Privacy Policy

1. Scope and responsibilities

Registered legal entity: Ever Info, Inc. (주식회사 에버정보). Service name: EVERINFO (에버인포). The information security contact is 조승민. Privacy inquiries can be made by telephone at +82-2-852-7114 or by email at admin@everinfo.co.kr.

This privacy policy applies uniformly to the EVERINFO website and all solutions and services supplied or operated by EVERINFO. These include the Monolith Suite, custom business systems, PC and server software, web and mobile services, browser extensions, API integrations, maintenance, and technical support. If a specific solution or contract provides an additional privacy notice, that notice applies together with this policy.

EVERINFO is the controller for its website operations and inquiries it receives directly. When EVERINFO processes solution data under a customer organization's instructions, its role and scope depend on the relevant solution configuration and contract. Servers, databases and storage operated directly by a customer organization are subject to that organization's privacy policy and management policies. The current region in which solutions are offered is the Republic of Korea.

2. How solutions handle data

Depending on the functionality provided and the customer's configuration, EVERINFO solutions may process user account and contact details, business data entered or integrated by the customer, documents and output, and access or usage records. The specific data, purposes, storage locations, retention periods and access permissions vary according to each solution's features, the customer contract, and the customer organization's settings and instructions. Processing that requires additional notice or consent is explained separately in the relevant solution before it begins.

Where a customer designates a PC, internal API, database server or storage as the processing destination, data may be stored in an environment managed by that customer. If EVERINFO processes solution data on servers or cloud infrastructure that it manages directly, the data, purpose, retention period, providers and transfer conditions are disclosed in the contract or an additional notice for that solution.

A solution that includes a browser extension may, with the user's permission and at the user's request, pass the page URL, related content, capture or task request needed for the feature to a program on the same PC or to a system designated by the customer. Users can stop subsequent processing by disabling the extension or the relevant integration. Data already stored in the customer environment is not deleted automatically; deletion should be requested from the administrator of the relevant PC or customer organization.

3. Collection and use restrictions

EVERINFO does not collect customer business data, document content, web browsing history or payment history beyond what is necessary to provide solution functionality, perform the contract, maintain security and respond to faults. It does not use this information for advertising, sale, cross-context behavioral analysis, creditworthiness assessment, lending or AI model training.

If a user directly provides specific material to EVERINFO for support, the purpose, scope, retention and deletion are explained separately and any necessary consent is obtained. Remote support involving access to customer data is separately governed by the customer's authorization and instructions, any necessary processing agreement, and confidentiality terms. EVERINFO does not inspect customer data at its discretion during ordinary solution use.

The website does not provide services directed at children or automated decision-making or profiling based on personal information, and it has no functionality for entering sensitive or biometric information. If an individual solution needs to process such information, the customer organization must establish a lawful basis, minimum processing scope and safeguards and complete any required notice and consent procedures.

4. Customer organization systems and storage

Where a customer organization configures a solution to use its own PCs, servers, APIs, databases or storage, the organization manages the purposes, access permissions, retention periods, backups and deletion procedures under its own policies and applicable law. Unless a separate contract states otherwise, EVERINFO is not the independent data owner or controller of storage managed by the customer organization.

Transmission to a customer-designated system serves that organization's operations and functionality requested by the user. It is not a transfer to EVERINFO for advertising, analytics or resale. Solutions that use an environment operated directly by EVERINFO are governed by the responsibilities, retention, deletion and safeguards stated in the contract and additional notice.

5. Browser extensions and Limited Use

This section applies to solutions that provide Chrome, Edge or other browser extensions.

1. EVERINFO does not sell or transfer user data handled by an extension to third parties except for approved service delivery purposes. User data is never sold.
2. Information handled by an extension is used only to provide functionality, security and troubleshooting related to the single purpose stated in that extension's public description. It is not used for unrelated advertising, profiling, analytics or AI training.
3. User data handled by an extension is not used or transferred for creditworthiness assessment or lending purposes.

Information handled through Chrome APIs complies with the Chrome Web Store User Data Policy and its Limited Use requirements. The permissions and data handled by each extension are described in its store listing or an additional notice.

Delivery of data needed for a feature to an internal destination designated by the customer is distinct from a sale or transfer by EVERINFO to a third party for an independent purpose. If specific material must be reviewed for support, the user's express authorization and the necessary safeguards are applied.

6. Website data processing

The following website access and email inquiry information is handled separately from the business data of individual solutions.

Inquiries, quotations and support

The website has no inquiry form, inquiry database or email sending API. Inquiry buttons copy the company's email address to the clipboard. They do not read existing clipboard contents or send them to a server. Users compose and send email directly through their own email service.

Email sent directly to us

The sender's email address, name, organization and contact details when included, inquiry content and attachments are used to respond and provide requested support. The website has no required or optional form fields. Do not send passwords, authentication keys, resident registration numbers, guest personal information or other information unnecessary for the inquiry.

Web server, load balancer and security logs

The hosting infrastructure records access time, IP address, request URL, method and size, browser information, protocol, response status and size, processing time and security rule results. Security logs may include IP-derived country or region codes and autonomous system number (ASN), TLS connection fingerprints (JA3 and JA4), and request trace identifiers. These records are used to provide the service, block malicious requests and troubleshoot faults. They do not store the business data handled by solutions. Do not place personal information in URLs or query parameters.

Cookies, analytics and advertising

The website does not use advertising or behavioral analytics tools or tracking cookies. ASP.NET Core's anti-forgery security cookie, whose name begins with .AspNetCore.Antiforgery., lasts for the browser session and is not used for advertising tracking. Fonts, images and videos are served directly by the website. The browser may cache static files and store a Blazor resource version identifier in local storage. You can delete or restrict cookies, cache and site data in browser settings. Blocking cookies may limit security functionality, and clearing the cache causes files to be downloaded again.

7. Retention and deletion

Website access and security logs have a 30-day retention setting. Required cloud audit logs, such as service administrator activity, have a separate 400-day retention setting and are distinct from ordinary visitor access logs. Logs become subject to automatic deletion according to their retention period.

Email inquiry information is retained for as long as necessary to respond and provide the requested support. Information no longer needed after that purpose has been fulfilled is, in principle, deleted without delay. Where a law requires separate retention, the relevant information is segregated and retained only for the specified purpose and period.

Retention and deletion are managed according to purpose, legal obligations and risk, based on the information security management principles of ISO/IEC 27001. Electronic information is deleted to make recovery difficult, and paper records are shredded or otherwise destroyed. Copies, backups and records of disposal are also included in retention and deletion management. This does not represent a claim of ISO certification.

Solution data on PCs, servers and storage managed by a customer is governed by that user's or organization's retention and deletion rules. Solution data in an environment managed directly by EVERINFO is retained for the period stated in the relevant solution contract or additional notice and deleted when its purpose has been fulfilled. The retention period for website logs does not determine the retention period for other solution data.

8. Service providers and international transfers

The website uses Google Cloud Run, load balancing, Cloud Armor and Cloud Logging to serve pages, block malicious requests and manage logs. The Cloud Run execution region is Seoul, Republic of Korea. CDN caching is not used.

The storage location setting for access and security logs is Google Cloud's global location. This setting does not guarantee storage exclusively in the Republic of Korea. The Seoul execution region is distinct from the locations where logs and support access are processed. Business data from individual solutions is not transmitted through this website hosting path unless the relevant solution or contract expressly provides otherwise.

The domain uses Gabia nameservers for DNS, and the company's incoming email route uses Hiworks. Emails sent directly by users are processed by the email service.

EVERINFO does not sell solution user data or share it for cross-context behavioral advertising. The customer organization determines and discloses providers, processing countries and transfer conditions for storage it designates directly. If a solution operated directly by EVERINFO uses an external provider or an international transfer, EVERINFO provides a separate notice as required by applicable law.

9. Your rights and contact details

Under the Korean Personal Information Protection Act and other applicable laws, you or your authorized representative may request access, correction, deletion, suspension of processing and withdrawal of consent. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Use the following contact details to exercise rights or raise a privacy concern about website, inquiry or solution information handled directly by EVERINFO. Provide only the type of request and the minimum information needed to identify the relevant service. If identity or representative verification is needed, we will explain the minimum supporting information required separately. You do not need to send an identity document copy or sensitive information with your initial request.

Information security contact

조승민

Privacy telephone

+82-2-852-7114

Privacy email

admin@everinfo.co.kr

Requests are handled and results communicated within the period required by applicable law. If a request is restricted, refused or delayed, we explain the legal reason, processing timetable and how to challenge the decision. You can request reconsideration through the same contact. Requests concerning solution data in a system managed by a customer organization should be addressed to that organization's administrator.

For privacy infringement advice or reporting in Korea, contact the Personal Information Infringement Report Center. For dispute mediation, contact the Personal Information Dispute Mediation Committee.

Where EU/EEA GDPR or UK GDPR applies to processing, rights include access, rectification, erasure, restriction, portability, objection and complaints to a supervisory authority. Where California CCPA/CPRA applies, rights include access, deletion, correction, limiting sensitive information use, opting out of sale or sharing, and non-discrimination for exercising rights. Requests can be made using the contact above, subject to the applicable law's conditions and exceptions. This information does not expand the current region in which solutions are offered beyond the Republic of Korea.

10. Security measures

The website uses HTTPS, web application firewall rules to block malicious requests, and request rate limits. Direct external access to the web service is restricted; requests are handled through a load balancer. The website runtime account has not been granted project data access roles.

Solution environments operated directly by EVERINFO use access controls, authorization management, transmission protection, logging, backups and other measures appropriate to the service's risks and contract. Protection settings on PCs, servers and storage managed directly by a customer are governed by the relevant administrator and organizational policies. EVERINFO does not guarantee protection settings across every customer environment.

11. Policy changes

If this policy is revised because processing practices, covered solutions or applicable laws change, this page will explain the changes, announcement date and effective date and provide access to earlier versions. Where new processing purposes or features require separate notice or consent, those steps will take place before processing begins.