Privacy Policy — HanFlow PDF

Effective: July 21, 2026 · Controller: Quantum Materials Inc.

This English text is provided for convenience; if it differs from the Korean original, the Korean version prevails.

Quantum Materials Inc. ("the Company") complies with the Personal Information Protection Act of Korea and other applicable laws. HanFlow PDF requires no account sign-up; the Company only processes the minimum information described below.

This privacy policy covers the following topics.

1. Purposes of collection and use
2. Items collected and how they are collected
3. Children under 14
4. Retention periods and destruction
5. Provision to third parties and outsourced processing
6. Your rights and how to exercise them
7. Automatic collection tools and how to refuse them
8. Technical and organizational safeguards
9. Privacy inquiries and grievance handling
10. Changes to this policy

1. Purposes of collection and use

The Company collects the minimum personal data and uses it only for the following purposes.

a. Handling inquiries — receiving, consulting on, and answering contact / business inquiries
b. Fulfilling and settling paid license contracts — issuing and re-issuing license keys, payments and refunds
c. Stable service operation — reliable website and download delivery, abuse prevention

2. Items collected and how they are collected

a. Items by activity

Activity	Purpose	Items collected
Contact / business inquiries	Receiving and answering inquiries	(Required) name, email, subject, message (Optional) organization, phone, attached image
Paid license purchase	Issuing and re-issuing license keys, fulfilling the contract, refunds	Email, order number, payment approval details (approval no., amount, time), license key issuance records
Automatically generated during use	Stable operation, abuse prevention	IP address and access time (standard hosting-infrastructure logs)

b. How the data is collected

Entered directly by you, with consent, in the website contact form
Collected in the course of paid-license payment and refunds
Generated automatically while you use the website

Card numbers and other payment-method details are collected and processed directly by the payment gateway (PG); the Company never stores or accesses them.
The Company does not collect resident registration numbers.

3. Children under 14

The service has no sign-up process and does not collect personal data from children under 14. If the Company learns that such data has been collected, it is destroyed without delay.

4. Retention periods and destruction

a. Retention — data is destroyed without delay once its purpose is fulfilled; where Korean law requires retention, it is kept safely for the periods below.

Records of consumer complaints and dispute handling (inquiry records): 3 years (E-Commerce Act)
Records of contracts, withdrawal, payments, and supply of goods (purchase records): 5 years (E-Commerce Act)
Automatically generated data (access logs): about 3 months from collection

b. Destruction method

Electronic files: deleted irrecoverably using technical means
Printed materials: shredded or incinerated

5. Provision to third parties and outsourced processing

a. The Company does not provide personal data to third parties without prior consent, except with the data subject's separate consent or where specifically required by law.

b. The Company outsources the following processing. Where a processor is located overseas, this is disclosed in accordance with Korean law.

Processor (location)	Task	Items · when transferred	Retention
Cloudflare, Inc. (USA)	Website hosting, delivery (CDN), security	IP address and other connection records · transmitted over the network when you use the website	Duration of the outsourced task
Resend, Inc. (USA)	Relaying inquiry emails	Information entered in the contact form (name, email, message, etc.) · when the form is submitted	Until delivery is complete (destroyed once the sending purpose is fulfilled)
Payment gateway (PG)	Payment processing and refunds (when the payment service is used)	Payment-method details (collected directly by the PG) · at payment	Per the PG's policy and applicable law

c. The Company supervises its processors through contracts so that personal data is handled safely. If you do not wish your data to be transferred overseas, you may refrain from using the relevant service (e.g., the contact form) and reach us by phone instead.

6. Your rights and how to exercise them

You may at any time request access, correction, deletion, or suspension of processing of your personal data by contacting our support line (+82-70-7609-1376) or emailing [email protected]. The Company will act without delay. A power of attorney is required when acting through a representative.

7. Automatic collection tools and how to refuse them

The website does not use cookies.
Display preferences such as your language choice are stored only in your browser (localStorage); they are never sent to our servers and do not identify you. You can delete them in your browser at any time.
Program update checks and download counts are processed in a non-identifying way.

8. Technical and organizational safeguards

Encryption in transit (HTTPS/TLS)
Minimal personnel with access, with access-permission management
Data minimization — payment details are never stored (handled by the PG)

9. Privacy inquiries and grievance handling

The Company has designated a privacy officer and a grievance-handling desk for privacy inquiries, complaints, and remedy requests.

Privacy officer: Hwanyeol Park (CEO)
Grievance desk: Customer support · (phone) +82-70-7609-1376 (weekdays 09:00–18:00 KST) · (email) [email protected]

We review every request promptly and let you know the outcome without delay.

10. Changes to this policy

Changes to this policy are announced on this page at least 7 days before they take effect (30 days for changes unfavorable to data subjects).

Announced: July 21, 2026 · Effective: July 21, 2026