Privacy Policy

섹터제로스튜디오 ("the Company") complies with the Korean Personal Information Protection Act, the Information and Communications Network Act, and other applicable laws, and processes user personal information as described below.

1. Personal information collected

The Company collects the following items:

a. Sign-up / service use

• Required: email address, name
• Optional: phone number (for payment-failure notifications)

b. Payment

• Payment information (card details, etc. are handled directly by PortOne and the PG; the Company does not store them)
• Payment history (order number, payment date, amount, plan name)

c. License activation

• Machine identifier (a hash used to prevent duplicate activations)
• Operating system information (Windows version)

d. Automatically collected

• IP address, cookies, access logs, service usage records

2. Purposes of collection and use

1. Service delivery (license issuance, activation, machine changes)
2. Customer support (technical inquiries, payment and refund handling)
3. Service improvement (incident analysis, feature prioritization)
4. Legal compliance (E-Commerce Act, tax law, etc.)

3. Retention period

• Account & license information: license validity period + 1 year
• Payment records: 5 years (Article 6 of the E-Commerce Act)
• Access logs: 3 months (Protection of Communications Secrets Act)
• User inquiries and responses: 3 years

4. Third-party disclosure

The Company does not provide users' personal information to external parties, except in the following cases:

• The user has consented in advance
• Required by law, or upon lawful request from an investigative authority

5. Processing entrusted to third parties

The Company outsources the following tasks for service delivery:

6. User rights

Users may exercise the following rights at any time:

• Request access, correction, or deletion of personal information
• Request suspension of processing
• Withdraw consent

To exercise these rights, email [email protected]. We'll process the request without delay.

7. Security measures

• Sensitive data such as passwords and license keys is encrypted at rest (PBKDF2 hashing)
• Administrator access is minimized; access logs are retained
• HTTPS enforced in transit (TLS 1.2+)
• Regular security audits and vulnerability reviews

8. Privacy officer