Privacy Policy

The Korean version prevails if there is any discrepancy.

Effective date To be determined

LOPI Corporation Inc. (the “Company”) processes the personal information it receives through the application, login, brand dashboard and contact form of Bassport · Seongsu Brand Passport according to the standards below.

1. Personal information we process

Required personal information

Contact person’s name, job title, contact details (phone number), and business email (for login and receiving verification codes)

Information stored together

  • The time you consented to the collection and use of personal information, and the version of the consent text
  • Verification code records: the email address requested, the times of request, delivery and confirmation, and the number of incorrect attempts. The verification code itself is not stored; only an irreversible value (hash) is kept.
  • Login records: the time of the last login, and the hash and expiry time of the session value used to keep you logged in
  • Brand information edit history: the section edited, the time, and the answers before and after the edit (for the contact person’s name, job title and contact details, only whether they changed)

Application answers received together

The following are answers about the brand. If the free-text fields contain personal information, it is handled under the same standards.

Basic information
Brand name · Business category · Is it a Korean brand or an overseas brand? · Home country of the overseas brand · Contact person’s name, job title and phone number · Number of offline stores you run now · Online sales
Store plans
Preferred store format · Preferred zones · Target timing · Preferred floor area · Monthly rent budget (rent only)
Main customers
Age groups of your main customers · Gender of your main customers
Final questions
Anything else you would like to tell us · Interest in a consultation

Contact form

Required: email, message. Optional: name, company or brand name, whether Korea or overseas. Information stored together: the address of the page the inquiry was sent from, the time it was received, and the time you consented to the collection and use of personal information with the version of the consent text.

Information processed automatically

  • To prevent automated submissions, we check browser signals when you apply, request a verification code or send an inquiry (Vercel BotID).
  • We set one cookie to keep you logged in (30 days for brands; for administrators, until the browser is closed, up to 12 hours). It is deleted when you log out.
  • We do not store IP addresses or browser information of visitors.
  • Anonymous usage records for service improvement: to learn which steps of the application screen are viewed and completed, we record the step name, the action (view, next, back, submit, leave), the screen language, the application form version and the time, together with a random number. The random number is used only within a single browser tab (the browser deletes it when the tab is closed) and is not linked to any account, email, application content, IP address or browser information, so it cannot identify whose record it is. Application answers are not included.
  • Temporary saving during application: the multiple-choice answers you select in the application form are saved temporarily only in your browser and are not sent to the Company. The brand name, contact person details, written answers and email are not saved. They are deleted when you complete the application or press “Start over”, and anything older than 7 days is deleted the next time you open the application screen.

2. Purposes of collection and use

We use it for consultation on opening a store in Seongsu-dong, Seoul, and to provide the market analysis. Answers in the application such as business type, preferred zones and main customers are used to show the market analysis and recommended zones in the dashboard.

The business email is used for identity verification (verification codes), login, and providing the brand dashboard (progress updates, viewing and editing brand information).

Information received through the contact form is used to review and answer your inquiry.

The map on the market analysis screens is drawn by your browser, which downloads map images directly from OpenFreeMap (tiles.openfreemap.org, via Cloudflare). Your browser’s IP address and the requested map address may be passed to that service; the Company does not receive or store them. OpenFreeMap states that it does not use cookies and does not keep IP addresses in its access logs (https://openfreemap.org/privacy/).

3. Retention and destruction

The contact person’s name, job title and contact details are kept for 3 years from the date of collection. When the period ends, they are deleted from the database without delay.

The business email and the edit history are kept until the account is deleted. If you ask us to delete them, we delete them without delay. The edit history does not keep the contact person’s name, job title or contact details; it only records whether they changed.

Verification code records are deleted 30 days after the request. Login session records are deleted after they expire (30 days for brands, 12 hours for administrators).

Anonymous usage records for service improvement are deleted 1 year after they are made.

Information received through the contact form is kept for 1 year from the date received and deleted without delay when the period ends.

4. Provision to third parties

The Company does not provide personal information to third parties without the separate consent of the data subject.

5. Entrustment of processing and storage locations

RecipientEntrusted taskStorage location
Vercel Inc.Website hosting (running server functions) and automated-submission checksRepublic of Korea (Seoul, function region icn1). The operating company is headquartered in the United States
Supabase, Inc.Storing the brand information, account, login record and inquiry database (PostgreSQL)Republic of Korea (Seoul)
Amazon Web Services, Inc.Sending verification code emails and inquiry notification emails (delivering inquiries to the operating staff) (Amazon SES)Republic of Korea (Seoul)

6. Rights of the data subject

You may at any time request access to, correction of, deletion of or suspension of processing of your personal information, and withdraw your consent. If you send a request through the contact form () or to help@lopi.im, we will handle it without delay.

You have the right to refuse consent. However, if you do not consent, you cannot apply or send an inquiry.

7. Privacy officer and contact

Privacy officer To be determined

Contact help@lopi.im ·

8. Operator

LOPI Corporation Inc. · Representative 강정모 · Business registration no. 726-88-03086

79-4, Duteopbawi-ro, Yongsan-gu, Seoul, Republic of Korea

Go to Bassport application