Privacy Policy

1. Scope

RISWORKS Co., Ltd. (주식회사 알아이에스웍스, RIS WORKS) handles project, quotation and collaboration inquiries submitted through this website. This policy covers those inquiries and their handling.

You can use the digital assessment without providing contact details. Before a consultation request is submitted, answers remain in browser session storage. They reach our server only when you consent to optional information processing and submit a consultation request.

2. Information and purposes

Inquiry information is processed on the basis of collection and use consent. Optional consent is separate; an inquiry can be submitted without optional information.

We do not use inquiry information for advertising or marketing mail. Do not include identity numbers, passwords, health data, other sensitive information or unnecessary personal information about others.

3. Retention

Inquiry information and related consultation records are retained for one year from submission. Completing or archiving an inquiry, or adding staff notes, does not restart this period. Information is deleted earlier when the purpose has been fulfilled and it is no longer needed, or when a valid deletion request applies.

Records that must be retained under another law are kept separately after their legal basis, scope and duration have been established. Retention periods for contracts or transactions are not automatically applied to every inquiry.

Operational and error logs are configured for seven-day retention. IP information used for request limits is held briefly in server memory and is not stored as part of a customer inquiry.

4. Deletion

Expired inquiries are removed from the operational database together with related consultation notes and mail jobs. Electronic records are disposed of so they cannot be restored or reproduced; any printed records are shredded or otherwise destroyed.

Database expiry and company mailbox cleanup are separate processes. Staff delete company-held notification and reply copies, including trash, in line with the retention period. We cannot delete copies held by recipients.

Automatic disaster-recovery database backups rotate over 14 days. Information in a backup created before deletion is excluded from normal use and removed through rotation. After recovery, expired or previously deleted information must be cleared before reuse. Manual snapshots and exported files require a separate deletion check.

A mail provider’s internal retention and deletion procedures may differ from deletion in the company mailbox. See the external service information and the provider’s policy below.

5. External services

We do not sell inquiry information or provide it to advertising companies. These services support the work listed above. Any disclosure required by law is handled under the applicable legal basis.

6. Processing outside Korea

Google states that it operates servers around the world and that information sent through Gmail may be processed outside your country. Storage in our Seoul database and processing by Google mail are separate matters.

This draft does not assign unverified destination countries or provider retention periods. The legal basis, destinations, timing and method, recipient contact, information, purpose and retention, and refusal procedure and effect must be verified and included in the final notice.

• Google Privacy Policy

7. Your rights

You or an authorized representative may request access, correction, deletion, restriction of processing or withdrawal of consent. Contact the privacy officer below with your inquiry reference and request. We verify identity or representative authority only to the extent necessary to handle the request.

If the law requires us to restrict or refuse a request, we explain the reason and how to challenge that decision. We do not request information beyond what is needed to exercise your rights.

8. Privacy officer and contact

• Controller: RISWORKS Co., Ltd. (주식회사 알아이에스웍스)
• Privacy officer: 성현제
• Post: 부산광역시 부산진구 가야대로 749-1, 지하 1층 101호 가-08호실(부전동, 신동아오피스텔), Republic of Korea — Attn: Privacy Officer

9. Safeguards

Authorized staff access inquiries through the administration interface. Protections include HTTPS, restricted server and database access, encrypted storage and backups, and administrator authentication and permissions.

Database and mail credentials are not sent to the browser. We manage logging to prevent inquiry contents and passwords from appearing in operational logs.

10. Browser storage and external video

• Theme preferences use local storage; assessment progress uses session storage. You can remove both through your browser’s site-data controls. Doing so resets saved preferences and progress.
• Choosing not to show a popup again that day is saved in your browser for that day.
• The PWA caches an offline notice and app icons. Inquiry inputs, server responses and customer information are not stored in the offline cache.
• Playing a YouTube video connects to Google’s external player, which may process IP and browser information under its own policy. Privacy-enhanced mode does not eliminate the external connection.

• Google Privacy Policy

11. Complaints and dispute resolution

In Korea, privacy complaints and advice are available from the Privacy Infringement Report Center (118). The Personal Information Dispute Mediation Committee handles mediation inquiries at 1833-6972.

• Privacy Infringement Report Center
• Personal Information Dispute Mediation Committee

12. Effective date and changes

This is a draft for review before publication. The effective date will be displayed when the verified policy is published. We explain material changes to purposes, information or retention, and obtain fresh consent where required.