SanPeak Privacy Policy
SanPeak Inc. (주식회사 산픽) (the "Company") complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and establishes and publishes this Privacy Policy to protect users' personal information.
This English version is provided for convenience. In case of any discrepancy, the Korean version prevails.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purpose. If the purpose changes, the Company will take necessary measures, such as obtaining separate consent.
- Sending notifications about the launch of the SanPeak service and beta testing
Article 2 (Personal Information Processed)
- Required item: Email address
Article 3 (Processing and Retention Period)
The Company retains and uses personal information until the launch notification has been sent or until the user withdraws consent, and in any case destroys it within 12 months from the date of collection. However, if retention is required under applicable laws, the information will be retained for the period required.
Article 4 (Provision to Third Parties)
The Company does not provide users' personal information to third parties.
Article 5 (Outsourcing of Personal Information Processing)
To provide its services smoothly, the Company outsources the processing of personal information as follows.
| Processor | Outsourced task |
|---|---|
| Google LLC (Google Workspace / Google Sheets, Gmail) | Storing and managing email addresses |
Article 6 (Transfer of Personal Information Abroad)
In accordance with Article 28-8 of the Personal Information Protection Act, the Company transfers personal information abroad for outsourced processing and storage as follows.
- Recipient: Google LLC
- Country: The United States and other countries where Google's data centers are located
- Time and method of transfer: Transmitted and stored over the network from the time the user submits an email address, throughout the period of use
- Items transferred: Email address
- Purpose and retention period: Storing and managing email addresses and sending notification emails, for the period stated in Article 3
- How to refuse and effect of refusal: Users may decline to consent to the collection and use of personal information, in which case they will not receive launch notifications. Users may request to refuse the overseas transfer by emailing the Chief Privacy Officer.
Article 7 (Procedures and Methods for Destroying Personal Information)
When the retention period has expired, the purpose of processing has been achieved, or a request to withdraw consent has been received, the Company destroys the personal information without delay. Information in electronic files is deleted by a method that makes recovery impossible.
Article 8 (Rights of Users and How to Exercise Them)
Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, or withdraw their consent. You may make a request by emailing the Chief Privacy Officer or by replying to a notification email, and the Company will act without delay.
Article 9 (Children Under 14)
The Company does not collect personal information from children under the age of 14.
Article 10 (Measures to Ensure Security of Personal Information)
The Company takes the following measures to process personal information securely.
- Minimizing and controlling access to personal information
- Encryption of data in transit (HTTPS) and protection of stored data
- Management of, and training for, personnel who handle personal information
Article 11 (Chief Privacy Officer)
- Name: Kyung Eon Lee
- Title: Chief Executive Officer
- Contact: support@sanpeak.app
Article 12 (Remedies for Infringement of Rights)
You may report or seek advice on personal information infringement to the following organizations.
- Personal Information Infringement Report Center: privacy.kisa.or.kr / dial 118 (no area code)
- Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
- Supreme Prosecutors' Office Cyber Investigation Division: spo.go.kr / dial 1301
- National Police Agency Cyber Bureau: ecrm.police.go.kr / dial 182
Article 13 (Changes to This Privacy Policy)
This Privacy Policy takes effect on November 1, 2026. If its content changes, the Company will give notice on its website at least 7 days before the change takes effect.