Privacy Policy

Effective Date: March 11, 2026 | Last Updated: March 11, 2026

UserWhy (the "Company") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act in order to protect users' personal information and to promptly handle any related grievances.

1. Personal Information Collected and Methods of Collection

1-1. Items Collected

Category	Items Collected	Purpose of Collection
Use of Diagnostic Service	Email address	Sending diagnostic reports
Use of Diagnostic Service	Product name, expected selling price, differentiating features, sales channel, category	AI product diagnostic analysis
Automatic Collection	Access IP address, browser type, date and time of visit, service usage records	Service improvement and statistical analysis

1-2. Methods of Collection

Direct input through website input forms (including Google Forms)
Information automatically generated and collected in the course of using the Service (e.g., Google Analytics)

2. Purposes of Use of Personal Information

The Company uses the personal information it collects for the following purposes.

Generating AI product diagnostic reports and sending them by email
Providing guidance on the use of the Service and responding to inquiries
Statistical analysis for service improvement (processed on a de-identified basis)
Notifying users of new features (only where separate consent has been obtained)

3. Retention and Use Period of Personal Information

The Company destroys personal information without delay once the purpose of its collection and use has been achieved. However, where retention is required under applicable laws, the Company retains such information for the periods set out below.

Item Retained	Retention Period	Legal Basis
Service usage records, access logs	3 months	Protection of Communications Secrets Act
Records of contracts or withdrawal of subscription	5 years	Act on Consumer Protection in Electronic Commerce
Records of payment and supply of goods	5 years	Act on Consumer Protection in Electronic Commerce
Records of consumer complaints or dispute resolution	3 years	Act on Consumer Protection in Electronic Commerce

As no paid transactions occur during the current beta service period, product information and email addresses entered when requesting a diagnosis are destroyed within 90 days after the diagnostic report has been sent.

4. Provision of Personal Information to Third Parties

In principle, the Company does not provide users' personal information to third parties. However, the following are exceptions.

Where the user has given prior consent
Where required by applicable laws

5. Outsourcing of Personal Information Processing

The Company outsources the processing of personal information as follows in order to provide the Service.

Service Provider	Outsourced Task
Google LLC	Data collection via Google Forms, email delivery via Gmail, and analysis of service usage via Google Analytics
Netlify, Inc.	Website hosting

6. Procedures and Methods for Destroying Personal Information

Destruction Procedure: Personal information for which the purpose of use has been achieved is moved to a separate database and retained for a set period in accordance with internal policy and applicable laws before being destroyed.
Destruction Method: Information in electronic file form is deleted using methods that render it unrecoverable.

7. User Rights and How to Exercise Them

Users (or their legal representatives) may exercise the following rights at any time.

Request to access personal information
Request for correction in the event of errors
Request for deletion
Request to suspend processing

To exercise the rights above, please email the Data Protection Officer listed below, and the Company will take action without delay.

8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

Encryption of data in transit (HTTPS/TLS)
Restriction of access privileges to the database
Operating with a minimum number of personnel handling personal information

9. Use of Cookies and Other Automatic Collection Devices

The Company uses Google Analytics to collect statistics on service usage. Users may decline to allow cookies to be stored by adjusting their browser settings, and doing so will not affect their use of the Service.

10. Data Protection Officer

Name	Sihun Lee
Title	CEO
Email	ceo.userwhy@gmail.com
Affiliation	UserWhy

11. Changes to This Privacy Policy

This Privacy Policy may be amended to reflect changes in applicable laws, policies, or the Service, and any such changes will be announced on the website.