Privacy Policy
Effective date: October 7, 2026
Touch&Go Inc. values the personal information of data subjects and complies with the Personal Information Protection Act and other applicable laws.
1. Purposes of processing personal information
Touch&Go Inc. (the “Company”) processes personal information for the following purposes. Personal information is not used for any purpose other than those below. (a) Receiving investment/partnership inquiries and replying to them (b) Providing materials and making sales contact (c) Evaluating job applicants and running the hiring process (d) Registering applicants in the talent pool and contacting them about future openings (only for those who submitted a job application) (e) Understanding website usage and preventing spam and misuse
2. Personal information items processed
(a) Investment/partnership inquiries — required: company name, contact person, email, inquiry type, inquiry content / optional: phone number (b) Job applications — required: name, email, phone number, résumé / optional: portfolio. Information in the attached files, such as education and work history, is also processed. (c) Automatically collected items — IP address, pages visited and time of visit, referrer (previous page), type of device, browser and operating system, country of access, and a temporary identifier used to tell visits apart. The temporary identifier is kept only in the browser’s session storage and disappears when the browser is closed. (d) To prevent spam when an inquiry or application is submitted, the IP address is converted into a hash (an irreversible value) before it is stored, together with browser information. (e) Cookies — we do not store cookies in ordinary visitors’ browsers, and we do not use external tracking tools for advertising or analytics.
3. Retention and use period
The Company destroys personal information without delay once its purpose has been achieved. Retention periods by item are as follows. (a) Access records (IP address, pages visited, etc.) — automatically deleted 90 days after collection. (b) Investment/partnership inquiries — automatically deleted one year after receipt. (c) Job applications (including résumés and portfolios) — kept for the talent-pool registration period to which the applicant consented, and automatically deleted one year after receipt. During this period they are kept not only for the selection process for the current opening but also so that we can contact the applicant about future openings. If a data subject asks us during this period to delete their information or remove them from the talent pool, we delete it without delay. Where a law requires information to be kept separately, it is kept for the period the law requires.
4. Provision to third parties
The Company processes personal information only within the scope stated in Article 1 and does not provide it to third parties. It is provided only where a law requires it or the data subject has separately consented, in which case we will notify you in advance and obtain consent.
5. Outsourcing of processing
The Company entrusts the processing of personal information as follows to provide its services smoothly. (a) Supabase, Inc. — storage of inquiries, job applications, and access records (operating the database and file storage). Data is kept in the Singapore region. (b) Resend — sending the email that notifies staff that an inquiry or application has arrived. The submitter’s name, email, and other submitted content pass through the email delivery service (United States). (c) Vercel Inc. — website hosting (operating the web servers). Access information such as the IP address sent when you visit the website is processed, and it may pass through servers overseas, including in the United States. Transfers to the overseas processors above take place over the network at the moment a data subject visits the website or submits an inquiry or application, and the transferred information is kept for the retention periods stated above. The Company manages and supervises its processors so that they handle personal information safely.
6. Rights of data subjects and how to exercise them
Data subjects may at any time request access to, correction of, deletion of, or suspension of processing of their personal information. Requests may be made in writing or by email, and the company will act without delay.
7. Destruction procedure and method
The Company destroys personal information without delay once the retention period has passed or the purpose of processing has been achieved. Investment/partnership inquiries and job applications are checked by the system every day and deleted automatically once the retention period (one year) has passed. Electronic files are deleted in a way that cannot be recovered; for job applications, the database record and the attached files (résumé and portfolio) are deleted together. Any paper documents are shredded or incinerated.
8. Measures to ensure security
The Company takes the following measures to handle personal information safely. (a) Administrative measures — Staff who handle personal information are kept to a minimum, each staff member is issued an individual account, and administrator and editor permissions are separated. (b) Technical measures — Data in transit is encrypted (HTTPS). Submitted inquiries and applications are stored in a database that cannot be accessed directly from outside, and only logged-in staff can view them. Résumés and portfolios are kept in private storage and are downloaded through a temporary address that stays valid for only a short time after staff verification. The IP address of a submission is converted to a hash before it is stored. (c) Physical measures — Data is managed in the data centers of the cloud service provider, and the Company does not operate its own server room or records room.
9. Personal information protection officer
Touch&Go Inc. itself serves as the privacy officer: it oversees the handling of personal information and takes charge of handling complaints and providing remedies for data subjects. Please send questions about personal information, and requests to access, correct, or delete it, to the address below. Touch&Go Inc. Email: touchngo@touchngo.co.kr
10. Changes to this policy
This Privacy Policy applies from its effective date. If there are changes required by law or policy, we will announce them at least 7 days before they take effect.