Privacy Policy
Effective date: 2026-07-02
(주)한길아이티 (Hangil IT Co., Ltd.) (the "Company") complies with applicable data-protection law and collects only the minimum personal data needed for payment and license issuance. The Company does not collect or store raw card data or resident registration numbers.
1. Personal Data We Collect
- Required: email address (license key & receipt delivery, payment confirmation)
- Optional / B2B: name, business registration number (for tax invoices)
- Automatically collected: transaction identifiers assigned by the payment provider, access logs (security & fraud prevention)
- Never collected: raw card numbers, resident registration numbers
2. Purposes of Processing
- Confirm payment and automatically issue/deliver licenses
- Issue receipts and tax documents
- Respond to inquiries and handle disputes/refunds
- Prevent fraudulent payments and secure the service
3. Card Data
Card entry, authentication, and storage are handled directly by PCI DSS-certified processors (international: Paddle; domestic Korea: Toss Payments, etc.).
The Company’s servers and database never receive or store raw card data — only transaction tokens/identifiers issued by the processor.
4. Third-Party Sharing and Processing
The Company entrusts or shares personal data with the following for payment, issuance, and tax purposes:
- Paddle.com Market Ltd. — international payment processing, receipts, tax (Merchant of Record)
- Toss Payments Co., Ltd. — domestic payment processing and settlement
- Tax-invoice provider (e.g., Popbill) — issuing tax documents
- Hosting/infrastructure: Vercel Inc., Supabase (database)
5. Cross-Border Transfer
International payment (Paddle) and some infrastructure (hosting/database) may be processed outside Korea.
Transferred items are minimal (email, transaction identifiers) for the purpose of payment processing and service delivery. By proceeding with payment, the user consents to such transfer.
6. Retention Period
Data is destroyed without delay once its purpose is met, except as required by law:
- Records on contracts/withdrawal: 5 years
- Records on payment and supply of goods: 5 years
- Records on consumer complaints/disputes: 3 years
7. Your Rights
Users may request access, correction, deletion, or suspension of processing of their personal data at any time; the Company will act without delay under applicable law.
Requests can be made to the data-protection officer below.
8. Cookies
The Company uses a minimal cookie (apay_locale) to remember language preference and does not use advertising or tracking cookies.
9. Data Protection Officer
- Officer: 황규환
- Contact: support@aroaduser.com
- Address: 서울특별시 구로구 디지털로243, 307호 (우 08382)