개인정보처리방침 (Privacy Policy)

Highable Consulting (hereinafter referred to as the 'Company') establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect users' personal information and process related complaints quickly and smoothly.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

1. Membership Registration and Management: Processing is done for the purpose of confirming the user's intent to sign up, identifying and authenticating the user for providing membership services, maintaining and managing membership status, preventing illegal service use, sending notices and communications, and handling inquiries.
2. Service Provision and Analytics: Processing is done to provide AI video interview services, generate AI competency evaluation reports, process purchase credits billing and settlement, and perform research for improving the artificial intelligence analysis models.
3. Utilization for Marketing and Advertising (Optional): Processing is conducted for developing new services, providing customized options, and offering promotional details and events participation opportunities.

Article 2 (Items of Personal Information Processed)

The Company collects and processes the minimum necessary personal information to offer standard features.

• Collected during Membership Sign Up: Email address, Password, Full Name (First and Last Name), Registration Provider Type (Email or Google social auth tokens)
• Collected during Payment Process: Card brand name, Approval transaction numbers, payment method details (Credit card information is processed securely through a payment gateway, and the Company does not store raw credit card numbers)
• Collected for AI Interview Candidates (Applicants): Full Name, Email Address, Phone Number, Date of Birth, Gender, Target Position, Education & Career history details (if uploaded), Video & Audio interview recordings, and Speech-to-Text (STT) transcribed answer texts.
• Automatically Collected during Service Use: IP Address, Cookies, Service usage logs, Device configuration, Operating System info, and Browser type.

Article 3 (Period of Retention and Use of Personal Information)

1. The Company processes and retains personal information within the personal information retention/use period required by relevant statutes or agreed upon when collecting personal information from the user.
2. The specific retention and usage periods are as follows:
   • Website Membership Registration and Management: Kept until the user withdraws from membership. However, if financial balance or active transactions exist, data is retained until settlement completes.
   • AI Interview Candidate Data and Evaluation Reports: Kept for a maximum of 90 days after the job posting deadline set by the Corporate Member, or stored in accordance with the corporate user's account configuration.
   • Retention Required by Relevant Statutes:
     • Records on contracts or subscription withdrawal: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
     • Records on payment and supply of goods: 5 years (Electronic Commerce Act)
     • Records on consumer complaints or dispute handling: 3 years (Electronic Commerce Act)
     • Website visit/access history (Logs): 3 months (Protection of Communications Secrets Act)

Article 4 (Destruction of Personal Information)

1. The Company destroys personal information without delay when the personal information becomes unnecessary, such as the expiration of the retention period or achievement of the processing purpose.
2. The procedure and method of destruction are as follows:
   • Procedure: The Company selects the personal information for which destruction reasons occurred, obtains approval from the Chief Privacy Officer, and completely deletes it.
   • Method: Personal information stored in electronic file format is permanently deleted using specialized technical methods so that the record cannot be reproduced. Paper documents containing personal information are shredded or incinerated.

Article 5 (Delegation of Personal Information Processing)

The Company delegates the processing of personal information as follows to ensure smooth operations:

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

1. Data subjects can exercise their rights to request access to, correction of, deletion of, or suspension of processing of their personal information at any time.
2. Rights can be exercised via written documents, emails, or directly on the customer support channels, and the Company will process them immediately.
3. If a data subject requests correction of errors in personal information, the Company will not use or provide the relevant personal information until the correction is completed.

Article 7 (Security Measures for Protecting Personal Information)

The Company implements the following security measures to safeguard user data:

• Administrative Measures: Establishing and implementing internal management security plans, regular employee training programs.
• Technical Measures: Restricting access privileges, installing access control systems, encrypting sensitive fields and passwords, installing firewalls and vulnerability scanning agents.
• Physical Measures: Locking data server cabinets and enforcing strict physical entry protocols.

Article 8 (Chief Privacy Officer)

The Company has designated a Chief Privacy Officer to take overall responsibility for personal information processing and to handle inquiries and complaints related to personal information.

Article 9 (Amendments to the Privacy Policy)

This Privacy Policy is effective from the date of enforcement. In case of any addition, deletion, or correction of changes in accordance with relevant laws and policies, we will notify users through notices at least 7 days before the implementation of the changes.