Privacy Policy
Almaneo Inc. (the "Company") complies with the Personal Information Protection Act of Korea and related laws. This policy explains the personal data processed on almaneo.kr (the "Site"), its purposes and retention, and your rights. The Site has no membership or payment features. kinfri.ai, a separate service operated by the Company, is governed by the privacy policy published on kinfri.ai.
Effective 2026-10-05
This is a draft published during incorporation and will be updated after legal review. The Korean text governs.
Article 1 (Data processed and purposes)
| Category | Data | Purpose | How collected |
|---|---|---|---|
| Inquiry form | Company name, name, email, inquiry type, message | Confirming and replying to inquiries; consultation and quotation | Entered by the user |
| Document briefing demo | Documents or text the user selects or uploads (may contain personal data) | Demonstrating briefing generation | Entered by the user — not stored (Article 4) |
| Automatically collected | IP address, request time, browser information (User-Agent) | Rate limiting (abuse prevention), security, incident response | Generated automatically during use |
The Site uses no cookies, no advertising or analytics scripts, and no member identifiers.
Article 2 (Legal basis)
- Inquiry form: processing necessary to fulfil the reply or consultation the data subject requests (PIPA Article 15(1)4).
- Demo input: processing content the data subject provides for the requested demonstration, limited to that demonstration (same article). Users must not enter personal or confidential data.
- Automatically collected data: the Company's legitimate interest in stable service and abuse prevention (same paragraph, item 6).
Article 3 (Retention)
| Category | Retention | Notes |
|---|---|---|
| Inquiry form | 1 year after the inquiry is handled | Kept in the Company's mailbox (Google Workspace). If a consultation leads to a contract, contract records are kept separately for the statutory period |
| Demo input | Not retained | Processed in memory and discarded immediately; not logged |
| Automatically collected data | Up to 30 days | Per the hosting provider's access-log retention. Rate-limit counters last 10 minutes to 1 day |
Article 4 (How the demo processes input)
- Input documents and text are handled in server memory only; they are not written to disk or a database and are not logged. They are discarded when processing ends.
- To generate the briefing, retrieved passages from the document and the user's language setting are transmitted to AI model providers (Article 5) through a gateway the Company controls, using API terms that do not allow training on the data.
- Do not enter documents containing personal or confidential data. You are responsible for what you enter.
Article 5 (Processors and cross-border transfer)
The Company entrusts processing to the following providers, whose servers are located outside Korea (United States and elsewhere). Transfer occurs over the network when you use the relevant feature.
| Processor (location) | Task | Data transferred | Retention |
|---|---|---|---|
| Cloudflare, Inc. (US, global data centers) | Site hosting and request handling, rate-limit counters | IP address, request time, User-Agent, inquiry form submission (in transit) | Access logs up to 7 days · rate-limit counters 10 minutes to 1 day |
| Resend, Inc. (US) | Emailing inquiry form content | Company name, name, email, inquiry type, message | Short-term delivery logs per processor policy |
| AI model providers via Cloudflare AI Gateway — Anthropic, PBC / OpenAI, L.L.C. (US) | Retrieval and generation for the demo | Retrieved passages from the demo input, language setting | Immediate processing (the gateway keeps call metadata such as model and token counts, not content); no training on data |
| Google LLC (US) | Receiving and storing inquiry email (Google Workspace mailbox) | Company name, name, email, inquiry type, message | 1 year after the inquiry is handled (Article 3) |
If you do not want cross-border transfer, contact us by email (human@almaneo.kr) instead of the form and do not use the demo. The Company does not provide personal data to third parties except as required by law.
Article 6 (Your rights)
You may request access to, correction or deletion of, or suspension of processing of your personal data held by the Company. Send requests to the contact in Article 9; we will act without delay (within 10 days) and inform you of the result. Requests by a representative require proof of authorisation.
Article 7 (Destruction)
Personal data is destroyed without delay when the retention period ends or the purpose is achieved. Electronic files are deleted irrecoverably and printed material is shredded. Data that must be kept under other laws is stored separately for the statutory period.
Article 8 (Security measures)
- HTTPS encryption end to end, access limited to the representative, secrets kept in separate environment variables.
- No-storage processing of demo input, rate limiting, bot protection (honeypot).
- Purpose limitation and sub-processing restrictions through processor contracts and policies.
Article 9 (Privacy officer and contact)
| Item | Detail |
|---|---|
| Privacy officer | Jeayong Ma (CEO) |
| human@almaneo.kr | |
| Address | 418 Sunhwagung-ro, 9F-17, Namyangju-si, Gyeonggi-do, Korea (Hyundai Greenery Campus Byeolgaram Station) |
| Business registration number | 120-88-30029 |
You may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
Article 10 (Changes)
This policy takes effect on 2026-10-05 (established 2026-09-09, amended 2026-10-05 — Article 5 processors changed to Cloudflare). Changes are posted on the Site with the effective date at least 7 days in advance (30 days for material changes).
Terms of Service
Conditions for using almaneo.kr — information, inquiries, and the document briefing demo