Privacy Policy

KodeBridge (the “Company”) establishes and discloses this Privacy Policy in accordance with applicable laws such as the Personal Information Protection Act.
This Policy applies to the UniVent websites (univent.io, console.univent.io, docs.univent.io, etc.) and the apps provided by the Company (collectively, the “Service”).

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. If the purpose of use changes, the Company takes the necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Member registration and management: Confirming the intention to register, verifying identity and age, identifying and authenticating members, preventing duplicate registration and fraudulent use, and sending various notices and notifications
2. Intermediating and supporting the performance of transactions: Processing applications, orders, payments, and refunds, issuing and verifying tickets, delivery, transfers, processing cheer payments, issuing cash receipts, communication between participants and organizers, and on-site operations such as check-in, waiting list management, cloakroom operation, and on-site sales
3. Supporting organizers/sellers: Business verification, display of seller information, Safe Payment settlement, and provision of and billing for paid services
4. Customer support and service improvement: Responding to inquiries, sending announcements and notices, mediating disputes, preserving records, analyzing usage statistics, detecting fraudulent use, ensuring service stability, and improving features
5. Marketing and advertising: Informing members who have consented to receive such information about promotions and benefits

The Company may pseudonymize the personal information it has collected and use it for the purposes of compiling statistics, scientific research, and service improvement.

Article 2 (Items of Personal Information Processed and Retention Periods)

1. The Company collects and uses the personal information necessary to provide the Service, as set out below. When the retention period expires, the information is destroyed in accordance with Article 5, and items subject to a statutory retention obligation are stored separately from other personal information for the required period.

   Category	Items Collected	Purpose of Use	Retention Period
   Member registration and verification	Email, password, nickname, name, phone number, identity verification information (gender, date of birth, mobile carrier, domestic/foreign national status, connecting information), and passport information for foreign national verification	Member identification, verification of identity and age, prevention of duplicate registration, contact	Until withdrawal is finalized (for hash values used to block re-registration, see Article 5(5))
   Event applications, product orders, and payments	Name, contact information, email, input fields requested by the organizer/seller, delivery address, cheer payment amount and message, payment and refund records, deposit confirmation information, cash receipt issuance information, transfer party information, and non-member payment information	Processing applications, orders, payments, and refunds, delivery, transfers, issuing cash receipts, customer support	5 years after the transaction is completed
   Organizer/seller operations	Settlement account information and name verification information, settlement confirmation, business information and supporting documents, Electronic Payment integration information	Settlement, business verification, display of seller information, tax documentation	5 years after settlement or verification ends (integration information: until the integration is removed)
   On-site operations	Name, contact information, photos of items taken at drop-off, lost-tag handover pledge records	Cloakroom operation, check-in and on-site sales processing, dispute response	6 months after the event ends
   Communication and customer support	Content of reviews, inquiries, Q&A, and chats and author information, notification settings, customer inquiry details	Posting, sending notifications, responding to inquiries, dispute response	Until a deletion request or withdrawal (dispute handling records: 3 years)
   External lists registered by organizers	Items registered by the organizer, such as name and contact information	Sending notices and managing participants as entrusted by the organizer	Until the organizer deletes them or archives the event
   Service usage records	Access logs, cookies, IP address, device and browser information, app identifiers, feature usage records	Usage statistics, security management, prevention of fraudulent use, service improvement	6 months (login records: 3 months)

2. For the identity verification of foreign nationals, the Company processes passport numbers, which are unique identification information, with the separate consent of the data subject, and does not collect resident registration numbers.

Article 3 (Provision of Personal Information to Third Parties)

1. In principle, the Company does not provide personal information to third parties without the consent of the data subject.
2. However, personal information is provided to third parties as follows in order to provide the Service.
   • Event organizers, product sellers
     • Items provided: Name, contact information, email, ticket/product application and order details, delivery address, input fields requested by the organizer/seller, cheer payment amount and message, and, in the case of a transfer, the transferee’s name and contact information
     • Purpose of provision: Performance of contracts, such as event operation, product delivery, exchanges and refunds, and after-sales service (A/S)
     • Retention and use period: Until the purpose of provision is achieved (or for the retention period required by applicable laws, if any)
   • Payple, PortOne
     • Items provided: Name, mobile phone number, email, payment information, identity verification information
     • Purpose of provision: Safe Payment processing, identity verification intermediation
     • Retention and use period: Retention period required by applicable laws
   • Transfer counterparty
     • Items provided: Names and contact information of the transferor and the transferee
     • Purpose of provision: Processing ticket/product transfers and confirming the counterparty
     • Retention and use period: Until the transfer is completed
3. Disclosure of Seller Information: To fulfill the obligations of a telecommunication sales intermediary under Article 20 of the Act on Consumer Protection in Electronic Commerce, etc., the Company may display on event and store pages, or provide to the counterparty of a transaction, the organizer’s/seller’s name or trade name, contact information, and business verification status and, for business operators, the business registration number and mail-order business report number.
4. If there are special provisions in applicable laws or an investigative agency makes a request in accordance with lawful procedures, the Company may provide personal information to the extent prescribed by applicable laws.

Article 4 (Outsourcing of Personal Information Processing and Overseas Transfer)

1. The Company outsources some personal information processing tasks, such as payment settlement, issuance of tax documents, message delivery, identity verification, cloud infrastructure operation, usage analytics, and AI processing, to external companies. The trustees and the details of the outsourced tasks can be checked in the Notice on Outsourcing of Personal Information Processing and Overseas Transfer.
2. Some personal information is processed by overseas trustees. In accordance with Article 28-8 of the Personal Information Protection Act, the recipient, the country to which the information is transferred, the items transferred, the timing and method of transfer, the purpose of use and retention period, and the method and effect of refusing the transfer are disclosed in the notice above. Data subjects may refuse the overseas transfer through the UniVent Customer Support Center, in which case the use of features processed by the relevant trustee is restricted.
3. If a trustee or the details of the outsourced tasks change, the Company discloses the change through the notice above.

Article 5 (Retention and Destruction of Personal Information)

1. The Company destroys personal information without delay when the retention period expires or the purpose of processing has been achieved.
2. However, information that must be retained under applicable laws such as the Act on Consumer Protection in Electronic Commerce, etc., tax laws, and the Protection of Communications Secrets Act is stored separately from other information for the period prescribed by those laws and then destroyed.
3. Electronic files are deleted using methods that make recovery impossible, and printed materials are shredded or incinerated.
4. Membership withdrawal is finalized when a 14-day grace period has elapsed after the withdrawal request, and personal information is destroyed in accordance with paragraph 1 upon finalization. If an organizer chooses to archive an event, identifying information of the event’s participants is destroyed once the period set by the Company has passed.
5. Notwithstanding paragraph 4, for the Company’s legitimate interests in blocking re-registration intended to evade usage restrictions and in responding to disputes, the Company retains only irreversible one-way hash values of the identity verification connecting information (CI) and the passport number, for 1 year from the date withdrawal is finalized, or for 5 years in the case of members with a history of organizer activity or of a permanent usage restriction. The hash values are not used for any purpose other than checking for a match upon re-registration.

Article 6 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)

1. Data subjects may request access to, correction or deletion of, or suspension of processing of their personal information, withdraw consent, and refuse or request an explanation of automated decisions under Article 7.
2. Rights may be exercised directly in My Page (account settings) within the Service, or by submitting a request to the department under Article 11 by email or through an inquiry to the Customer Support Center, and may also be exercised through a legal representative or an authorized agent. The Company takes action within the period prescribed by applicable laws and notifies the data subject of the result.
3. The exercise of rights may be restricted on grounds prescribed by applicable laws, such as where there are special provisions in law or where the personal information must be retained under other laws.
4. Rights regarding personal information that organizers/sellers have collected and the Company processes on their behalf (such as external participant lists) may be exercised against the relevant organizer/seller. If such a request is made to the Company, the Company forwards it to the organizer/seller.

Article 7 (Automated Decisions)

1. The Company may use automated processing for the safe operation of the Service, such as blocking re-registration intended to evade usage restrictions and detecting fraudulent payments and abuse.
2. Data subjects whose use of the Service has been restricted as a result of automated processing may, by the methods in Article 6, request an explanation of the decision or request a review by a person.

Article 8 (Personal Information of Children Under 14)

The Company does not collect personal information of children under the age of 14. If a member is confirmed to be under the age of 14, the Company terminates the service agreement and destroys the relevant personal information.

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

1. The Company uses cookies to keep users logged in, analyze usage statistics, and provide personalized services. Cookies are small pieces of information that the server operating a website sends to the user’s browser, and they are stored on the user’s device.
2. The Company uses external usage analytics tools to improve the Service, and the tools in use, the items they collect, and how to opt out are disclosed in the Notice on Outsourcing of Personal Information Processing and Overseas Transfer.
3. Users can refuse the storage of cookies or delete cookies through their browser or device settings; if they do so, the use of some services, such as staying logged in, may be restricted.

Article 10 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures in accordance with Article 29 of the Personal Information Protection Act.

1. Administrative measures: Establishing and implementing an internal management plan, minimizing and training the personnel who handle personal information, and managing access rights
2. Technical measures: Encryption of passwords and important information, encryption of data in transit, access control for personal information processing systems and management of access records, and operation of security programs
3. Physical measures: Physical access control of the cloud infrastructure, and minimization of printed materials containing personal information

Article 11 (Personal Information Protection Officer and Department Handling Access Requests)

1. The Company has designated a Personal Information Protection Officer as follows to take overall responsibility for the processing of personal information and to handle data subjects’ complaints and remedies for damages.
   • Department to which the Personal Information Protection Officer belongs: UniVent Customer Support Center (in charge of personal information protection)
   • Contact: contact@univent.io, https://univent.io/help 
2. Data subjects may submit requests to exercise their rights, such as requests for access to, correction, deletion, or suspension of processing of personal information and the withdrawal of consent, as well as inquiries and complaints regarding personal information, to the department below.
   • Department handling access requests and grievances: UniVent Customer Support Center
   • How to submit: https://univent.io/help , contact@univent.io

Article 12 (Remedies for Infringement of Rights)

To obtain remedies for infringement of personal information, data subjects may apply to the following organizations for dispute resolution or consultation.

• Personal Information Infringement Report Center: 118 (no area code needed) / privacy.kisa.or.kr 
• Personal Information Dispute Mediation Committee: 1833-6972 / kopico.go.kr 
• Supreme Prosecutors’ Office Cyber Investigation Division: 1301 / spo.go.kr 
• Korean National Police Agency Cyber Investigation Bureau: 182 (no area code needed) / ecrm.police.go.kr 

Article 13 (Scope of Application)

1. This Policy applies to the services directly operated by the Company.
2. This Policy does not apply to services provided by external sites linked to the Service or to personal information that organizers/sellers collect and process on their own outside the Service; please check the policies of the relevant site or organizer/seller.

Article 14 (Changes to the Privacy Policy)

1. This Policy applies from November 2, 2026.
2. If the Company changes this Policy, it discloses the reasons for and details of the change and the effective date in the in-service announcements or on the terms page before the effective date.

Revision History