Privacy policy

1. Information collected

What the contact form asks for, and what the website records on its own while you use it.

• Required: name, email and the message (what you are building).
• Optional: company, phone, whether you are a business that needs a tax invoice, business registration number, what you need (project type), budget and timeline.
• Recorded automatically: IP address, time of access, the page requested, the previous page and browser details (server access log). To stop repeated sends, the number of sends per IP address is counted per day in server memory and never written to a file.
• No resident registration numbers or other unique identifiers, and no sensitive information, are collected.

2. Why it is used

• Reading and replying to an inquiry, and talking it through
• Preparing a quote and a contract
• Issuing a tax invoice, when business details are given
• Keeping the website safe: blocking repeated sends and checking errors

3. How long it is kept

Information is destroyed without delay once its purpose is met. When an inquiry turns into a contract, Korean law requires some records to be kept for set periods.

• Records of contracts or withdrawal of orders: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply: 5 years (same Act)
• Records of consumer complaints or disputes: 3 years (same Act)
• Tax invoices and other transaction evidence: 5 years (Framework Act on National Taxes)
• Web server access logs: kept 14 days, then deleted automatically

4. Sharing with third parties

Personal information is not given to third parties, except with your prior consent, where a law provides for it, or when an investigative agency asks under the law.

5. Services that process it, and transfers abroad

The services below are used to receive an inquiry and be alerted to it. The contents of the form are sent to them over the network.

• Google LLC (Gmail, United States): when you press Send, the whole inquiry goes to the Nexybox mailbox and stays there until deleted.
• Telegram Messenger Inc. (Telegram Messenger, outside Korea): when you press Send, the whole inquiry goes to the owner's messenger as a new-inquiry alert and stays there until deleted. Telegram does not name the countries where it stores data; it says the data is spread across data centers in several countries, and that its developers are based in Dubai, United Arab Emirates.
• Anthropic, PBC (Claude API, United States): text typed into the playground demos is sent to produce a reply. Contact form contents are not sent, and demo text is not stored on the Nexybox server.
• Cloudflare, Inc. (email forwarding, United States): mail you send to help@nexybox.app is forwarded to the Nexybox mailbox.
• Oracle (Oracle Cloud, Chuncheon, Korea): the website and the inquiry tool run on a server rented from Oracle. Nexybox manages the server itself.
• The inquiry tool (desk) is run by Nexybox itself, not by an outside company. Inquiry contents are not written to the web server's logs.
• To refuse these transfers abroad, do not send the form. The form cannot take an inquiry without them.

6. Cookies and browser storage

• This website uses no analytics or advertising tools and sets no cookies.
• While you write in the contact form, the text is saved only in this browser tab (sessionStorage) so a slip does not lose it. It is gone when the tab closes and reaches the server only when you press Send.
• The playground keeps its trial code and synthetic demo data only in this browser (localStorage, IndexedDB). Clearing site data in the browser settings removes them.

7. Your rights

• You can ask at any time to see, correct or delete your personal information, or to stop its processing. Write to the privacy officer's email below and it is handled without delay.
• A legal representative or someone you authorise can ask on your behalf.
• The contact form is meant for people aged 14 or over.

8. How it is destroyed

When the retention period ends or the purpose is met, electronic files are deleted so they cannot be recovered, and paper is shredded or burned.

9. How it is protected

• The website and every form send use HTTPS encryption.
• Inquiry contents are not written to server logs.
• Access to the mailbox, messenger and inquiry tool that hold inquiries is managed by the owner.

10. Where to get help

For advice on a privacy problem or to report one, these Korean bodies can help.

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

11. Changes to this policy

Changes are posted on this page 7 days before they take effect, or 30 days before for a change that matters to your rights.

12. Privacy officer

The owner is the privacy officer. Send privacy questions, complaints or requests for redress to the email below.

Business name

Nexybox (넥시박스)

Owner

Mingyum Kim

Registration number

206-65-00913

Address

37 Gwanak-ro 17-gil, Gwanak-gu, Seoul

Email

help@nexybox.app