Skip to content

Legal

Privacy Policy

MOVA Tech values your personal information and processes it lawfully in accordance with applicable regulations.

Effective date: November 9, 2026

1. Purpose of Processing Personal Information

MOVA Tech Co.,Ltd. (hereinafter "the Company") processes personal information for the following purposes. Personal information collected shall not be used for any purpose other than those stated below. If the purpose of use changes, necessary measures such as obtaining separate consent will be taken. • Inquiry handling: Confirming customer inquiries, investigating facts, and notifying results • Project consultation: Reviewing project requests, providing proposals, and scheduling consultation calls • Abuse prevention: Limiting repeated submissions of the inquiry form

2. Personal Information Collected

The Company collects the following personal information through the inquiry form to handle inquiries and consultations. • Required: Name, email address, message • Optional: Company name, type of project, related case study, budget range, timeline, contract type, whether you would like an NDA, preferred time for a consultation call, notes for the call, where you found us • Japanese-language form: Company name is required, and furigana (the reading of your name) and department/title are collected as additional optional items. • Generated when an inquiry is received: Reference number, time of consent, language of the form • A value converted from your IP address: Generated to limit repeated submissions and deleted automatically after 2 hours. The original IP address is not stored.

3. Retention Period

The Company destroys personal information without delay after the purpose of collection and use has been achieved. • Inquiry information: Retained for 1 year after inquiry processing is completed, then destroyed (if no completion date is recorded, 1 year after receipt) • Copies of inquiry notifications (Slack): Deleted once 1 year has passed since receipt. The same rule applies to inquiries received only as a notification without being saved to storage. • If you request deletion: Your inquiry information in storage is destroyed without delay, and the notification copy is deleted without delay if it is within 90 days of receipt. A copy more than 90 days old remains in a state in which the Company can neither view nor delete it, and is deleted once 1 year has passed since receipt. • Value converted from your IP address: 2 hours • Inquiry draft saved only in your browser: See Section 8 (Cookies and Automatic Collection) • However, if retention is required by relevant laws, information is retained for the period specified by such laws.

4. Provision to Third Parties

The Company does not provide personal information to external parties in principle. Exceptions include: • When the data subject has given prior consent • When required by law

5. Outsourcing of Processing

The Company outsources personal information processing for handling inquiries as follows. Personal information kept by the service providers is deleted when the period in Section 3 (Retention Period) ends. • Service provider: Supabase, Inc. / Task: Storage of inquiry information and of values converted from IP addresses (Seoul region) / Retention: 1 year after inquiry processing is completed (values converted from IP addresses: 2 hours) • Service provider: Slack Technologies (Salesforce) / Task: Delivery of inquiry notifications / Retention: Deleted once 1 year has passed since receipt

6. Cross-border Transfer of Personal Information

The Company transfers personal information overseas as follows: • Recipient: Slack Technologies (Salesforce, Inc.) • Country: United States • Information transferred: Name, email address, company name, type of project, message, related case study, budget range, timeline, contract type, whether you would like an NDA, preferred time for a consultation call, notes for the call, where you found us, furigana and department/title (Japanese-language form), reference number, language of the form • Purpose: Delivery of inquiry notifications • Timing and method: Automatic transmission via the Slack API when an inquiry is submitted • Retention period: Deleted once 1 year has passed since receipt (for deletion requests, see Section 3 (Retention Period)) • How to refuse and its effect: Your information is not transferred if you do not submit the inquiry form. In that case, however, the Company cannot receive your inquiry through the form. The storage that holds inquiry information is located in the Seoul region, Korea. This website is hosted by Vercel Inc. (United States), and the function that processes inquiries runs in the Seoul region. All requests to and from the website, including what you enter in the inquiry form, pass through the network of Cloudflare, Inc. (United States), so data may be routed through servers outside your country of residence depending on your location. The United States may not maintain a level of personal information protection equivalent to that of Korea or Japan. However, the Company applies necessary protective measures such as encryption during data transmission.

7. Security Measures

The Company takes the following measures to ensure the security of personal information: • Technical measures: SSL/TLS encryption across the entire website, restricted access to personal information, storage access keys kept on the server only, limits on repeated submissions of the inquiry form • Administrative measures: Minimized number of personnel handling personal information, designated privacy officer, no inquiry content, names, email addresses or IP addresses in the logs written when the Company processes inquiries • Physical measures: Cloud-based infrastructure with controlled physical server access

8. Cookies and Automatic Collection

The Company may use cookies for user convenience. • Purpose of cookies: Providing basic website functionality such as language preferences • Managing cookies: You can refuse cookie storage through your web browser settings. However, refusing cookies may limit your use of some services. For visitor statistics, the Company uses the web analytics feature of its hosting provider, Vercel Inc., on every page. This feature does not use cookies and collects information such as the address of the page visited, the referring page, browser, operating system and device type, and country. The Company does not use this information to identify individual visitors. This website uses your browser's storage as follows. What it stores stays on your device and is not sent to the Company until you send your inquiry. • Inquiry draft: What you enter in the inquiry form, except your name, furigana, company name, department/title and email address (your message and notes for the call included), is saved in the browser on that device. It is deleted as soon as you send the inquiry or press 'Clear'. A draft saved more than 7 days ago is not loaded again and is deleted the next time the inquiry page in the same language is opened. You can also delete it at any time by clearing the site data in your browser. • Reference number: After you send an inquiry, the reference number is kept only in that browser tab and is deleted when you close the tab. • Motion setting: Your 'Reduce motion' choice at the bottom of the page is saved in the browser on that device. The Company does not use tracking cookies or web beacons for marketing or advertising purposes.

9. Rights of Data Subjects

Data subjects may exercise the following rights: • Request to access personal information • Request correction of errors • Request deletion • Request suspension of processing These rights may be exercised via email ([email protected]), and the Company will take action without delay. However, deletion of copies of inquiry notifications (Slack) follows Section 3 (Retention Period).

10. Destruction of Personal Information

The Company destroys personal information without delay when it is no longer needed due to expiration of the retention period, achievement of the processing purpose, etc. • Destruction procedure: Inquiry information whose retention period has ended is deleted automatically every day, and values converted from IP addresses are deleted automatically after 2 hours. Copies of inquiry notifications are deleted once 1 year has passed since receipt; deletion at your request follows Section 3 (Retention Period). • Electronic files: Deleted using methods that prevent recovery. However, deleted information may remain in the system backups of the service providers for the backup retention period and is deleted when that period ends. • Paper documents: Shredded or incinerated

11. Remedies for Infringement of Rights

Data subjects may contact the following organizations in Korea for dispute resolution or consultation regarding personal information infringement: • Personal Information Dispute Mediation Committee: 1833-6972 • Personal Information Infringement Report Center (KISA): 118 • Supreme Prosecutors' Office Cyber Investigation Division: 1301 • National Police Agency Cyber Bureau: 182

12. No Sale of Personal Information

The Company does not sell users' personal information and has no plans to do so. The Company does not share personal information with third parties for advertising or marketing purposes.

13. Privacy Officer

The Company has designated the following privacy officer to oversee all matters related to personal information processing and handle related complaints. • Name: Myeongsub Kim • Position: CEO • Email: [email protected]

14. Changes to This Policy

This privacy policy applies from the effective date shown at the top of this page. Any additions, deletions, or corrections due to changes in laws or policies will be announced on this page at least 7 days before the changes take effect. • Previous version: effective March 24, 2026