Privacy Policy

We process personal information for the purposes below and do not use it for any other purpose. If a purpose changes, we will take the necessary steps, such as obtaining separate consent under Article 18 of the PIPA.

1. Receiving and answering inquiries: reviewing partnership, investment, institutional adoption, media and general inquiries, assigning them, replying and reporting the outcome.
2. Talent pool and recruiting: notifying you of openings that match your interests and reviewing your profile for potential roles.
3. Website security and abuse prevention: blocking spam sent by automated programs (bots), limiting repeated requests in a short time, and diagnosing outages.
4. Administrator access control: verifying employees who use the Website's admin screens, managing permissions, and keeping records of viewing, editing and deleting personal information.

We distinguish between personal information processed with your consent and personal information processed without consent, as follows.

1. Processed with your consent (legal basis: PIPA Art. 15(1)1)

2. Processed without consent

3. Information we do not process: we do not collect sensitive information (information defined in Article 23 of the PIPA, such as health, beliefs or ideology) or unique identifiers (resident registration, passport, driver's license or alien registration numbers) on the Website. Please do not include such information in your message.

※ You can submit an inquiry or register without the optional items. You may refuse consent to the required items, but you will then be unable to use the contact form or talent pool. You can still contact us at +82-2-2067-0070.

The contact form and talent pool are intended for people aged 14 or older, and we do not process personal information of children under 14 on the Website. If we learn that a child's information was entered without a legal guardian's consent, we will delete it without delay.

1. We process and retain personal information within the period you consented to at collection or the period required by law.
2. Retention periods are as follows.

However, if an investigation into a violation of law is in progress, we retain the information until the investigation ends.

1. When personal information is no longer needed, for example because the retention period has expired or the purpose has been achieved, we destroy it without delay.
2. We currently do not retain any personal information from the Website under other laws. If that becomes necessary, we will store it in a separate database or location and disclose the legal basis, items and period in this policy.
3. Procedure: contact and talent pool records past their retention period are found and deleted automatically every day. When you request deletion, staff verify your identity and delete the data, and the privacy officer confirms the result. Deletions are recorded in the admin access logs.
4. Method: database records are permanently deleted so they cannot be recovered, and inquiry notification emails in our work mailboxes are deleted within the same period. Printed documents are shredded or incinerated.

We process personal information only within the purposes in Article 1 and provide it to third parties only with your consent, under a special provision of law, or in other cases under Articles 17 and 18 of the PIPA. We currently do not provide personal information collected on the Website to any third party.

We do not additionally use or provide personal information collected on the Website without consent within the scope reasonably related to the original purpose under Articles 15(3) and 17(4) of the PIPA. If such use becomes necessary, we will disclose the criteria in this policy.

① We entrust the following processing tasks to operate the Website.

② Under Article 26 of the PIPA, our contracts with processors specify the prohibition of processing beyond the entrusted purpose, technical and administrative safeguards, restrictions on sub-processing, supervision of the processor, and liability including damages, and we supervise whether processors handle personal information safely.

③ Sub-processors engaged by our processors and their tasks can be found in each processor's privacy policy: Vercel (vercel.com/legal/privacy-policy), Supabase (supabase.com/privacy), Resend (resend.com/legal/privacy-policy), Cloudflare (www.cloudflare.com/privacypolicy), Google (policies.google.com/privacy).

④ All of the processors above are overseas businesses; overseas transfers are described in Article 9. If the entrusted tasks or processors change, we will update this policy without delay.

① To provide the Website, contact form and talent pool under our Terms of Use, we need to entrust and store personal information with the processors below. Under PIPA Article 28-8(1)3(a), we disclose the following in this policy and transfer personal information overseas. All transfers are of the type "entrustment and storage."

② How to refuse and its effect: if you do not want your information transferred overseas, do not use the forms and call us at +82-2-2067-0070 instead. To stop the transfer of, or delete, information you have already submitted, email privacy@tremendouslabs.ai; we may then be unable to reply to the inquiry or send recruiting updates.

Under Article 29 of the PIPA, Article 30 of its Enforcement Decree and the Standards for Securing the Safety of Personal Information, we take the following measures.

1. Administrative: establishing and implementing an internal management plan, minimizing the number of employees who handle personal information, and privacy training at least once a year.
2. Technical: admin screens accessible only to registered employees after email verification, separate admin and editor roles, row-level database access control, encrypted connections (HTTPS) end to end, encryption of stored data, two-year retention and tamper protection of access logs, bot blocking and request rate limiting, and web security headers.
3. Physical: personal information is stored in data centers of cloud providers with information security certifications; we do not operate our own server rooms or servers.

We do not process sensitive information on the Website, so this does not apply.

We do not create or process pseudonymized information from personal information collected on the Website.

1. A cookie is a small file that a website's server sends to your browser. It is stored on your computer or mobile device and sent back to the server automatically when you visit the website again.
2. We do not use cookies to identify general visitors or to analyze or track their behavior.
3. Only for employees logged in to the admin screens, we use an essential cookie (authentication session cookie) to keep them signed in. It expires when they sign out or the session ends.
4. On the contact and talent pool forms, Cloudflare Turnstile checks browser and device information to block bots. This information is used only for security, not for advertising or behavioral analysis.
5. You can refuse cookies in your browser settings; refusing the essential cookie may prevent admin sign-in.

• Desktop — Chrome: '⁝' at top right > New Incognito window (Ctrl+Shift+N) / Edge: '···' at top right > New InPrivate window (Ctrl+Shift+N)
• Mobile — Chrome: '⁝' at top right > New Incognito tab / Safari: Settings > Apps > Safari > Advanced > Block All Cookies / Samsung Internet: 'Tabs' icon at bottom > Turn on Secret mode > Start

We do not install behavioral tracking tools from advertising or analytics companies on the Website and do not allow third parties to collect behavioral information through it.

1. You may at any time request access to (PIPA Art. 35), correction or deletion of (Art. 36), or suspension of processing of (Art. 37) your personal information, and withdraw your consent. Refusal of, or explanation about, automated decisions is covered in Article 16.
2. You can exercise these rights by email (privacy@tremendouslabs.ai), phone (+82-2-2067-0070) or in writing to the privacy officer, or by choosing "General" on the contact form. As the Website has no accounts, we verify your identity using the email address you used for your inquiry.
3. We will act within 10 days of receiving your request and tell you the result. If there is a justifiable reason we cannot do so in time, we will tell you the reason and the expected date.
4. You may exercise your rights through a representative, such as a legal guardian or a person you have authorized, who must submit a power of attorney in the form prescribed by the Notice on Methods of Processing Personal Information (Annex Form 11).
5. Your rights to access and suspension may be limited under PIPA Articles 35(4) and 37(2), and you cannot request deletion of information that other laws require us to collect.
6. The Company is not a data transmitter subject to data portability requests under PIPA Article 35-2.
7. You are responsible for protecting your own personal information and must not submit inquiries or registrations using someone else's name or email.

We do not make automated decisions under PIPA Article 37-2 (decisions made by fully automated systems that significantly affect your rights or obligations) on the Website. The bot check on our forms is a security measure; if it blocks your submission, please contact contact@tremendouslabs.ai or +82-2-2067-0070 directly.

① We have designated the following privacy officer and department to oversee the processing of personal information and to handle complaints and remedies.

② You may contact the privacy officer and department about any privacy question, complaint or remedy related to the Website, and we will respond and act without delay.

The Company is a business with an address in the Republic of Korea and is not required to designate a domestic representative under PIPA Article 31-2.

If you need dispute resolution, counseling or other remedies for an infringement of your personal information, you may contact the following bodies (Korea).

We do not operate fixed or mobile video information processing devices in connection with the Website.

1. Following our "Trust by Design" principle, we process only what is needed for a defined purpose and design the Website with the safest settings as the default.
2. We do not use personal information collected on the Website to train or improve artificial intelligence (AI) models.
3. Our data principles and security practices are published in the Trust Center (https://tremendouslabs.ai/en/trust).

1. This Privacy Policy applies from November 14, 2026.
2. Previous versions, with the period each applied, are available under "Version history" on the Privacy Policy page. (This is the first version.)
3. When we change this policy, we will announce the changes and effective date on the Website at least 7 days in advance. Significant changes that affect your rights, such as new items or purposes, will be announced at least 30 days in advance together with a before-and-after comparison.
4. Minor changes that occur frequently, such as updates to the processor list, may be announced together every four weeks with their start and end dates.

Addendum: This Privacy Policy takes effect on November 14, 2026.

1. v1.02026.11.14First published