Privacy Policy

1. Scope and responsibilities

Registered legal entity: Ever Info, Inc. (주식회사 에버정보). Service name: EVERINFO (에버인포). The Privacy Officer is 조승민, Team Leader, Information Security Team. Privacy inquiries and requests for access, correction or deletion can be made by telephone at +82-2-852-7114 or by email at admin@everinfo.co.kr.

This privacy policy applies to the EVERINFO website, the Monolith E-Paper PC program supplied by EVERINFO, and its Chrome and Edge browser extensions. Servers, databases and storage operated directly by a customer organization are subject to that organization's privacy policy and management policies.

EVERINFO is the controller for its website operations and inquiries it receives directly. For customer output documents, EVERINFO supplies the software; the user or customer organization determines the purposes of processing and retention policies. The current product release region is the Republic of Korea.

2. How the product handles data

EVERINFO supplies Monolith E-Paper and does not collect or store the content of documents that users print or transmit on servers operated by EVERINFO. When a user permits the functionality, the browser extension may pass print requests, page URLs, related document content and page captures to the Monolith E-Paper companion program on the same Windows PC. This information may be stored on the user's PC or in database servers and storage operated and managed by the user's organization.

Storage locations, retention periods, access permissions and deletion procedures are determined by the user's or customer organization's settings and policies. Pausing the extension's integration does not automatically delete documents already received by the customer organization's storage.

You can stop subsequent integration processing by pausing print integration or disabling the extension. To delete documents already stored, contact the administrator of the relevant PC or customer organization.

Monolith E-Paper Print Bridge may process HTTP(S) tab URLs, navigation, connection state and document-response information in a browser profile where integration is enabled. URLs may include paths and query strings. Document content, PDFs and user-requested screen captures are passed through Native Messaging to the program on the same PC. Tab information needed to maintain the connection may be processed outside the moment of printing. Keep work and personal profiles separate and use only documents you are authorized to handle.

Debugger permission supports print detection, document responses, PDFs and screen capture. Tabs permission manages target tabs; native messaging connects to the PC program. Storage retains consent, excluded addresses and stopped-tab state, and alarms support reconnection. HTTP(S) page access supports connection checks and print integration. Incognito/InPrivate windows are not supported.

Consent and excluded addresses are kept in extension-local storage until changed or removed; stopped-tab state is managed in browser session storage. Pausing or removing the extension does not delete documents already transferred. Document-response event headers passed to the PC are limited to necessary information such as format, size and partial responses. Cookies, authentication headers and request bodies are excluded from that event projection, but URLs and document contents are not thereby anonymized.

3. Information not collected and use restrictions

EVERINFO does not collect Monolith E-Paper output documents, page captures, personal information contained in documents, web browsing history or payment history for advertising, sale, behavioral analysis, creditworthiness assessment or lending purposes. The product does not provide a default feature that sends output documents to servers managed by EVERINFO.

If a user directly provides specific material to EVERINFO for support, the purpose, scope, retention and deletion are disclosed separately and consent is obtained. Remote support involving access to customer documents is separately governed by the customer's authorization and instructions, any necessary processing agreement, and confidentiality terms. It does not mean that output documents are routinely collected.

The website does not provide services directed at children or automated decision-making or profiling based on personal information. It has no functionality for entering sensitive or biometric information. Users or customer organizations manage the lawful processing and protection of information contained in their documents.

4. Customer organization storage

If a customer organization configures its internal API, database server or storage as a destination, the software may deliver documents to that destination at the user's request. EVERINFO is not the data administrator or independent owner of the customer organization's storage. The organization must manage access permissions, retention periods, backups and deletion procedures under its own policies.

This transmission serves the operations of the customer organization specified by the user. It is not a transmission to EVERINFO for advertising, analytics or resale.

5. Chrome Web Store Limited Use

1. EVERINFO does not sell user data or monetize it by providing it to advertising platforms or data brokers. Extension user data is not transferred beyond what is necessary for the permitted single purpose.
2. Information handled by the extension is used only to provide functionality, security and troubleshooting related to its single purpose of connecting user-requested printing and page capture. It is not used for unrelated advertising, profiling, analytics or AI training.
3. User data handled by the extension is not used or transferred for creditworthiness assessment or lending purposes.

These restrictions also cover aggregated, anonymized and derived user data. The same no-sale, purpose-limitation and no-credit-or-lending-use principles apply to the Microsoft Edge extension.

Information handled through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Delivering documents necessary for functionality to an internal destination specified by the customer is distinct from EVERINFO selling or transferring data to third parties for its own purposes. EVERINFO personnel do not read output documents during ordinary product use. If support requires reading specific material, explicit user consent for that material is obtained.

6. Website data processing

The following website access and email inquiry information is processed separately from product output documents.

Inquiries, quotes and support

The website has no inquiry form, inquiry database or email-sending API. Inquiry buttons copy a company email address to the clipboard. They do not read your clipboard contents or send them to a server. You compose and send email yourself using your own email service.

Email sent directly to us

The sender's email address, name, organization and contact details (if included), inquiry content and attachments received by the company are used to respond to inquiries and provide requested support. There are no mandatory or optional input fields on the website. Do not send unnecessary information such as passwords, authentication keys, national identification numbers or hotel guest information.

Web server, load balancer and security logs

The hosting infrastructure records access time, IP address, request URL, method and size, browser information, protocol, response status and size, latency and security rule outcomes. Security logs may also include IP-derived country or region codes and network numbers (ASN), TLS connection fingerprints (JA3 and JA4), and request trace identifiers. These records support service delivery, malicious request blocking and troubleshooting; they are not a repository of output documents. Do not put personal information in URLs or query parameters.

Cookies, analytics and advertising

The website does not use advertising or behavioral analytics tools or tracking cookies. An ASP.NET Core security cookie for preventing request forgery (with the .AspNetCore.Antiforgery. prefix) persists for the browser session and is not used for advertising tracking. Fonts, images and videos are served by the website itself. Your browser may cache static files and store a Blazor resource version identifier in local storage. You can delete or restrict cookies, cache and site data in your browser settings. Blocking cookies may limit security functionality; clearing the cache causes files to be downloaded again.

7. Retention and deletion

Website access and security logs have a configured retention period of 30 days. Required cloud audit logs, such as service administrator activity, have a separate 400-day retention setting and are distinct from ordinary visitor access logs. Logs become subject to automatic deletion according to their retention period.

Email inquiry information is retained for three months from the date the email is received, then deleted. It is used only to respond to the inquiry and provide requested support. Where a law requires separate retention, the relevant information is segregated and retained only for the specified purpose and period.

Retention and deletion are managed according to purpose, legal obligations and risk, based on the information security management principles of ISO/IEC 27001. Electronic information is deleted to make recovery difficult, and paper records are shredded or otherwise destroyed. Copies, backups and records of disposal are also included in retention and deletion management. This does not represent a claim of ISO certification.

Output documents on customer PCs and in customer organization storage follow that user's or organization's retention and deletion rules. The retention period for EVERINFO website logs does not determine the retention period for customer documents.

8. Service providers and international transfers

The website uses Google Cloud Run, load balancing, Cloud Armor and Cloud Logging to serve pages, block malicious requests and manage logs. The Cloud Run execution region is Seoul, Republic of Korea. CDN caching is not used.

The storage location setting for access and security logs is Google Cloud's global location. This setting does not guarantee storage exclusively in the Republic of Korea. The Seoul execution region is distinct from the locations where logs and support access are processed. Product output documents are not transmitted through this website hosting path.

The domain uses Gabia nameservers for DNS. Hiworks is the contracted email service provider for receiving and storing inquiries. The service processes sender addresses, names, organization and contact details (if supplied), message contents, attachments and receipt information.

Log access is restricted by Google Cloud IAM. The company-side principal currently verified to have project log-reading permission is the project owner account; the website runtime account has not been assigned a log-reading role. Provider operational and support access is governed by the applicable contracts and access controls.

EVERINFO does not sell extension user data or share it for cross-context behavioral advertising. The customer organization determines and discloses providers, processing countries and transfer conditions for the storage it designates directly.

9. Your rights and contact details

Under the Korean Personal Information Protection Act and other applicable laws, you or your authorized representative may request access, correction, deletion, suspension of processing and withdrawal of consent. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Use the following contact details to exercise rights or raise a privacy concern about website or inquiry information handled by EVERINFO. Provide only the type of request and the minimum information needed to identify the relevant inquiry. If identity or representative verification is needed, we will explain the minimum supporting information required separately. You do not need to send an identity document copy or sensitive information with your initial request.

Privacy Officer

조승민 · Team Leader

Department

Information Security Team

Privacy telephone

+82-2-852-7114

Privacy email

admin@everinfo.co.kr

Requests are handled and results communicated within the period required by applicable law. If a request is restricted, refused or delayed, we explain the legal reason, processing timetable and how to challenge the decision. You can request reconsideration through the same contact. Requests concerning documents in a customer organization's storage should be addressed to that organization's administrator.

For privacy infringement advice or reporting in Korea, contact the Personal Information Infringement Report Center. For dispute mediation, contact the Personal Information Dispute Mediation Committee.

Where EU/EEA GDPR or UK GDPR applies to processing, rights include access, rectification, erasure, restriction, portability, objection and complaints to a supervisory authority. Where California CCPA/CPRA applies, rights include access, deletion, correction, limiting sensitive information use, opting out of sale or sharing, and non-discrimination for exercising rights. Requests can be made using the contact above, subject to the applicable law's conditions and exceptions. This information does not expand the current product release region beyond the Republic of Korea.

10. Security measures

The website uses HTTPS, web application firewall rules to block malicious requests, and request rate limits. Direct external access to the web service is restricted; requests are handled through a load balancer. The website runtime account has not been granted project data access roles.

Access controls, encryption and backups on customer PCs and in customer organization storage are governed by the relevant administrator and organizational policies. EVERINFO does not guarantee protection settings across every customer environment.

11. Policy changes

• September 19, 2026 · Version 1.1: confirmed the Privacy Officer and department, three-month email retention from receipt and Hiworks service, and expanded extension processing disclosures. Announcement and effective dates are the same.
• September 19, 2026 · Version 1.0 (first published policy)

If this policy is revised because processing practices or applicable laws change, this page will explain the changes, announcement date and effective date and provide access to earlier versions. Where new processing purposes or features require separate notice or consent, those steps will take place before processing begins.