Nexyfab · Privacy Policy
Privacy Policy
Nexyfab protects user's personal information and
manages it safely in compliance with relevant laws.
Effective Date: May 7, 2026
1. Personal Information Collected
The Company may collect the following information to provide services.
① Customer (Project Client)
- Name
- Contact (Phone, Email)
- Company Name
- Project requirements, drawings, files
- Consultation and communication records
② Partner (Developer/Manufacturer)
- Name
- Contact
- Company name and business information
- Technology, equipment info, portfolio
- Project history and related materials
③ SaaS Subscribers
- Email address
- Name (optional)
- Payment information (card numbers processed directly by Stripe/Toss, not stored by us)
- Subscription plan and billing history
- Service usage records
④ Automatically Collected
- Access logs
- IP address
- Cookies
- Service usage records
- Browser and device info
2. Purpose of Collection and Use
- Service provision and project intake
- Partner matching and recommendation
- Account registration, identity verification
- Payment processing and invoice issuance
- Customer inquiry and support
- NDA procedures and collaboration support
- Service improvement and internal management
- Legal compliance
3. Retention and Use Period
Personal information is destroyed without delay once the purpose is achieved. The following are retained after account deletion per applicable law:
- Contract and billing records: 5 years (E-Commerce Act)
- Consumer complaints and disputes: 3 years (E-Commerce Act)
- Access log records: 1 year (Communications Secrecy Act)
- Payment and supply records: 5 years (E-Commerce Act)
4. Provision to Third Parties
The Company does not provide personal information to third parties in principle. Exceptions:
- Customer → Matched Partner (for project, with user consent)
- Partner → Relevant Customer (for collaboration, with user consent)
- Payment processing: Stripe Inc. / Toss Payments / Airwallex (payment purpose only; card data not retained by us)
- When the user separately consents
- When required by law (e.g. law enforcement)
The Company does not provide personal information beyond the scope of the intended use.
5. Entrustment of Personal Information Processing
The Company entrusts personal information processing to the following vendors. We supervise to ensure data security per applicable law.
| Vendor | Entrusted Task | Location |
|---|---|---|
| Stripe, Inc. | Payment processing & billing (global) | United States |
| Toss Payments | Korea payment processing | South Korea |
| Airwallex (HK) Ltd. | Multi-currency payment processing & subscription management | Hong Kong / Australia |
| Cloudflare, Inc. | File storage (R2), CDN, DNS | United States |
| Railway Corp. | Service infrastructure hosting | United States |
6. User Rights
Users may exercise the following rights at any time:
- Request to access personal information
- Request to correct or delete personal information
- Request to suspend processing
- Withdraw consent (mandatory info may limit service access)
To exercise rights, email privacy@nexyfab.com. The Company will act within 10 business days.
7. Destruction Procedure and Method
When retention periods expire or purposes are met, electronic files are deleted irrecoverably, and paper documents are shredded or incinerated.
8. Data Protection Officer
9. Policy Changes
This policy may change according to law or company policy, and notice will be provided on the service screen. For significant changes, prior email notice will be sent.