Privacy Policy
Axis & Orbit Inc. publishes this privacy policy for Areumii under the Personal Information Protection Act of the Republic of Korea (PIPA).
This English text is a reference translation provided for convenience. The Korean version at /privacy is the operative document; if the two differ, the Korean text governs.
1. What we collect, and how
We collect only what you enter into a form or choose to share through Google sign-in. We do not collect medical records, health status, or any other sensitive information anywhere on this service.
- Clinic listing registration (/clinics, including the edit screen)
- Contact person’s name (optional), phone number, email address. The institution details submitted alongside — name, institution type, specialties, region, consultation languages — describe the institution, not an individual.
- Pilot application (/forclinics, /en)
- Contact person’s name, role, institution name, phone number, email address, monthly inquiry volume, inquiry channels in use, and stated interest in the pilot.
- Google sign-in
- Google account identifier, verified email address, name, profile image when provided, and the account type you select. The Google ID token is verified on the server and is not retained after the signed session is created.
- Generated automatically
- Access time, IP address, and browser or device information may be recorded in our hosting provider’s operational logs.
2. Why we collect it
- To review a listing registration and decide whether to publish it
- To contact you to confirm or complete what you submitted
- To tell you the outcome of the review and the listing’s status
- To discuss participation in the pilot
- To verify identity, create a sign-in session, and show the selected account type
We use it for nothing else. If the purpose changes we will obtain separate consent as PIPA Article 18 requires. We do not sell personal data and do not disclose it to third parties for advertising.
3. How long we keep it
Once the period below has passed, the record is deleted automatically. Deletion is performed by a job scheduled in the database, running once a day at 03:17 Korean time — it does not depend on anyone remembering.
| Record | Retention |
|---|---|
| Listing registration — under review | 180 days from submission |
| Listing registration — published | For as long as the listing remains published |
| Listing registration — withdrawn | 180 days from withdrawal |
| Pilot application | 180 days from submission |
| Google sign-in session | 8 hours from sign-in. The signed session cookie is stored only in the user’s browser. |
Where a statute sets its own preservation period, we keep the record for that period and then destroy it.
4. Processors
| Processor | Work | Retention |
|---|---|---|
| Notion Labs, Inc. | Holding registration submissions and managing publication approval | As in section 3 |
| Supabase Inc. | Database storage (Seoul, Republic of Korea (ap-northeast-2)) | As in section 3 |
| Vercel Inc. | Website hosting and operational logs | As in section 3 |
5. Transfers outside Korea
The database is held in Seoul, Republic of Korea (ap-northeast-2), and the personal data stored in it is not relocated abroad. The work below, however, is carried out by companies located outside Korea, so the listed items are transferred overseas.
| Recipient | Country | Items | Purpose and method | Retention |
|---|---|---|---|---|
| Notion Labs, Inc. | United States | Contact name, phone number, email, and the institution details submitted with them | Reviewing and approving a listing · transmitted over the network at submission | As in section 3 |
| Vercel Inc. | United States | Access time, IP address, operational logs, and sign-in request data | Website hosting and sign-in processing · transmitted automatically when you use the site | Operational logs as in section 3; sign-in session for 8 hours |
To ask about or object to an overseas transfer, write to danish@areumii.com.
6. Your rights
You may ask at any time to see your personal data, to correct or delete it, or to stop its processing. Write to danish@areumii.com and we will verify your identity, act without delay, and tell you the outcome. A legal representative or an authorised agent may make the request for you.
For a listing registration you can also edit what you submitted, or withdraw the listing, using the edit link issued once at submission. We store only a hash of that link and cannot recover it, so if you have lost it, write to danish@areumii.com.
We will not disadvantage you for exercising these rights.
7. Destruction
Personal data is destroyed without delay once its retention period has passed or its purpose has been met. Data held electronically is deleted irrecoverably by the scheduled job described in section 3. We hold no paper records of personal data for this service.
8. Safeguards
- We collect the minimum set of fields the purpose requires; fields the service has decided not to collect do not exist as database columns at all.
- Public access to the database is revoked and re-granted only on the columns that need it.
- All traffic between you and the service is encrypted (HTTPS).
- The listing edit link is stored only as a hash, never in the clear.
- Records past their retention period are deleted by a scheduled job.
9. Privacy officer
- Privacy officer
- Areumii operations lead (Axis & Orbit Inc.)
- Contact
- danish@areumii.com
10. Where else to complain
The following Korean bodies are independent of us and handle privacy complaints and remedies.
- Personal Information Dispute Mediation Committee — 1833-6972 (www.kopico.go.kr)
- Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr)
- Supreme Prosecutors Office, Cybercrime Division — 1301 (www.spo.go.kr)
- National Police Agency, Cyber Bureau — 182 (ecrm.police.go.kr)
11. Changes to this policy
If we add to, remove from, or amend this policy we will post the change and its effective date on this page at least seven days beforehand.