1. Purpose of Processing Personal Information
Xreate Co., Ltd. processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the Personal Information Protection Act.
1.1 PetPal AI Service Provision
- Provision of AI pet care services
- Personalized pet recommendations and management
- Provision of customized content for users
- Service usage records and statistical analysis
1.2 Customer Support and Inquiry Processing
- Receipt and processing of customer inquiries
- Collection of feedback for service improvement
- Technical support and problem resolution
2. Processing and Retention Period of Personal Information
Xreate Co., Ltd. processes and retains personal information within the personal information retention and use period specified by law or the personal information retention and use period agreed upon when collecting personal information from the information subject.
2.1 Service Usage Information
- Retention Period: 3 years after service termination
- Basis: Act on Consumer Protection in Electronic Commerce, etc.
2.2 Customer Inquiry Information
- Retention Period: 1 year after inquiry processing completion
- Basis: Personal Information Protection Act
3. Items of Personal Information Processed
Xreate Co., Ltd. processes the following personal information items.
3.1 Required Items
- Name, email address
- Service usage records
- Access logs, cookies, access IP information
3.2 Optional Items
- Phone number, address
- Pet information (type, name, age, etc.)
- Service usage preferences
4. Provision of Personal Information to Third Parties
Xreate Co., Ltd. processes personal information of information subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases that fall under Article 17 and Article 18 of the Personal Information Protection Act, such as consent from the information subject or special provisions of laws.
5. Consignment of Personal Information Processing
Xreate Co., Ltd. consigns personal information processing tasks as follows for smooth personal information business processing.
5.1 Consignee (Contractor)
- Cloud service providers: AWS, Google Cloud
- Email delivery services: SendGrid, Mailchimp
- Analytics services: Google Analytics
5.2 Content of Consigned Tasks
- Server operation and data storage
- Email delivery and notification services
- Website visit statistics analysis
6. Rights and Obligations of Information Subjects and How to Exercise Them
Information subjects can exercise the following personal information protection-related rights against Xreate Co., Ltd. at any time.
- Request for notification of personal information processing status
- Request for access to personal information
- Request for correction and deletion of personal information
- Request for suspension of personal information processing
7. Measures to Ensure Safety of Personal Information
Xreate Co., Ltd. takes the following measures to ensure the safety of personal information.
- Administrative measures: Establishment and implementation of internal management plans, regular employee education
- Technical measures: Access authority management for personal information processing systems, installation of access control systems, encryption of personal information, installation of security programs
- Physical measures: Access control for computer rooms, data storage rooms, etc.
8. Personal Information Protection Officer
Xreate Co., Ltd. is responsible for overseeing personal information processing tasks and has designated the following personal information protection officer to handle complaints and damage relief related to personal information processing.
Personal Information Protection Officer
- Name: Xreate Personal Information Protection Officer
- Contact: xreate.work@gmail.com
- Phone: +82-10-8316-6741
9. Changes to Personal Information Processing Policy
This personal information processing policy applies from the effective date, and if there are additions, deletions, and corrections of changes in accordance with laws and policies, they will be notified through announcements 7 days before the implementation of the changes.
10. Remedies for Rights Infringement
Information subjects can report personal information violations to the following agencies.
- Personal Information Protection Commission (privacy.go.kr / 182 without area code)
- Personal Information Protection Report Center (privacy.go.kr / 182 without area code)
- Information Protection Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
- Supreme Prosecutors' Office Cyber Crime Investigation Division (www.spo.go.kr / 02-3480-3571)
- National Police Agency Cyber Terror Response Center (www.netan.go.kr / 182 without area code)
This policy is effective from January 1, 2025.