Privacy Policy

Last updated 11 November 2026

This policy explains what personal data RockMed ("we") processes when you use report.rockmed.kr and why.

What we collect

  • Account: your email address and, with Google sign-in, your name.
  • Orders: the product details you enter, the item code you choose, order status and the reports we generate.
  • Uploaded catalogues: read once to extract product details, only with your consent, and not stored.
  • Payment: handled by Paddle; we receive the transaction status, not your card details.
  • Waitlist: your email and device category, if you join the waitlist.
  • Technical: IP address for bot protection and security logs.

Why we use it

  • To provide the Service you ask for: sign-in, classification, reports and email.
  • To prevent abuse and keep the Service secure.
  • To meet legal and tax obligations.

Who processes it for us

  • Cloudflare: Hosting, bot protection (Turnstile) and file storage.
  • Neon: Database hosting.
  • Paddle: Payment, tax and invoicing as merchant of record.
  • Resend: Sign-in and order emails.
  • BizRouter: AI processing of product descriptions and, with your consent, catalogues.
  • Google: Optional Google sign-in; waitlist answers (Google Forms).

AI processing is used only to prepare your order. We do not allow your files to be used to train models. Some processors are outside Korea; transfers rely on their contractual safeguards.

Cookies and storage

We set one sign-in cookie. Your unsent order form is kept in your browser's local storage so a refresh does not lose it. We use no advertising or analytics cookies.

How long we keep it

Account, orders and reports are kept while your account exists so you can open your reports. Sign-in sessions expire after 30 days of inactivity. Payment records are kept as tax law requires.

Your rights

On your account page you can download a copy of your data or delete your account. Deleting it removes your reports and orders; for paid orders we keep only the payment record (amount, date and transaction) that tax law requires. You can also ask to access, correct, export or delete your data, or object to its use, by writing to info@rockmed.kr. We reply within 30 days.

RockMed · info@rockmed.kr