Privacy Policy

• Membership sign-up, account management and login; profile and residence-status related services
• Services users request, such as employment and settlement guidance for foreign nationals, job applications to companies and document submission
• Receiving and replying to website and partnership inquiries; managing newsletter subscriptions
• Email and push notifications, service operation and security, AI features and usage analytics

Personal information is collected when users enter account and profile details, fill in inquiry forms, submit files and use the services. Social login is provided through Google, Apple and Kakao.

Required vs. optional items, detailed account and profile fields, types of ID and certificates, and items received through social login: [To be entered after checking the actual screens and data fields]

K-tag has no payment services.

K-tag provides a 30-day grace period after a member withdraws, during which the account can be restored. It has been confirmed that related information currently remains in the database even after withdrawal is processed.

Retention periods by type of information (account and profile, uploaded files, website inquiries, newsletter, logs and analytics data, and backups): [To be entered once confirmed]

Types of records that must be kept separately under law, their legal basis and retention periods: [To be entered after checking applicability]

Application documents are provided to a company only when the user, at the time of applying, consents to providing each document. The items provided are the application documents the user selected and consented to, and the purpose is recruitment review.

A company's permission to view documents on the platform expires after 90 days. Start of the period: [To be entered after confirming when permission is granted]. Expiry of viewing permission is separate from deletion of materials a company keeps on its own.

Retention and destruction periods for information provided to companies, and how separately kept materials are managed: [To be entered after confirming company notices and consent wording]

Whether and how university applications are sent, receiving universities, items, purposes, retention periods and consent procedure: [To be entered after confirmation by the responsible department]

The external services the Company uses are listed below. Whether each service is outsourced processing or provision to a third party, and the contractual scope of processing, are determined by the actual data flow.

Legal entity of each external service, personal information items, scope of outsourcing and the outsourcing/provision relationship: [To be entered after checking contracts and settings]

Specific request and response data sent to Groq, and how identifying information in user input is excluded: [To be entered after checking the data sent]

According to the development team, K-tag's main servers are in the Republic of Korea, using the AWS Seoul region. Information of users in Vietnam is transferred to and processed in the Republic of Korea.

The countries where Contabo and other external services such as Google, Apple, Groq and Slack store, back up or access data, and the scope of transfer, must be confirmed for each provider. The location of K-tag's main servers in Korea alone does not determine the processing country of every external service.

Overseas transfers by task: [To be entered after confirming the recipient and contact details, country, legal basis, timing and method, items, purpose, retention period, and how to refuse and the effect of refusing]

Users may request access to, correction, deletion or suspension of processing of their personal information, and may withdraw consent. Requests may be submitted in writing or by email to the privacy contact in Article 11, and the Company will handle them according to the procedures and time limits set by the relevant laws.

Whether personal information of children under 14 is collected, and procedures involving legal guardians: [To be entered after checking the actual sign-up and application process]

The membership withdrawal process currently has a 30-day account recovery grace period, and actual deletion of related data after the grace period has not yet been completed.

When and how data is destroyed in the production database, ID and certificate files, logs, backups and external services, and how records kept under law are managed separately: [To be entered after the procedure is finalised and applied]

• Password hashing
• Private file storage, two-factor authentication and IP restrictions for administrators
• HTTPS communication, audit logs and daily backups

Personal information encryption keys are in use. Items and storage areas where encryption is actually applied: [To be entered after confirmation by the development team]

Users can manage cookie storage in their browser settings. Blocking cookies may affect some features, such as staying logged in.

Expiry of each cookie, GA4 data collected and retention settings, whether advertising features are used, and how to opt out of analytics: [To be entered after checking settings]

• Chief Privacy Officer, name and title: [To be entered as designated by the Company]
• Contact person or department: [To be entered]
• Email: [Confirmed privacy contact address to be entered]
• Phone: [Confirmed contact number to be entered]

Effective date: [To be entered once confirmed]

If this policy changes, the Company will announce the changes and their effective date on the website or in the app.