Privacy Policy
English translation provided for reference only. In case of any conflict, the Korean original prevails.
ieum Networks Co., Ltd. (the "Company"), in operating the I:UM platform (the "Platform") including its advertising and listing services, establishes and discloses this Privacy Policy as follows to protect users' personal information and comply with applicable laws.
This Policy takes effect on August 17, 2026.
Article 1 (Purposes of Processing Personal Information)
The Company processes users' personal information for the following purposes and, if the purposes change, will provide notice through a prior-consent procedure or a procedure required by law.
• Membership and management: confirming intent to join, identifying and authenticating the individual, and maintaining and managing membership for member-based services
• Service provision and performance of advertising contracts: applying for, paying for, running, and settling advertising products, and performing contractual relationships with advertisers
• Marketing and personalized advertising: displaying interest-based ads, analyzing usage statistics, etc.
• Customer service and complaint handling: resolving user grievances and disputes, and supporting the exercise of data-subject rights
• Other purposes such as providing new services and fulfilling statutory obligations
Article 2 (Categories of Personal Information Processed)
The Company processes the following categories of personal information to provide the service.
| Category | Required/Optional | Items |
|---|---|---|
| Sign-up & account management | Required | Name or company name, business registration number (for corporate members), representative name, contact details (mobile, landline), email address, ID and password |
| Business verification (corporate members) | Required | Business registration number, representative name, business opening date (as stated on the certificate), copy of the business registration certificate, National Tax Service lookup result (registration status — active, suspended, closed or unregistered; authenticity match; lookup time) |
| Advertiser contract & payment | Required | Business name, business registration number, agent name, payment information (billing details, partially encrypted card information, etc.), bank account number (for refunds) |
| Usage logs & access data | Required | IP address, access logs, cookies, device information, service usage records |
| Purchase inquiry to an external company | Required (separate consent) | Requester work email, product, quantity, requested delivery date, inquiry details, consent-text version and consent timestamp |
| Marketing & personalized ads | Optional (with consent) | Areas of interest, usage patterns, click/view records, ad-response data |
※ Personal information of children under 14 is not collected separately; if collected, the consent of a legal guardian is obtained.
Article 3 (Processing and Retention Period)
As a rule, users' personal information is retained for up to 3 years after membership withdrawal or termination of the advertising contract, and is destroyed immediately thereafter.
However, where the preservation of transaction records is required by applicable law (the E-Commerce Act, tax laws, etc.), it is retained for the period prescribed by that law.
Payment and billing information may be retained for the retention period under tax law (up to 10 years).
Platform retention: An external-company purchase inquiry (email address, inquiry details and consent record) is retained for 90 days from submission and then automatically deleted. If the supplier signs up, its company affiliation is verified and the inquiry is released, an additional 60 days from the release date applies so the supplier has time to reply — up to a maximum of 150 days on the Platform.
Recipient mailbox: Inquiry-arrival alerts sent to registered or unregistered suppliers do not include the requester email, product, quantity, delivery date or inquiry details. The alert email itself therefore does not store the inquiry's personal information.
Copies separately saved by the supplier: After sign-up and company-affiliation verification, an authorized contact may separately save information viewed in the dashboard or create records through later communications. Those copies are governed by the supplier's own retention policy and applicable law and are not automatically deleted when the Platform deletes the inquiry.
Article 4 (Provision to Third Parties)
As a rule, the Company does not provide users' personal information to third parties. The following are exceptions:
• Where separate consent has been obtained from the data subject
• Where there are special provisions in law
• Where it is provided to partners or contractors for the operation of advertising products
• Where urgently necessary for the benefit of life, body, or property
Separate consent for an external-company purchase inquiry
• Recipient: an authorized contact of the supplier selected by the requester, after account and company-affiliation verification
• Purpose: reviewing and replying to the purchase inquiry
• Data provided: requester work email, product, quantity, requested delivery date and inquiry details
• Retention/use: access on the Platform follows Article 3 above; information separately saved by the supplier follows its own policy and applicable law.
• Refusal: consent may be refused, but the purchase inquiry cannot then be submitted to that supplier.
National Tax Service lookup for business-registration authenticity and status
• Queried authority: the National Tax Service of Korea (Public Data Portal "Business Registration Authenticity and Status Inquiry Service")
• Data queried: business registration number, representative name, business opening date
• Purpose: verifying that a corporate member's business registration is genuine and whether the business is suspended or closed (membership eligibility, prevention of fraudulent company registrations, transaction safety)
• When: after sign-up (company profile registration) and periodically (about every 6 months) while membership continues; administrators may also run a lookup manually during review.
• Legal basis: Article 15(1)(4) of the Personal Information Protection Act (necessary to perform a contract with the data subject). Only the minimum items needed for the lookup are sent, and the NTS returns only the registration status and whether the details match.
• Retention/use: lookup results are viewable only by administrators while membership continues and are deleted when the withdrawal is processed.
• Effective: this clause (including the "Business verification" row in Article 2) takes effect on September 20, 2026 (amendment announced September 12, 2026).
Article 5 (Outsourcing of Processing)
The Company may outsource the processing of personal information as follows to provide the service.
• Contractors and outsourced tasks
- Supabase Inc. — database, authentication, file storage, and server functions
- Vercel Inc. — website hosting
- Lovable — application development platform and AI feature processing
- PortOne — domestic payment, refund, and recurring billing
- PayPal — international payment and refund
- Resend, Inc. — email delivery
- Solapi — KakaoTalk notification and SMS delivery
- Google LLC — website usage analytics, address/coordinate conversion, inquiry-record spreadsheet integration
- Kakao Corp. — address search and map/coordinate conversion
- ipwho.is, ipapi.co — country/region lookup from access IP (abuse prevention)
• Outsourcing period: for the term of the outsourcing agreement or until account withdrawal
Article 6 (Collection and Use of Cookies and Behavioral Data)
The Company may collect and use behavioral data, including cookies, to improve service convenience and provide personalized advertising.
Users may refuse the storage of cookies through browser settings; if refused, use of some services may be restricted.
Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)
Users may exercise the following rights at any time:
• Request to access personal information
• Request to correct errors
• Request to delete or suspend processing
• Request to withdraw consent
Article 8 (Procedure and Method of Destruction)
Destruction procedure
Personal information whose retention period has elapsed or whose purpose has been achieved is destroyed according to an internally established destruction plan.
Destruction method
• Electronic files are deleted by a method that makes recovery impossible
• Paper documents are shredded or incinerated
Article 9 (Measures to Ensure Security)
The Company implements the security measures prescribed by Article 29 of the Personal Information Protection Act and its Enforcement Decree.
• Establishing and implementing an internal management plan
• Minimizing and training personnel who handle personal information
• Operating an access-control system and keeping access logs
• Encryption, and installing and updating security programs
• Access control to physical storage locations, etc.
Article 10 (Overseas Transfer or Provision to a Third Country)
Where the Company transfers information overseas or provides it to a third country for service provision and ad execution, it specifies the destination country, purpose, and retention period to the data subject and obtains consent.
Article 11 (Automated Decision-Making and Personalized Advertising)
With the user's consent, the Company may provide personalized advertising and automated decision-making features; in such cases, the user has the right to request an explanation of the process.
Article 12 (Privacy Officer and Complaint-Handling Department)
The Company designates the following officer for personal-information processing, who handles data-subject grievances and remedies.
• Officer: Yoonki Kim (CEO)
• Contact: Tel +82-10-9259-6498 / Email contact@i-um.co.kr
• Complaint handling: Submitted through the contact above; the Company acknowledges receipt and replies with the outcome.
Article 13 (Remedies for Rights Infringement)
Data subjects may request consultation and remedies from the following bodies:
• Privacy Infringement Report Center (www.privacy.go.kr)
• Personal Information Dispute Mediation Committee
• Other courts of competent jurisdiction
Article 14 (Changes to This Policy)
This Privacy Policy may change in accordance with law or internal policy; changes will be announced within the Platform or by individual notice, specifying the reason and effective date.
Addendum
Effective date: August 17, 2026 (National Tax Service lookup amendment: effective September 20, 2026, announced September 12, 2026)