NetSphere
Datenschutzerklärung
The NetSphere operator publishes this policy under the Personal Information Protection Act of Korea to protect users' personal information and handle related complaints promptly.
Maßgeblich ist die koreanische Fassung dieser Richtlinie. Der folgende englische Text dient nur zur Information; die koreanische Fassung finden Sie über das Sprachmenü oben.
1. Personal information processed
| Category | Items processed | Why it is processed | Legal basis | Retention period |
|---|---|---|---|---|
| Free assessment requestSite form and Handyfit pre-application page | Name, email, company, phone (optional)Answers on scope: device count, diagram update date, incident history, read-only account availability, applicant type, intent to continueGenerated automatically on the site form: language and page, referral (UTM values, previous site's domain), time received, IP address | Receiving the request, arranging and preparing the assessment, contact about results, preventing repeat submissions | Consent (Art. 15(1)1) | One year from the request. Destroyed without delay if the purpose is met or deletion is requested sooner. |
| Free assessment delivery and result review | Company, contact's name, title and phone, schedule and scope, assessment report, values entered in the cost calculation (staffing, unit cost, review frequency)Read-only device account: used only for the assessment and deleted when it ends | Running the assessment, delivering and reviewing results, consultation on adoption | Action at the data subject's request (Art. 15(1)4) | One year after the result review. Destroyed without delay when deletion is requested. |
| Letter of intent | Company, department and title, name, signature or seal, work email, stated intent (device count, timing, plan, budget range) | Discussing adoption; evidence for investment reviews and government programs with company and contact details masked | Consent (Art. 15(1)1) | Three years from signing. Destroyed without delay when deletion is requested. |
| Launch notice signupSignup on the pricing page | Email, company (optional), plan of interestGenerated automatically on the site form: language and page, referral (UTM values, previous site's domain), time received, IP address | Sending one notice when sales open | Consent (Art. 15(1)1) | Destroyed without delay after the notice is sent or when deletion is requested. |
| Market research surveyResearch vendor Userspoon, Google Forms | Nickname, name or nickname, affiliation and role, email or mobile number, company or industry if disclosed, survey answers | Market validation, free pilot information, scheduling, follow-up interview requests | Consent (Art. 15(1)1) | Six months from collection, or until the purpose is met. |
| Customer interviews | Name or alias, affiliation and role, contact details, what was discussed | Market validation and product improvement. External materials omit names, contact details and company names. | Consent (Art. 15(1)1) | One year after the interview. Destroyed without delay when deletion is requested. |
| Email inquiries | Name, email, company, what the message says | Reviewing and answering the inquiry | Action at the data subject's request (Art. 15(1)4) | One year after the inquiry is closed. |
| Partnership and adoption proposals | Company, contact's name, title, work email and phone, taken from public materials, an introduction, or messages and business cards the contact gave us; what was discussed | Proposing a partnership or free assessment, scheduling | Legitimate interest (Art. 15(1)6) | One year after the last contact. If the contact declines or asks for deletion, everything is destroyed except the email address needed to avoid contacting them again. |
| Problem reportsSent by the user from the product or customer portal | Report ID, product, version and OS, plan type and license ID, symptoms and steps the user wrote, device and vendor counts, error logsThe app masks IP, MAC, host names, accounts, serials, emails and secrets, and the user can review the result before sending. | Analyzing faults and providing support | Action at the data subject's request (Art. 15(1)4) | One year after the report is closed. |
| Data contribution (optional)Community edition | Installation ID, product and device information, masked command results the user reviewed before sending, notes | Improving device recognition, raising the managed-device limit | Consent (Art. 15(1)1) | Until consent is withdrawn or deletion is requested. |
| Access records | Time, requested address, previous page address, browser information. The site's server logs do not record the visitor's IP address; it is handled on the Cloudflare section described in section 4. | Security, preventing misuse, counting downloads by referral | Legitimate interest (Art. 15(1)6) | Three months. |
Contact details obtained from public materials or an introduction: the source is given immediately on request.
Subscriptions and payments are not processed yet because sales have not opened. Those items will be added to this policy before sales open.
Sensitive information, unique identifiers and pseudonymized information are not processed. Personal information of children under 14 is not accepted.
2. Provision to third parties
Personal information is not provided to third parties, except where a law specifically requires it. When a letter of intent or assessment result is submitted for an investment review or government program, company and contact details are masked; anything unmasked needs separate consent first.
3. Entrusted processing
| Processor | Work entrusted |
|---|---|
| Handy Company Co., Ltd. (sub-processors: Supabase Inc., Vercel Inc., Anthropic, PBC) | Operating the pre-application page and form, storing submissions |
| DBDLAB, Userspoon service (survey ended July 2026) | Recruiting survey respondents, collecting responses, delivering results |
| Cloudflare, Inc. | Website delivery and security, site visit statistics, forwarding mail sent to the contact address |
| Google LLC | Sending, receiving and storing mail, storing survey responses, providing web fonts |
| Anthropic, PBC | Organizing inquiry and contact records and drafting documents with an AI work tool |
4. Overseas transfer
Basis: Article 28-8(1)3(a) of the Act. These are entrustment and storage needed to conclude and perform a contract with the data subject, and the items below are disclosed in this policy.
| Recipient and contact | Country | Items transferred | When and how | Purpose and retention |
|---|---|---|---|---|
| Cloudflare, Inc.[email protected] | United States and other countries with its data centers | IP address, request information, form contents, mail contents | Over an encrypted network whenever the site is visited, a form is sent or mail is received | Website delivery and security, visit statistics, mail forwarding. Kept according to Cloudflare's privacy policy. |
| Google LLC[email protected] | United States and other countries with its data centers | Form and inquiry mail contents, survey responses, IP address when fonts are requested | Over an encrypted network when mail is sent or received, a survey is submitted or a page is opened | Mail, survey storage and web fonts. Mail and surveys are kept for the periods in section 1; font request records according to Google's privacy policy. |
| Supabase Inc., Vercel Inc., Anthropic, PBC (through Handyfit)[email protected] | United States (Supabase servers are in Seoul) | Pre-application form contents, access logs | Over an encrypted network when the page is opened or the form is sent | Hosting, storage and AI output of the Handyfit service. One year from the request. |
| Anthropic, PBC[email protected] | United States | Parts of inquiry and contact records | Over an encrypted network when the operator uses the AI work tool | Organizing records and drafting documents. Kept according to Anthropic's privacy policy. |
To refuse a transfer, email [email protected]. Visiting the site and exchanging mail pass through Cloudflare and Google, so refusing means the site's forms and mail consultation cannot be used. Blocking external fonts in the browser does not stop the site from working.
5. Destruction
When a retention period ends or the purpose is met, the information is destroyed without delay. Electronic files are erased so they cannot be recovered; paper is shredded or incinerated.
If another law requires keeping an item, it is stored separately. No item is currently kept on that basis.
6. Rights of data subjects
Users can ask at any time to view, correct or delete their personal information, to stop its processing, or to withdraw consent. Email [email protected] and the outcome will be reported within 10 days.
A legal representative or an authorized person can make the request after the authorization is confirmed. If a law limits a request, the reason will be given.
7. Safety measures
- Only the operator handles personal information.
- The site and forms use encrypted communication (HTTPS).
- Management screens are separated so they cannot be reached from outside.
- Passwords and keys are not kept in source repositories or logs.
- Login tokens and sessions are stored only as hashes.
- Access records are kept and reviewed.
8. Automatic collection
- Regular pages set no cookies. The browser stores the referral for the visit (cleared when the tab closes) and the chosen language.
- Cloudflare Web Analytics measures page visits and loading performance without cookies.
- The customer portal uses one essential cookie to keep the login for 12 hours. No cookies are used for advertising.
- Cookies and site data can be blocked or cleared in browser settings. With cookies blocked, the customer portal cannot be used.
9. Privacy contact
Handled by: NetSphere privacy desk
Contact: [email protected]
10. Remedies for infringement
For help with infringement of personal information, the agencies below can be contacted (no area code needed).
| Agency | Telefon | Website |
|---|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 | www.kopico.go.kr |
| Personal Information Infringement Report Center | 118 | privacy.kisa.or.kr |
| Supreme Prosecutors' Office | 1301 | www.spo.go.kr |
| National Police Agency | 182 | ecrm.police.go.kr |
11. Changes
Changes to this policy are announced on the site 7 days before they take effect, and 30 days before if the change is unfavorable to users.
Effective date: November 5, 2026