Privacy Policy
Effective: October 28, 2026
Revision notice (October 28, 2026): We have clarified the email-sending processor (Amazon SES) and the purposes of sending, specified the student-roster items for online classes, and added a provision on the processing of personal data of children under the age of 14. View the previous version (effective October 26, 2026)
NetServ ("the Company") complies with the Personal Information Protection Act and related laws, and establishes and discloses this Privacy Policy to protect users' personal information.
1. Personal data we collect
- Sign-up / orders: name (or trade name), email, contact, and information needed for payment.
- Payment: payments are processed by a payment provider (PSP); the Company does not itself store card numbers or similar payment-instrument data.
- Licensing / operations: node identifiers and usage (e.g. peer counts) needed to issue, activate and monitor licenses.
- Member account (NetServ unified account): email, name (display name), password (stored using one-way encryption), two-factor authentication settings, login records.
- Use of video meetings (Meeting) and online classes (Education): meeting/class name and code, participants' display names, join and leave times, and usage such as duration of use. Participants' video, audio and screen sharing are only relayed in real time and are not stored, except where the features below are used.
- Recording (when the host or instructor starts a recording): recorded files of video, audio and screen sharing
- Class administration (Education): student rosters (name, email, phone number and student ID (optional)), attendance records, records of consent to recording and captions, quiz answers and scores
- Server captions and translation (when captions are turned on): spoken audio and the text converted from it
- AI meeting minutes, class summaries and quiz generation (when requested by the host or instructor): caption transcript text and the generated results
- Email invitations (when the host or instructor invites by email): the recipient's email address
- Customer board (Q&A): posts and replies, and the author's name and email (optional; stored privately and used only for reply notifications; not stored if you post anonymously).
- Automatically collected: access logs, cookies, IP address and browser information (for operation and security).
- Visit statistics: aggregate, non-identifying data (pages, referrers, country, device type) via Cloudflare Web Analytics; no personal identifiers are collected.
2. Purposes of collection and use
- Providing the service, issuing/managing licenses, and identity verification
- Processing orders, payments, settlement and withdrawals/refunds
- Responding to inquiries and providing technical support
- Service operation and security, abuse prevention, and statistical analysis
- Relaying video meetings and online classes, and providing additional features requested by users, such as recording, captions, translation and AI summaries
- Calculating usage by plan
- Providing a first AI answer to customer board inquiries and reply notifications
3. Retention period
As a rule, personal data is destroyed without delay once the purpose is achieved. However, it may be retained for the periods below under applicable law:
- Records on contracts and withdrawal of subscription: 5 years (E-Commerce Act)
- Records on payment and supply of goods: 5 years (E-Commerce Act)
- Records on consumer complaints and dispute handling: 3 years (E-Commerce Act)
- Access logs and communication-fact confirmation data: the period set by applicable law
Retention period by service
- Member information: destroyed without delay when the member withdraws (except records that must be retained under law).
- Video meeting recordings: automatically deleted after the retention period for the plan (7 days for Free; 30 days for Standard and Premium). The host may delete them earlier.
- Class recordings: automatically deleted after the retention period set for each course. Class records such as attendance and quizzes are retained until the instructor deletes them or deletes the course.
- AI meeting minutes and class summaries: retained until the host or instructor deletes them.
- Caption text: used only for on-screen display during the meeting and for generating minutes, and is not stored on the Company's servers. Only usage (such as speaking time) is recorded.
- Customer board posts: retained until the author requests deletion or they are deleted under operating policy.
4. Provision to third parties
The Company does not, as a rule, provide users' personal data to outside parties, except where there is a legal basis or the user has consented.
5. Outsourcing of processing
The Company outsources the processing of personal data as set out below in order to provide the service. The primary servers for video meetings (Meeting) and online classes (Education) are operated directly by the Company in Korea. If processors such as a payment provider are added, they will be specified and announced in this policy.
| Processor | Outsourced task | Country of processing |
|---|---|---|
| Oracle Corporation (Oracle Cloud Infrastructure) | Operating the website, customer board and member authentication servers; operating standby servers for the meeting and class services for disaster recovery, and storing backups | Japan (Tokyo) |
| Cloudflare, Inc. | Website visit statistics (Web Analytics); access relay and security for the online class site (edu.remote-viewer.com) | United States and others |
| Deepgram, Inc. | Real-time captions (speech-to-text conversion) | United States |
| Anthropic, PBC | Caption translation and correction; AI meeting minutes, class summaries and quiz generation; AI answers on the customer board | United States |
| Google LLC | Sending account verification, password reset, invitation, notification and license-information emails (Gmail) | United States |
| Amazon Web Services, Inc. (Amazon SES) | Sending account verification, password reset, invitation, notification and license-information emails | Republic of Korea (Seoul region) |
The site uses Cloudflare Web Analytics for visit statistics, as set out below. It is a cookieless, privacy-first tool that does not use cookies or local storage to track visitors and does not collect personal identifiers; it processes only aggregate page-view statistics (pages, referrers, country, device type).
6. Overseas transfer of personal data
To perform its service contract with users, the Company entrusts the processing of personal data to parties abroad, or stores it abroad, as set out below (Personal Information Protection Act, Article 28-8(1)(iii)).
| Recipient (contact) | Country | Items transferred | Purpose | Timing and method | Retention and use period |
|---|---|---|---|---|---|
| Oracle Corporation (oracle.com/legal/privacy) | Japan (Tokyo) | Member account information, board posts and author information, website access records, standby copies of meeting and class service data | Operating the website, board and member authentication servers; standby operation and backup for disaster recovery | Transmitted over an encrypted network when the service is used and during periodic synchronization and backups | Until the member withdraws or the outsourcing contract ends (backups are deleted on a rotating schedule) |
| Cloudflare, Inc. (privacyquestions@cloudflare.com) | United States and other countries where Cloudflare data centers are located | Access IP, browser information, visited-page information, access traffic to the online class site | Visit statistics; access relay and security | Transmitted over the network when the website or online class site is accessed | Relaying is completed immediately upon processing; statistics are kept only in aggregate form that cannot identify individuals |
| Deepgram, Inc. (security@deepgram.com) | United States | Spoken audio of meetings and classes with server captions turned on | Real-time caption generation | In real time over an encrypted network while captions are on | Kept only as long as needed for processing, then deleted; not used for model training (opted out of Deepgram's Model Improvement Program) |
| Anthropic, PBC (privacy@anthropic.com) | United States | Caption text, transcript text for generating minutes, summaries and quizzes, board question content | Translation and correction; generating minutes, summaries and quizzes; AI answers on the board | When the feature is used (for the board, when a new post is submitted), over an encrypted network | Deleted within 30 days of receipt (exceptions such as investigating usage policy violations); not used for model training |
| Google LLC (support.google.com/policies) | United States | Recipient's email address, email content | Sending account verification, password reset, invitation, notification and license-information emails | When an email is sent | Sent-mail records are kept in the Company's mail account until the Company deletes them |
| Amazon Web Services, Inc. (U.S. corporation; Amazon SES, aws.amazon.com/privacy) | Processed in the Republic of Korea (Seoul region) | Recipient's email address, email content | Sending account verification, password reset, invitation, notification and license-information emails | Transmitted over an encrypted network when an email is sent | Processed and then deleted after the period needed for sending |
How to refuse overseas transfer and the effect of refusal
- Server captions, AI meeting minutes, class summaries and quiz generation, and email invitations are optional features. If you do not use them, the related information is not transferred abroad.
- If the meeting host opens a meeting as a "secure meeting", captions and AI minutes are turned off for that meeting, so audio and text are not transferred abroad.
- New posts on the customer board are sent to Anthropic for the first AI answer. If you do not want this, please contact the data protection officer by email below instead of using the board.
- The Oracle and Cloudflare outsourcing is essential to providing the website and member services. If you refuse it, you cannot use the related services such as member sign-up and the board. Send refusal requests to the data protection officer.
- Even if you refuse the optional features, the basic features of video meetings and online classes remain available.
Note on browser captions
When server captions are not used, the default captions rely on the speech recognition built into the user's browser. Some browsers, such as Chrome, may send the audio to the browser vendor's servers (for example, Google) in the process. This processing takes place between the user's browser and its vendor; the Company does not receive or store that audio.
7. Personal data of children under 14
The Company does not directly register children under the age of 14 as members. Where a client institution such as a school or academy processes the personal data of students under 14 in online classes (Education), the controller of that personal data is the client institution, and the Company processes it under the institution's entrustment. In that case, the consent of a legal guardian under Article 22-2 of the Personal Information Protection Act must be obtained by the client institution. A legal guardian may request access to, correction, deletion of, or suspension of processing of the child's personal data from the client institution or the Company.
8. Your rights
You may at any time request access to, correction, deletion of, or suspension of processing of your personal data, and the Company will act without delay. Recordings and AI meeting minutes and class summaries can be deleted directly by the host or instructor from the meeting or course screen. Participants who took part in a recording may ask the host, the instructor or the Company to delete it.
9. Destruction of data
Personal data whose retention period has passed or whose purpose has been achieved is destroyed without delay. Electronic files are deleted by irrecoverable means.
10. Security measures
The Company applies reasonable safeguards, including access control, encryption in transit and at rest, and retention of access records.
11. Cookies
The Company may use cookies to operate the service; you can refuse cookie storage through your browser settings. Cloudflare Web Analytics, used for visit statistics, does not use cookies.
12. Data protection officer
| Officer | Joo-Hwan Han (Representative) |
| joohwanatyu@gmail.com |
13. Notice of changes
Any additions, deletions or amendments to this policy will be announced in advance on the website.
- October 28, 2026 revision: added the email-sending processor (Amazon SES) and clarified the purposes of sending; specified the student-roster items for online classes; added a provision on the personal data of children under 14
- October 26, 2026 update: opted out of Deepgram's Model Improvement Program for server captions in video meetings and online classes; Deepgram retention updated to "deleted after processing, not used for model training"
- October 26, 2026 revision: added provisions on processing for member accounts, video meetings, online classes and the board, processors, and overseas transfer
- October 25, 2026: notice of outsourcing for website visit statistics (Cloudflare Web Analytics) (previous version)