Liteway, Inc. (the "Company") establishes and discloses the following Privacy Policy in accordance with the Personal Information Protection Act and related laws and regulations, in order to protect users' personal information and to handle related grievances promptly and effectively.
Article 1 (Purposes of Processing Personal Information)
The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use is changed, the Company will take necessary measures, such as obtaining separate consent.
- Service provision and operation — Account registration, identity verification, service delivery, contract performance, and payment processing and settlement for the services provided by the Company (Intellidesk, QueryBridge, IntelliAgent, ODataBridge, etc.)
- Customer support and inquiry handling — Adoption inquiries, technical consultation, PoC requests, and complaint handling and notification of results
- Marketing and service improvement — Announcements of new services, event information, and statistical analysis of service usage (only when consent has been obtained)
- Compliance with legal obligations — Compliance with obligations under applicable laws and regulations
Article 2 (Items of Personal Information Processed)
The Company processes the following items of personal information to provide its services.
| Category | Items | Method of collection |
|---|---|---|
| Account registration (required) | Email address, password, name (or nickname), company name | Web sign-up, Google OAuth |
| Service usage (automatic) | Service usage records, access logs, IP address, browser information, cookies | Automatically collected |
| Adoption inquiries (optional) | Name, email, company name, contact number, inquiry content | Email, inquiry form |
| Payment (required) | Payment method information, billing information (processed via PG provider) | Entered at time of payment |
Article 3 (Processing and Retention Period of Personal Information)
The Company processes and retains personal information within the period prescribed by law or the period agreed to by the user when the personal information was collected.
- Member information — Until the member withdraws. However, if retention is required by applicable laws, it will be retained for the corresponding period.
- Contract and payment records — 5 years, in accordance with the Act on Consumer Protection in Electronic Commerce, etc.
- Access logs — 3 months, in accordance with the Protection of Communications Secrets Act
- Adoption inquiry records — 3 years after the inquiry has been resolved
Article 4 (Provision of Personal Information to Third Parties)
The Company processes users' personal information only within the scope of the purposes specified in Article 1, and does not process personal information beyond the original purpose or provide it to third parties without the user's prior consent. However, the following cases are exceptions.
- When the user has given separate prior consent
- When required by special provisions of law
- When the user or their legal representative is unable to express their intent, or when prior consent cannot be obtained due to unknown address or similar reasons, and it is clearly necessary for the urgent protection of the user's life, body, or property interests
Article 5 (Outsourcing of Personal Information Processing)
For the smooth provision of services, the Company outsources the processing of personal information as follows.
| Service provider | Outsourced tasks | Retention period |
|---|---|---|
| Cloud service providers (AWS, etc.) | Service infrastructure operation and data storage | Until termination of the outsourcing agreement |
| Payment gateway (PG) provider | Payment processing and settlement | Period specified by applicable laws |
| Email delivery service | Sending service notifications and verification emails | Until termination of the outsourcing agreement |
Article 6 (User Rights, Obligations, and How to Exercise Them)
Users may exercise the following rights against the Company at any time.
- Request to access personal information
- Request to correct or delete personal information
- Request to suspend the processing of personal information
- Withdrawal of membership (via in-service settings or email request)
Rights may be exercised through the in-service account settings or by contacting contact@liteway.cc. The Company will take action within 10 days of receiving the request.
Article 7 (Measures to Ensure the Safety of Personal Information)
To ensure the security of personal information, the Company takes the following measures.
- Administrative measures — Establishment and implementation of an internal management plan, and regular employee training
- Technical measures — Encryption of personal information (SSL/TLS in transit, hashing/encryption at rest), access privilege management, and installation and updating of security programs
- Physical measures — Access control to data storage facilities
Article 8 (Installation, Operation, and Refusal of Cookies)
The Company may use cookies to provide users with personalized services.
- Purpose of cookies — Maintaining login sessions, analyzing service usage patterns, and strengthening security
- How to refuse cookies — You can allow or block cookies through your web browser's settings menu. However, blocking cookies may limit the use of certain services.
Article 9 (Personal Information Protection Officer)
The Company is responsible for overseeing personal information processing operations and has designated a Personal Information Protection Officer as set out below to handle user complaints and remedy any harm related to personal information.
Article 10 (Remedies for Infringement of Rights)
Users may contact the following organizations for consultation and remedies regarding personal information infringement.
- Personal Information Infringement Report Center (Korea Internet & Security Agency) — 118
- Personal Information Dispute Mediation Committee — 1833-6972
- Supreme Prosecutors' Office Cybercrime Investigation Division — 1301
- National Police Agency Cyber Investigation Bureau — 182
Article 11 (Changes to the Privacy Policy)
This Privacy Policy is effective as of April 1, 2026. The contents may be added to, deleted, or amended in line with changes in laws, policies, or security technology. Any changes will be announced on the Company's website or through in-service notices at least 7 days before the effective date.