Privacy Policy

1. Collected directly at registration

• Required: Email, password, company name, contact name
• Optional: Phone number, business type (export/import/both)

Collection method: Direct input through the registration form

2. Collected automatically during use of the Service

IP address, browser and device information, access time, service usage records, and cookies. See Article 7 for details.

3. Business contact information collected in the course of sales activities

• Items: Name, job title, department, company name, phone number, email, address
• Source: Business cards received in person, by mail, or by similar means
• Purpose: Maintaining the business relationship and work-related communication
• Retention: Three years from the end of the business relationship or the last contact

The Company does not collect information beyond what is provided on the business card, and obtains separate consent before using such information to send advertising communications.

1. User identification and registration verification
2. Service provision and access management
3. Matching service connections and communication
4. Customer inquiry response and complaint handling
5. Statistical analysis for service improvement (de-identified)

1. Personal information is retained until account deletion and destroyed without delay upon withdrawal.
2. However, information may be retained as required by law:
   • Records of contracts or subscription withdrawal: 5 years
   • Records of payment and supply of goods: 5 years
   • Records of consumer complaints or dispute resolution: 3 years

1. When the user has given prior consent
2. When required by law
3. When providing minimum necessary information (company name, contact) for matching services

The Company delegates personal information processing tasks as follows.

The Company specifies safeguards for personal information in its delegation agreements and discloses any change of delegate through this Policy. All delegates listed above are located outside the Republic of Korea; overseas transfer details are set out separately in Article 6.

Pursuant to Article 28-8(1)3 of the Personal Information Protection Act of Korea (delegation or storage necessary to enter into and perform a contract with the data subject), the Company discloses the matters required under Article 28-8(2) as follows and transfers personal information overseas.

Time and method of transfer: Transfers occur whenever the user uses the relevant feature, over an encrypted network connection (HTTPS).

Note on business card recognition, meeting records and document analysis: These features currently use the free tier of the Google Gemini API. Under Google's terms, content submitted to the free tier and the responses generated may be used to provide, improve and develop Google products and services, and may be reviewed for quality purposes. Please therefore avoid entering sensitive or confidential material into these features. If you do not wish this transfer to occur, simply do not use these features.

How to refuse the overseas transfer and the effect of refusal: Users may refuse the overseas transfer of their personal information.

• To refuse the transfer of member information (Supabase and Vercel), request account deletion. In that case services requiring registration will no longer be available.
• Transfers tied to individual features (Google Gemini, Anthropic, Resend) may be refused by not using the feature or by unsubscribing. Only that feature is restricted; the rest of the Service is unaffected.
• Google Analytics may be refused through your browser's cookie settings or the opt-out add-on provided by Google (tools.google.com/dlpage/gaoptout).

1. The Company uses cookies to provide a tailored service and to analyse how the Service is used. A cookie is a small piece of information sent by a website to your browser and stored on your device.
2. Purposes: Maintaining login sessions, remembering language preference, and service usage analytics (Google Analytics 4)
3. How to refuse: You may refuse cookie storage through your browser settings (Chrome: Settings > Privacy and security > Third-party cookies / Edge: Settings > Cookies and site permissions / Safari: Preferences > Privacy). Collection by Google Analytics can also be refused using the opt-out add-on provided by Google (tools.google.com/dlpage/gaoptout).
4. If you refuse cookie storage, some services that require login may be restricted.

1. Users may view or modify their personal information at any time.
2. Users may request cessation of processing by withdrawing their account.
3. For privacy-related inquiries, please contact the officer below.

1. Information is destroyed without delay when the retention period expires or the purpose is achieved.
2. Electronic files: Deleted by irreversible methods
3. Paper documents: Shredded or incinerated

The Company maintains the following measures to keep personal information secure.

• Administrative: Minimising the number of personnel who handle personal information, access rights management, and periodic review of those rights
• Technical: One-way encryption of passwords, encryption in transit (HTTPS), row-level access control at the database layer, and audit logging of administrative changes
• Physical: Access control over documents and storage media

The Company designates the following Privacy Officer to oversee personal information processing and to handle inquiries, complaints and remedies from data subjects. Requests to access personal information are also received at the contact details below.

• Privacy Officer: James Lee (CEO)
• Email: james@tylogistics.co.kr
• Phone: 02-6914-9365

Data subjects may apply to the following bodies in Korea for dispute resolution or consultation regarding infringement of their personal information rights.

• Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Centre: +82-118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office, Cyber Investigation Division: +82-1301 (www.spo.go.kr)
• National Police Agency, Cyber Bureau: +82-182 (ecrm.police.go.kr)

1. This Privacy Policy is effective from September 8, 2026.
2. The previous Privacy Policy (effective April 2, 2026) applied until September 7, 2026.
3. Summary of changes: Article 6 (overseas transfer of personal information) and Article 7 (cookies and other automatic collection tools) were newly added, and the delegation table (Article 5), collection of business contact information (Article 1), security measures (Article 10) and remedies for infringement of rights (Article 12) were expanded.