Website Privacy Policy

ALTIN (the “Company”) values your personal information and complies with the Personal Information Protection Act of Korea and related law. This Policy explains how we process personal information through the website alt-in.net (the “Site”).

Mobile applications of the Company, including Flowin, are governed by a separate privacy policy for each app.

Article 1 (Purposes of processing)

Category	Purpose
Handling inquiries	Confirming the inquiry and the facts, sending a reply, reviewing partnership proposals, considering feature ideas, checking bug reports
Operating the Site	Stable provision of the Site, diagnosing errors
Security	Blocking abnormal access and automated bulk requests, preventing misuse

Article 2 (Items processed and how they are collected)

1. When an inquiry is received

Category	Items
Required	Name, email address, topic (partnership / support / feature idea / bug report / other), message

How collected — The Site’s inquiry form launches the mail application on your device. What you type is not sent to the Site’s servers. We receive and process it when the email you send arrives at [email protected].

2. Automatically collected on access

Items	Collected by
IP address, time of access, browser type and version, operating system, request path	Server logs of the hosting provider (Cloudflare, Inc.)

3. Information we do not collect

The Site has no sign-up, login, or payment functions. Through the Site we do not collect account information, passwords, payment-instrument data, location, advertising identifiers, or behavioral profiles.

Article 3 (Retention)

Category	Period
Inquiry and proposal records	3 years from receipt (handling and history)
Site access logs	According to the hosting provider’s retention policy; we do not store them separately

Where another law requires a longer period, we keep the information for that statutory period and then destroy it.

Article 4 (Provision to third parties)

We do not provide personal information to third parties without prior consent, except where a statute requires it or a law-enforcement authority requests it under the procedures set by law.

Article 5 (Processors)

Processor	Work entrusted	Retention
Cloudflare, Inc.	Website hosting, content delivery (CDN), security and blocking of abnormal traffic	Until the processing arrangement ends

When we enter a processing arrangement we reflect, in the contract or the provider’s terms, the duties under Article 26 of the Personal Information Protection Act, including purpose limitation, technical and organizational measures, limits on sub-processing, supervision, and liability, and we check that the processor handles personal information securely.

Article 6 (International transfers)

We transfer personal information abroad as follows in order to operate the Site.

Recipient	Country	When and how	Items	Purpose	Retention
Cloudflare, Inc. [email protected]	United States (processed via a global edge network)	Automatic transmission over the network when you access the Site	IP address, time of access, browser and OS information, request path	Website hosting, content delivery, security and blocking of abnormal traffic	Until the processing arrangement ends, or according to Cloudflare’s log-retention policy

1. You may refuse an international transfer. This transfer is inherent in accessing the Site. If you refuse, you cannot use the Site.
2. To refuse, contact us using the details in Article 10.
3. We require the recipient to take protective measures under Articles 28-8 and 28-9 of the Personal Information Protection Act.

Article 7 (Destruction)

1. Procedure — We destroy personal information without delay when the retention period ends or the purpose is achieved. If another law requires us to keep it, we store it separately.
2. Method — Electronic files are permanently deleted by a technical method that prevents recovery. Paper is shredded or incinerated.

Article 8 (Your rights and how to exercise them)

1. You may at any time request access, correction, deletion, suspension of processing, and suspension of international transfer.
2. You may request this by email ([email protected]) or telephone (02-6954-7891). After confirming your identity we will act without delay.
3. You may exercise rights through a legal representative or an authorized person. In that case a power of attorney in the form attached as Form 11 to the Notification on Methods of Processing Personal Information must be submitted.
4. We will act on requests for access, correction, deletion, or suspension within 10 days and notify you of the result.
5. Your request may be limited under Articles 35(4) and 37(2) of the Personal Information Protection Act and similar provisions. If so, we will notify you of the reason.

Article 9 (Automatic collection devices — cookies)

1. The Site does not use analytics cookies that we ourselves install or operate.
2. The hosting provider, Cloudflare, may set security cookies to block abnormal traffic. Those cookies are needed to provide the Site safely and do not collect your interests or behavioral profiles.
3. You may refuse cookies or delete stored cookies in your browser:
   • Chrome — Settings > Privacy and security > Third-party cookies
   • Safari — Settings > Privacy > Cookies and website data
   • Edge — Settings > Cookies and site permissions
4. Refusing cookies may limit some use of the Site.

Article 10 (Personal information protection officer)

Item	Details
Officer	Ro Hongseok (CEO)
Telephone	02-6954-7891
Email	[email protected]

You may contact the officer about any privacy inquiry, complaint, or remedy arising from use of the Site. We will reply and handle the matter without delay.

Article 11 (Security measures)

1. Organizational — Minimize the number of persons who handle personal information; establish and operate an internal management plan
2. Technical — Encryption in transit (HTTPS/TLS); access control to the inquiry mailbox
3. Physical — The hosting provider’s data-center security policy

Article 12 (Children under 14)

We do not collect personal information of children under 14 through the Site.

Article 13 (Remedies)

You may apply for dispute resolution or counseling at the following bodies.

Body	Role	Telephone	Website
Personal Information Dispute Mediation Committee	Mediation of personal-information disputes, including collective mediation	1833-6972	www.kopico.go.kr
Personal Information Infringement Report Center	Reports and counseling	118 (no area code)	privacy.kisa.or.kr
Supreme Prosecutors’ Office Cyber Investigation Division	Criminal complaints	1301 (no area code)	www.spo.go.kr
National Police Agency Cyber Bureau	Criminal complaints	182 (no area code)	ecrm.police.go.kr

A person whose rights or interests are infringed by our disposition or inaction under Articles 35, 36, or 37 of the Personal Information Protection Act may file an administrative appeal under the Administrative Appeals Act.

• Central Administrative Appeals Commission — 110 (no area code), www.simpan.go.kr

Article 14 (Changes to this Policy)

1. This Policy applies from the effective date.
2. If we add, delete, or amend the Policy because of changes in law, policy, or security technology, we will post the change on the Site at least 7 days before it takes effect (30 days if the change is material and adverse to users).
3. This is the first posted version, so there is no previous policy. When we change the Policy we will also post the previous version so that the history can be reviewed.

Addendum

• Date of notice: 5 September 2026
• Effective date: 5 September 2026