Privacy Policy
Effective date: October 20, 2026
Information We Collect
kernalic (the "Company"), which operates the SEPPi service (the "Service"), collects the following personal information to provide the Service. - At sign-up: email address, password (stored encrypted) - During use: patent numbers looked up, specification files you upload and the claim and description text extracted from them, generated report records, payment history - Collected automatically: access IP address, access timestamps, service usage logs, error logs
Purpose of Collection and Use
The Company uses the collected information for the following purposes. - Verifying registration intent and identity, and providing membership-based services - Providing the Service, including patent lookups and generating SEP matching analysis reports - Managing payments and preventing fraudulent use of the Service - Statistical analysis for service improvement and error response
Retention Period
In principle, the Company destroys personal information without delay once the purpose of collection has been achieved. However, where retention is required under applicable law even after account deletion, information is retained as follows. - Records of contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce) - Records of payment and supply of goods/services: 5 years (Act on Consumer Protection in Electronic Commerce) - Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce) - Service usage records and access logs: 3 months (Protection of Communications Secrets Act) Specification files you upload, and the text extracted from them, are retained **until you delete your account** and are destroyed without delay at that point. Unlike the items above, no statutory retention period applies to them. In addition, to prevent fraudulent use of the Service such as claiming the free trial report more than once, the Company retains a one-way hash of your email address and your email domain even after you delete your account (the email address itself is not retained). This information is retained for 3 years from the date the free trial report was granted and is destroyed without delay after that.
Destruction Procedure and Method
Once the retention period has expired or the purpose of processing has been achieved, the Company destroys the relevant personal information without delay. - Destruction procedure: information subject to destruction is identified and destroyed upon approval by the Company's Privacy Officer. - Uploaded specifications: deleted from file storage when you delete your account. The copy created on the analysis server while a report is being produced is deleted once the report has been produced. - Destruction method: information in electronic file form is deleted using technical methods that prevent recovery or reproduction; information printed on paper is destroyed by shredding or incineration.
Outsourcing of Personal Information Processing
To provide the Service, the Company outsources certain personal information processing to the following external providers, under agreements that require the information to be handled securely. - Amazon Web Services, Inc.: service server operation (data stored in Seoul, Republic of Korea) - Supabase Inc.: member authentication, database and file storage (data stored in Seoul, Republic of Korea) - Resend, Inc.: service emails such as report-ready notices - NICE Payments Co., Ltd.: KRW payment processing - PayPal Pte. Ltd.: USD payment processing - Cloudflare, Inc.: blocking automated access at sign-up and log-in (Turnstile) - Google LLC: service usage statistics (Google Analytics) and advertising performance measurement (Google Ads)
International Transfer of Personal Information
To provide the Service, the Company transfers personal information overseas as follows. - Google LLC (United States) · Items transferred: cookie identifiers, access IP address, pages visited, device and browser information, and on completed payments the order number, amount, and currency · Purpose: service usage statistics via Google Analytics (GA4) and advertising performance measurement via Google Ads - Resend, Inc. (United States) · Items transferred: email address, report link · Purpose: service emails such as report-ready notices - Cloudflare, Inc. (United States) · Items transferred: access IP address, device and browser information · Purpose: blocking automated access at sign-up and log-in (Turnstile) Timing and method of transfer: transmitted in real time over the network while you use the Service. Retention period: until the relevant processing purpose is achieved or the outsourcing agreement ends, after which the information is destroyed or returned without delay. You have the right to refuse the international transfer of your personal information, though this may limit your ability to use all or part of the Service.
Your Rights
You may view or correct your personal information at any time, and may withdraw your consent to collection and use by deleting your account. To request access, correction, deletion, or suspension of processing of your personal information, please contact us using the information below. The Company acts on such requests without delay, in principle within 10 days of receipt.
Remedies for Infringement of Rights
If you need to report or consult about an infringement of your personal information, you may contact the following Korean authorities. - Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) - Privacy Infringement Report Center (KISA): 118, no area code (privacy.kisa.or.kr) - Supreme Prosecutors' Office Cyber Investigation Division: 1301, no area code (www.spo.go.kr) - National Police Agency Cyber Investigation Bureau: 182, no area code (ecrm.police.go.kr)
Use of Cookies
The Company may use cookies to maintain login sessions and provide the Service. The Company also uses the Google Ads conversion tracking tag from Google LLC (United States) to measure advertising performance. The tag stores cookies in your browser and sends Google your visits to the Service and, when you complete a payment, the order number, amount, and currency. The Company uses this to see whether visits that came from an ad led to a purchase. Information that directly identifies you, such as your email address, is not sent. The Company also uses Google Analytics (GA4) from Google LLC (United States) to understand how the Service is used. It stores cookies in your browser and sends Google the pages you visit along with your country, device, and browser. The Company uses this only as aggregate statistics about where the Service is used and how much. Information that directly identifies you, such as your email address, is not sent. You can opt out by installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). You may refuse cookies through your browser settings, though this may limit some features of the Service. You can turn off Google's personalized ads in My Ad Center (myadcenter.google.com).
Security Measures
The Company applies technical and administrative measures to protect personal information, including encrypted password storage, access control, and encrypted transmission (HTTPS).
Children's Privacy
The Service is not directed to children under the age of 14, and the Company does not knowingly collect personal information from children under 14. If the Company becomes aware that it has collected personal information from a child under 14, it will destroy that information without delay.
Privacy Officer
The Company has designated the following Privacy Officer, who is responsible for personal information processing and handling user inquiries and complaints. - Name: HAE JUN JUNG - Email: info@seppi.xyz
Notice of Changes
This Privacy Policy may be amended to reflect changes in applicable law, policy, or security technology. Material changes will be announced through an in-service notice at least 7 days before they take effect.