EN
Let’s talk

LEGAL

Privacy policy

Effective: 2026-10-22 · Last updated: 2026-10-15

English translation of the Korean privacy policy. Applies to https://bytecreo.com.

바이트크레오 (byte-creo) values your privacy and follows applicable law, including the Republic of Korea’s Personal Information Protection Act. This policy explains the information collected through this website and how it is handled. No account registration is required.

1. Information we collect

  • Required inquiry information: contact details (an email address or telephone number) and your message. The forms in languages other than Korean ask for an email address.
  • Optional inquiry information: name, area of interest, company or organization, and preferred start date.
  • Processing basis for form information: your consent under Article 15(1)(1) of the Personal Information Protection Act.
  • Automatically recorded with inquiries: a hash of the connection IP address (the original IP is not stored with the inquiry), submission time, and short source labels indicating the form location, channel, campaign and landing page. These are processed without consent on the basis of legitimate interests, including spam prevention, under Article 15(1)(6).
  • Visit statistics: a random visit-session identifier, public page paths without query strings, consultation-button locations, form starts, successful submissions and source labels. These support improvement of the service information and inquiry journey under Article 15(1)(6). Browser Do Not Track or Global Privacy Control (GPC) settings prevent these behavioral events from being sent. The additional visit statistics and channel attribution are scheduled to begin on October 22, 2026.
  • Page-visit aggregates: pages viewed, referring sites, browser type and country, collected through Cloudflare Web Analytics without cookies or browser storage, for website operation and improvement under Article 15(1)(6).
  • Website request logs: original IP address, request time, requested URL, browser information and approximate connection region. Cloudflare records these for server-processed requests, including the inquiry page, for operation, security and incident response under Article 15(1)(6).

If you contact us directly by email, information in that email is processed to reply and discuss your inquiry.

2. Purposes

We use information to review and reply to inquiries, arrange consultations and proposals, communicate about contracts and their performance, prevent repeated or automated spam, improve the paths through which visitors find information and contact us, and operate and secure the website. It is not used for other purposes or marketing messages.

3. Retention

  • Inquiry information: one year from receipt, then deleted without delay.
  • IP hashes: three months from collection, then cleared.
  • Behavioral visit statistics: 30 days, then automatically deleted. Source labels attached to inquiries are retained for one year with the inquiry.
  • Cloudflare request logs, including original IP addresses: up to seven days, then automatically deleted.
  • Submissions caught by the spam trap: three months, to check for genuine inquiries caught by mistake. Without collection/use consent, we record only submission time, IP hash, source labels and character count, not the submitted content.
  • Telegram notification messages and notification emails: deleted by the operator before one year has passed from receipt.
  • Information entered into Claude: the operator has disabled model-training use. Anthropic retains this information for 30 days and then deletes it without using it for training. Conversations flagged for review of possible usage-policy violations may be kept for up to two years and used for safety-related model improvements; legally required retention may be longer.
  • If a contract is concluded: only information required by applicable law is retained for the statutory period, for example five years for transaction books/supporting documents or records of contracts and withdrawal, under applicable Korean tax and consumer-protection laws.

4. Disclosure to third parties

We do not provide your personal information to third parties, except where a lawful request is made under applicable law, including through valid investigative procedures.

5. Service providers

  • Cloudflare, Inc.: hosting, inquiry database storage, visit statistics storage and aggregation, domain email reception/forwarding, and inquiry notification emails.
  • Telegram Messenger Inc.: delivery of inquiry notifications to the operator’s Telegram account.
  • Google LLC: sending, receiving and storing inquiry notification and reply emails through Gmail.
  • Anthropic, PBC: processing through Claude when the operator reviews inquiries and prepares reply drafts.

These providers are based outside Korea. International transfers are described below. We review information-security provisions in their service and data-processing terms. Changes to providers or notification integrations are disclosed in this policy before use.

6. International transfers

Information is transferred outside Korea to store inquiries, notify the operator and prepare replies. These processing and storage arrangements support the response you requested and are disclosed under Article 28-8(1)(3) of the Personal Information Protection Act.

Cloudflare, Inc.

Recipient: 101 Townsend St., San Francisco, CA 94107, USA; privacy contact: dpo@cloudflare.com. The company is based in the United States. The inquiry database is in Cloudflare’s Asia-Pacific region; website requests are processed at nearby Cloudflare data centers and logs are stored in Cloudflare data centers.

Transferred data: all inquiry fields, connection IP (hash only in the inquiry database, original in request logs), connection time, source labels, visit statistics, page-visit aggregates and request logs. Transfer occurs through HTTPS when you visit the website or submit an inquiry, for website operation/security, inquiry storage, analytics and notification emails. Retention follows section 3: inquiries one year, IP hashes three months, behavioral statistics 30 days, and request logs up to seven days.

Telegram Messenger Inc.

Related companies include Telegram Group Inc. and Telegraph Inc. in the British Virgin Islands, and Telegram FZ-LLC in Dubai, UAE. Contact: “Ask a Question” in Telegram settings; Telegram privacy policy. Data is stored in overseas data centers operated by Telegram; specific storage countries are not disclosed.

Area of interest, name, contact details, company, preferred timing, source labels and up to the first 3,200 characters of the message are sent through the Telegram bot API over HTTPS immediately upon receipt, to notify the operator. The operator deletes notifications within one year.

Google LLC

Recipient: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; contact: googlekrsupport@google.com; Google privacy policy. Data is processed in overseas Google data centers including the United States; specific storage countries are not disclosed.

Area of interest, name, contact details, company, timing, source labels and the message are sent to the operator’s Gmail inbox through Cloudflare’s email service upon receipt. Email-server connections use TLS. Reply-email information is transmitted when messages are exchanged. The purpose is inquiry notification and sending, receiving and storing replies. Notification emails are deleted by the operator within one year of receipt.

Anthropic, PBC

Recipient: 548 Market St, PMB 90375, San Francisco, CA 94104, USA; privacy@anthropic.com. Processing takes place on overseas Anthropic servers, including in the United States.

Area of interest, name, contact details, company, timing, source labels, inquiry content and reply-email information may be transferred over TLS when the operator enters it into Claude to review inquiries or draft replies. Model-training use is disabled. Retention is 30 days, with the policy-review and legal exceptions in section 3.

Declining international transfers: do not submit the form if you do not want these transfers. To request deletion of information already sent, including notification messages and emails, contact support@bytecreo.com. Both the form and email use these overseas providers, so declining transfers makes online inquiry handling difficult.

7. Your rights

You may request access, correction, deletion or suspension of processing, and withdraw consent for consent-based processing at any time. Email support@bytecreo.com. We will act without delay and inform you of the result. Requests may also be made by a legal or authorized representative.

8. Deletion procedure

Information is destroyed without delay when its retention period ends or its purpose has been fulfilled. Database cleanup deletes expired inquiries and clears IP hashes; the operator checks remaining information quarterly. Electronic files are deleted using methods that prevent recovery. Paper copies, if any, are shredded or incinerated.

9. Security measures

Access to personal information is limited to the founder. Transfers use HTTPS, authorized accounts use multi-factor authentication, and retained information is reviewed regularly. The inquiry database stores IP hashes rather than original addresses; original addresses in hosting logs are automatically deleted within seven days.

10. Cookies and browser storage

This website does not use cookies for advertising or user tracking, and does not collect behavioral data for advertising.

Where draft saving is provided, inquiry drafts are stored only in your browser: area of interest and message for 14 days, and contact details and name until the browser window is closed. Drafts are not sent to the server until submission. They are cleared after successful submission or using the form’s clear control, and can also be removed in browser settings. Inquiry forms in languages other than Korean do not save drafts in browser storage.

For behavioral visit statistics, a random session identifier and source labels are stored in tab-specific browser storage for 30 minutes to group navigation within the same tab. They are removed when the tab closes. Do Not Track or GPC prevents behavioral events from being sent. Source labels accompany submitted inquiries. Behavioral event records do not contain contact details, inquiry content or original IP addresses.

Cloudflare Web Analytics provides page-visit aggregates without cookies or browser storage. The operator sees aggregate results that do not identify individuals.

11. Privacy contact

Responsible person: the founder. Contact: support@bytecreo.com.

For privacy complaints or advice in Korea: KISA Privacy Center (privacy.kisa.or.kr, 118); Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972); Supreme Prosecutors’ Office cyber investigation division (spo.go.kr, 1301); Korean National Police Agency cyber bureau (ecrm.police.go.kr, 182).

12. Changes to this policy

Changes are announced on this page at least seven days before taking effect, or 30 days for material changes.

  • Effective October 22, 2026; announced October 15: added behavioral visit statistics and channel/campaign/landing-page labels, documented existing Cloudflare Web Analytics, and updated retention, processing providers and international-transfer information.
  • Effective October 11, 2026; announced October 4: added Anthropic for inquiry review and reply drafting, including retention and international-transfer information.
  • Effective October 10, 2026; announced October 3: added email notifications, Google as a provider, and email retention. The previous policy took effect on January 1, 2026.