and Notice of Privacy Policy

If there are additions, deletions, or modifications to the above contents, the Company will notify users through the website or individual notices at least 7 days prior to implementation. However, if significant changes occur regarding users' valuable rights or obligations, notice will be given at least 30 days prior, and user consent may be re-obtained if necessary.

*The contents above are identical to the content on the page posted on the date the Privacy Policy was first published (January 21, 2019).