SHARE.DEV Cloud

Privacy Policy

Established 12 August 2026 · Effective 12 August 2026

This is a translation provided for convenience. The Korean version of this Policy is the binding text. If there is any difference in meaning between this translation and the Korean original, the Korean version prevails. You can read it at share.dev/privacy.

ShareDev ("the Company") complies with the Personal Information Protection Act and other applicable law, and has adopted this Privacy Policy to protect the personal data of its users.

1. What we collect, and how

The Company collects only what is needed to provide the Service. We do not collect resident registration numbers, dates of birth or gender.

The Company does not store full card numbers or passwords. Payment credentials are entered into and handled by the payment gateway; the Company keeps only the reference information needed to confirm payment.

2. Why we process it

• Identification and authentication — confirming applications, sending and verifying login links.
• Providing the Service — creating and operating servers, networks and public IP addresses.
• Billing — calculating hours, capacity and traffic, and processing payment.
• Operations and security — establishing the cause of incidents, identifying and responding to abuse.
• Notices — maintenance, incidents, changes to the Terms and other matters necessary to use the Service. Marketing messages are not sent without separate consent.

3. How long we keep it

The Company destroys personal data without delay once the purpose of processing has been achieved. Where the law requires retention, the data is kept for that period.

Items retained under a legal obligation are stored and managed separately from other personal data and are not used for any other purpose.

4. Disclosure to third parties

The Company does not disclose users' personal data to third parties. Disclosure is made only where there is a specific provision of law, or where an investigative authority requires it following the procedures and methods prescribed by law, and then only to that extent.

5. Processing entrusted to others

The Company entrusts the following work to external parties, and regulates and supervises the safe handling of personal data through the entrustment contract.

Authentication links and service notices are sent by the Company itself. Email delivery is not entrusted to an external party; it is sent from equipment the Company operates in Korea.

Where the work entrusted or the processor changes, the Company will disclose this through this Policy.

The Company does not transfer personal data abroad. The Service's equipment and data are located in the Republic of Korea.

6. Destruction

• The Company destroys personal data without delay once the retention period has passed or the purpose of processing has been achieved.
• Data in electronic form is deleted by a method that prevents recovery; printed records are shredded or incinerated.

7. Your rights and how to exercise them

• Users may at any time request access, correction, deletion or suspension of processing of their personal data.
• Rights may be exercised directly in the management console, or by writing to the privacy officer below. The Company will act and report the outcome within 10 days of receiving the request.
• Rights may be exercised through a legal representative or an authorised agent. In that case the Company will require the letter of authority prescribed by the Enforcement Rule of the Personal Information Protection Act.
• Where the law requires the data to be retained, a deletion request may be limited; the Company will explain the reason.

8. Cookies

The Company uses only a session cookie, to keep users logged in. No advertising or analytics cookies, and no external tracking tools, are used.

You can refuse cookies in your browser settings. If you do, the login session will not persist and use of the Service will be limited.

9. Security measures

• Administrative — access to personal data is limited to the minimum number of people needed for the work, and those permissions are reviewed regularly.
• Technical — authentication link and session identifiers are stored only as cryptographic hashes, so the originals are never held. All traffic between users and the Service is encrypted.
• Access control — operational management screens are reachable only from the internal network and cannot be reached with a user account.

10. Privacy officer

The Company has designated the following privacy officer to take overall responsibility for the processing of personal data and to handle users' enquiries and complaints.

Users may raise with the privacy officer any enquiry, complaint or request for redress concerning personal data arising from use of the Service, and the Company will answer and act without delay.

11. Remedies

If you need to report or discuss an infringement of your personal data, you may contact the following bodies.

12. Changes to this Policy

Where this Policy changes, the Company will publish the change on the Service and notify users by registered email 7 days before it takes effect, or 30 days before where the change is unfavourable to users.

← share.dev cloud  ·  Terms of Service