Legal / Privacy
Privacy Policy
Effective date: August 28, 2026
eyeAM Studio Inc. (eyeAM Studio, we, us, or our) respects your privacy. This Privacy Policy explains how we handle personal information when you visit eyeam.studio, submit the contact form, or make a privacy request.
1. Data controller and privacy contact
The data controller is 주식회사 아이엠스튜디오 (eyeAM Studio Inc.), a corporation established in the Republic of Korea with its registered office in Paju-si, Gyeonggi-do.
Privacy function: eyeAM Studio Privacy Operations
To contact Privacy Operations, visit https://eyeam.studio/contact and write Privacy Request in the message or inquiry field. This route reaches the company without publishing the recipient mailbox address.
2. Information we collect
Information you provide
The contact form collects your name, email address, and message or inquiry. Company or organization is optional.
Please do not submit government identification numbers, financial account information, medical information, passwords, confidential third-party material, or other sensitive personal information through the form.
Information collected automatically
The hosting and security infrastructure may process IP address, browser and device information, request time, requested URL, referring page, request identifiers, security events, and delivery logs as needed to deliver and protect the site.
At launch, the site does not use advertising cookies, cross-site tracking, behavioral advertising, Vercel Web Analytics, Vercel Speed Insights, Google Analytics, pixels, heatmaps, or social-media tracking widgets.
3. Purposes and legal bases
We process personal information to:
- receive, evaluate, and respond to inquiries;
- take steps at your request regarding a potential project, partnership, or business relationship;
- deliver contact-form messages and prevent spam, fraud, abuse, and security incidents;
- operate, troubleshoot, and improve the reliability and accessibility of the site;
- establish, exercise, or defend legal claims; and
- comply with legal and regulatory obligations.
Depending on the applicable law, processing is based on taking steps at your request, performance of or preparation for a contract, our legitimate interests in communicating and protecting the site, compliance with law, or consent where required.
4. Service providers and entrusted processing
We use the following providers for the first production release:
| Provider | Role | Information involved | Operational setting |
|---|---|---|---|
| Vercel Inc. | Vercel Pro hosting, content delivery, HTTPS, security, and server-side contact-form execution | Technical request data and contact-form fields while the request is processed | Runtime logs retained for 1 day on Pro; form bodies must never be written to application logs |
Plus Five Five, Inc. (Resend) | Transactional delivery of the contact-form message | Name, email address, optional company or organization, and message or inquiry | Open and click tracking disabled; email and log data retained for 30 days on standard paid plans |
Google LLC (Google Workspace) | Receipt and storage of the message in eyeAM Studio's company mailbox | Contact-form message and normal email metadata | Mailbox copy retained under eyeAM Studio's 24-month inquiry rule unless a longer legal or active-business need applies |
These providers may use their authorized subprocessors under their service agreements and data-processing terms. We do not authorize them to use contact-form content for their own advertising.
5. Cross-border processing
Because eyeAM Studio is established in Korea and the selected providers operate internationally, use of the site and contact form involves cross-border processing.
| Recipient and contact | Items transferred | Country/location | Timing and method | Purpose | Retention/use period |
|---|---|---|---|---|---|
Vercel Inc. — privacy@vercel.com | IP address, browser/request data, security events, and form fields during server execution | United States as primary processing location and locations used by authorized subprocessors | At each visit or form submission, through encrypted HTTPS/TLS | Hosting, delivery, security, and form execution | Runtime logs: 1 day on Vercel Pro. Other customer data: for the service term and deletion period under Vercel's DPA |
Plus Five Five, Inc. (Resend) — privacy@resend.com | Name, email, optional company or organization, message or inquiry, and delivery metadata | United States; delivery routed through the selected sending region | When the form is submitted, through an encrypted API and email transport | Deliver the inquiry to eyeAM Studio | Email and log data: 30 days while the account is active; backups: 7 days; remaining customer data deleted within 90 days after account termination |
| Google LLC / Google Workspace | Contact-form message and email metadata | Google processing locations, including the United States, subject to the Workspace agreement and configured data-region features | When Resend delivers the message, through encrypted email transport | Receive, secure, and retain the inquiry in the company mailbox | Up to 24 months after the last substantive interaction, unless an active relationship or law requires longer retention |
You may refuse the contact-form transfer by not submitting the form. The consequence is that eyeAM Studio cannot receive or answer that website inquiry. You may also close the site to stop future site requests. Where applicable law gives you additional transfer rights, write Privacy Request in the message or inquiry field before providing nonessential information.
Contractual protections include the providers' applicable data-processing terms, recognized cross-border transfer mechanisms, confidentiality commitments, security measures, and subprocessor controls.
6. Other disclosures
We may disclose information when required by law; to protect the rights, safety, and security of eyeAM Studio, our users, or others; in connection with a corporate transaction; to professional advisers bound by appropriate duties; or with your direction or consent.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
7. Retention and destruction
- Ordinary contact inquiries: up to 24 months after the last substantive interaction.
- Vercel Pro runtime logs: 1 day.
- Resend email and log data: 30 days; Resend backups: 7 days.
- Google Workspace mailbox copy: up to 24 months after the last substantive interaction.
- Longer retention: only for an active business relationship, legal obligation, dispute, security investigation, or preservation request.
When the approved period ends, electronic records are deleted using the applicable system's deletion controls and are made unrecoverable through the provider's normal backup-expiration process. Any paper record created from a website inquiry is cross-cut shredded or securely destroyed. Information subject to a lawful preservation requirement is isolated from ordinary use until that requirement ends.
8. Your rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, suspension of processing or transmission of, or portability of your personal information; to object to certain processing; to withdraw consent; and to complain to a data-protection authority.
Use the Contact page and write Privacy Request in the message or inquiry field. Identify the right you wish to exercise and the information involved. We may verify your identity and authority before completing a request. Authorized agents and legal representatives may be asked for proof of authority. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.
Individuals in the Republic of Korea may also seek guidance or dispute support from the Personal Information Protection Commission or the privacy services available through privacy.go.kr.
9. Security
We use reasonable administrative, technical, and organizational safeguards. The production form must use server-side validation, TLS, rate limiting, a honeypot, environment-protected credentials, and request-body log redaction. Access to the recipient mailbox and provider dashboards must use multi-factor authentication.
No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
10. Children
The site is intended for business and general audiences and is not directed to children under 14. We do not knowingly collect personal information from children through the site. If you believe a child submitted information, contact Privacy Operations.
11. Third-party sites
The site may link to websites or services we do not control. Their privacy practices are governed by their own notices.
12. Changes
We may update this policy to reflect changes in the site, providers, practices, or law. We will post the revised version and change the effective date. If a change materially affects information already collected, we will provide any additional notice or choice required by law.
13. Contact
Submit privacy questions or rights requests at https://eyeam.studio/contact and write Privacy Request in the message or inquiry field.
This policy must be reviewed whenever a provider, form field, retention period, analytics service, embedded media tool, cookie, or public AI feature is added or changed.