1. Overview
AXIMUM Inc. (“Company”) publishes this Privacy Policy to explain how it safely processes personal data when providing AxiSend and complies with the Personal Information Protection Act of Korea and other applicable laws.
2. Personal data processed
| Category | Data |
|---|---|
| Account | Name, email, encrypted password, email verification, and login information |
| Workspace and members | Company name and member names, emails, roles, and language |
| Payments and Credits | Order identifiers, products, amount, currency, status, and Credit transactions. The Company does not directly store complete card numbers. |
| Registered customer data | Companies, contacts, emails, phone numbers, addresses, websites, and custom fields |
| Campaigns and submissions | Messages, input profiles, target URLs, schedules, and execution results |
| Automation evidence | Error and diagnostic records and screenshots of entered and submitted forms |
| Access records | IP address, User-Agent, cookies, session identifiers, and visit, login, usage, and error records |
3. Purposes
The Company processes personal data to manage accounts and workspaces; provide the Service and automated submissions; handle payments, Credits, and refunds; support customers; prevent abuse; secure and improve the Service; resolve disputes; and meet legal duties.
4. Retention
- Account and Service data: generally until account closure or fulfillment of the processing purpose
- Automation evidence such as entered and submitted form screenshots: 30 days after creation
- Ahoy visit and analytics records: 90 days after collection
- Payment, contract, consumer complaint, and communications records: the period required by applicable law
Data required for legal retention, unsettled payments, disputes, or protection of rights may be kept separately until that need ends.
5. Transfer to target websites
When automated submission runs, the company name, contact information, message, and input-profile values designated by the User are sent to the target company’s website or its form provider.
Users must review recipients and content and establish a lawful basis; the Company transmits the data on the User’s instructions.
6. Processors
The Company may engage processors as needed to operate the Service. For payments and refunds, Polar Software, Inc. may process emails, order and payment information, and connection data from the payment process.
Processor selection and contracts address data-protection duties, purpose limitation, security, and subprocessors.
7. International transfer
Polar and its payment subprocessors may process the following information outside Korea, including in the United States.
| Recipient | Polar Software, Inc. |
|---|---|
| Countries | United States and other countries where Polar and its payment processors operate |
| Data | Email, order and payment information, and payment connection data such as IP address |
| Purpose | Payment and refund processing |
| Timing and method | Network transmission when using the payment page and communicating through APIs |
| Retention | The period necessary for the payment or contract relationship and legal obligations |
| Refusal and effect | A User may refuse the transfer by not proceeding with payment, but payment features will then be unavailable. |
8. Deletion
When the purpose, legal-retention duty, and dispute need end, the Company deletes data in a manner designed to prevent recovery. Electronic files are securely deleted and paper records are shredded or incinerated.
Some accounts and business records use soft delete, so a request does not necessarily cause immediate physical deletion. The Company first confirms legal-retention and operational requirements.
9. Your rights
Users may request access, correction, deletion, restriction of processing, or withdrawal of consent through account features or [email protected]. The Company verifies identity and responds under applicable law.
If law permits retention or refusal of a request, the Company will explain the reason and available objection process.
10. Cookies and automatic collection
The Company may automatically collect cookies, session identifiers, IP addresses, User-Agent, and visit, usage, and error records for login continuity, security, analytics, and improvement.
Browser settings can refuse cookies, but blocking essential cookies may limit login and other features.
11. Security measures
The Company applies access minimization and controls, password and transport encryption, access-log retention and review, security updates, and internal management measures.
12. Children under 14
The Service is intended for businesses and does not intentionally collect personal data from children under 14. If such collection is discovered, the Company will verify a legal representative as necessary and delete the data.
13. Privacy Officer
- Name
- 정은호
- [email protected]
Contact the Privacy Officer about data processing, rights requests, or suspected privacy incidents.
14. Remedies
Users may seek counseling or dispute resolution from Korea’s Personal Information Infringement Report Center, Personal Information Dispute Mediation Committee, National Police Agency, or Supreme Prosecutors’ Office. Please consult each authority’s official site for current contact details.
15. Changes and effective date
The Company will announce changes through the Service before they take effect. Changes materially affecting User rights will receive reasonable advance notice.
This Privacy Policy is effective July 30, 2026.