1. Introduction
LMN Auto ("Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use etp("Service"). This policy complies with the Korean Personal Information Protection Act (PIPA) and other applicable privacy laws.
2. Data Controller
LMN Inc.
Email: privacy@lmnauto.com
Phone: +82-10-5370-0537
3. Information We Collect
3.1 Information You Provide
- Account Information: Name, phone number, email address (optional)
- Alert Preferences: Your vehicle search criteria for auction alerts
- Communications: Messages you send us through contact forms or support
- Payment Information: When you subscribe, your payment is processed by a third-party payment processor (PortOne). We receive only the last 4 digits of your card number, billing address, and transaction records. We do not store full card numbers.
3.2 Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, search queries, click patterns
- Log Data: IP address, access times, referring URLs
- Cookies: Session identifiers and preferences (see Section 8)
4. Purpose of Data Collection
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Sending auction alerts via SMS/email | Consent |
| Providing auction data and analytics | Contract performance |
| Processing subscription payments | Contract performance |
| Responding to inquiries and support | Legitimate interest |
| Improving our Service and features | Legitimate interest |
| Preventing fraud and abuse | Legitimate interest |
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion + 30 days |
| Alert subscriptions | Until unsubscribed or 1 year of inactivity |
| Usage logs | 90 days |
| Payment and transaction records | 5 years (Electronic Commerce Act, Article 6) |
| Support communications | 2 years |
6. Third-Party Sharing
We may share your information with the following categories of third parties:
| Recipient | Purpose | Data Shared | Retention |
|---|---|---|---|
| PortOne (KCP, NHN) | Payment processing (Korea) | Payment info, phone, email | Duration of service |
| Anthropic | AI-powered data analysis | User queries, auction data context | Duration of service |
| Infobip | SMS/OTP delivery | Phone number | Duration of service |
| Twilio | SMS/OTP delivery | Phone number | Duration of service |
| Resend | Email delivery | Email address | Duration of service |
| Google Cloud | Data hosting & processing | All data | Duration of service |
| Google Analytics | Usage analytics | Anonymized usage data | Duration of service |
| Sentry | Error monitoring | Error logs, device info | Duration of service |
We do not sell your personal information to third parties.
7. Your Rights (PIPA Compliance)
Under PIPA and other applicable laws, you have the following rights:
- Right to Access: Request a copy of your personal information
- Right to Correction: Request correction of inaccurate information
- Right to Deletion: Request deletion of your personal information
- Right to Suspend Processing: Request suspension of data processing
- Right to Withdraw Consent: Withdraw consent for data processing
- Right to Data Portability: Receive your data in a portable format
To exercise these rights, contact us at privacy@lmnauto.com. We will respond within 10 days as required by PIPA.
8. Cookies and Tracking
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security | Session / 7 days |
| Functional | Preferences, settings | 1 year |
| Analytics | Usage statistics (GA) | 2 years |
You can manage cookie preferences through your browser settings.
9. Data Security
- Encryption in transit (TLS/SSL) and at rest
- Secure cloud infrastructure (Google Cloud Platform)
- Regular security assessments and updates
- Access controls and authentication
10. International Data Transfers
Your data may be transferred to and processed in countries outside Korea, including the United States (Google Cloud, Twilio, Sentry, Anthropic). We ensure appropriate safeguards are in place, including contractual clauses with data processors that comply with PIPA requirements for cross-border data transfers.
11. Children's Privacy
Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you a notification via email or through the Service.
13. Contact Us
For privacy-related questions or to exercise your rights, please contact:
Privacy Officer
LMN Inc.
Email: privacy@lmnauto.com
Response time: Within 10 business days
If you are not satisfied with our response, you may file a complaint with the Personal Information Protection Commission (PIPC) of Korea at www.pipc.go.kr.