KromonBridge helps cargo companies and online shops answer their customers on Facebook Messenger, track shipments and manage orders. This policy explains what personal information we handle, why, for how long, and how you can have it changed or deleted.
1. Who we are
KromonBridge is operated by [to be filled: registered business name] (representative: [to be filled: representative], business registration no. [to be filled: business registration number]), [to be filled: business address], Republic of Korea. Contact: hello@kromonbridge.com, [to be filled: contact phone].
Our two roles. The cargo companies and online shops that use KromonBridge (“businesses”) decide how their customers' information is used; we process it on their behalf as their service provider. For the staff accounts of those businesses, and for our own subscription customers, we decide how information is used.
2. What we collect
| Whose | What | Where it comes from |
|---|---|---|
| People who message a business's Facebook Page | Page-scoped Messenger ID, Facebook display name, the messages you send and the menu buttons you tap, the replies sent to you | Meta, when you message the Page |
| Senders and receivers of shipments, online shop customers | Name, phone number, pickup or delivery address, tracking and order numbers, package weight, contents notes, prices and payment status | You (in Messenger) or the business's staff |
| Staff of businesses | Name, email, phone number, role, sign-in records, the changes you make (activity log) | Your company's administrator and your use of the dashboard |
| Visitors of the tracking page | The tracking number you type; your IP address briefly, to stop abuse | Your browser |
We do not collect resident registration numbers, card numbers or other sensitive information.
3. Why we use it
- To answer Messenger messages automatically and let the business's staff reply to you.
- To register, price, track and deliver shipments, and to take and fulfil online shop orders.
- To show shipment progress on the public tracking page (only the status and dates, never names or phone numbers).
- To run staff accounts, keep the service secure, and find and fix errors.
- To bill our subscription customers.
4. Facebook and Messenger data
Information we receive from Meta's platform is used only to provide the service above for the business whose Page you messaged. We do not sell it, use it for advertising, or share it with data brokers, and businesses on KromonBridge cannot see each other's customers.
5. How long we keep it
| Information | Kept for |
|---|---|
| Messenger conversations, conversation memory, menu taps | 1 year after the last message in the conversation, then deleted |
| Shipment and order records (names, phones, addresses, amounts) | 5 years, as Korean e-commerce and tax law require for transaction records |
| Staff accounts | While the account is active; deleted within 90 days after it is removed |
| Activity and error logs | 1 year |
| Everything of a business that stops using KromonBridge (apart from records the law requires us to keep) | Deleted within 90 days after the subscription ends |
6. Who else handles it
We use the following service providers (entrustment, 처리위탁). Each processes information only on our instructions.
| Provider | What they do | Location |
|---|---|---|
| Supabase Inc. | Database, staff sign-in, file storage | [to be filled: database region] |
| Render Services, Inc. | Runs our servers | Singapore |
| Meta Platforms, Inc. | Delivers Messenger messages between you and the business | Meta's data centres |
Transfer abroad. Because these providers store or process information outside Korea, the information in section 2 is transferred to them over encrypted connections whenever the service is used, for the purposes in section 3, and kept for the periods in section 5. If you do not want this, you can stop using the business's Messenger channel and ask for deletion (section 7); the business can then serve you by other means.
We do not give personal information to anyone else unless the law requires it.
7. Your rights
You can ask to see, correct, delete or stop the processing of your personal information at any time:
- contact the business you dealt with (for example, message its Facebook Page), or
- email our privacy officer at hello@kromonbridge.com.
We answer within 10 days. How deletion works is explained on the Data Deletion page. Records the law requires us to keep (section 5) are kept separately and deleted when that period ends.
8. How we delete
When a retention period ends or a deletion request is approved, the information is deleted from our database so that it cannot be restored. Copies in our providers' automatic backups are overwritten as those backups roll over.
9. How we protect it
- All connections use encryption (HTTPS).
- Each business sees only its own data; access depends on the staff member's role.
- Passwords are stored only as secure hashes by our sign-in provider.
- Changes and sign-ins are logged, and access to the systems is limited to the people who need it.
10. Cookies
We use cookies only to keep staff signed in. Your browser also remembers the language and light/dark theme you choose. We use no advertising or analytics trackers. Fonts are loaded from Google Fonts, which receives your IP address as any website does; everything else comes from our own server.
11. Children
KromonBridge is a service for businesses and is not directed at children under 14.
12. Privacy officer
[to be filled: privacy officer] · hello@kromonbridge.com · [to be filled: contact phone]
13. If you have a complaint
Please contact us first. You can also contact these Korean public bodies:
- Personal Information Infringement Report Center: privacy.kisa.or.kr, phone 118
- Personal Information Dispute Mediation Committee: kopico.go.kr, phone 1833-6972
- Supreme Prosecutors' Office cyber investigation: phone 1301
- Korean National Police Agency cyber bureau: ecrm.police.go.kr, phone 182
14. Changes
If this policy changes, we update it on this page and change the date at the top. Important changes are announced at least 7 days in advance.