Introduction

Enhans Co., Ltd. (the “Company”, “Enhans”, “we”, “us”, or “our”)

We understand that you care about how your personal information is used and shared, and we take your privacy very seriously.

By accessing or using our services in any manner, you are deemed to have agreed to the practices described in this Privacy Policy. We collect, use, and share your information only as described in this Policy. Your use of the Enhans services is also subject at all times to our Terms of Service, which incorporate this Policy by reference. Capitalized terms not defined in this Policy have the meanings set forth in the Terms of Service.

‍

1. What Does This Privacy Policy Cover?

This Policy applies to the way we process personally identifiable information (“Personal Information”) that we collect when you use our services. This includes (i) data you submit, (ii) your conversation history with AI models, and (iii) technical logs to the extent they constitute Personal Information and are collected by us. This Policy does not apply to the practices of companies we do not own or control, or to individuals we do not directly manage.

‍

2. How Do We Use Personal Information?

We use the Personal Information we collect for the following internal purposes in connection with the Enhans services:

• Basic collection types at the time of membership registration: Email address, password, name, phone number
• Service personalization and provision: generating and recommending AI outputs optimized for your business environment.
• AI model enhancement and service improvement: improving algorithm accuracy, researching new features, and enhancing service performance. Please note that queries, files, and generated outputs provided by the customer are processed only within the scope of providing services to the customer and are not stored or utilized for the purpose of training third-party AI models or for reuse.
• User management: setting up user accounts, verifying identity, preventing fraudulent use, and preventing unauthorized access.
• Customer communications: processing requests for specific products or services, delivering important notices, and providing technical support.
• Marketing and analytics: analyzing service usage to provide tailored content and to send event or promotional information.
• Compilation of statistics, scientific research, and preservation of records for the public interest: preparing statistics and conducting research to enhance AI model performance, including through pseudonymized information where applicable.

‍

3. Will We Change This Privacy Policy?

We continually work to improve our services, and this Policy may be updated from time to time. If we make changes, we will notify you in a manner that is reasonably likely to come to your attention, such as by posting a notice on the Enhans website or by email. Unless otherwise stated, changes will become effective seven (7) days after the notice or notification date. However, if a change materially affects the rights of data subjects, we will provide notice at least thirty (30) days in advance. If you continue to use the services after the effective date of the updated Policy, you are deemed to have agreed to the updated Policy.

‍

4. What Information Do We Collect and How Long Do We Retain It?

We collect the minimum Personal Information necessary to provide the services and process your information as described below, based on your consent where required by applicable law.
4.1 Information You Provide to Us

• Registration and profile information: name, email address, password, phone number and information about your affiliated company or organization.
• Third-party account information: if you connect third-party accounts (e.g., Google, Microsoft), information transmitted from those services such as your email address and profile image.
• AI service usage data: any inputs you provide during use of the service, including text (prompts), images, documents, videos, and other content, as well as generated outputs resulting from such inputs.
• Payment information: for paid services, certain payment details (e.g., partial card number, expiration date) and payment records. (Actual payment processing is handled securely through a specialized payment service provider.)
• Information used for compilation of statistics, scientific research, and preservation of records for the public interest: pseudonymized information, where applicable.

4.2 Information Collected Automatically
Each time you use our services, our server logs automatically record the following information:

• IP address; device identifiers and information (operating system and model); and browser type.
• Cookie information: we use cookies to identify your browser and understand how you use our services. You can refuse cookies through your browser settings; however, certain convenience features such as automatic login may be limited.

4.3 Information Collected From Other Websites and “Do Not Track”

We may collect information about your online activity via cookies even after you leave our services and use it to improve our services. Our services currently do not respond to browser “Do Not Track” signals.
4.4 Retention Period‍

We retain Personal Information collected under this Policy until the earlier of (i) one (1) year from the date of membership withdrawal or the last date you used the service, or (ii) the retention period required under applicable laws and regulations.

‍

5. Will We Share or Transfer Personal Information?

We process Personal Information only within the scope of the purposes described in this Policy and, as a rule, do not provide it to third parties. The following are exceptions:

5.1 De-identified or Pseudonymized Information

For research to enhance AI model performance and for compiling statistics, we may anonymize or pseudonymize Personal Information and provide it to partners in a manner that cannot identify a specific individual. Such information is used only as aggregated information that cannot identify any individual and is not treated as a third-party disclosure or outsourced processing of Personal Information.

5.2 Outsourced Processing (Service Providers)

To provide the services smoothly, we may outsource certain tasks to global professional partners and use overseas infrastructure for secure data storage.

5.3 Cross-border Transfer of Personal Information

We may use overseas infrastructure and outsource certain tasks to global professional partners for smooth service delivery. If you do not wish for your Personal Information to be transferred overseas, you may request suspension of such transfer. However, use of services for which overseas transfer is essential may be restricted.

5.4 Business Transfers and Protection

In the event of a sale of the Company, merger, acquisition, or change of control, customer information may be one of the assets transferred. We also reserve the right to disclose information as required to comply with laws, enforce our Terms of Service, or protect the rights and safety of our employees and users, in accordance with applicable legal procedures.

‍

6. How Do We Protect Your Personal Information?

We implement the following technical and administrative measures to protect your data:

• Encryption: your password and sensitive data are stored in encrypted form.
• Access controls: we limit the number of personnel who handle Personal Information and provide regular security training.
• Physical security: we use secure cloud data centers with controlled access.

However, no service can guarantee perfect security. You should take care to change your password regularly and log out after using shared devices.

‍

7. What Personal Information Can You Access or Correct?

You may view, correct, or delete your information at any time through your account settings.

• Items you can view/modify: name, email address, profile information, payment method, and similar account details.
• Deletion (withdrawal): upon account deletion, your Personal Information will be destroyed without delay, except where retention is required by law. To prevent fraudulent use, we may retain information in a non-identifiable form for seven (7) days after withdrawal.

‍

8. Your Rights and Choices

You have the right to refuse to provide information or withdraw consent at any time.

• Marketing communications: you can opt out at any time through the unsubscribe link at the bottom of our emails.
• Data subject rights: to exercise your rights under the Personal Information Protection Act of Korea (e.g., access, correction, deletion), please contact us at privacy@enhans.ai.

‍

9. Destruction of Personal Information

When Personal Information becomes unnecessary due to expiration of the retention period or achievement of the purpose of processing, we destroy the relevant Personal Information without delay.

• Procedure: we select Personal Information for destruction when a reason for destruction arises and destroy it with the approval of the person in charge of personal information protection.
• Method: electronic files are destroyed in a way that prevents restoration (e.g., low-level formatting). Paper documents are destroyed by shredding or incineration.

‍

10. Data Protection Officer and Complaint Handling

We have designated the following person as the person in charge to protect users’ Personal Information and handle related complaints:

• Data Protection Officer: Data & Infrastructure Squad Lead | Enhans
• Contact: privacy@enhans.ai
• Remedies: if you need to report or consult regarding an infringement under applicable laws, you may contact the Personal Information Infringement Report Center (118) or the Personal Information Dispute Mediation Committee (1833-6972).

‍

‍

11. Questions

If you have any questions or comments about this Policy, please send details to privacy@enhans.ai. Our team will do our best to address your concerns.

‍