Privacy Policy

Infrastructure Design Inc. (the "Company") properly handles the personal information and communication logs obtained through the cloud-based Secure Web Gateway
"PromoProxy" (the "Service") in accordance with the policy below.

1. Scope

This policy applies to all personal information and related data (collectively, "Personal Information, etc.") obtained by the Company through the Service’s website, dashboard, and proxy communications.
This policy is applied together with the Terms of Service, and the definitions of terms generally follow the Terms of Service (e.g., "User," "End User," "Log Data," etc.).

2. Information We Collect

• Account Information: name, email address, company name
• Authentication Information: user ID, password
• Communication Logs: source IP, user ID, destination domain/URL, timestamp, HTTP method, response code, transferred bytes, and other traffic record data
• Security Logs: malware scan results, URL/application filter verdicts, and other diagnostic logs
• Information for Public Notice: the User’s corporate or service name, logo, etc.

3. Methods of Collection

1. Information entered in the contact form
2. Information entered/registered in the dashboard
3. Automatic collection via proxy communications by the service provider’s servers
4. Voluntary provision by Users through support inquiries, surveys, etc.

4. Purposes of Use

1. To provide the Service, calculate charges, and manage licenses
2. To detect and investigate security incidents such as unauthorized access or malware
3. To perform statistical analysis for feature improvements, quality enhancement, and new service planning
4. To handle incidents, provide support, and deliver important notices
5. To comply with laws and respond to disclosure requests from public authorities based on legal grounds
6. For public disclosure of usage records

5. Joint Use and Provision to Third Parties

• We outsource infrastructure operations of the Service to cloud service providers and may jointly use communication logs with such providers for purposes such as server maintenance and data backup.
• Except as above, we do not provide Personal Information, etc. to third parties without the individual’s consent.
  However, this does not apply where we receive disclosure requests from courts, police, or similar authorities based on legal grounds.

6. Cross-Border Transfers

For traffic optimization, logs may be temporarily stored via data centers located outside your country.
We comply with applicable data protection laws and apply the safeguards described in the preceding section.

7. Retention Period

Communication and security logs are retained for a period deemed reasonably necessary for service operation and legal compliance, and are then automatically deleted or anonymized.
Account information is deleted or anonymized after cancellation.
Following termination (cancellation) of the contract, we may lawfully retain relevant data, to the extent necessary for settlement of unpaid obligations, protection of intellectual property rights, application of disclaimers and limitations of liability, and dispute resolution, pursuant to the survival clauses of the Terms of Service.

8. Use of Cookies, etc.

We may use cookies and similar technologies to improve convenience, analyze access, and assist authentication for the Service and related websites.
You can warn or block cookies via your browser settings; however, some features may not function properly.
Details regarding the purposes, lifetimes, and management of cookies and similar technologies will be announced in this policy once specifications are finalized.

9. Rights of Users

Users may request disclosure, correction, deletion, or suspension of use of their Personal Information, etc.

10. Use by Minors

Individuals under 18 years of age may not use the Service. If we learn that we have inadvertently collected such information, we will promptly delete it.

11. Revisions

This policy may be revised in accordance with legal amendments or changes to the Service.
We will provide notice of material changes via the website or dashboard notifications.

12. Contact

For inquiries about this policy and the handling of Personal Information, etc., or to exercise your rights, please contact us through the Company’s designated contact channels (the Service’s contact form or the contact provided at the time of contract).
End Users should contact their organization’s (User’s) administrative contact.