Privacy policy
Cocode Inc. ("we") takes your personal information seriously and complies with the Personal Information Protection Act and related Korean law. This policy explains what we do with the information you give us and how we protect it.
1. What we collect and how
We collect the following through the project inquiry form on this website.
| Type | Fields |
|---|---|
| Required | Name, company, email address, inquiry content |
| Optional | Phone number, review stage, budget range, target timeline |
1-1. Automatically collected information
Your IP address is received automatically in transit when you submit the inquiry form, and is used transiently, only to reject automated repeat requests. We do not store it.
2. Why we collect it
We do not use personal information for any other purpose. If the purpose changes, we obtain consent beforehand.
- Replying to and discussing your inquiry
- Preparing an estimate and negotiating an agreement
- Keeping a record of how the inquiry was handled
3. How long we keep it
Personal information is destroyed without delay once the retention period passes. Electronic files are permanently deleted so they cannot be recovered; printed material is shredded or incinerated.
If you request deletion, we destroy the information without delay. Where another statute expressly designates the information for collection, deletion cannot be requested; in that case we tell you why.
| Type | Retention period |
|---|---|
| Inquiry information | Six months from the date the inquiry is closed |
| Where an agreement is signed | Statutory retention periods after the engagement ends |
4. Disclosure to third parties
We do not provide your personal information to third parties, except:
- Where you have consented in advance
- Where required by law, or requested by an investigative authority following the procedures set out in law
6. Your rights
You may exercise the following rights at any time.
- Request access to your personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
7. Security measures
- Designated handlers, with access limited to the minimum number of people
- Two-factor authentication on accounts that access personal information
- Encryption in transit (HTTPS)
- Full-disk encryption and screen lock on work devices
- Annual training for handlers, with training records retained
- Periodic self-assessment of these measures
5. Processing entrusted to others
We entrust processing of personal information as follows, in order to run this website and handle inquiries.
| Processor | Entrusted work |
|---|---|
| GitHub, Inc. | Website hosting |
| Amazon Web Services, Inc. | Inquiry form intake and confirmation/reply email delivery |
5-1. Overseas transfer of personal information
All of the processors above operate servers outside Korea, so personal information is transferred overseas. The transfer is made under Article 28-8(1)3 of the Personal Information Protection Act (entrustment or storage necessary to perform a contract), and the matters listed in Article 28-8(2) are disclosed below.
| Recipient | Items transferred | Country | When and how | Recipient contact | Purpose | Retention |
|---|---|---|---|---|---|---|
| GitHub, Inc. | IP address, browser information | United States | On page load, transmitted automatically over the network | github.com/contact/privacy | Serving the website | Until the processing agreement ends |
| Amazon Web Services, Inc. | All collected fields, IP address | United States (headquarters) — data is processed and stored in the Seoul, Korea region | On form submission, transmitted over the network | aws.amazon.com/privacy | Inquiry intake and email delivery | Inquiry content is not stored after email delivery. IP addresses are not stored |
Declining the overseas transfer
You may decline the overseas transfer. Declining limits use of the inquiry form on this website; in that case you can reach us directly at cody@cocode.im and the inquiry reaches the same place.
8. Privacy officer
| Field | Value |
|---|---|
| Name | Dongwoo Han |
| Title | CEO |
| Contact | cody@cocode.im |
You may also report privacy concerns to the Korean authorities below.
- Privacy Infringement Report Centre (개인정보 침해신고센터) — privacy.kisa.or.kr · 118
- Personal Information Dispute Mediation Committee (개인정보 분쟁조정위원회) — kopico.go.kr · +82 1833-6972
- Supreme Prosecutors' Office, Cyber Investigation Division (대검찰청 사이버수사과) — spo.go.kr · 1301
- National Police Agency, Cyber Bureau (경찰청 사이버수사국) — ecrm.police.go.kr · 182
9. Changes to this policy
This policy applies from its effective date. If it is amended because of a change in law, policy or security practice, we announce the change on this website at least seven days before it takes effect.
Effective date: 1 August 2026
This English text is provided for your understanding. The Korean version is the authoritative text and prevails in case of any discrepancy.