Privacy Policy

Overview

디투 (the "Company") establishes and discloses this Privacy Policy to protect users' personal information in accordance with the Personal Information Protection Act and to handle related grievances promptly and smoothly.

Personal Information Collected

Purpose of Processing Personal Information

The Company processes personal information for the following purposes:

• Service provision and user management
• AI-based note analysis and search functionality
• Service improvement and new service development
• Customer inquiry response

AI Features and Personal Information Processing

The Company provides AI-powered features such as AI chat and AI note analysis.

• Note content is processed to provide AI search functionality.
• Processed data is securely stored in external cloud services.
• Related data is deleted when notes or accounts are deleted.

Retention Period of Personal Information

The Company processes and retains personal information within the retention period required by law or agreed upon when collecting personal information from the data subject.

• Upon account deletion: Destroyed without delay (except when required by law)
• Service usage records: 3 years (Act on Consumer Protection in Electronic Commerce)
• Access logs: 3 months (Protection of Communications Secrets Act)

Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary due to expiration of retention period or achievement of processing purpose.

• Electronic files: Securely deleted to prevent recovery
• Other records: Shredded or incinerated
• Deletion is completed within a scheduled period according to system schedules.

Provision of Personal Information to Third Parties

The Company does not provide users' personal information to third parties in principle. However, exceptions apply in the following cases:

• When the user has given prior consent
• When required by law

Delegation of Personal Information Processing

The Company delegates personal information processing for service provision as follows:

• Delegated company: Cloud service provider
• Delegated tasks: Data storage and AI processing
• The Company clearly stipulates compliance with personal information protection laws and confidentiality in delegation contracts and manages and supervises accordingly.

Rights of Data Subjects and How to Exercise Them

Users may exercise the following rights as data subjects:

• Request to access personal information
• Request to correct errors
• Request for deletion
• Request to suspend processing

The above rights can be exercised via email (d2wolab@d2wo.com) or through service settings, and the Company will take action without delay.

Measures to Ensure Personal Information Security

The Company takes the following measures to ensure the security of personal information:

• Encryption of personal information
• Technical measures against hacking
• Restriction of access to personal information

Installation, Operation and Rejection of Cookies

The Company uses cookies to provide personalized services to users.

• What are cookies: Small pieces of information sent by websites to users' browsers
• Purpose: Maintaining login, saving user settings
• How to reject: You can refuse cookie storage in browser settings, but some services may be limited.

Privacy Officer

The Company designates a Privacy Officer to oversee personal information processing and handle data subjects' complaints and damage relief related to personal information processing.

Users may contact the Privacy Officer for all inquiries, complaints, and damage relief related to personal information protection during service use.

Changes to This Privacy Policy

This Privacy Policy is effective from the effective date, and when there are additions, deletions, or corrections due to changes in laws or policies, changes will be announced through notices at least 7 days before implementation.