Privacy Policy
Insight Factory (인사이트팩토리, "we") complies with the Personal Information Protection Act of the Republic of Korea and related laws, and sets out this policy to protect your personal information and handle related requests promptly. If this English version differs from the Korean version, the Korean version prevails.
1. Information we process and why
| Category | Items | Purpose |
|---|---|---|
| Request form (required) | Service, company name, contact name, email, request details | Reviewing the request, scoping and proposals, contacting you |
| Request form (optional) | Phone number, preferred timeline | Faster contact, scheduling |
| Collected automatically | IP address, access time, requested path, browser information (User-Agent) | Blocking excessive repeat submissions, security and incident response |
We do not collect resident registration numbers or other unique identifiers, nor sensitive information. Please avoid entering personal data or trade secrets in the request details field.
2. Retention period
- Request information: once the business consultation ends, our staff delete the Telegram message. The backup record kept on the server is destroyed automatically 90 days after receipt. If the request leads to a contract, the information needed for the contract is moved to contract records and follows the transaction-record periods below.
- Transaction records under a contract: transaction evidence such as contracts, tax invoices and payment records is kept for 5 years from the statutory filing deadline under the Framework Act on National Taxes and the Value-Added Tax Act; commercial books and important business documents are kept for 10 years under the Commercial Act. Client contact details in these documents (name, contact information, etc.) are kept for the same period.
- Web server access logs (including IP addresses): deleted automatically after 14 days. Application logs do not record IP addresses and are kept for up to 3 months.
- Duplicate-prevention identifier (a hash of the request content): deleted after 24 hours.
If you ask us to delete your information, we do so without delay, except for information we are legally required to keep.
3. Disclosure to third parties
We do not provide your personal information to third parties, except where a public authority requests it through lawful procedures.
4. Transfer abroad
To notify us immediately when a request arrives, request details are sent to the Telegram messenger service. This transfers personal information outside Korea.
| Item | Details |
|---|---|
| Recipient | Telegram (Telegram FZ-LLC and other Telegram operating entities) |
| Countries | The United Arab Emirates and other countries where Telegram servers are located |
| When and how | On form submission, over an encrypted connection (HTTPS) |
| Items | Request number, service, company name, contact name, email, phone, timeline, request details |
| Purpose | Notification of new requests and review by our staff |
| Retention | Deleted from the Telegram chat by our staff once the business consultation ends |
You may refuse the transfer abroad. However, service requests are accepted only through this form and the intake process includes the Telegram transfer, so refusing means the form cannot be submitted. You refuse simply by not checking the consent box on the form.
5. Outsourcing
We do not outsource the processing of personal information. If that changes, we will update this policy to name the processor and the work involved.
6. Destruction
Personal information is destroyed without delay once its retention period ends or its purpose is fulfilled.
Electronic files are deleted so they cannot be recovered; paper documents are shredded or incinerated.
7. Your rights
You may at any time request access to, correction, deletion or suspension of processing of your personal information, and withdraw your consent.
Send requests through the request form with “Privacy & Terms Inquiry” selected as the service, or to the privacy officer's email (devkain102@gmail.com). We verify your identity against the email address given in your service request, act within 10 days and reply with the result by email. You may also make a request through a representative with proof of authorization.
8. Information stored in your browser
So that you do not lose a form in progress, its contents and the result of your last request are kept in your browser's local storage (localStorage). This data stays on your device and is not sent to us.
The draft is cleared once the request is submitted, and you can remove it at any time by clearing site data in your browser. We do not use cookies or advertising or analytics tools.
9. Security measures
- Encryption in transit (HTTPS)
- Request data stored only in the service's own path on the server, with file permissions limited to the operator account
- Request data past its retention period destroyed automatically every day
- Blocking of excessive repeat submissions and automated bot submissions
- Keeping the number of people who handle personal information to a minimum
10. Privacy officer
| Item | Details |
|---|---|
| Privacy officer | Chanseok Park (Representative) |
| devkain102@gmail.com | |
| How to contact | Through the request form with “Privacy & Terms Inquiry” selected as the service (we reply to the email address you enter) |
You can also contact the following Korean authorities about privacy infringements.
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (in Korea)
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
- Supreme Prosecutors' Office Cyber Investigation: www.spo.go.kr / 1301 (in Korea)
- Korean National Police Agency Cyber Bureau: ecrm.police.go.kr / 182 (in Korea)
11. Changes to this policy
This policy applies from October 21, 2026. Any changes will be announced on this page at least 7 days before they take effect.