RZMEE Privacy Policy

1. Personal information we process, and its purposes, legal basis and retention periods

The Company processes the personal information needed to provide the Service without consent (Article 15(1)(4) of the Personal Information Protection Act), and carries out any other processing only when the member has separately consented (Article 15(1)(1) of the same Act).

A. Information processed without consent

B. Information processed with consent

Login records (date and time, IP address) are kept for 3 months under Article 15-2 of the Protection of Communications Secrets Act (통신비밀보호법) and Article 41 of its Enforcement Decree. Even after account deletion, they are kept for this period and then deleted.

2. Sensitive information and unique identification information

The Company does not collect sensitive information or unique identification information (resident registration numbers, alien registration numbers, passport numbers). Even if materials contain such information, it is not used in documents, so please cover it before uploading.

3. Additional use of pass cases

When a document-screening pass is confirmed, the Company keeps a copy of that order's materials, documents and build records as a pass case and uses it as follows, within the scope reasonably related to the original purpose of collection (Article 15(3) of the Personal Information Protection Act).

1. Quality control tests: when the writing rules or checks change, they are applied again to passed documents.
2. Anonymous examples: examples with names, company and school names, contact details, numbers and proper nouns removed are used as a structural reference when building documents for members in the same job field. Sentences and facts are not copied.

Criteria (Article 14-2 of the Enforcement Decree of the same Act): the use serves the quality of the same service; it is announced in advance in Article 17 of the Terms of Service and in this Policy; other members see only anonymous examples that cannot identify anyone; and the copies are kept in private storage that only the work system reads.

Pass cases are kept regardless of account deletion. On account deletion, the link to the account is removed and parts such as names, contact details, and company and school names are replaced to turn the copy into pseudonymized information (Article 28-2 of the same Act). Pseudonymized information is used only for service quality tests and engine improvement, is kept while the Service is operated, is not provided to third parties, and no information for restoring the original values is created. Requests for access, correction or deletion, and suspension of processing do not apply to pseudonymized information (Article 28-7 of the same Act).

Companies confirmed through pass verification may appear as company logos in "Companies where RZMEE users passed document screening" on the home page. This does not reveal who the member is or which documents were involved.

4. Destruction of personal information

1. Personal information whose retention period has ended or whose purpose of processing has been achieved is destroyed without delay (within 5 days). When a member deletes their account, the uploaded materials, documents and build records are deleted together with the account. Pass cases (Section 3) are pseudonymized and kept.
2. Even when the beta service ends, accounts and materials carry over to the official service and follow the retention periods in Section 1.
3. Method of destruction: electronic files and database records are deleted so that they cannot be recovered.
4. Information kept under other laws: login records are kept for 3 months under the Protection of Communications Secrets Act.

5. Provision to third parties

The Company does not provide members' personal information to third parties. However, where the law has special provisions, or where it is unavoidable in order to comply with legal obligations, the Company may provide it within the scope set by law.

6. Entrustment of processing

To operate the Service, the Company entrusts the processing of personal information to the following companies, and the entrustment contracts prohibit processing beyond the entrusted tasks and set out safeguards.

7. Overseas transfer

To perform the service contract, the Company entrusts the processing of personal information to overseas companies, and discloses the following under Article 28-8(1)(3) of the Personal Information Protection Act.

If you do not want your information transferred overseas, please let the Company know at talkto@rzmee.com. However, the Service cannot be provided without these companies, so if you refuse, the Service cannot be used and the refusal will be treated as account deletion.

8. Processing using AI

1. Where AI is used: the Company uses generative AI to read materials, organize work history, create questions, write and check document text, handle edit requests, make the copy in my language, and check pass verification captures. Inputs and results follow the retention periods in Section 1.
2. Training: neither the Company nor the model providers train AI with members' materials. If the Company comes to use them for training, it will first amend and announce this Policy and provide a way to refuse.
3. Reporting and what not to upload: if a document contains inaccurate or inappropriate content, please let the Company know through an edit request or by email. Please do not upload information about health, religion or race, or resident registration numbers, alien registration numbers or passport numbers.

9. Cookies and automatically collected information

• The Service uses a cookie that keeps the login state, a cookie that remembers the screen language, and a visit statistics cookie that recognizes when the same browser returns (1 year). It does not use advertising cookies or external analytics tools.
• Cookies can be blocked in browser settings, but then screens that require login cannot be used.
• When the Service is accessed, the IP address and access records are logged automatically, and the screens opened and buttons pressed are recorded for service usage statistics (Section 1).

10. Rights of data subjects and how to exercise them

1. Members may at any time request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw their consent.
2. Directly on screen: personal details can be changed in "Manage my profile", on the "Confirm work history" screen, or in the editor on the Documents screen; personalized recommendations and ads and receiving advertising information can be turned on and off in "Manage my profile", where the account can also be deleted. Advertising emails can also be stopped with "Unsubscribe" at the bottom of the email.
3. For other requests, please contact talkto@rzmee.com or call 070-8027-8851. After confirming the requester's identity, the Company informs them of the outcome within 10 days. If a request cannot be granted, the Company also explains the reason and how to object.
4. A legal representative or an authorized person may also make requests (a power of attorney is required).

11. Security measures

• Management: the people who handle personal information are limited to the operators.
• Technical: access is restricted so that members can see only their own information, communications are encrypted, and login records are kept for 3 months.
• Physical: access to the data centers is controlled by the cloud providers.

12. Children under 14

The Service does not accept sign-ups from children under 14 and does not collect children's personal information. At sign-up, the Service confirms that the person is 14 or older, and if it learns that information of a child under 14 has been collected, it deletes that information right away.

13. Advertising information

1. The Company sends advertising information only to people who have agreed to receive it, and only through the channels they agreed to. For now, it is sent only by email.
2. Service notifications such as sign-up confirmation, application receipt, selection and completion are sent regardless of consent.
3. Advertising emails can be stopped at any time with "Unsubscribe" at the bottom of the email or in "Manage my profile".
4. People who signed up for notifications while applications were closed receive only news about new beta recruitment and the official launch, and their information is deleted 1 year after the sign-up date.

14. Chief Privacy Officer and complaint handling

Please send inquiries, complaints and requests for remedies regarding personal information to the contact details above. The Company will reply within 10 days.

15. Remedies for infringement of rights and interests

If you need to report a personal information infringement or get advice about one, you can contact the organizations below.

16. Changes to this Policy

1. This Policy takes effect on October 16, 2026.
2. When this Policy changes, the change is announced on the Service screen starting 7 days before it takes effect (30 days before for important changes that are unfavorable to members).
3. The original text of this Policy is in Korean. Translations into other languages are to help understanding, and if a translation differs from the original, the original prevails.