Privacy Policy

Version 4.0, effective October 6, 2026

This Policy describes how BubbleShare Inc. (the "Company") processes personal information on bubbleshare.io (the "Website"). Personal information processed in the Company's paid service VIVI (app.bubbleshare.io) is governed by the VIVI Privacy Policy.

1. Personal information we collect

1.1 Information you enter

  • Sales enquiries, quote requests, resource downloads and waitlists: name, email, company, team, job title, phone number (optional), enquiry type, region, message, website addresses you enter, form-specific fields such as budget, and whether you agree to receive marketing information
  • Webinar registration: name, email, company, company website, the page to be reviewed, team, job title, phone number (optional), and the optional consents shown on the form
  • Newsletter subscription: email, where you subscribed, and when you consented
  • Website accounts: email, password (stored encrypted), name, company (optional), whether you agree to receive marketing information, and keywords saved in Keyword Planner
  • Feedback and feature suggestions: email and your suggestion

1.2 Information collected automatically

  • Access records: IP address, browser and device information, browser language, access time, pages visited, and referrer
  • Behavioral information: on-page actions such as clicks, scrolling and form submissions, and session replay by analytics tools (a reconstruction of how the screen was used)
  • Identifiers: cookies, anonymous identifiers and authentication tokens kept in browser storage, and identifiers assigned by analytics tools

2. How we use it

  • Reviewing, replying to and following up on enquiries and submissions, preparing quotes and sending resources
  • Running webinars and sending attendance information
  • Sending newsletters and marketing information (only with your consent)
  • Managing Website accounts and verifying account holders
  • Analyzing Website usage, improving the service and measuring advertising performance
  • Preventing abuse and keeping the Website secure
  • Complying with applicable law

3. Retention

  • Enquiry and submission information: 3 years from the date of the enquiry or submission. We destroy it without delay if you ask us to delete it.
  • Newsletter subscription information: until you unsubscribe
  • Website account information: until you ask us to delete the account
  • Information collected automatically: until the usage-analysis purpose is achieved. Information stored in analytics tools is deleted according to the retention period set in each tool.
  • Information that the law requires us to keep is kept for the period the law sets.

4. Destruction

Information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Electronic files are deleted so that they cannot be recovered, and printed materials are shredded or incinerated.

5. Processors

The Company entrusts the processing of personal information as follows.

ProcessorTask
Vercel, Inc.Website hosting
Supabase, Inc.Website database and file storage (Seoul region)
Timescale, Inc. (Tiger Data Cloud)Storage of Website visit-journey records (Japan region)
Airtable, Inc.Storing and managing enquiries and submissions
Salesforce, Inc.Managing enquiries, newsletter subscriptions and sales
Slack Technologies, LLCInternal notifications of new enquiries
Northflank Ltd.Operating the newsletter system
ActiveCampaign, LLC (Postmark)Email delivery
Inngest, Inc.Background jobs, including Keyword Planner searches
Google LLCUsage analytics through Google Analytics and Google Tag Manager, and Keyword Planner search processing (Google Ads API, Cloud Translation)
Amplitude, Inc.Behavioral analytics and session replay
Mixpanel, Inc.Behavioral analytics
Meta Platforms, Inc.Advertising measurement (Meta Pixel)
OpenAI, Scrapingdog, FirecrawlKeyword Planner search processing (search terms only)

6. Overseas transfer

Some of the processors above process personal information outside the Republic of Korea. Information is transferred over the network when you use the Website or submit a form.

RecipientContactCountryItemsPurposeRetention
Vercel, Inc.privacy@vercel.comUSAAccess records, request dataHostingUntil the processing purpose is met
Timescale, Inc.privacy@tigerdata.comJapanAccess records, behavioral information, identifiersVisit-journey analysisAs set out in Section 3
Airtable, Inc.privacy@airtable.comUSAEnquiries and submissions, newsletter subscriptionsStoring and managing submissionsAs set out in Section 3
Salesforce, Inc.privacy@salesforce.comUSAName, email, phone number, company, job title, team, message, newsletter subscription emailManaging enquiries and salesAs set out in Section 3
Slack Technologies, LLCprivacy@slack.comUSAName, email, phone number, company, job title, team, messageInternal notificationsAs set out in Section 3
Northflank Ltd.legal@northflank.comUnited KingdomEmailNewsletter deliveryUntil you unsubscribe
ActiveCampaign, LLC (Postmark)privacy@activecampaign.comUSAEmail, delivery recordsEmail deliveryFor the provider's retention period after delivery
Inngest, Inc.hello@inngest.comUSAIdentifiers, request dataBackground jobsTransient, for the job's duration
Google LLChttps://support.google.com/policies?p=privpol_privtsUSAAccess records, behavioral information, identifiersUsage analyticsAs set out in Section 3
Amplitude, Inc.privacy@amplitude.comUSAAccess records, behavioral information, session replay, identifiersBehavioral analyticsAs set out in Section 3
Mixpanel, Inc.compliance@mixpanel.comUSAAccess records, behavioral information, identifiersBehavioral analyticsAs set out in Section 3
Meta Platforms, Inc.https://help.meta.com/support/privacy/USAAccess records, behavioral information, identifiersAdvertising measurementAs set out in Section 3

You may refuse the overseas transfer. To refuse the transfer of enquiry and submission information, write to admin@bubbleshare.io; in that case you cannot use the related features, such as submitting enquiries or subscribing to the newsletter. You can refuse transfers through analytics tools in the ways described in Section 8.

7. Provision to third parties

The Company does not provide your personal information to third parties, except with your consent or where the law requires it.

8. Cookies and behavioral information

  • The Company uses cookies and browser storage to keep your language setting, keep you signed in, analyze usage and measure advertising performance.
  • For usage analytics and advertising measurement, the Company collects behavioral information such as pages visited, clicks and whether forms were submitted, through Google Analytics, Amplitude, Mixpanel and Meta Pixel. Retention follows Section 3.
  • You can refuse the collection of behavioral information by blocking or deleting cookies in your browser settings. Some features, such as keeping your language setting, may then be limited.
  • You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and adjust Meta's advertising-related collection in your Meta account's ad settings.
  • The Website loads font files from Google Fonts and jsDelivr, which sends your IP address and browser information to those providers.

9. Your rights

You may ask to access, correct, delete or suspend the processing of your personal information, and withdraw consent to marketing, at admin@bubbleshare.io. You may also make these requests through a legal representative or an authorized person. The Company acts on requests within 10 days of receipt and notifies you of the result.

10. Security measures

  • Encrypted storage of important information such as passwords, and encryption in transit (HTTPS)
  • Keeping the number of people with access to personal information to a minimum and managing access rights
  • Keeping access logs and monitoring for anomalies

11. Privacy Officer

You may report or seek advice on privacy infringements from the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).

12. Changes to this Policy

The Company posts changes to this Policy on the Website from 7 days before the effective date, or from 30 days before for significant changes such as adding collected items or purposes.

Supplementary provision

This Policy takes effect on October 6, 2026. Until then, the previous Policy (Version 3.0, effective July 30, 2025) applies.