AOX Privacy Policy
Effective Date: May 26, 2026
This Privacy Policy explains how ADRO collects, uses, discloses, transfers, and protects personal information in connection with AOX.
1. Scope and Controller
This Privacy Policy applies to AOX and related websites, applications, accounts, billing flows, support channels, and communications operated by ADRO Inc. (registered business name in Korea: 주식회사 에이드로, business registration number: 827-87-01633, registered address: 100-29, Songju-ro 236beon-gil, Yangji-myeon, Cheoin-gu, Yongin-si, Gyeonggi-do, Republic of Korea). ADRO is the controller or business responsible for personal information unless a separate written agreement states otherwise.
This Privacy Policy does not apply to third-party websites, services, or integrations that have their own privacy notices.
2. Personal Information We Collect
| Category | Examples |
|---|---|
| Account information | Email address, password, display name, first name, last name, social login identifiers, access tokens, refresh tokens, authentication records |
| Team and profile information | Team name, team identifier, role, company name, phone number, billing email, invitation and permission information |
| Inquiry and demo request information | Name, company, email, phone number, job title, country, company size, inquiry details |
| Billing and payment information | Payment provider, billing key, payment method, card issuer, card brand, masked card number, amount, currency, payment status, refund records, receipt and tax invoice information |
| Device and log information | IP address, cookies, browser and device data, pages viewed, access time, error logs, security events, analytics identifiers |
| Support communications | Messages, attachments, support requests, feedback, and related correspondence |
3. Sources of Personal Information
- From service providers and partners, including payment processors, social login providers, cloud infrastructure providers, analytics providers, and monitoring tools.
4. How We Use Personal Information
- To create and manage accounts, Teams, authentication, authorization, and user sessions.
- To provide AOX, including project management, file upload, CFD simulation, optimization, result generation, storage, downloads, and support.
- To communicate with you about accounts, billing, support, security, service changes, and legal notices.
- To monitor, secure, debug, test, improve, and develop AOX.
- To comply with applicable law, enforce terms and policies, respond to lawful requests, and protect rights, safety, and security.
- To send marketing or product communications where permitted by law or with consent where required.
5. Legal Bases for EEA and UK Users
| Processing Purpose | Legal Basis |
|---|---|
| Security, fraud prevention, service improvement, analytics, and internal operations | Legitimate interests |
| Tax, accounting, legal, regulatory, and compliance obligations | Legal obligation |
| Marketing communications and optional cookies where required | Consent |
| Establishing, exercising, or defending legal claims | Legitimate interests or legal obligation |
6. How We Disclose Personal Information
We disclose personal information only as necessary for the purposes described in this Privacy Policy or as permitted by law.
| Recipient | Purpose |
|---|---|
| Amazon Web Services, Inc. | Cloud hosting, compute infrastructure, file storage, logs, job execution, security |
| PortOne and payment processors such as PayLetter | Payment processing, billing key issuance, recurring billing, cancellations, refunds |
| PayPal | PayPal payment processing |
| Google LLC | Google social login, Google Analytics, Google Tag Manager, service analytics |
| Datadog, Inc. | Application monitoring, error logging, performance analysis, security and incident response |
| Email delivery providers | Account verification, password reset, billing notices, service notifications |
| Professional advisers and authorities | Legal compliance, audits, dispute resolution, law enforcement or lawful requests |
| Affiliates, successors, or acquirers | Corporate transactions such as merger, acquisition, financing, reorganization, or asset transfer |
7. International Transfers
AOX is operated from the Republic of Korea and may use service providers located in Korea, the United States, and other countries. Your personal information may be transferred to, stored in, or accessed from countries that may not provide the same level of data protection as your jurisdiction.
Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses, data processing agreements, technical and organizational safeguards, or other lawful transfer mechanisms.
8. Retention
We retain personal information for as long as necessary to provide AOX, maintain accounts, process transactions, comply with law, resolve disputes, enforce agreements, secure the Service, and support business operations.
| Record Type | Typical Retention |
|---|---|
| Account information | Until account deletion or contract termination, unless longer retention is required |
| Project files, uploaded geometry, and Outputs | During service use and generally up to 90 days after subscription termination or account deletion, unless a Storage option or separate agreement applies |
| Contract, subscription, cancellation, and withdrawal records | 5 years where required for commerce and accounting records |
| Customer complaint and dispute records | 3 years where required or reasonably necessary |
| Access logs | At least 3 months where required by applicable law |
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption, logging, monitoring, employee controls, and vendor management. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Privacy Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a data protection authority.
To exercise rights, contact us at support@aoxadro.com. We may need to verify your identity and authority before processing a request. Some rights may be limited by law, security, trade secret, or other legitimate reasons.
11. California Privacy Notice
If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to ADRO and to your personal information, California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination for exercising privacy rights.
We do not sell personal information for money. We do not knowingly sell or share personal information of individuals under 16. If our advertising or analytics practices are considered a "sale" or "sharing" under California law, we will provide the required opt-out mechanism.
12. Cookies and Analytics
We use cookies and similar technologies for login, security, preferences, analytics, service improvement, and performance monitoring. You can control cookies through browser settings. If you disable cookies, some AOX features may not work properly.
13. Marketing Communications
Where permitted, we may send product, service, or marketing communications. You may opt out of marketing emails by using the unsubscribe instructions or contacting us. Even if you opt out of marketing, we may still send service, billing, security, and transactional messages.
14. Children
AOX is not intended for children under 16 or the minimum age required by applicable law. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
16. Data Protection Contact
| Role | Details |
|---|---|
| Privacy contact | support@aoxadro.com |
| Personal information protection officer | Seung Hyun Yoon |
| Company | ADRO Inc. |
| Telephone | +82-31-338-1151 |
| sean@adro.co.kr |
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in law, technology, Service features, vendors, or business practices. We will post the updated version and update the effective date. Where required, we will provide additional notice or obtain consent.