Privacy Policy

1. Data Controller Information

• Data Controller: 보무 (BOMU)
• Representative: 박봉우
• Business Registration Number: 660-03-03270
• Mail-Order Business Registration Number: 2026-경기파주-3317
• Address: 경기도 파주시 경의로 1050, 1412호 (센트럴파크리움)
• Customer and Privacy Inquiries: 010-9405-1988
• Email: bomu-@naver.com

2. Personal Information We Process

Registration and Account Management

We process login ID, name, email address, mobile phone number, one-way-hashed password values, and email/SMS verification records.

Service Use and Security

We may automatically generate and process IP address, access time, browser/device information, session identifiers, login success/failure records, and security-event records.

Transformation Rules

We process saved transformation-rule names, source column names, output column order, and value transformation settings.

Payments and Passes

We process order number, product code, usage period, payment amount, remitter name, deposit status, payment/refund status, Pro Pass start and end dates, and administrator processing history. When a refund is requested, refund-account information and the reason for the refund may also be processed.

3. Purposes of Processing Personal Information

• User identification, registration, login, and account management.
• Email/SMS verification and prevention of fraudulent registrations.
• Saving transformation rules and providing member-specific services.
• Verifying bank transfer orders, activating Pro Passes, and processing refunds.
• Preventing security incidents, detecting abnormal use, and handling disputes.
• Responding to customer inquiries and improving service quality.

4. Processing of Uploaded Order Files and Converted Results

CSV and Excel source files uploaded by users, data contained in those files such as recipient names, phone numbers, and addresses, and converted results are generally processed within the user's browser and are not transmitted to or stored on the Company's server. Saved transformation rules store column names and transformation settings rather than the contents of the source file.

5. Retention Period

• Member information: until account deletion or completion of the processing purpose.
• Transformation rules: until deleted by the user or the member account is deleted.
• Records concerning contracts, withdrawal of offers, payment, and supply: for the period required by applicable law.
• Consumer complaint and dispute-resolution records: for the period required by applicable law.
• Access and security records: for the period necessary for security/dispute response or as required by applicable law.

Personal information is destroyed without undue delay when the retention period expires or the processing purpose is achieved. Where retention is required by law, only the required information is separated and retained for the legally required period.

6. Disclosure to Third Parties

As a general rule, the Company does not provide users' personal information to third parties. Information is provided only to the extent necessary when there is a legal basis or the user has separately consented.

7. Outsourced Processing

The Company may outsource the following operations to external service providers. Changes to processors or processing activities will be disclosed through this Policy.

• SMS verification delivery: Aligo — delivery of verification codes and service messages.
• Email delivery: SMTP provider configured by the Company — delivery of verification and service emails.
• Server and network operations: hosting and telecommunications providers — operation of service infrastructure.

Electronic payment methods such as Toss Payments are not currently enabled as the default payment method. If enabled in the future, related processing details will be reflected in this Policy and on the payment screen.

8. International Transfers

The Company does not currently intentionally transfer personal information outside the Republic of Korea for operation of the Service. If a service requiring an international transfer is introduced, the Company will provide advance notice of the destination country, data items, purpose, timing, method, retention period, and method of refusal, and will complete the required procedures.

9. Rights of Users and Legal Representatives

Users may request access to, correction of, deletion of, suspension of processing of, or withdrawal of consent for their personal information. Requests may be made through the account page or customer-support contact information. The Company will verify the requester's identity and process the request in accordance with applicable law.

10. Destruction of Personal Information

When grounds for destruction arise, the Company identifies the applicable information through internal procedures and destroys it. Electronic files are deleted using methods that make recovery difficult, and printed materials are shredded or incinerated.

11. Security Measures

• One-way hashing of passwords.
• Separation of administrator and member access permissions.
• HTTPS communications and Secure, HttpOnly, and SameSite cookie settings.
• CSRF protection and rate limits for login and authentication requests.
• Logging of access/security events and periodic inspections.
• Policy of not storing source files containing personal information on the server.

12. Cookies and Sessions

Essential cookies and sessions are used to maintain login state, provide security, and operate the Service. Users may refuse cookie storage through browser settings, but some functions such as login may then be unavailable.

13. Privacy Officer and Inquiries

• Privacy Officer: 박봉우
• Phone: 010-9405-1988
• Email: bomu-@naver.com

Users who need to report or seek consultation regarding a personal-data infringement may contact the relevant Korean authorities, including the Personal Information Infringement Report Center and the Personal Information Dispute Mediation Committee.

14. Changes to This Policy

If this Policy changes, the effective date and material changes will be announced on the Service.

Supplementary Provision

This Privacy Policy is effective as of August 4, 2026.