Privacy Policy
Effective November 1, 2026 · 에스지허브
This English translation is provided for convenience. If there is any conflict, the Korean version prevails.
1. Data collected and purpose
| Category | Items | Purpose |
|---|---|---|
| Sign-up | Email, password (encrypted), name | Member identification, login, request status notices |
| Assessment request | Target URL, request details, ownership verification records | Performing the security analysis, preventing unauthorized testing |
| Payment | Payment method information (held by the payment gateway), contact for receiving a payment link, crypto transfer transaction | Payment processing, refunds, dispute handling |
| Automatically collected | Access IP, browser information, report download history | Fraud prevention, security auditing |
The Company does not store payment information such as card numbers; it is processed by the payment gateway.
2. Retention period
- Member information: until account deletion, destroyed immediately upon deletion.
- Analysis report files: deleted 180 days after release if unpaid, or 90 days after the payment date if paid.
- Contract, payment and refund records are kept for 5 years under the Korean E-Commerce Act, consumer complaint and dispute records for 3 years, and access logs for 3 months (Protection of Communications Secrets Act).
3. Processors and international transfer
| Processor | Task | Location |
|---|---|---|
| Supabase Inc. | Member/request database, report file storage | Republic of Korea (Seoul region) |
| Cloudflare, Inc. | Web traffic delivery, security | United States, etc. (in transit) |
| Toss Payments Co., Ltd. | Card and easy-pay processing | Republic of Korea |
4. Provision to third parties
Except where required by law, we do not provide members' personal data or analysis results to third parties. Analysis reports can be viewed only by the requesting member.
5. Members' rights
Members may at any time request access to, correction, deletion or suspension of processing of their personal data; requests sent to the contact below are handled without delay.
6. Security measures
We apply encrypted password storage, HTTPS end to end, row-level access control in the database, a private store for report files with links that expire after 60 seconds, and logging of administrator access.
7. Privacy officer
전승규 · [email protected] · 0505-300-3337