Draft · not approved
Privacy policy
Revised
This is a review draft. It has not been through legal review and has not been approved, so it is not a policy in force. It is not indexed by search engines and is not listed in the sitemap.
This document describes what the CLEVI website collects about a visitor, and what it does not. The site does not track visitors and collects nothing from browsing alone. Only what you type into a form and submit is delivered, and only to a team mailbox.
What this covers
This policy covers the CLEVI website and its paths. Separate products, APIs and contracted services carry their own terms and notices, which this document does not replace.
What is collected today
Nothing. No value identifying a visitor is sent to a server, no visit is tied to an account or identifier, and there is no advertising or profiling tracking. Delivering the page uses an IP address as any internet request does, but that address is neither stored nor used to derive anything.
What is stored on your device
Choosing a language leaves that one choice in your browser’s local storage, under the key `clevi.i18n.display-locale`, holding a single language code. It exists so the next visit can show the same language, and it is not transmitted.
No visitor cookies are used. That is why this site shows no cookie consent banner: there is nothing to ask consent for.
Language demand measurement (built, currently off)
The site offers its interface in 136 languages while publishing documents in Korean and English only. To learn which languages are actually wanted, a feature that counts language picks has been built — but both of its switches are currently down, so **nothing is transmitted.** What follows applies only if it is turned on, and this policy will be updated before that happens.
If enabled, one language pick sends three values: the display language chosen, the document language actually served, and a country code.
The country code is derived on your device from the browser’s language settings and time zone, and **never from an IP address.** The surest way to keep a promise not to store an address is to derive nothing from it.
None of the three identifies a person, and none is combined with an account, a device identifier or a visit history. Only aggregates are stored.
The contact form
What you send through the inquiry, technical support, API key request and job application forms is delivered as a single email to the mailbox for that form. What travels is the fields the form showed you, plus how you answered the optional consent boxes.
The content is not stored in this site’s database. What remains is one row used to count how many times the same person submitted within an hour, and it holds an irreversible hash and a timestamp rather than an address.
Retention follows that mailbox’s own policy: once a message has arrived, what happens to it belongs to the company mail system rather than to this site. Delivery uses the SMTP server the company has configured, and that server is the processor involved.
A job application’s résumé file is not transmitted. Only its name, type and size travel; the file itself is requested in a reply.
Operator access
The `/admin` area is used only by operators the company has approved. Its login session cookie is set then and never for a visitor — browsing this site creates no cookie at all.
Operator accounts and content change records are employees’ personal information. This policy addresses website visitors, so what is processed about employees and for how long is notified to them separately.
Hosting and cross-border transfer
The site is served from Cloudflare’s global edge network, so the request that delivers a page may be handled by a server outside your country. As stated above, nothing about a visitor is stored in the course of that.
Sale, sharing and disclosure
We do not sell personal information and do not share it for advertising. Since nothing is collected, there is nothing to disclose. We respond to lawful requests only, and only to their extent.
Retention
No visitor information is retained today, so no retention period applies. The language choice stored on your device does not expire and can be cleared by you in your browser.
Your rights
You have the right to access, correct, delete and restrict processing. Today the site holds nothing for such a request to act on. The language choice on your device can be removed immediately by clearing this site’s data in your browser.
Contact
For questions about the handling of personal information, or to make a request to access, correct or delete, use the details below.
- Personal information protection officer — Jinsol Kim
- Email — [email protected]
- Telephone — 1551-4096
- Address — 3004, A-dong, Keumkang Penterium IX Tower, 27 Dongtancheomdansaneop 1-ro, Dongtan-gu, Hwaseong-si, Gyeonggi-do, Republic of Korea
Changes
When this policy changes, the revision date is updated. A change that collects more is written here **before** it takes effect.
Open before approval
- The privacy officer’s job title. The name is settled under PIPA §31; how the role is described is not.
- A separate notice for employees whose operator accounts and change records are processed. Leaving the detail out of this policy is a question of audience, not of scope, and that document does not exist yet. Retention for the account and the audit record belongs there.
- The cross-border transfer notice that follows from where the mail server is. Form delivery is connected and the fields are described above, but which mail provider is used has not been settled.
- When language demand measurement is switched on, and the aggregate retention period that will apply then.