Privacy Policy
In accordance with Article 30 of the Personal Information Protection Act, SALTMiNE Inc. (the "Company") establishes and discloses the following Privacy Policy to protect users' personal information and to swiftly and smoothly handle any related grievances.
Article 1 (Purpose of Processing Personal Information)
The Company processes the minimum necessary personal information for the following purposes. Without the user's explicit consent, the Company will not disclose externally — for promotional purposes — whether a user is job-seeking or any analysis results.
- Membership Registration and Management: Confirming intent to register, identification/authentication, maintaining membership status, preventing fraudulent use, and handling grievances.
- Service Provision: Job-disposition analysis, AI-based job-competency analysis and report generation, customized career-content recommendations, and enterprise matching and connection.
- Paid Service Management: Payment authorization/cancellation, refund processing, settlement, and receipt issuance.
- Service Operations and Improvement: Improving service quality, advancing algorithm performance, and detecting security issues and fraudulent use.
- Marketing and Advertising (with optional consent): Announcing new services and promotions, and analyzing service-use statistics.
Article 2 (Items of Personal Information Processed)
The Company does not collect sensitive information unnecessary for the Service (resident registration number, religion, criminal record, etc.).
- Membership Registration: (Required) Google account email, nickname, profile picture, member identifier / (Optional) career and education information, skills, and self-introduction.
- Use of Analysis Services: Survey response data, text answers, behavioral data (clicks, dwell time), job type, and report results.
- Automatically Collected: IP address, cookies, service use records, device information (OS, browser type), and access logs.
- Payment Information: Partial payment-method information, payment date/time, and amount. (Original information such as card numbers is processed by the payment gateway and is not stored directly by the Company.)
- Google Account Linkage: Google account email, profile name and image, and unique identifier. (The Company uses these solely for account identification and Service provision.)
- Guest Checkout: Name, mobile phone number, and a lookup code automatically issued for receipt and report re-access. (The Company performs identity verification through the payment processor and does not directly store payment card information.)
Article 3 (Processing and Retention Period of Personal Information)
The Company processes and retains personal information within the period required by law or the period agreed to by the user.
- Membership Registration and Management: Until membership withdrawal. (However, retained until the relevant purpose is achieved when necessary, such as for fraud prevention.)
- Job Analysis and Reports: Until membership withdrawal or until the user requests deletion.
Retention under the Act on Consumer Protection in Electronic Commerce:
- Records on contracts or withdrawal of subscription and payment: 5 years
- Records on consumer complaints or dispute resolution: 3 years
- Protection of Communications Secrets Act: Log records and access-point tracking data: 3 months.
- Guest Checkout User Identification (name, mobile phone number, lookup code): Retained for 5 years from the payment date (matching the retention period for transaction records under the Act on the Consumer Protection in Electronic Commerce, for the purpose of responding to guest report re-access requests). Destroyed without delay upon expiration; report re-access becomes unavailable thereafter.
Article 4 (Provision of Personal Information to Third Parties)
The Company does not provide personal information to third parties without the user's consent.
Hiring Companies: (Only when the user has explicitly consented to enterprise matching/application.)
- Items provided: Among consented items — name (nickname), email, career/education, and job-analysis results.
- Purpose of use: Recruitment review and interview proposals.
- Retention period: Until the company's recruitment process is concluded.
Article 5 (Entrustment and Cross-Border Transfer of Personal Information Processing)
The Company entrusts the following tasks for service provision and AI analysis. Some infrastructure is operated through overseas providers.
| Entrustee (incl. cross-border transfer) | Entrusted Tasks and Transfer Purpose | Country and Location | Retention and Use Period |
|---|---|---|---|
| Google (Firebase) | Member authentication, data storage | USA, Japan, etc. | Until withdrawal or contract termination |
| Microsoft (Azure) | Server infrastructure operation and security | USA, Singapore, etc. | Until withdrawal or contract termination |
| Cloudflare | Network security and DDoS protection | Global locations | Until withdrawal or contract termination |
| OpenAI (API) | AI-based text analysis and report support | USA | Until analysis processing is complete |
| Toss Payments | Payment processing and settlement | Republic of Korea | Until the legal retention period |
Article 6 (Handling of Google User Data)
This Service complies with the Google API Services User Data Policy.
- Limited Use: Collected Google data is used only within the scope of account identification and service provision.
- Restricted Use: Without the user's explicit consent, Google data is not used for advertising, third-party marketing, or training non-personalized general AI models.
Article 7 (AI Analysis and Automated Processing)
- Analysis Purpose: Based on the user's behavioral data, the Company derives job types and analyzes job fit.
- Nature and Limits: AI analysis results are statistical estimates and do not definitively guarantee a user's competencies.
- Rights: Users may object to AI analysis results, request explanations, and request correction or deletion. The Company does not automatically process material decisions — such as recruitment outcomes — based solely on AI analysis.
Article 8 (Rights of Data Subjects and How to Exercise Them)
Users may at any time exercise their rights to view, correct, delete, or request suspension of processing of their personal information. Rights may be exercised via email (empathy@saltmine.io) or through the in-service customer support.
Article 9 (Chief Privacy Officer)
- Chief Privacy Officer: Kim, Gyudong (CTO) / rich@saltmine.io
- Responsible Department: Ahn, Woohyuk / empathy@saltmine.io
Article 10 (Measures to Ensure the Safety of Personal Information)
The Company implements technical and managerial protective measures including establishing an internal management plan, encrypting personal information, and controlling access privileges.
[Addendum]
This policy shall take effect on July 1, 2026.