Privacy Policy
VROF Inc. (주식회사 브이로프; the ‘Company’) treats the personal information of data subjects with care and complies with the Personal Information Protection Act and other applicable laws. The Company collects personal information through the enquiry form and the consultation chatbot on this website, and additionally collects connection information automatically, as set out in paragraph 1(B), in order to understand how the site is used.
1. Items of personal information collected and methods of collection
A. Items entered directly by the user through the inquiry form
- Required items — Company name, contact name, email address, inquiry type, inquiry message
- Optional items — Phone number, estimated budget, preferred start timing, how you heard about us
B. Connection information automatically collected when you use the site
- Visited page addresses, referral path (domain of the previous site), browser · operating system · device type, screen size, language settings, access country and region, access date and time, IP address, records of on-screen actions such as clicked buttons and links, screen usage recordings (session replay)
For automatic collection, the Company uses the statistics tool it operates directly (Umami), and This tool does not store IP addresses and does not use cookies. The collected information is not provided to third-party advertising businesses, and is not used for behavioral information collection for advertising purposes or for tracking that identifies individual users.
The Company also uses the visit analytics tool PostHog (PostHog Inc., United States). PostHog keeps an identifier that distinguishes visiting devices in a browser cookie (with a name starting with ph_, kept for 365 days) and in browser storage, and records how the screen is used. Input fields, the inquiry form and the consultation chat are masked in the browser before sending, so they are not included in the recordings.
For visitors accessing from the European Union, the European Economic Area, the United Kingdom or Switzerland, PostHog runs only after consent is given. The window shown on the first visit lets you accept all or reject all; your choice is stored in your browser and can be changed at any time under “Cookie settings” at the bottom of the page. Umami uses no cookies and runs regardless of this choice.
C. Items collected when you use the consultation chatbot
- The conversation you enter and the chatbot’s replies, your browser type, and the address of the page you asked from
- Your IP address is not stored in its original form; only an irreversibly transformed value is kept.
- Resident registration numbers, bank account numbers, card numbers, passwords and phone numbers are masked both before storage and before any transfer abroad.
- However, contact information entered in the dedicated field with consent to receive a reply is forwarded unmasked to the representative via email, is not stored in the chat history, and is deleted 1 year after the inquiry is resolved. It is not sent without your consent.
2. Purposes of use of personal information
The collected personal information is used only for responding to and consulting on inquiries, and replying with quotes and proposals. It is not used for marketing, sending advertising information, or any other purpose.
The connection information under item B of paragraph 1 is used only to understand site usage and to improve the interface.
3. Period of retention and use of personal information
From the date the processing of the inquiry is completed, the information is retained for 1 year and then destroyed without delay. However, if a contract has been concluded, it is retained for the period prescribed by applicable statutes, such as the 「Act on the Consumer Protection in Electronic Commerce, etc.」 (전자상거래 등에서의 소비자보호에 관한 법률).
Information in electronic file form is permanently deleted in a way that cannot be recovered, and any printed output is shredded or incinerated.
The connection information under item B of paragraph 1 is stored for 1 year from the date of collection, and then deleted.
Of the visit analytics (PostHog) records, screen usage recordings are kept for 30 days, and other records follow PostHog’s retention policy.
Chatbot conversations and the values under paragraph 1(C) are retained for 90 days from the day the conversation began, and a purge task that runs daily deletes conversations past that period.
4. Provision of personal information to third parties
The Company does not provide the personal information of data subjects to third parties. This does not apply where required by law or where an investigative agency requests it through lawful procedures.
5. Outsourcing of personal information processing and transfer abroad
For the operation of its services, the Company outsources personal information processing as follows.
| Contractor | Contact | Outsourced service | Country of transfer | Retention period |
|---|---|---|---|---|
| Vercel Inc. | privacy@vercel.com | Website hosting and server operation | United States | Until the outsourcing contract ends |
| Plus Five Five, Inc. (Resend) | support@resend.com | Emailing inquiry messages | United States | Destroyed without delay after transmission |
| ANOMALY INNOVATIONS, INC. (OpenCode) | help@anoma.ly | Generating consultation chatbot replies | United States | Not retained after transmission (per the provider’s stated policy) |
| PostHog Inc. | privacy@posthog.com | Visit analytics and screen usage recording analysis | United States | Screen usage recordings 30 days; other records per the processor’s retention policy |
The items transferred are the same as the collection items under paragraph 1, and the timing and method of transfer is transmission via the information and communications network at the time the inquiry form is submitted. Data subjects may refuse the transfer abroad; in that case, please contact us directly at the email below. Visit analytics (PostHog) records — the items under item B of paragraph 1 — are transferred via the information and communications network while the site is being used.
For the chatbot, transmission takes place over the information and communications network (HTTPS) at the moment you send a question, and the items transferred are those under paragraph 1(C).
If you do not use the consultation chatbot, this transfer does not occur. You may raise the same enquiry through the contact form or the email address below.
6. Rights of data subjects and how to exercise them
Data subjects may, at any time, request the access, correction, deletion, and suspension of processing of their personal information. Requests made in writing or by email to the contact information below will be handled without delay.
7. Measures to ensure the security of personal information
- Designating as personal information handlers only those whose duties require it
- Applying encrypted communication (HTTPS) across the entire transmission path
- Periodically destroying personal information whose retention period has expired
8. Personal Information Protection Officer
| Name | |
|---|---|
| Position | CEO |
| contact@vrof.co.kr |
If you need to report a personal information breach or seek consultation, you may contact the Personal Information Infringement Reporting Center (개인정보침해신고센터, dial 118), the Supreme Prosecutors' Office Cyber Investigation Division (대검찰청 사이버수사과, 1301), or the National Police Agency Cyber Investigation Bureau (경찰청 사이버수사국, 182).
9. Changes to the Privacy Policy
This policy takes effect on September 24, 2026. If content is added, deleted, or modified, it will be announced on the website at least 7 days before it takes effect.
This policy is governed by the Korean version, which shall prevail in the event of any discrepancy in interpretation between the translated versions and the Korean original.