Privacy Policy

1. Personal information we process

Required personal information

Sign-up: contact person’s name and business email (for login and receiving verification codes). Consultation or meeting request (dashboard, with separate consent at the time of the request): contact person’s job title and contact details (phone number). Partner sign-up: contact person’s name and job title, and business email (for login and receiving verification codes). At partner sign-up we also receive the company name, website and what the company can do (capabilities) as information about the company.

Information stored together

• The time you consented to the collection and use of personal information and the version of the consent text (separately for sign-up and for consultation requests), and the time a consultation request was sent
• Verification code records: the email address requested, the times of request, delivery and confirmation, and the number of incorrect attempts. The verification code itself is not stored; only an irreversible value (hash) is kept.
• Login records: the time of the last login, and the hash and expiry time of the session value used to keep you logged in
• Access code records: the access code that opened the dashboard and when it was used (linked to the account and brand), and the times an incorrect access code was entered (per account)
• Brand information edit history: the section edited, the time, and the answers before and after the edit (for the contact person’s name, job title and contact details, only whether they changed)
• Meeting and service request records: the services chosen, entry project answers (store format, purpose, preferred districts, timing, area, budget, what is ready, goal), preferred meeting method and time, the request text you write, progress status records, and outcome records (visitor, sales and follower numbers and a note)
• Brand profile and tool usage records: official website and social media addresses, main products and prices, experience in Korea and Seongsu, the conditions entered into the cost range and pop-up cost tools with a summary of the results, and website check results (prices, sales platform, language signals and social media addresses read from the public pages of the official website you provide)
• Store-entry consultation records (the dashboard’s store-entry consultation): the topics chosen, the questions answered and the options chosen (brand information such as category, format and floor area), questions skipped, the time, and short questions you type (anything that looks like an email address or phone number is masked before saving)
• Partner sign-up records: the time you consented to partner sign-up and the version of the consent text, and the approval status with a record of its changes (the operator who changed it and the time; the contact person’s name, job title and email are not kept in the record)

Brand answers received together (sign-up and consultation requests)

The following are answers about the brand. The brand website or social media address is optional; if you add it, we read that public site to fill in the brand card. If the free-text fields contain personal information, it is handled under the same standards.

Basic information (sign-up)

Brand name · Business category · Is it a Korean brand or an overseas brand? · Home country of the overseas brand · 브랜드 사이트 또는 SNS 주소 · Brand size · Preferred store format · Contact person’s name

Brand status (consultation request)

Number of offline stores you run now · Online sales · Price range of your main products

Store plans (consultation request)

Pop-up duration · Purpose of opening · Preferred districts · Target timing · Preferred floor area · Space conditions you must have · Monthly rent budget (rent only)

Main customers (consultation request)

Age groups of your main customers · Gender of your main customers

Contact details and message (consultation request)

Contact person’s job title and phone number · Message

Contact form

Required: email, message. Optional: name, company or brand name, whether Korea or overseas. Information stored together: the address of the page the inquiry was sent from, the time it was received, and the time you consented to the collection and use of personal information with the version of the consent text.

Information processed automatically

• To prevent automated submissions, we check browser signals when you sign up, request a verification code or send an inquiry (Vercel BotID).
• We set one cookie to keep you logged in (30 days for brands; for administrators, up to 30 days, with automatic logout after 24 hours of inactivity). It is deleted when you log out.
• We do not store IP addresses or browser information of visitors.
• Anonymous usage records for service improvement: to learn which steps of the sign-up screen are viewed and completed, we record the step name, the action (view, next, back, submit, leave), the screen language, the question set version and the time, together with a random number. The random number is used only within a single browser tab (the browser deletes it when the tab is closed) and is not linked to any account, email, sign-up content, IP address or browser information, so it cannot identify whose record it is. Answers are not included.
• Temporary saving during sign-up: the multiple-choice answers you select on the sign-up screen are saved temporarily only in your browser and are not sent to the Company. The brand name, contact person details, written answers and email are not saved. They are deleted when you complete the sign-up or press “Start over”, and anything older than 7 days is deleted the next time you open the sign-up screen.

2. Purposes of collection and use

We use it for consultation on opening a store in Seongsu-dong, Seoul, and to provide the market analysis. Answers given at sign-up and in consultation requests, such as business type, preferred districts and main customers, are used to show the market analysis and recommended districts in the dashboard.

The contact person’s job title and contact details (phone number) received with a consultation or meeting request are used to review the request and to contact you about the consultation or meeting.

The brand information you provide (sign-up and consultation answers, brand profile, entry projects) and tool usage records are used for personalized data matching and consulting: selecting and showing the districts, cost ranges and services that fit your brand, and preparing meetings.

Store-entry demand statistics: counts grouped so that no brand or person can be identified, such as the number of brands by district, area, budget and timing (counts under 5 are hidden), are used to operate the service and may be shared externally (for example, with partners, the media or in reports). Individual brand information and contact person information are not provided to third parties.

The business email is used for identity verification (verification codes), login, and providing the brand dashboard (progress updates, viewing and editing brand information).

Information received through the contact form is used to review and answer your inquiry.

The contact person’s name, job title and business email received through partner sign-up are used to review and approve the sign-up and tell you the result, for login and providing the partner screen, and to contact you to run the Seongsu execution partner network. The company name, website and capabilities are used to review the approval. Partner contact person information is not shown or provided to brands.

Store-entry consultation records are used to show answers fitted to your brand (districts, costs, timing and cases) and to learn what brands want to know so we can improve the service. Questions you type may be sent to Google LLC’s Gemini API (United States) to sort them into the nearest topic and to phrase the answer. Only the question text (with anything that looks like an email address or phone number masked), brand conditions such as category, and public commercial-area statistics are sent; names, email addresses, contact details, job titles and brand names are not sent. Please do not include personal information in your questions.

The maps on the home, references and market analysis screens are drawn by your browser, which downloads map images directly from OpenFreeMap (tiles.openfreemap.org, via Cloudflare). Your browser’s IP address and the requested map address may be passed to that service; the Company does not receive or store them. OpenFreeMap states that it does not use cookies and does not keep IP addresses in its access logs (https://openfreemap.org/privacy/).

The “Seongsu as seen by visitors (YouTube)” card on the market analysis screen uses YouTube API Services to show the titles, thumbnails and channel names of public videos about Seongsu. The Company’s server receives only the video information from YouTube, keeps it temporarily for one day before fetching it again (never longer than 30 days), and does not send users’ personal information to YouTube. Thumbnail images are downloaded by your browser directly from YouTube (Google) servers, so your browser’s IP address may be passed to them, and selecting a video takes you to the YouTube website. Your use of YouTube is subject to the YouTube Terms of Service, and Google’s handling of personal information is subject to the Google Privacy Policy.

YouTube Terms of Service · Google Privacy Policy

3. Retention and destruction

The contact person’s name, job title and contact details are kept for 5 years from the date we last received or changed them: the latest of the sign-up date, the date of a consultation or meeting request, and the date the name was edited in the dashboard. If we receive them again, the period starts again from that date. If you consented when the retention period was stated as 3 years, they are deleted after 3 years unless you consent to the new period. When the period ends, they are deleted from the database without delay.

The business email and the edit history are kept until the account is deleted. If you ask us to delete them, we delete them without delay. The edit history does not keep the contact person’s name, job title or contact details; it only records whether they changed.

Meeting and service request records, the brand profile and tool usage records are kept until the account is deleted. If you ask us to delete them, we delete them without delay.

Verification code records are deleted 30 days after the request. Login session records are deleted after they expire (30 days for brands; for administrators, up to 30 days, or 24 hours after the last use).

Access code records are kept until the account is deleted. Records of incorrect access codes are deleted 1 day after they are made.

Anonymous usage records for service improvement are deleted 1 year after they are made.

Store-entry consultation records are kept until the account is deleted. However, questions you type are deleted 1 year after they are made.

Information received through the contact form is kept for 1 year from the date received and deleted without delay when the period ends.

The partner contact person’s name and job title are kept for 5 years from the date we last received or changed them and are deleted from the database without delay when the period ends. The partner business email and partner sign-up records are kept until the account is deleted; if you ask us to delete them, we delete them without delay.

4. Provision to third parties

The Company does not provide personal information to third parties without the separate consent of the data subject.

5. Entrustment of processing and storage locations

6. Rights of the data subject

You may at any time request access to, correction of, deletion of or suspension of processing of your personal information, and withdraw your consent. If you send a request through the contact form (Contact us) or to help@lopi.im, we will handle it without delay.

You have the right to refuse consent. However, if you do not consent, you cannot sign up, request a consultation or send an inquiry.

7. Privacy officer and contact

Privacy officer Jungmo Kang · help@martian.link

Contact help@lopi.im · Send through the contact form

8. Operator

LOPI Corporation Inc. · Representative 강정모 · Business registration no. 726-88-03086

79-4, Duteopbawi-ro, Yongsan-gu, Seoul, Republic of Korea