Privacy Policy

JSINI ("the Company") handles personal data in accordance with the Personal Information Protection Act of the Republic of Korea. This policy applies to our company website (jsini.co.kr) and our business portal (portal.jsini.co.kr) (together, "the Service"). The Korean version prevails.

1. Purposes

• Accounts — receiving and approving sign-up requests, identification, sign-in, password reset
• The Service — portal features, email and app notifications, keeping your display settings
• Enquiries — answering enquiries sent through the company website
• Security — keeping access records and blocking abuse

2. Data we process

• Portal sign-up — username, name, email, password (required); phone, a note about yourself (optional)
• Social sign-in (Kakao, Naver, Google) — the provider's user ID, name or nickname, email; profile photo (optional)
• Using the portal — what you enter while working (profile photo, department, work records, etc.)
• Enquiries — name, email, message (required); company, phone (optional)
• Optional features — push subscription data and notification settings; your location (latitude/longitude) if you turn on local weather
• Collected automatically — access time, IP address, browser details, usage records, cookies

Passwords are stored only as one-way hashes. A profile photo received through social sign-in is copied to our servers and used as your profile photo.

3. Retention

• Account data — until the account is deleted. Rejected sign-up requests are deleted immediately.
• Enquiries — three years from receipt
• Access records — as required by law (e.g. three months under the Protection of Communications Secrets Act)
• Push subscriptions and location — until you turn the feature off or unsubscribe

4. Disclosure to third parties

We do not provide personal data to third parties except with your consent or where the law requires it.

5. Processors and connected services

• Mail server operator (jinnets.co.kr) — sending account and notification emails
• Browser push services (e.g. Google Firebase Cloud Messaging) — delivering app notifications you turned on
• Kakao Corp., NAVER Corp., Google LLC — verifying your identity for the social sign-in you choose

6. Transfers abroad

• Google LLC (USA) — Google account ID, name, email, profile photo, notification content; for Google sign-in and push delivery
• AI providers (USA and others: Groq, OpenRouter, Google, Anthropic) — what you type into AI features; to generate responses

Transfers use encrypted connections (HTTPS). If you do not want your data transferred abroad, do not use those features. Please do not enter personal data into AI features.

7. Destruction

Data is destroyed without delay once it is no longer needed: electronic files are deleted irrecoverably and paper is shredded.

8. Your rights

You may ask to access, correct, delete, or stop the processing of your data at any time — in the portal under My Info, or by emailing the privacy officer below. You can disconnect a social account under My Info → Security.

9. Security measures

One-way password hashing, HTTPS everywhere, role-based access, administrator approval before use, access logging and rate limiting, and files served only to signed-in users.

10. Cookies

We use cookies to keep you signed in and to protect against forged requests, and keep display settings in your browser's storage. We do not use advertising or tracking cookies.

11. Privacy officer

quristyle@gmail.com

12. Changes

This policy applies from 2026-09-27. Changes are announced on this page at least seven days in advance (30 days for changes against your interest).

Operator

JSINI

Contact

quristyle@gmail.com