Privacy Policy

todos (hereinafter referred to as "the Company") values the personal information of data subjects and complies with relevant laws such as the Personal Information Protection Act.

This privacy policy explains what personal information the Company collects and how it is used and protected.

1. Items of Personal Information Collected

The Company may collect the following information during project inquiries and website usage.

① Required Collection Items

  • Project Type
  • Collaboration Type
  • Current Stage
  • Preferred Schedule
  • Budget Range
  • Project Details
  • Company Name
  • Contact Person’s Name
  • Work Email

② Optional Collection Items

Optional items are collected only if the user inputs or attaches them, and project inquiries can be made without providing them.

  • Reference Files
  • Phone

③ Automatically Generated Items

Automatically generated information is used to analyze website usage and improve services.

  • Cookie Identification Information
  • Browser and Device Information
  • Visit Date and Usage Records
  • Page Navigation and Click Records
  • Referral Source and Media Information (e.g., UTM)

2. Methods of Collecting Personal Information

The company collects personal information through the following methods.

  • Project inquiry form on the website
  • Information directly entered by users, links, and uploaded documents
  • Automatic collection via cookies and website analytics tools

3. Purpose of Using Personal Information

The company uses the collected personal information for the following purposes.

  • Receiving project inquiries and verifying identity
  • Reviewing inquiry content and collaboration possibilities
  • Responding to inquiries and follow-up communication
  • Providing guidance on project scope, priorities, and progress methods
  • Analyzing website usage and improving user experience
  • Fulfilling legal obligations and handling disputes

4. Retention and Use Period of Personal Information

Project inquiry information is retained for one year after responses and follow-up actions are completed, then destroyed. However, it may be retained until the relevant reason ends in the following cases.

Website analytics data is retained for the period set by the company or according to each analytics tool's policy, then deleted.

  • If a contract is concluded: for the duration of contract fulfillment and the period prescribed by related laws
  • If disputes or legal procedures are ongoing: until the procedures are concluded
  • If the data subject agrees to separate retention: for the agreed period

5. Procedures and Methods for Destroying Personal Information

Personal information is destroyed without delay once the retention period expires or the processing purpose is achieved.

  • Electronic files: deleted in a way that prevents recovery or restoration
  • Paper documents: shredded or incinerated

6. Provision of Personal Information to Third Parties

The company generally does not provide personal information to external parties. However, exceptions may apply in the following cases.

  • When the data subject has given prior consent
  • When provision is required by law

7. Outsourcing of Personal Information Processing

The company may outsource part of the personal information processing tasks to external parties to ensure smooth service provision.

  • Amazon Web Services, Inc.: Cloud infrastructure operation and storage of data and attachments
  • Google LLC: Website usage analysis using Google Analytics 4
  • Microsoft Corporation: Website usage analysis using Microsoft Clarity
  • Email service providers used by the company: Project inquiries and email responses
  • The company sets necessary measures for personal information protection through outsourcing contracts and supervises whether the entrusted party processes personal information securely.

8. Collection, Use, and Refusal of Cookies and Behavioral Information

Cookies are small information files stored on a browser or device when a user visits a website.

The company may use cookies and similar technologies to provide basic website functions and analyze usage.

① Essential Cookies

Used to provide the following basic website functions.

  • Session maintenance
  • Security and basic function provision
  • Saving user cookie settings
  • Blocking or deleting essential cookies may limit the use of some functions.

② Analytical Cookies

The company may use Google Analytics 4 and Microsoft Clarity to understand and improve website usage.

  • Analysis of visit frequency and paths
  • Analysis of page navigation and click behavior
  • Analysis of browser and device environment
  • Improvement of website usability and content
  • Currently, cookies for advertising or personalized marketing are not used.
  • If consent is required by law, analytical cookies are used within the scope of user consent.
  • Refusing analytical cookies does not affect basic website use.

③ Cookie Settings and Refusal

  • Users can allow, block, or delete cookie storage through website cookie settings or browser settings.
  • Chrome: Settings → Privacy and Security → Third-party Cookies
  • Safari: Settings → Privacy
  • Edge: Settings → Cookies and Site Permissions
  • More details about analytical tools can be found on the following pages.
  • Google Privacy Policy
  • Google Analytics Opt-out Browser Add-on
  • Microsoft Privacy Policy

9. Rights of Data Subjects and How to Exercise Them

Data subjects can exercise the following rights at any time.

  • Request to access personal information
  • Request to correct or delete personal information
  • Request to suspend personal information processing
  • Withdrawal of consent for collection and use of personal information
  • Rights can be exercised by emailing the personal information protection officer, and the company will process requests promptly according to relevant laws.

10. Measures to Ensure the Security of Personal Information

The company implements the following measures to protect personal information.

  • Minimization and control of access rights to personal information
  • Secure storage and transmission of key information
  • Operation and regular inspection of security systems
  • Personal information protection training
  • Operation of incident response system

11. Personal Information of Children Under 14

The company does not intentionally collect personal information from children under 14. If such information is found, it will be deleted without delay.

12. Personal Information Protection Officer

For inquiries about personal information processing and exercising data subject rights, please contact the person below.

  • Officer Name: Jang Il-moon
  • Email: isaac@todos.co.kr

13. Changes to the Privacy Policy

This privacy policy may change according to relevant laws, services, or company policies. Important changes will be announced on the website before implementation.

  • Effective Date: September 17, 2026