Effective: July 1, 2026
Privacy Policy
Article 1. Purpose of Processing Personal Information
GangnamTokki Corp. (hereinafter "Dalemi" or the "Company") processes personal information for the following purposes. The information processed will not be used for any purpose other than those listed below, and if the purpose changes, necessary measures such as obtaining separate consent will be taken. ① Member registration and management: user identification, maintenance of service eligibility ② Provision of Notion integration service: reading users' Notion pages and converting them to mindmaps ③ Service improvement and error analysis: improving service quality based on access logs and error information ④ Customer support and complaint handling: receiving and processing inquiries and complaints
Article 2. Personal Information Items Collected and Retention Period
Dalemi collects only the minimum personal information necessary to provide the service. • Email address — User identification and login / Retained until account deletion • Notion access token — Notion page integration / Retained until integration removal or account deletion • Service usage records (IP address, access date/time) — Prevention of unauthorized use / Retained for 1 year • Error logs — Service error analysis and improvement / Retained for 6 months • Website visit and usage statistics (cookie identifiers, device/browser information, page visit records) — Service usage analytics via Google Analytics / Retained per Google Analytics policy (up to 14 months) ※ The Notion access token is used solely to read the user's Notion data and is stored encrypted.
Article 3. Disclosure to Third Parties
Dalemi does not, in principle, disclose users' personal information to external parties. However, the following cases are exceptions: ① When the user has given prior consent ② When required by law or when requested by investigative authorities pursuant to legally prescribed procedures for investigation purposes
Article 4. Consignment of Personal Information Processing and Overseas Transfer
Dalemi entrusts personal information processing to the following parties for smooth service provision, and some of this information is transferred to entities located abroad. Users may refuse this overseas transfer by contacting our support desk ([email protected]). However, because this transfer is necessary for essential service functions such as Notion integration, database operation, and AI brainstorming, refusal may restrict all or part of the Service. • Notion Labs, Inc. (United States) — Contact: [email protected] / Items transferred: Notion page and block data / Purpose: Access to page data via the Notion API and mindmap conversion / Method: Transferred from time to time via the information network while using the Service / Retention: Until the consignment contract ends • Supabase, Inc. (United States) — Contact: [email protected] / Items transferred: Account information (email, etc.), encrypted Notion access tokens, map settings data / Purpose: Database operation and data storage/management / Method: Transferred from time to time while using the Service / Retention: Until account deletion or the consignment contract ends • Google LLC (Google AI, United States) — Contact: https://support.google.com/policies (privacy inquiry form) / Items transferred: Content entered or generated by the user, such as mindmap node text / Purpose: Text processing for the AI brainstorming feature / Method: Transferred at the time the AI brainstorming feature is used / Retention: Until the consignment contract ends • Google LLC (Google Analytics, United States) — Contact: https://support.google.com/policies (privacy inquiry form) / Items transferred: Cookie identifiers, device/browser information, page visit records / Purpose: Analysis of website visits and service usage / Method: Transferred via the information network when visiting the Service / Retention: Per Google Analytics policy (up to 14 months)
Article 5. Rights and Obligations of Data Subjects
Users may exercise the following personal information rights against Dalemi at any time. ① Request to view personal information ② Request to correct errors ③ Request for deletion ④ Request to suspend processing ⑤ Right to data portability: Pursuant to Article 35-2 of the Personal Information Protection Act, users may request the Company to transmit their personal information in a format processable by a computer or similar device, or to transmit it directly to another personal information controller. Rights may be exercised through the settings menu in the service or by email ([email protected]), and we will take action without delay.
Article 6. Destruction of Personal Information
Personal information is destroyed without delay after the purpose of collection and use has been achieved. • Electronic files: Permanently deleted by a method that makes recovery impossible • Paper documents: Shredded or incinerated
Article 7. Security Measures
Dalemi takes the following measures to ensure the security of personal information. • Administrative measures: Establishment and implementation of internal management plans, regular employee training • Technical measures: Access control, access rights management, encryption, security software installation • Physical measures: Access control for server rooms and data storage areas • Notion token security: Users' Notion access tokens are stored encrypted Pursuant to Article 34 of the Personal Information Protection Act, if Dalemi becomes aware that a personal information breach has occurred or may have occurred, it will notify users of the following without delay and, if necessary, report the incident to the Personal Information Protection Commission. ① The personal information items involved in the breach ② The time and circumstances of the breach ③ Measures users can take to minimize damage ④ The Company's response measures and remedy procedures
Article 8. Cookies
Dalemi may use cookies to improve the service and maintain login sessions. Cookies are small pieces of data stored in the user's browser by the website. Users may refuse or delete cookies through browser settings, but doing so may cause inconvenience with some service features such as staying logged in. Dalemi also uses Google Analytics to analyze service usage statistics; Google Analytics collects and analyzes visitor usage information via cookies. Users may opt out of Google Analytics data collection by installing the "Google Analytics Opt-out Browser Add-on" provided by Google (https://tools.google.com/dlpage/gaoptout).
Article 9. Privacy Officer
Dalemi has designated a Privacy Officer to oversee personal information processing and handle related complaints and remedies. • Name: Wonmook Im • Title: CEO • Email: [email protected] • Phone: 010-2770-2056 Users may contact the above for all privacy-related inquiries, complaints, and remedies arising from use of the Dalemi service, and Dalemi will respond without delay.
Article 10. Remedies for Rights Violations
Users may contact the following organizations for relief and consultation regarding personal information violations. • Personal Information Infringement Report Center: privacy.go.kr / ☎ 118 • Personal Information Dispute Mediation Committee: kopico.go.kr / ☎ 1833-6972 • Supreme Prosecutors' Office Cyber Crime Investigation Unit: spo.go.kr / ☎ 02-3480-3573 • National Police Agency Cyber Safety Bureau: cyberbureau.police.go.kr / ☎ 182
Article 11. Changes to This Privacy Policy
This Privacy Policy applies from the effective date. Any additions, deletions, or corrections due to changes in laws or policy will be announced through in-app notices at least 7 days before the changes take effect.