Privacy policy

1. Purposes of processing

Nanoit Co., Ltd. ("we") processes personal information on the FlySpot ai website ("the site") only for the purposes below. If a purpose changes, we will take the steps required by Article 18 of the Personal Information Protection Act (PIPA), such as obtaining separate consent.

• Receiving and answering adoption, demo and partnership inquiries: reviewing your message, contacting you and keeping a record of the consultation
• Operating and improving the site: analyzing visit statistics
• Preventing abuse: blocking automated (spam) submissions

2. Personal information we process

The site has no sign-up. We process only the information below when you send an inquiry or use the site. We do not process resident registration numbers or other unique identifiers, or sensitive information.

3. Retention period

We keep personal information only for the period you agreed to and destroy it without delay once that period ends or the purpose is achieved.

• Inquiry information: 3 years from the date of the inquiry (to check consultation history and handle follow-up inquiries)
• Visit statistics: 2 months from collection, according to the Google Analytics data retention setting
• Spam check information: not stored by us after the check (Google’s retention rules apply)
• If you ask us to delete your information or withdraw consent, we destroy it without delay even before these periods end. If another law requires us to keep it, we store it separately for that period.

4. Destruction procedure and method

Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay after review by the Chief Privacy Officer.

Electronic files are permanently deleted from the database so they cannot be recovered, and any copies such as inquiry notification emails or printouts are deleted or shredded.

5. Provision to third parties

We process personal information only within the purposes in Section 1 and do not provide it to third parties except where Articles 17 and 18 of PIPA allow, such as with your separate consent or under a specific provision of law.

6. Outsourcing of processing

We outsource processing as follows to run the site. Under Article 26 of PIPA, our contracts prohibit processing beyond the outsourced purpose and set out safeguards, limits on sub-processing and liability for damages, and we supervise how the processors handle personal information. If the processors or tasks change, we will update this policy.

7. Overseas transfer

We transfer personal information overseas as follows to carry out the tasks in Section 6, based on Article 28-8(1)(3)(b) of PIPA (outsourcing or storage needed to perform a contract and disclosed in the privacy policy). Inquiry information is stored in the Seoul region but may be accessed from overseas while the processor operates and maintains its systems.

8. Cookies and how to refuse them

We use cookies (small pieces of information a site stores in your browser) for visit statistics. We also use browser storage (localStorage) to remember your display theme and whether you closed the cookie notice; these values are never sent to us.

You can refuse cookies in your browser settings. Refusing cookies does not limit your use of the site.

• Chrome: Settings > Privacy and security > Third-party cookies
• Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
• Safari: Settings > Privacy > Block all cookies
• Google Analytics opt-out add-on: https://tools.google.com/dlpage/gaoptout

9. Your rights and how to exercise them

You may at any time ask us to give you access to your personal information (Article 35), correct or delete it (Article 36), or suspend processing or withdraw consent (Article 37). Send your request in writing or by email to the contact in Section 11 and we will act on it without delay and let you know the result.

You may also make a request through a legal representative or another authorized person, who must submit a power of attorney. Information that another law requires us to collect cannot be deleted, and a request may be refused or limited where PIPA allows, such as under a specific provision of law.

The site handles business inquiries from companies and agencies and does not accept personal information from children under 14.

10. Security measures

Under Article 29 of PIPA, we take the following measures.

• Administrative: keeping the number of staff who handle personal information to a minimum and training them regularly
• Technical: encrypting all traffic (HTTPS), limiting access to inquiry information to authenticated administrator accounts, and blocking abuse with a spam check
• Physical: storing inquiry information in the access-controlled data centers of our processor (Google)

11. Chief Privacy Officer and complaints

We have designated a Chief Privacy Officer to oversee the processing of personal information and to handle complaints and remedies. Contact us below with any privacy question, access or deletion request, or complaint.

• Chief Privacy Officer: Sangsu Park (CEO)
• Phone: +82-70-8766-8036
• Email: admin@nanoit.kr

12. Remedies for infringement

To seek a remedy for an infringement of your personal information, you can apply for dispute resolution or counseling at the following Korean agencies.

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
• Supreme Prosecutors’ Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

13. Changes to this policy

This privacy policy applies from November 13, 2026.

If we add to or change it, we will post a notice on the site’s News page at least 7 days before the change takes effect, or 30 days before for changes that significantly affect your rights.