At UCSS, we respect your privacy. We have established standards governing how we collect, handle, store and protect your data. We manage all the personal data that we collect from customers when they use our services in accordance with this Privacy Policy.
Our fundamental policy is to only collect the minimum amount of data necessary to run our services. We do not collect browsing history, data content, user IPs or DNS queries from customers in any region other than the Republic of Korea (“South Korea”).
This Privacy Policy has been established in conjunction with our Terms of Service, and both documents can be viewed at any time on UCSS’s website. By visiting this website, creating an account, and using our services, you signify your consent to the terms of this Privacy Policy (“the Privacy Policy”).
1. How We Handle Personal Data
We may collect the minimum amount of personal data necessary to provide our services, process payments, and run applications smoothly.
Creating an Account
When you sign up to our services, we collect the name you sign up with as well as your email address and IP address. We need this data to create your account, recover your password, and eliminate registrations from invalid regions. We use your email address for the following purposes:
- To provide access to our services.
- To send you information about payments.
- To send you updates and announcements.
- To provide customer support.
- To provide marketing information.
When you sign up via social media (Google, Twitter or Naver), your account data is automatically collected from each platform. We do not use this data for any purpose other than logging you in.
Identification
We may collect the Information collected by identity verification platforms (e.g. Stripe), proof of payment, phone number. We need this data to verify your identity for business and high-price services, and applications that conflict with our policies.
For details of how each platform handles your personal data, please refer to each company’s privacy policy.
Payments
This is data automatically collected by the credit card payment processing company (e.g., Stripe). It includes purchase price, payer’s IP address, name, and credit card information, etc. For details of how each payment processing company handles your personal data, please refer to each company’s privacy policy.
Communications
We collect the following technical information in order to control data traffic and maintain an optimal connection:
- The timestamp of your connection to the server
- Total packet volume (downloads and uploads)
For servers located in South Korea, the country UCSS is based in, we are legally required to collect the following information and store it for six months. If a warrant is issued by the South Korean investigating authorities, we are obliged to provide server information from South Korean servers. The information below is not recorded for servers in other regions.
- Access destinations from servers located in the Republic of Korea
- Timestamps related to the above access destinations
Applications
We do not knowingly collect any personal data from the applications that we develop and provide. Application logs can be accessed at your discretion. Application logs from the applications we provide are used exclusively for improving connection. They are not used for any other purpose.
For information about how third-party applications handle personal data, please check with the developer of each application.
Customer Support
To improve the quality of our customer support, we store details of support inquiries submitted through our website or services along with our responses. Depending on how you contact us, we may store your email address and any additional information you provide.
To provide customer support, we may use a support platform called Slack. For information on the personal data collected by these platforms, please refer to each platform’s privacy policy.
Affiliate Program
Participants in our Affiliate Program are asked to provide us with their name, email address, referral method, and their bank account details for receiving payments. For details, please refer to our Affiliate Terms and Conditions.
We do not share, sell, or transfer your personal data to third parties unless otherwise specified in the Privacy Policy. As an exception, if our services are used for child pornography, phishing spam, or other serious crimes, and if we are issued with a legally valid warrant, we are obliged to disclose relevant personal data to the South Korean legal authorities. The personal data we collect is managed exclusively by UCSS, including the systems and servers owned by our subsidiaries.
2. Protecting Your Personal Data
We strictly manage the personal data that we collect. We take both physical and technological security measures to prevent the loss, misuse, or alteration of, or unauthorized access to, your personal data. We do not store your personal data in physical form, such as on paper.
Physical Measures
The servers that we use are housed in strongly secured data centers. Our root server was assembled at UCSS with the assistance of a partner company and installed in a data center equipped with the most advanced management system. We also directly contracted the network equipment related to the data center and connected it to our server-related equipment.
Technological Measures
We have multiple defenses in place to protect your personal data, including firewalls, intrusion detection and prevention systems, and quarantined and encrypted databases. We regularly update our security infrastructure and monitor it for vulnerabilities. All data transfers are encrypted using the latest encryption technology.
We take every measure possible, using the most up-to-date security measures, but there is no technology in existence that can provide complete protection, and no company can guarantee absolute security. The above measures do not 100% guarantee the security of the personal data gathered through our services.
3. Cookies
We may use analytics services involving third parties. These services may involve the use of cookies and mobile identification data, but they do not include data that could be used to directly identify an individual.
Cookies are text files that store information about your visit to a website on a device. If you enable cookies, we can record information such as your login details and language preferences and provide you with specific functions. The cookies we use may change as we make updates or improvements.
You can change your cookie settings at any time. You may be able to use your browser settings to control, delete, or block cookies. We mainly use cookies for the purpose of providing our affiliate program.
4. Third-Party Products
Our website and the links therein may include external applications, websites, services and products that are not owned or controlled by us. They may be subject to specific conditions in relation to the Privacy Policy. Please be aware that these third parties may collect your personal data.
We take no responsibility for these external applications, websites, services, products and content. Please refer to the terms and conditions and privacy policies of each third-party provider.
5. Users in the European Union
We respect each country’s privacy rules. According to the European Union’s (“EU”) General Data Protection Regulation (“GDPR”), companies are required to explain to users located in the EU how their data is being collected and processed.
In accordance with the GDPR, we collect and process the personal data laid out in the Privacy Policy on the basis of either of the following two criteria, depending on the circumstances:
- To fulfill contractual obligations:
- To provide services requested by subscribers.
- To manage subscriptions and process payments related to our services.
- To provide customer support.
- Legitimate business interests:
- To improve service quality, reliability and effectiveness.
- To contact customers to provide information and request feedback about the service.
- Subject to consent; you can withdraw your consent at any time.
Your Privacy Rights
The following are your rights as a user of our services. Certain exceptions or exemptions may apply.
- You have the right to access your stored personal data.
- You have the right to request that any inaccurate or incomplete personal data we hold about you be rectified.
- You have the right to request that your personal data be deleted. Deleting your personal data may prevent us from continuing to provide you with our services.
- You have the right to object to, or request restriction of, the processing of your personal data.
- You have the right to request and receive your personal data in a commonly used format (data portability).
- You have the right to withdraw your consent to data processing.
- You have the right to lodge a complaint with your local data protection supervisory authority.
Any communications related to the above rights should be sent to the email address provided at the bottom of the Privacy Policy. The above rights may be exercised through an authorized representative. The authorized representative must be in possession of a written authorization signed by you and must provide us with a copy of that authorization. To ensure your privacy and security, we may take additional steps to verify your identity. We will accommodate your requests to the extent possible in accordance with the applicable law.
6. Use by Minors
The services we provide are not intended to be used by minors. For that reason, we do not knowingly collect personal data from individuals under the age of 18 or those under the legal age of majority in their country of residence. Individuals under the age of 18 should refrain from submitting their personal data to us. If we discover that personal data has been submitted to us by a minor, we will promptly delete the relevant data.
7. Changes to the Privacy Policy
We may change the Privacy Policy in accordance with the law and principles, with or without informing you of that change. By continuing to use our services and access our website, you signify your consent to the terms of the Privacy Policy.
8. Contact Us
If you have any questions regarding the Privacy Policy, or if you would like to exercise your privacy rights, please contact us at the email address below.
In compliance with the GDPR, you can also contact our Data Protection Office (DPO) at [email protected] with any questions you have regarding the Privacy Policy.
Revision Date: 8th May 2023