Privacy Policy

1. Purpose of Processing Personal Information

IDeAOcean processes personal information for the following purposes. The Company does not use processed personal information for any other purpose than the following, and if a purpose of use is to be changed, it shall seek prior consent.

Service : IDeAOcean Website

Purpose of Processing : Providing goods or services

2. Collecting, Processing, Use, and Retention Periods of Personal Information

IDeAOcean destroys personal information immediately when it fully serves its purpose. If it is necessary to retain personal information in accordance with the related laws and regulations, such information is retained for a certain period of time. The processing, use, and retention periods of personal information are as follows.

Personal Information Collected and Retained : Name, email, phone number, company/institute, areas of interest, inquiry details

Retention Period : Until consent is withdrawn or the contract is terminated

3. Provision of Personal Information to Third Parties

IDeAOcean processes personal information only within the scope specified in this Privacy Policy and does not provide it to third parties without the prior consent of the information subject, except where specifically required by applicable laws or otherwise permitted under the Personal Information Protection Act.

4. Consignment of Personal Information Processing

For smooth processing of personal information and handling of inquiries, IDeAOcean consigns personal information processing tasks as follows, and stipulates the necessary matters in the consignment contract to ensure that personal information is managed safely.

EmailJS Pte. Ltd. : Delivery (transmission) of inquiry emails

Google LLC : Receipt and storage of inquiry emails

Daou Tech Inc. (Daou Office) : Receipt and storage of inquiry emails

Slack Technologies, LLC : Notifying staff of new inquiries (internal messenger)

Notion Labs, Inc. : Recording and managing inquiries

Vercel Inc. : Hosting the website and sending inquiry notifications

5. Overseas Transfer of Personal Information

IDeAOcean transfers personal information overseas as follows for the purpose of handling inquiries.

Transferee : EmailJS Pte. Ltd. (servers in the USA · contact : www.emailjs.com/contact-us) / Items transferred : name, email, company/institute, phone number, areas of interest, inquiry details / Time and method of transfer : transmitted via the information and communications network upon inquiry submission / Purpose of use : delivery (transmission) of inquiry emails / Retention period : until transmission is complete

Transferee : Google LLC (USA · contact : support.google.com/policies) / Items transferred : name, email, company/institute, phone number, areas of interest, inquiry details / Time and method of transfer : received via the information and communications network upon inquiry receipt / Purpose of use : receipt and storage of inquiry emails / Retention period : until consent is withdrawn or the contract ends

Transferee : Slack Technologies, LLC (USA · contact : privacy@slack.com) / Items transferred : name, email, company/institute, phone number, areas of interest, inquiry details / Time and method of transfer : transmitted via the information and communications network upon inquiry submission / Purpose of use : notifying staff of new inquiries / Retention period : until consent is withdrawn or the contract ends

Transferee : Notion Labs, Inc. (USA · contact : www.notion.com/privacy) / Items transferred : name, email, company/institute, phone number, areas of interest, inquiry details / Time and method of transfer : transmitted via the information and communications network upon inquiry submission / Purpose of use : recording and managing inquiries / Retention period : until consent is withdrawn or the contract ends

Transferee : Vercel Inc. (USA · contact : privacy@vercel.com) / Items transferred : information entered in the inquiry form, connection data (IP address, access time, browser information) / Time and method of transfer : transmitted via the information and communications network when you visit the website or submit an inquiry / Purpose of use : hosting the website and sending inquiry notifications / Retention period : per Vercel policy after processing

How to refuse and what happens : if you do not want your information transferred overseas, please do not use the inquiry form; in that case inquiries cannot be received through the form.

6. Destruction of Personal Information

In principle, IDeAOcean shall destroy personal information without delay when the purpose of processing the personal information is achieved. The procedure, time, and method of destruction are as follows.

Procedure of destruction : The information entered by the user is transferred to a separate DB (separate documents in the case of data on paper) after achieving the purpose and is stored for a certain period of time or immediately destroyed according to the internal policy and other related statutes. Here, the personal information transferred to the DB shall not be used for any other purpose than what is required by the laws.

Time of destruction : Personal information of the user shall be destroyed within five days after the end date of the retention period or within five days after the date on which it is acknowledged that processing of such personal information is no longer necessary due to reasons such as fulfillment of the purpose of personal information processing, discontinuation of the service, closing of the business, etc.

Method of destruction : Personal information recorded and stored as electronic files shall be destroyed by using a technical method that renders it impossible to reproduce the information; personal information recorded and stored on paper documents shall be destroyed by shredding or incineration.

7. Rights and Duties of Information Subject and Legal Representative and Methods of Exercising Them

As a personal information subject, the user can exercise the following rights.

The information subject may at any time exercise the right to access, correct, or delete his/her personal information or request discontinuance of personal information processing to IDeAOcean.

The user can exercise the rights under Paragraph 1 by documents, email, fax, etc. according to Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and IDeAOcean shall take actions accordingly without delay.

The information subject may exercise the rights under Paragraph 1 through his/her legal representative, trustee, or other authorized agents. In this case, the user shall submit a power of attorney produced on the form in Annex 11 of the Enforcement Rules of the Personal Information Protection Act.

The information subject’s right to request suspension of personal information access or processing may be limited pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.

Correction or deletion of personal information may not be requested if such personal information is specified to be subject to collection in other laws or regulations.

IDeAOcean performs verification of whether the requester of viewing, correcting or deleting personal information or suspending processing of such information is the information subject or his/her rightful agent.

8. Measures to Ensure Safety of Personal Information

In accordance with Article 29 of the Personal Information Protection Act, IDeAOcean takes the following technical, administrative, and physical measures necessary to ensure safety.

Periodic self-audit : In order to ensure safety in handling personal information, the Company conducts self-audit on a regular basis (once a year).

Minimization and training of personnel handling personal information : The Company designates persons who handle personal information and minimizes such personnel size by limiting assignment of such tasks to managers only.

Establishment and implementation of internal management plan : The Company establishes and implements internal management plans for safe handling of personal information.

9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices (Cookies)

IDeAOcean uses Google Analytics to analyze website visits and improve its services, and cookies are used in this process to store and retrieve visitors' information.

How to refuse cookies : Users may refuse the storage of cookies through their web browser settings. However, refusing cookies may cause difficulties in using some services.

Opting out of Google Analytics : You may opt out by installing the 'Google Analytics Opt-out Browser Add-on' (tools.google.com/dlpage/gaoptout) in your browser.

10. Processing of Personal Information of Children Under the Age of 14

IDeAOcean does not collect personal information from children under the age of 14.

11. Privacy Officer

IDeAOcean designates privacy officers to be in charge of handling personal information, dealing with complaints of the information subject related to personal information processing, and providing damage relief.

The information subject can make inquiries to the privacy officers or the departments in charge regarding personal information protection, complaint handling, damage relief in using the service (or regarding business) of IDeAOcean. IDeAOcean shall respond to and handle inquiries from the information subject without delay.

Name : Jungho Kim

Position : CEO

Email : contact@ideaocean.ai

12. Remedies for Infringement on Rights of Information Subjects

The following are separate organizations from IDeAOcean, and if you are not satisfied with IDeAOcean's handling of privacy complaints, damage relief results, etc. or need further assistance, you can contact these organizations.

Personal Information Infringement Report Center (operated by the Korea Internet and Security Agency) : (without area code) 118 (privacy.kisa.or.kr)

Personal Information Dispute Mediation Committee : (without area code) 1833-6972 (www.kopico.go.kr)

Cyber Crime Investigation Team of the Supreme Prosecutors' Office: 1301 (no area code) (www.spo.go.kr)

National Police Agency Cyber Bureau: (without area code) 182 (ecrm.police.go.kr)

13. Change in Privacy Policy

This Privacy Policy is effective as of September 29, 2026. In case there is any addition, deletion, or correction of provisions in accordance with the relevant statutes and policies, the Company shall notify the details before implementation of the change.

The previous policy applied from July 6, 2026 to September 28, 2026.