Privacy Policy
Effective Oct 15, 2026
PodoSoft Inc. ("PODOSOFT") publishes this Privacy Policy under the Korean Personal Information Protection Act ("the Act") to protect the personal information of data subjects and to handle related concerns promptly while operating the PDComm website and its services (sign-up, downloads, license issuance, quote requests and inquiries, "the services").
1. Purposes of processing
PODOSOFT processes personal information for the following purposes. It does not use the information for other purposes, and if a purpose changes it takes the steps required by Article 18 of the Act, such as obtaining separate consent.
- Membership: sign-up, email address verification, sign-in and account security, and account deletion
- Downloads and licenses: checking the customer profile, issuing and reissuing evaluation and paid licenses, and preventing license misuse
- Quotes and contracts: receiving quote requests and providing quotes, concluding and performing contracts, maintenance and technical support
- Inquiries: receiving inquiries, checking facts and replying
- Operation and security: rate limiting, preventing abuse, investigating security incidents and keeping operating records
- Product news: sending new releases and product news by email to members who opted in
2. Personal information processed and retention periods
(1) The personal information PODOSOFT processes, the legal basis and the retention periods are as follows. Article numbers refer to the Act.
| Category | Items | Legal basis | Retention |
|---|---|---|---|
| Member account | Required: name, email address, password (stored only in a non-reversible hashed form) Optional: profile photo | Consent (Art. 15(1)1) | Until the account is deleted |
| Customer profile | Required: company, job title, country, modules of interest, use case Optional: phone number Automatic: display language | Consent (Art. 15(1)1) | Until the account is deleted |
| Consent records | What was consented to and its version, the decision, time, IP address, browser information | Legitimate interest in proving consent (Art. 15(1)6) | Until the account is deleted; consents given on the inquiry and quote forms for as long as that inquiry or quote request |
| Evaluation progress | Evaluation start and end times, modules, extensions | Consent (Art. 15(1)1) | Until the account is deleted, but no longer than 3 years after the last evaluation license was issued |
| Download records | Email address, file, version, platform and modules downloaded, time, IP address, browser information, license ID | Consent (Art. 15(1)1); after account deletion, legitimate interest in preventing license misuse (Art. 15(1)6) | 3 years from the download, whether or not the account is deleted |
| Evaluation licenses | Name, company and email address recorded in the license, modules, issue and expiry times | Consent (Art. 15(1)1); after account deletion, legitimate interest in preventing license misuse (Art. 15(1)6) | 3 years from issue, whether or not the account is deleted |
| Paid licenses and contracts | Licensee name, company and email address, modules, number of developers, host IDs, maintenance end date, order and payment information | Performance of a contract; legal obligations (Art. 15(1)2 and 4) | While the license remains in effect; once the license expires or is revoked and the contract ends, 5 years from then |
| Quote requests | Required: name, email address, company, modules, number of developers, number of runtime licenses, maintenance term, source edition Optional: country, phone number, message Automatic: IP address, browser information | Consent (Art. 15(1)1) | 3 years from receipt; if a contract is concluded, 5 years after the contract ends |
| Inquiries | Required: name, email address, topic, message Optional: company Automatic: IP address, browser information | Consent (Art. 15(1)1) | 3 years from receipt |
| Product news (optional) | Name, email address | Consent (Art. 15(1)1) | Until consent is withdrawn or the account is deleted |
| Access and security records | Sign-in session data (IP address, browser information, sign-in time); account activity records (sign-ins, password and email changes, downloads, profile changes and the IP address used) | Legitimate interest in account security and preventing abuse (Art. 15(1)6) | Sessions until sign-out or expiry; account activity records for 1 year |
| Rate limiting | IP address or account identifier, request count | Legitimate interest in service stability (Art. 15(1)6) | Deleted automatically when the limit window ends (at most 1 hour) |
(2) Personal information is collected from what you enter in the sign-up, customer profile, quote request and inquiry forms. IP addresses, browser information and access times are generated and collected automatically while you use the services. Each form shows the items collected, the purpose, the retention period, and your right to refuse consent and its consequence.
(3) You may refuse consent. Without consent to the collection and use of personal information at sign-up you cannot create an account, so you cannot use downloads and evaluation licenses. Without consent on the inquiry or quote form you cannot send that form, but you can still reach PODOSOFT by email (dev@podosoft.io) or phone (+82-31-704-9390). Not opting in to product news does not limit your use of the services.
(4) PODOSOFT does not process unique identification information, such as resident registration numbers, or sensitive information.
(5) The services are intended for business customers, and PODOSOFT does not accept sign-ups from children under 14.
3. Destruction of personal information
(1) PODOSOFT destroys personal information without delay when its retention period ends or its purpose has been achieved. Once a day the website server automatically deletes the download records, evaluation licenses and evaluation progress, quote requests, inquiries and contract records whose retention period has ended, together with expired sign-in sessions, and records the number deleted in the account activity records.
(2) Account activity records are deleted automatically 365 days after they are recorded, and rate-limit data disappears automatically when the limit window (at most 1 hour) ends.
(3) When a member deletes the account, PODOSOFT immediately deletes the account, customer profile, consent records, evaluation progress and sign-in sessions. Download records, licenses, quote requests and inquiries are detached from the account, kept separately for the periods in Section 2 and then destroyed, and are used while kept only for the purposes in Section 1, such as preventing license misuse and performing contracts.
(4) Personal information that other laws require to be kept is kept as follows:
- Legal basis: Article 85-3 of the Framework Act on National Taxes (keeping of books and records)
- Items: records of contracts, orders, payments and tax invoices (company name, contact person's name and email address, transaction details)
- Period: 5 years
(5) Electronic files are deleted so that they cannot be recovered, and paper documents are shredded or incinerated. Where backups are kept, information remaining in them is deleted when the backup retention period ends.
4. Provision to third parties
(1) PODOSOFT processes personal information only within the purposes in Section 1 and provides it to third parties only in the cases set out in Articles 17 and 18 of the Act, such as with your consent or where a law specifically provides for it.
(2) PODOSOFT currently provides no personal information to third parties.
5. Outsourcing of processing
(1) PODOSOFT does not outsource the processing of personal information. The website, database and file storage run on servers that PODOSOFT operates itself.
(2) If PODOSOFT outsources processing, such as sending email, it will publish the processor and the outsourced tasks in this policy beforehand, set out the necessary protections in the outsourcing contract, and supervise the processor.
6. Transfer abroad
PODOSOFT does not transfer personal information abroad. Personal information is stored on PODOSOFT's servers in the Republic of Korea. If a transfer abroad becomes necessary, PODOSOFT will publish the items, destination country, recipient and other details in this policy and follow the procedures in Article 28-8 of the Act.
7. Security measures
PODOSOFT takes the following measures under Article 29 of the Act:
- Administrative: an internal management plan, and a minimal number of trained staff handling personal information
- Technical: passwords stored only in a non-reversible hashed form, encrypted connections between the website and its users (HTTPS), administration pages limited to administrators with two-factor authentication available, records of administrator exports and changes of personal information, rate limiting against brute-force attacks, and automatic deletion of records whose retention period has ended
- Physical: servers and storage media kept where only authorized people can enter
8. Cookies and similar technologies
(1) PODOSOFT uses only the cookies and browser storage needed to provide the services. It does not use advertising or behavioral tracking cookies or third-party analytics tools, and it does not collect behavioral information.
| Name | Purpose | Retention |
|---|---|---|
| Sign-in session cookies (better-auth.*) | Keeping you signed in and protecting your account | Until sign-out or the end of the session |
| locale cookie | Remembering the display language | 1 year |
| sidebar_state cookie (administrators only) | Remembering whether the administration sidebar is open | 7 days |
| Browser storage (mode-watcher-mode, podokit:session-last-activity) | Remembering the color theme and timing automatic sign-out | Until you clear it in your browser |
(2) You can block or delete cookies in your browser settings: in Chrome under Settings > Privacy and security, in Edge under Settings > Cookies and site permissions, in Safari under Settings > Privacy, and in Firefox under Settings > Privacy & Security.
(3) If you block the sign-in session cookies, you cannot use the download and license features that require signing in.
9. Rights and obligations of data subjects
(1) You may exercise the following rights against PODOSOFT at any time:
- access to your personal information;
- correction or deletion of errors and other information;
- suspension of processing and withdrawal of consent.
(2) After signing in, you can view and correct your company, job title, country, modules of interest, use case and phone number on the customer profile and withdraw consent to product news there. On the account settings page you can correct your name and email address and delete your account yourself.
(3) When you delete your account, the account information is deleted at once as described in Section 3(3). Download records and evaluation licenses are kept for 3 years from the download or issue, quote requests and inquiries for 3 years from receipt, and contract records for 5 years after the contract ends, and then destroyed. If you sign up again with the same email address, your earlier evaluation period continues.
(4) You can also request access, correction, deletion, suspension of processing or account deletion through the contact page, by email (dev@podosoft.io) or by phone (+82-31-704-9390). PODOSOFT handles a request within 10 days of receipt and tells you the result. If there is a legitimate reason it cannot do so in that time, it tells you the reason and the expected date.
(5) You may also exercise your rights through a legal representative or an authorized person, who must submit a power of attorney.
(6) You cannot request deletion of personal information that other laws require to be collected, and PODOSOFT may refuse a request in the cases set out in Articles 35(4), 36(1) and 37(2) of the Act. PODOSOFT tells you the reason for any refusal.
(7) PODOSOFT verifies that the person making a request is you or your legitimate representative. Requests about an account are verified through the email address registered to that account.
(8) You must keep your personal information accurate and must not enter other people's personal information.
(9) PODOSOFT does not make decisions that significantly affect your rights or obligations by fully automated means.
10. Privacy officer
(1) PODOSOFT has designated the following privacy officer to oversee the processing of personal information and to handle complaints and remedies. The same department receives and handles requests for access to personal information.
- Privacy officer: PODOSOFT development team
- Email: dev@podosoft.io
- Phone: +82-31-704-9390 (weekdays 10:00–19:00 KST)
(2) You may contact the privacy officer about any privacy question, complaint or remedy arising from your use of the services, and PODOSOFT will reply and act without delay.
11. Remedies
To seek a remedy for an infringement of your personal information, you may apply for dispute mediation or counseling to the following bodies in the Republic of Korea:
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (Korea Internet & Security Agency): 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
12. Changes to this policy
(1) This policy applies from October 15, 2026.
(2) PODOSOFT announces changes to this policy on this website from 7 days before they take effect. Changes that significantly affect your rights, such as to the items collected, purposes or provision to third parties, are announced 30 days in advance, and consent is obtained again where needed.
(3) Change history
- October 15, 2026: first published