Privacy Policy

Article 1 (Purpose of Processing Personal Data)

MassLabs ("the Company") processes personal data for the following purposes. Personal data will not be used for purposes other than those listed below, and if the purpose changes, the necessary measures such as obtaining separate consent will be taken.

• Payment processing: Service fee payment and refund handling
• Service analytics: Service improvement using user country information
• Data collection: Output data collected for refund verification and product improvement

Article 2 (Categories of Personal Data Collected)

• Payment information: Payment method details (sensitive data such as card numbers are processed through payment processors and never stored by the Company)
• Country information: The user's country of access
• Output data: Samples of flat-arranged pieces and material thickness

The Company does not collect email addresses, and there is no separate membership registration process.

Article 3 (Retention and Use Period)

• Payment records: Retained for 5 years in accordance with e-commerce regulations, then destroyed
• Country data: Retained in anonymized form after statistical processing
• Output data: Retained until consent is withdrawn, then immediately destroyed

Article 4 (Delegation of Personal Data Processing)

The Company delegates minimal information to payment processors including Galaxia Money Tree (Billgate) via PortOne for payment handling. Delegated companies are managed and supervised to process personal data safely in accordance with the Personal Information Protection Act.

Article 5 (Provision to Third Parties)

The Company does not, in principle, provide users' personal data to third parties. Exceptions apply when users have given prior consent or when required by law.

Article 6 (User Rights)

Users may request access, correction, deletion, or suspension of their personal data at any time. Consent to output data collection may also be withdrawn at any time. Please contact masslabs.archi@gmail.com for requests.

Article 7 (Destruction of Personal Data)

Personal data for which the retention period has elapsed or the processing purpose has been achieved will be destroyed without delay. Electronic files are permanently deleted in a manner that prevents recovery.

Article 8 (Data Protection Officer)

For inquiries regarding personal data processing, please contact: Representative: Baek Jonghwi | Email: masslabs.archi@gmail.com

Article 9 (Remedies for Rights Infringement)

You may contact the following organizations for remedies related to personal data infringement:

• Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
• Personal Information Infringement Report Center: 118 / privacy.kisa.or.kr
• Supreme Prosecutors’ Office: 1301 / www.spo.go.kr
• National Police Agency: 182 / ecrm.cyber.go.kr

Article 10 (Changes to This Policy)

This policy takes effect from the date of enforcement. Any changes will be announced at least 7 days in advance through the service screen.