Relis, operated by 10combo. inc. (hereinafter "the Company"), establishes and discloses this Privacy Policy to protect the personal information of data subjects and to handle related complaints promptly and smoothly in accordance with applicable privacy laws.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed is not used for purposes other than the following, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent.
1. Membership Registration and Management
- Verification of membership intent
- Identification and authentication for membership services
- Maintenance and management of membership
- Prevention of fraudulent use of services
- Various notifications and announcements
- Grievance handling
2. Service Provision
- Provision of Bubble app analysis services
- Generation and delivery of analysis result documents
- Project management features
- Analysis history management
- Customized service provision
3. Marketing and Advertising
- Development of new services and customized service provision
- Provision of event and promotional information and participation opportunities
- Service provision and advertising based on demographic characteristics
- Verification of service effectiveness
- Access frequency analysis and service usage statistics
Article 2 (Processing and Retention Period)
1. The Company processes and retains personal information within the personal information retention and use period under applicable laws or the personal information retention and use period agreed upon when collecting personal information from the data subject.
2. The processing and retention periods for each type of personal information are as follows:
Membership Registration and Management
- Items retained: Email, name, password (encrypted), registration date
- Basis for retention: Records regarding service use contracts or membership registration
- Retention period: Until membership withdrawal (or as required by applicable laws)
Service Usage Records
- Items retained: Analysis history, project information, service usage logs
- Basis for retention: Applicable laws
- Retention period: 3 months
Payment Records
- Items retained: Payment information, transaction history
- Basis for retention: Consumer protection laws
- Retention period: 5 years
Article 3 (Provision to Third Parties)
1. The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases falling under applicable privacy laws.
2. The Company provides personal information to third parties only in the following cases:
- When separate consent is obtained from the data subject
- When there are special provisions in laws or it is unavoidable to comply with legal obligations
- When it is clearly necessary for the urgent life, body, or property interests of the data subject or a third party, and the data subject or their legal representative is unable to express their intention or prior consent cannot be obtained due to unknown address, etc.
Article 4 (Outsourcing)
1. The Company outsources personal information processing as follows for smooth personal information operations:
Outsourcing Partners
- MongoDB Atlas (MongoDB, Inc.)
- Outsourced tasks: Database hosting and management
- Outsourcing period: Duration of service
- Upstash (Redis)
- Outsourced tasks: Cache and session management
- Outsourcing period: Duration of service
- Resend
- Outsourced tasks: Email delivery service
- Outsourcing period: Duration of service
2. When entering into an outsourcing contract, the Company specifies matters such as prohibition of personal information processing beyond the scope of outsourced work, technical and administrative protective measures, restrictions on re-outsourcing, management and supervision of the contractor, and liability for damages in the contract documents, and supervises whether the contractor processes personal information safely.
Article 5 (Rights of Data Subjects)
1. Data subjects may exercise the following personal information protection rights against the Company at any time:
- Request for notification of personal information processing status
- Request for access to personal information
- Request for correction or deletion of personal information
- Request for suspension of personal information processing
2. The exercise of rights under Paragraph 1 may be made in writing, by email, or by fax to the Company, and the Company will take action without delay.
3. When a data subject requests correction or deletion of personal information errors, the Company will not use or provide the personal information until the correction or deletion is completed.
Article 6 (Security Measures)
The Company takes the following technical, administrative, and physical measures necessary to ensure security in accordance with applicable privacy laws:
- Minimization and training of personal information handling staff
- Regular internal audits (quarterly)
- Establishment and implementation of internal management plan
- Encryption of personal information (passwords, important data)
- Technical measures against hacking (security programs, monitoring)
- Access restriction to personal information (access rights management)
- Retention and prevention of tampering of access records (at least 6 months)
Article 7 (Bubble Authentication Information)
Important: Special Security Measures for Bubble Access
1. Purpose: Access for Bubble app Data tab analysis
2. Processing Method:
- We do not collect or store Bubble login credentials
- Users invite our analysis account as a project collaborator
- Access rights are valid only until analysis completion
- We only analyze data structure (schema), not actual records
3. Security Measures:
- SSL/TLS encrypted communication
- All session information deleted after analysis
- Access log monitoring and abnormal access blocking
- Analysis server operated in isolated environment
4. Processing Time: Temporary access only during analysis (average less than 3 minutes)
Article 8 (Personal Information Protection Officer)
The Company designates the following Personal Information Protection Officer:
▶ Personal Information Protection Officer
- Name: Privacy Protection Officer
- Position: Representative
- Contact: contact@relis.dev
Article 9 (Changes to Privacy Policy)
1. Changes to this Privacy Policy will be announced through notices 7 days before taking effect.
2. This policy is effective from November 26, 2025.
Article 10 (Request for Access)
Data subjects may request access to their personal information at the following contact:
▶ Personal Information Access Request
- Department: Privacy Protection Team
- Contact Person: Privacy Protection Officer
- Email: contact@relis.dev
Article 11 (Remedies for Rights Infringement)
For personal information infringement reports or consultations, please contact your local data protection authority or reach out to us directly at contact@relis.dev.