Privacy Policy
VROF Inc. (주식회사 브이로프; the ‘Company’) values the personal information of data subjects and complies with the Personal Information Protection Act and other applicable laws. The Company collects personal information through the inquiry form and the consultation chatbot on this website. It also automatically collects connection information, as set out in paragraph 1(B), to understand how the site is used.
1. Items of personal information collected and methods of collection
A. Items entered directly by the user through the inquiry form
- Required items — Company name, contact name, email address, inquiry type, inquiry message
- Optional items — Phone number, estimated budget, preferred start timing, how you heard about us
B. Connection information automatically collected when you use the site
- Visited page addresses, referral path (domain of the previous site), browser · operating system · device type, screen size, language settings, access country and region, access date and time, IP address, records of on-screen actions such as clicked buttons and links, screen usage recordings (session replay)
For automatic collection, the Company uses a statistics tool it operates itself (Umami), which does not store IP addresses and does not use cookies. The collected information is not provided to third-party advertising businesses, and is not used for behavioral information collection for advertising purposes or for tracking that identifies individual users.
The Company also uses the visit analytics tool PostHog (PostHog Inc., United States). PostHog keeps an identifier that distinguishes visiting devices in a browser cookie (with a name starting with ph_, kept for 365 days) and in browser storage, and records how the screen is used. Input fields, the inquiry form and the consultation chat are masked in the browser before sending, so they are not included in the recordings.
For visitors accessing from the European Union, the European Economic Area, the United Kingdom or Switzerland, PostHog runs only after consent is given. The window shown on the first visit lets you accept all or reject all; your choice is stored in your browser and can be changed at any time under “Cookie settings” at the bottom of the page. Umami uses no cookies and runs regardless of this choice.
C. Items collected when you use the consultation chatbot
- The messages you enter, the chatbot’s replies, your browser type, and the address of the page where you asked the question
- Your IP address is not stored in its original form. Only an irreversibly converted value is kept.
- Resident registration numbers, bank account numbers, card numbers, passwords and phone numbers are masked both before storage and before transfer abroad.
- However, contact details that you enter in the dedicated field with your consent, in order to receive a reply, are forwarded unmasked to our staff by email. They are not stored in the chat history and are deleted one year after your inquiry is resolved. Without your consent, they are not sent.
2. Purposes of use of personal information
The collected personal information is used only for responding to and consulting on inquiries, and replying with quotes and proposals. It is not used for marketing, sending advertising information, or any other purpose.
The connection information under item B of paragraph 1 is used only for understanding site usage and improving the interface.
3. Period of retention and use of personal information
From the date the processing of the inquiry is completed, the information is retained for 1 year and then destroyed without delay. However, if a contract has been concluded, it is retained for the period prescribed by applicable statutes, such as the 「Act on the Consumer Protection in Electronic Commerce, etc.」 (전자상거래 등에서의 소비자보호에 관한 법률).
Information in electronic file form is permanently deleted in a way that cannot be recovered, and any printed output is shredded or incinerated.
The connection information under item B of paragraph 1 is retained for 1 year from the date of collection, and then deleted.
Of the visit analytics (PostHog) records, screen usage recordings are kept for 30 days, and other records follow PostHog’s retention policy.
Chatbot conversations and the values under paragraph 1(C) are kept for 90 days from the day the conversation starts. A daily deletion job removes conversations past this period.
4. Provision of personal information to third parties
The Company does not provide the personal information of data subjects to third parties. This does not apply where required by law or where an investigative agency requests it through lawful procedures.
5. Outsourcing of personal information processing and transfer abroad
For the operation of its services, the Company outsources personal information processing as follows.
| Contractor | Contact | Outsourced service | Country of transfer | Retention period |
|---|---|---|---|---|
| Vercel Inc. | privacy@vercel.com | Website hosting and server operation | United States | Until the outsourcing contract ends |
| Plus Five Five, Inc. (Resend) | support@resend.com | Emailing inquiry messages | United States | Destroyed without delay after transmission |
| ANOMALY INNOVATIONS, INC. (OpenCode) | help@anoma.ly | Generating consultation chatbot replies | United States | Not retained after transmission (according to the provider’s stated policy) |
| PostHog Inc. | privacy@posthog.com | Visit analytics and screen usage recording analysis | United States | Screen usage recordings 30 days; other records per the processor’s retention policy |
The items transferred are the same as the collection items under paragraph 1, and the timing and method of transfer is transmission via the information and communications network at the time the inquiry form is submitted. Data subjects may refuse the transfer abroad; in that case, please contact us directly at the email below. Visit analytics (PostHog) records — the items under item B of paragraph 1 — are transferred via the information and communications network while the site is being used.
For the consultation chatbot, data is transmitted over the network (HTTPS) when you send a question. The items transferred are those listed in paragraph 1(C).
If you do not use the consultation chatbot, this transfer does not take place. You can send the same inquiry through the inquiry form or the email address below.
6. Rights of data subjects and how to exercise them
Data subjects may, at any time, request the access, correction, deletion, and suspension of processing of their personal information. Requests made in writing or by email to the contact information below will be handled without delay.
7. Measures to ensure the security of personal information
- Designating as personal information handlers only those whose duties require it
- Applying encrypted communication (HTTPS) across the entire transmission path
- Periodically destroying personal information whose retention period has expired
8. Personal Information Protection Officer
| Name | |
|---|---|
| Position | CEO |
| contact@vrof.co.kr |
To report a privacy violation or seek advice, you can contact the Personal Information Infringement Report Center (개인정보침해신고센터, 118 without an area code), the Cyber Investigation Division of the Supreme Prosecutors’ Office (대검찰청 사이버수사과, 1301), or the Cyber Investigation Bureau of the Korean National Police Agency (경찰청 사이버수사국, 182).
9. Changes to this Privacy Policy
This policy takes effect on September 24, 2026. Any additions, deletions or amendments will be announced on this website at least 7 days before they take effect.
The Korean version of this policy is the official version. If a translation differs in interpretation, the Korean version prevails.