Privacy Policy
Effective July 14, 2026
1. Personal Information Collected
To process adoption/partnership inquiries, the Company collects the inquirer's company name, contact name, email address, and inquiry content.
2. Collection Method
Collected directly when a user fills out and submits the inquiry form on the site.
3. Purpose of Collection and Use
Collected information is used solely to review and respond to inquiries and to provide information about the Service.
4. Retention Period
Personal information is retained until the inquiry is resolved or for the period required by applicable law, and is destroyed without delay upon a user's request for deletion.
5. Provision to Third Parties
The Company does not provide personal information to third parties without the user's consent, except where required by law.
6. Outsourcing
The Company does not currently outsource personal-information processing to any external party; if outsourcing becomes necessary, users will be notified in advance and consent will be obtained.
7. User Rights
Users may request access to, correction of, deletion of, or suspension of processing of their personal information at any time, using the contact information below.
8. Destruction Procedure
Personal information is destroyed without delay once the retention period ends or the purpose of processing is achieved; electronic files are deleted using methods that prevent recovery.
9. Privacy Officer
The Privacy Officer responsible for handling inquiries and complaints is White Baek (CEO); contact using the information below.
10. Use of Google User Data (WhiteMail mailbox integration)
When a user connects a Gmail account in the WhiteMail service, the Company accesses email headers, body, links, attachment metadata, and information necessary for threat verdicts via Google APIs. The Company's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, such data is (1) used solely to provide the user-facing email-security features (threat detection, verdict, quarantine, and their explanation); (2) never used for advertising or transferred to third parties for such purposes; and (3) not read by humans, except with the user's explicit consent, for security/compliance, when required by law, in aggregated/anonymized form, or where necessary to provide the feature. Users may revoke access at any time via their Google Account settings or by removing the mailbox in the service.
11. Data Retention and Deletion (connected mail)
Scan results for connected mail are automatically soft-deleted after a per-user retention period (default 180 days, individually configurable; setting 0 disables automatic deletion) and permanently purged after administrator confirmation. Users may request access or deletion at any time, and the on-premises deployment option keeps original mail from leaving the country.
12. Notification of Changes
Any change to this policy will be announced on the site at least 7 days before it takes effect.