Privacy Policy

• Sign-up and sign-in: email address, display name (and identifiers received from your social-login provider)
• Paid services: payment approval details (sensitive payment data such as card numbers is handled by the payment provider and is never stored by the Company)
• Service usage: access logs, usage history (such as credit consumption), browser and device information
• Data you upload or enter yourself (for example equipment data or images)

The Company does not collect personal data of children under 14, and children under 14 may not create an account.

• Providing and operating the Service, identifying and authenticating members, processing and settling paid services
• Responding to inquiries, improving the Service and preventing fraudulent use

Personal data is destroyed without delay once the purpose of collection and use is achieved. Where required by law, it is retained for the prescribed period (for example: 5 years for records of contracts, withdrawals and payments under Korean e-commerce law; 3 years for records of consumer complaints and dispute handling; 3 months for access logs under the Protection of Communications Secrets Act).

Electronic files are deleted irrecoverably; printed materials are shredded or incinerated.

The Company entrusts the following processing to provide the Service; each processor handles data only within the scope of the entrusted purpose.

• Payment processing (Korea): KG Inicis
• International payment processing: Paddle.com Inc. and its affiliates ("Paddle") — Paddle acts as Merchant of Record for international purchases and processes checkout, billing and tax data under its own privacy policy
• Email delivery: Resend
• Hosting and infrastructure: Fly.io, Cloudflare
• AI answer and image generation: overseas AI cloud providers — when you use AI features, the conversations, prompts and attachments you enter are transmitted only within the scope of processing, and are not used to train AI models. Account identifiers such as your name, email address and affiliation are not included in the transmission; only the content you entered is sent, it is used solely to generate the response, and it is not stored beyond the provider’s short-term abuse-monitoring retention.

The Company does not provide personal data to third parties except where required by law or with your consent.

The Service runs on overseas cloud infrastructure, so personal data is transferred and stored abroad as follows in order to perform the service contract. The transferred items are the minimum necessary for each task among the items in Section 1, and retention follows Section 3.

• Fly.io (server hosting · Japan and other regions): storage and processing of account data and service-usage data — for the duration of service provision
• Cloudflare (security and delivery network · United States and global): transmission during connection handling — at the time of transmission
• Resend (email delivery · United States): email address and message content — until the delivery purpose is achieved
• Paddle (international payments · United Kingdom / United States): checkout and billing data for international purchases — per Paddle’s retention policy as Merchant of Record
• AI cloud providers (United States): content you enter when using AI features (excluding account identifiers) — until processing is complete

You may object to cross-border transfers via the contact below; however, because these transfers are essential to providing the Service, use of the Service may be restricted if you object.

The Service uses only the minimum cookies and browser storage needed for operation, such as keeping you signed in and remembering your language setting. No advertising or tracking cookies are used. You can refuse cookies in your browser settings, but some features such as sign-in may then be limited.

You may at any time request access to, correction or deletion of, or suspension of processing of your personal data. Requests are received at the contact below and handled without delay. You may refuse consent where consent is required, but sign-up or use of the Service may then be limited.

In Korea, you may report or seek advice on privacy infringements at the Personal Information Infringement Report Center (privacy.kisa.or.kr · 118) and apply for dispute mediation to the Personal Information Dispute Mediation Committee (www.kopico.go.kr · 1833-6972).

If you use the Service from the European Economic Area, the United Kingdom or other regions, the rights granted by the applicable data-protection law (such as GDPR/UK GDPR — access, rectification, erasure, portability, restriction of processing and objection) may apply. Please direct related inquiries to the contact below.

• Access-permission management and access control; encryption in transit and at rest
• Minimization of personal-data processing and management of access records

For privacy inquiries or to exercise your rights, please contact:

• Data Protection Officer: Hwanyeol Park (CEO, Quantum Materials Co., Ltd.)
• Email: [email protected] · Phone: +82-70-7609-1376

This Policy may be revised to reflect changes in law or the Service; revisions are announced within the Service.