Privacy Policy
Version 4.0, effective October 6, 2026
This Policy describes how BubbleShare Inc. (the "Company") processes personal information on bubbleshare.io (the "Website"). Personal information processed in the Company's paid service VIVI (app.bubbleshare.io) is governed by the VIVI Privacy Policy.
1. Personal information we collect
1.1 Information you enter
- Sales enquiries, quote requests, resource downloads and waitlists: name, email, company, team, job title, phone number (optional), enquiry type, region, message, website addresses you enter, form-specific fields such as budget, and whether you agree to receive marketing information
- Webinar registration: name, email, company, company website, the page to be reviewed, team, job title, phone number (optional), and the optional consents shown on the form
- Newsletter subscription: email, where you subscribed, and when you consented
- Website accounts: email, password (stored encrypted), name, company (optional), whether you agree to receive marketing information, and keywords saved in Keyword Planner
- Feedback and feature suggestions: email and your suggestion
1.2 Information collected automatically
- Access records: IP address, browser and device information, browser language, access time, pages visited, and referrer
- Behavioral information: on-page actions such as clicks, scrolling and form submissions, and session replay by analytics tools (a reconstruction of how the screen was used)
- Identifiers: cookies, anonymous identifiers and authentication tokens kept in browser storage, and identifiers assigned by analytics tools
2. How we use it
- Reviewing, replying to and following up on enquiries and submissions, preparing quotes and sending resources
- Running webinars and sending attendance information
- Sending newsletters and marketing information (only with your consent)
- Managing Website accounts and verifying account holders
- Analyzing Website usage, improving the service and measuring advertising performance
- Preventing abuse and keeping the Website secure
- Complying with applicable law
3. Retention
- Enquiry and submission information: 3 years from the date of the enquiry or submission. We destroy it without delay if you ask us to delete it.
- Newsletter subscription information: until you unsubscribe
- Website account information: until you ask us to delete the account
- Information collected automatically: until the usage-analysis purpose is achieved. Information stored in analytics tools is deleted according to the retention period set in each tool.
- Information that the law requires us to keep is kept for the period the law sets.
4. Destruction
Information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Electronic files are deleted so that they cannot be recovered, and printed materials are shredded or incinerated.
5. Processors
The Company entrusts the processing of personal information as follows.
| Processor | Task |
|---|---|
| Vercel, Inc. | Website hosting |
| Supabase, Inc. | Website database and file storage (Seoul region) |
| Timescale, Inc. (Tiger Data Cloud) | Storage of Website visit-journey records (Japan region) |
| Airtable, Inc. | Storing and managing enquiries and submissions |
| Salesforce, Inc. | Managing enquiries, newsletter subscriptions and sales |
| Slack Technologies, LLC | Internal notifications of new enquiries |
| Northflank Ltd. | Operating the newsletter system |
| ActiveCampaign, LLC (Postmark) | Email delivery |
| Inngest, Inc. | Background jobs, including Keyword Planner searches |
| Google LLC | Usage analytics through Google Analytics and Google Tag Manager, and Keyword Planner search processing (Google Ads API, Cloud Translation) |
| Amplitude, Inc. | Behavioral analytics and session replay |
| Mixpanel, Inc. | Behavioral analytics |
| Meta Platforms, Inc. | Advertising measurement (Meta Pixel) |
| OpenAI, Scrapingdog, Firecrawl | Keyword Planner search processing (search terms only) |
6. Overseas transfer
Some of the processors above process personal information outside the Republic of Korea. Information is transferred over the network when you use the Website or submit a form.
| Recipient | Contact | Country | Items | Purpose | Retention |
|---|---|---|---|---|---|
| Vercel, Inc. | privacy@vercel.com | USA | Access records, request data | Hosting | Until the processing purpose is met |
| Timescale, Inc. | privacy@tigerdata.com | Japan | Access records, behavioral information, identifiers | Visit-journey analysis | As set out in Section 3 |
| Airtable, Inc. | privacy@airtable.com | USA | Enquiries and submissions, newsletter subscriptions | Storing and managing submissions | As set out in Section 3 |
| Salesforce, Inc. | privacy@salesforce.com | USA | Name, email, phone number, company, job title, team, message, newsletter subscription email | Managing enquiries and sales | As set out in Section 3 |
| Slack Technologies, LLC | privacy@slack.com | USA | Name, email, phone number, company, job title, team, message | Internal notifications | As set out in Section 3 |
| Northflank Ltd. | legal@northflank.com | United Kingdom | Newsletter delivery | Until you unsubscribe | |
| ActiveCampaign, LLC (Postmark) | privacy@activecampaign.com | USA | Email, delivery records | Email delivery | For the provider's retention period after delivery |
| Inngest, Inc. | hello@inngest.com | USA | Identifiers, request data | Background jobs | Transient, for the job's duration |
| Google LLC | https://support.google.com/policies?p=privpol_privts | USA | Access records, behavioral information, identifiers | Usage analytics | As set out in Section 3 |
| Amplitude, Inc. | privacy@amplitude.com | USA | Access records, behavioral information, session replay, identifiers | Behavioral analytics | As set out in Section 3 |
| Mixpanel, Inc. | compliance@mixpanel.com | USA | Access records, behavioral information, identifiers | Behavioral analytics | As set out in Section 3 |
| Meta Platforms, Inc. | https://help.meta.com/support/privacy/ | USA | Access records, behavioral information, identifiers | Advertising measurement | As set out in Section 3 |
You may refuse the overseas transfer. To refuse the transfer of enquiry and submission information, write to admin@bubbleshare.io; in that case you cannot use the related features, such as submitting enquiries or subscribing to the newsletter. You can refuse transfers through analytics tools in the ways described in Section 8.
7. Provision to third parties
The Company does not provide your personal information to third parties, except with your consent or where the law requires it.
8. Cookies and behavioral information
- The Company uses cookies and browser storage to keep your language setting, keep you signed in, analyze usage and measure advertising performance.
- For usage analytics and advertising measurement, the Company collects behavioral information such as pages visited, clicks and whether forms were submitted, through Google Analytics, Amplitude, Mixpanel and Meta Pixel. Retention follows Section 3.
- You can refuse the collection of behavioral information by blocking or deleting cookies in your browser settings. Some features, such as keeping your language setting, may then be limited.
- You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and adjust Meta's advertising-related collection in your Meta account's ad settings.
- The Website loads font files from Google Fonts and jsDelivr, which sends your IP address and browser information to those providers.
9. Your rights
You may ask to access, correct, delete or suspend the processing of your personal information, and withdraw consent to marketing, at admin@bubbleshare.io. You may also make these requests through a legal representative or an authorized person. The Company acts on requests within 10 days of receipt and notifies you of the result.
10. Security measures
- Encrypted storage of important information such as passwords, and encryption in transit (HTTPS)
- Keeping the number of people with access to personal information to a minimum and managing access rights
- Keeping access logs and monitoring for anomalies
11. Privacy Officer
- Privacy Officer: Sooah Lee (CEO)
- Contact: admin@bubbleshare.io, +82-10-7611-8323
You may report or seek advice on privacy infringements from the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
12. Changes to this Policy
The Company posts changes to this Policy on the Website from 7 days before the effective date, or from 30 days before for significant changes such as adding collected items or purposes.
Supplementary provision
This Policy takes effect on October 6, 2026. Until then, the previous Policy (Version 3.0, effective July 30, 2025) applies.