Privacy Policy

Article 1 (General)

SeoulTech Global, operated for Seoul National University of Science and Technology (the "Operator"), values the privacy of every visitor and applicant. This Privacy Policy explains how personal information is collected, used, stored and protected on seoultechglobal.org (the "Portal") in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws.

Article 2 (Personal Information We Collect)

1. When you create an account (required): email address and password. Passwords are stored only in encrypted (hashed) form and cannot be viewed by the Operator.

2. When you complete your profile or request consultation:

• Required: full name (in English, as in passport), date of birth, gender, nationality, phone number with country code, highest academic qualification, school name, academic status, enrollment and graduation year/month, language test type, desired program, language track, desired intake, and preferred field of study and major.
• Optional: profile photo and language test score/level (when a test has been taken).

3. When you use consultation: message content and attached files you send to admissions staff, and email delivery status.

4. When you use the AI admission guide (no login needed): the questions you type, the answers generated, an anonymized session identifier and approximate country.

5. Automatically collected: IP address, browser and device information, access logs, pages visited, and cookies.

Article 3 (Purposes of Use)

• Creating and managing accounts and verifying identity
• Providing admission information, consultation and replies by email
• Reviewing eligibility and processing applications
• Translating consultation messages between the student's language and Korean
• Answering questions through the AI admission guide
• Preventing fraudulent applications and abuse, and keeping the Portal secure
• Analyzing visits to improve the Portal and measure the effectiveness of advertising

Article 4 (Retention and Destruction)

1. Personal information is destroyed without delay once the purpose of collection has been fulfilled or when you delete your account.

2. However, the following are retained for the periods below:

• Application and admission review records: for the period required by the Higher Education Act, the Public Records Management Act and university regulations
• Records of complaints and disputes: 3 years
• Access logs: 3 months (Protection of Communications Secrets Act)
• AI admission guide questions: up to 1 year, for quality improvement

3. Electronic files are permanently deleted using methods that prevent recovery; paper records are shredded.

Article 5 (Provision to Third Parties)

The Operator does not provide your personal information to third parties beyond the purposes in Article 3, except where you have given separate consent or where required by law (for example, a lawful request from investigative or immigration authorities).

Article 6 (Service Providers and AI Processing)

To operate the Portal, the Operator entrusts processing to the following providers. Only the minimum information necessary is shared.

• Lovable / Supabase (cloud database, file storage and authentication)
• Cloudflare, Inc. (website hosting and secure content delivery)
• Resend, Inc. (sending and receiving consultation emails)
• OpenAI, L.L.C. and Google LLC (AI translation of consultation messages and AI admission guide answers)
• Google LLC (Google Analytics and Google Ads measurement)

AI processing: only the text needed for a specific request (for example, the message being translated or the question asked) is sent to the AI provider. Passwords and identity documents are never sent. Under the providers' API terms, data submitted through their APIs is not used to train their public AI models.

Article 7 (International Transfer of Personal Information)

The Portal is managed by SeoulTech in the Republic of Korea, but the service providers above store and process data on secure cloud servers located outside Korea, including in the United States and other countries. Information is transferred over encrypted connections at the time you use the Services and is retained for the periods in Article 4. If you do not wish your information to be transferred abroad, you may decline to sign up or request deletion; however, consultation and online application cannot be provided without it.

Article 8 (Cookies and Analytics)

1. The Portal uses essential cookies and browser storage to keep you signed in and remember your language choice.

2. With Google Analytics 4 and Google Ads, the Portal measures visits and advertising performance using cookies. This information does not directly identify you.

3. You can block or delete cookies in your browser settings (Chrome, Safari, Edge, Firefox: Settings > Privacy > Cookies). You can also install the Google Analytics Opt-out Browser Add-on. Blocking essential cookies may prevent sign-in.

Article 9 (Your Rights)

You may at any time access, correct or delete your personal information, request suspension of processing, or withdraw your consent. Some profile fields are locked after submission; to change them, contact the admissions staff. Requests can be made through the consultation messages or by email to the contact below, and will be handled without delay.

Article 10 (Security Measures)

• Encrypted (HTTPS/TLS) communication across the Portal
• Hashed password storage and role-based access limited to authorized staff
• Access controls on the database and file storage
• Regular review of security updates and access logs

Article 11 (Children)

The Portal is intended for applicants to higher education. We do not knowingly collect personal information from children under 14. If such information is found, it will be deleted promptly.

Article 12 (Privacy Officer)

• Privacy Officer: SeoulTech Global Admissions
• Email: info@seoultechglobal.org
• Address: 232 Gongneung-ro, Nowon-gu, Seoul 01811, Republic of Korea

For further help, you may contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, +82-118) or the Personal Information Dispute Mediation Committee (kopico.go.kr).

Article 13 (Changes to This Policy)

Any changes to this Privacy Policy will be announced on the Portal at least seven (7) days before they take effect, or thirty (30) days for material changes affecting your rights.