CargoOn

Privacy Policy

최종 업데이트: 2026-10-13

⚠ 본 문서는 초안(스텁)입니다 — 실제 조항은 법무 검토 후 확정됩니다.
This English text is a convenience translation. The Korean version is the binding original; if the two differ, the Korean version prevails.

Automagica Co., Ltd. ("the Company") processes users' personal information to provide the CargoOn service ("the Service") in accordance with the Republic of Korea's Personal Information Protection Act ("PIPA"), and protects users' personal information and rights.

1. Personal information we collect

  • Required: email address, password (stored encrypted), organization
  • Collected automatically: IP address, browser information (User-Agent), access time (login sessions and audit logs)
  • Service data: cargo and document data that customers upload or enter (may include third-party personal information — see §5)
  • Inquiries submitted without an account: name, email address, company (optional), message. Collected automatically with it — IP address, browser information (User-Agent), referral source (referrer, utm parameters)
  • Cookies: one cookie for the display language (locale, kept 1 year). We do not use advertising or behavioural-analytics cookies, or third-party analytics tools (Google Analytics and the like)

2. Purposes of collection and use

  • Account creation, authentication and sign-in
  • Providing the Service (operations, documents, settlement, notifications) and performing the contract
  • Security, prevention of misuse, and auditing
  • Customer support and service announcements
  • Responding to inquiries — answering submitted inquiries and handling sales, partner and recruiting conversations
  • Referral-source statistics — counting how inquiries reach us (we do not perform analytics that identify individuals)

※ Personal information of invite-based accounts is processed to the extent necessary to perform the service contract (PIPA Art. 15(1)(iv)).

3. Retention and use periods

In principle we destroy personal information without delay when the contract ends or the account is withdrawn. Where a retention duty exists under applicable law, we keep it for that period. The periods below are automatic deletion cycles configured in the system, and run daily without human intervention.

DataRetentionMethod
Audit logs7 yearsDeleted automatically
Inbound mail — body and attachments6 monthsBody and attachments only (the record row is kept)
Inbound mail — record row7 yearsDeleted automatically
AI conversation history90 daysDeleted automatically
Inquiries — IP address and browser information90 daysThose fields only
Inquiries — name, email, company, message2 yearsDeleted automatically

※ If you would like your data destroyed sooner, you may request it at the contact in §7, and we will destroy it without delay.

4. Disclosure to third parties and processing on our behalf

To operate the Service we entrust processing to the parties below; some data is transferred outside the Republic of Korea.

ProcessorEntrusted workLocation
ResendTransactional email deliveryUnited States (cross-border transfer)
SeaVantageCarrier cargo tracking integrationRepublic of Korea (Seoul)
AnthropicAI parsing of documents (B/L, INV)United States (cross-border transfer)
DigitalOceanHosting and storageUnited States, SFO3 (cross-border transfer)

※ For third-party personal information that customers upload (consignees, drivers and the like), the customer is the controller and the Company acts as processor; that processing follows the separately executed B2B service agreement (data-processing clause).

5. Your rights

You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information, through the contact in §7.

The Company does not sell personal information, and does not share it with third parties for advertising purposes. The only disclosure to third parties is the entrusted processing listed in §4, limited to what the operation of the Service requires.

6. Security measures

  • Passwords stored with one-way encryption; SSL encryption in transit
  • Role-based access control (RBAC) and data isolation per organization (tenant)
  • Audit logging of access and change history

7. Privacy officer and contact

AUTOMAGICA CO., LTD. (Business Reg. No. 298-86-03554)
36, Hwasin-ro 260beon-gil, Deogyang-gu, Goyang-si, Gyeonggi-do, Republic of Korea
Privacy Officer: Hyunjoon Jeon (Jace), Representative
Contact: privacy@automagica.app · +82 (0)50 6694 0511

※ You may also report or seek advice on privacy infringement with Korea's Personal Information Dispute Mediation Committee (+82 1833-6972), the Privacy Infringement Report Centre (118), the Supreme Prosecutors' Office Cybercrime Division (1301), or the National Police Agency Cyber Bureau (182).

8. Language

The Korean version of this policy is the binding original. This English text is a convenience translation; if the two differ, the Korean version prevails. (Automagica is a corporation of the Republic of Korea and is subject to PIPA.)

9. Changes to this policy

If this policy is added to, removed from or amended, we will announce the change within the Service before it takes effect.

개인정보처리방침 · 이용약관 · © 2026 Automagica Co., Ltd. · Goldilocks Holdings