Notice on Outsourcing of Personal Information Processing and Overseas Transfer
Disclaimer
This document is a translation for reference only.
The original version is written in Korean, and in case of any discrepancy, the Korean version shall prevail.
In accordance with Article 4 of the Privacy Policy, this notice discloses the trustees of personal information processing tasks and the details of the outsourced tasks, as well as matters concerning overseas transfer under Article 28-8 of the Personal Information Protection Act.
1. Trustees
| Trustee | Outsourced Tasks |
|---|---|
| Payple | Safe Payment settlement services and payment data integration |
| PortOne | Payment integration and payment data integration |
| BaroBill | Issuance of tax documents such as cash receipts and tax invoices |
| Aligo | Sending KakaoTalk AlimTalk messages and text messages |
| Supabase | Operation of cloud infrastructure, including databases, authentication, and file storage (data is stored in the Seoul region in Korea) |
2. Overseas Trustees and Overseas Transfer
The trustees below are overseas businesses, and personal information is processed overseas in the course of using the relevant features. The items transferred are the minimum information necessary to perform each outsourced task.
| Recipient | Country | Items Transferred | Outsourced Task and Purpose of Use | Timing and Method of Transfer | Retention and Use Period |
|---|---|---|---|---|---|
| Didit (Privacy Policy ) | United States | Passport information (name, nationality, passport number, date of birth, expiration date, passport image), mobile phone number | Foreign national identity verification (passport check) | Transmitted over an encrypted network when foreign national verification is requested | Until the outsourced task ends |
| Google LLC (Privacy Policy ) | United States | Mobile phone number · email address and message content · personal information contained in Uni (AI) request data · access and usage records (Google Analytics) | Phone number verification, email delivery, AI processing, usage analytics | Transmitted over an encrypted network when the relevant feature is used or the Service is accessed | Until the outsourced task ends |
| Mixpanel, Inc. (Privacy Policy ) | United States | Access records, device and browser information, service usage behavior, member identifier | Usage analytics | Transmitted over an encrypted network while the Service is used | Until the outsourced task ends |
| Resend (Privacy Policy ) | United States | Email address, message content | Sending email notices and notifications | Transmitted over an encrypted network at the time of sending | Until the outsourced task ends |
| Cloudflare (Privacy Policy ) | United States | Access logs, IP address, device and browser information | CDN, security, and traffic management | Continuously whenever the Service is accessed | Until the outsourced task ends |
| OpenAI (Privacy Policy ) | United States | Personal information contained in Uni (AI) request data and related event information | AI draft generation | Transmitted over an encrypted network when Uni (AI) is used | Until the outsourced task ends |
| Anthropic (Privacy Policy ) | United States | Personal information contained in Uni (AI) request data and related event information | AI draft generation | Transmitted over an encrypted network when Uni (AI) is used | Until the outsourced task ends |
The contact point of each trustee for personal information inquiries can be found through the links in the table above.
3. How to Refuse Overseas Transfer and Its Effects
- Data subjects may refuse the overseas transfer of their personal information through the UniVent Customer Support Center or contact@univent.io.
- If a data subject refuses, the use of the features processed by the relevant trustee is restricted. For foreign national identity verification, email notices, Uni (AI), and usage analytics, only the relevant feature becomes unavailable; however, if the data subject refuses the transfer to Cloudflare, access to the Service itself is restricted, and the data subject is directed to the membership withdrawal procedure.
4. Usage Analytics Tools
The Company uses Google Analytics (Google LLC) and Mixpanel (Mixpanel, Inc.) to analyze service usage statistics. The items collected and the overseas transfer details are as shown in the table in section 2 above.
Users can refuse collection through their browser’s cookie blocking settings or the opt-out features provided by each tool (such as the Google Analytics opt-out browser add-on).