Privacy Policy
What personal information this website handles, why we handle it, who receives it, and what you can do about it.
Effective date: October 16, 2026
1. Who we are
This policy covers the website of CUSMOS Inc. (주식회사 커즈모스), a company based in the Republic of Korea. CUSMOS Inc. decides why and how the personal information described here is used, so it is the controller of that information.
- Company: CUSMOS Inc. (주식회사 커즈모스)
- Representative: Lee Chang-woo, CEO
- Address: Room 208-1, 1 Gangwondaehak-gil, Chuncheon-si, Gangwon State, Republic of Korea
- Privacy contact: To be confirmed
- Privacy officer: To be confirmed
- EU and UK representative: To be confirmed. We are checking whether one is required.
The Korean version of this policy is the official text. This English version is provided for convenience. If the two versions differ, the Korean version applies.
2. Scope
This policy covers personal information collected through this website: the pages you visit, the contact form, and the cookie choice banner. It does not cover the sensors and software we install at customer sites. Customer contracts and their data processing terms govern that data.
3. Information we handle
3.1 Contact form
The contact form asks for your name, work email, organization, role, area of interest, and message. The website does not send these fields to any server. When you press the button, your own email app opens with the fields filled in. Nothing is sent until you press send in that app. Your email then arrives in our mailbox, and we use it to reply.
Giving us this information is up to you. If you do not send an enquiry, we cannot reply to it.
3.2 Technical data when pages load
When a page loads, our hosting provider, GitHub, receives your IP address, the page you requested, the time of the request, and details about your browser. The news, notices, and brand identity pages also read their content from Supabase, our database provider, which receives your IP address when those pages load. This website does not write any visitor data to Supabase.
If you open the start address without a language folder, your browser asks Cloudflare (cloudflare.com/cdn-cgi/trace) and GeoJS (get.geojs.io) at the same time which country the visit comes from. Both services receive your IP address. The site uses only the country code to send you to the matching language version and does not store it. If neither service answers in time, your browser language settings decide.
3.3 Your cookie choice
If you answer the cookie banner, your browser stores your choice and the date in its local storage under the name cusmos-consent. This choice stays in your browser and is not sent to us.
4. Why we use it
| Purpose | Information | Legal basis (EEA and UK visitors) |
|---|---|---|
| Reply to your enquiry or demo request | The details you send in your email | Article 6(1)(b) GDPR, steps you ask for before a contract. Article 6(1)(f), our interest in answering business enquiries. The UK GDPR has the same provisions. |
| Run and secure the website | IP address and request details | Article 6(1)(f) GDPR, our interest in keeping the site running and secure. |
| Remember your cookie choice | Your choice and the date, stored in your browser | Stored only to remember the choice you made in the banner. |
| Keep contract records if a contract follows | Contract details and related records | Article 6(1)(b) GDPR, performing the contract, and Article 6(1)(c), legal duties such as tax and business record rules. |
We do not sell personal information. This website does not collect information for advertising, and we do not build profiles of visitors. We do not make decisions about you by automated means.
5. Who receives it
We share personal information only with the service providers below, and only so they can provide the service to us.
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| GitHub, Inc. | Hosts this website | IP address and request details when a page loads | United States |
| Supabase | Stores the news, notices, and brand identity content shown on the site | IP address when those pages load | Server region: To be confirmed |
| Cloudflare, Inc. and GeoJS | Tell the start page which country a visit comes from, to pick the language version | IP address when the start address loads | To be confirmed |
| Mail service provider | Receives and stores enquiry emails for our mailbox | Your enquiry email | To be confirmed |
These providers process the information under their data processing terms. We do not share personal information with anyone else for their own purposes.
6. International transfers
CUSMOS is based in the Republic of Korea. Our hosting provider and database provider process information outside Korea, mainly in the United States. The transfers rest on the following:
- Korea. The European Commission (Commission Implementing Decision (EU) 2022/254) and the United Kingdom (The Data Protection (Adequacy) (Republic of Korea) Regulations 2022) have decided that Korea protects personal data adequately for companies covered by the Korean Personal Information Protection Act. CUSMOS is such a company.
- GitHub. GitHub is certified under the EU-U.S. Data Privacy Framework and its UK Extension. GitHub also relies on the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914). Check GitHub's certification.
- Supabase. Supabase's data processing addendum uses the EU Standard Contractual Clauses for transfers. Its server region is to be confirmed.
7. How long we keep it
| Information | How long |
|---|---|
| Enquiry emails | Until we have answered the enquiry and the matter is closed, and no longer than 3 years after the last message. (To be confirmed) |
| Contract records | As long as the contract requires, and as long as Korean law requires for business records. (To be confirmed) |
| Technical data at GitHub and Supabase | As set by each provider. See GitHub's privacy statement and the Supabase privacy policy. |
| Your cookie choice | Until you clear your browser's local storage or change your choice. |
9. Your rights
9.1 All visitors
You can ask us what personal information we hold about you, ask us to correct or delete it, and ask us to restrict how we use it. You can withdraw any consent you gave us at any time. Where the law gives you the right, you can ask for a copy in a portable format.
9.2 EEA and UK visitors
Under the GDPR and the UK GDPR, you can object to processing based on our legitimate interests. You can also complain to the data protection authority in your country. In the UK, that is the Information Commissioner's Office.
9.3 California residents
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information we collect, to ask us to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, and we do not collect sensitive personal information through this website. The categories we collect are identifiers (name, work email, and IP address), professional information (organization and role), and the content of your message. We will not treat you differently for using these rights. We apply the same request process to all visitors.
9.4 How to make a request
Send an email to To be confirmed with "Privacy request" in the subject line. We may ask you to confirm your identity before we act. We reply within one month, or within 45 days for California requests.
10. Children
This website is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.
11. Links to other websites
Some pages link to other websites, such as research papers and government legal databases. Those websites have their own privacy practices, and this policy does not cover them.
12. Changes to this policy
We update this page when our practices change, and we show the effective date at the top. When we make a material change, we post a notice on the home page for 30 days.
Draft. This policy has not yet been reviewed by a lawyer. Items marked "To be confirmed" must be filled in before the page goes live.