슬기로운 하우스키핑 개인정보처리방침

Seulgirowoon Nangmanjigi Co., Ltd. (the "Company") operates Seulgiroun Housekeeping (the "App"), a workforce application for hotel housekeeping teams. This Privacy Policy explains what personal data the App handles and how.

1. Data We Handle

a. About users (hotel staff)

• Authentication — hotel identifier, employee code, 4-digit PIN or password
• Profile — name, role, assigned zone, language preference, profile image (provided by the hotel administrator)
• Work content — chat messages, task messages, task status history
• Photos — images captured with the device camera when reporting lost items or facility damage
• Push notifications — push subscription identifier and push token
• Device data — device model, OS version, language and time-zone settings, country of access (collected automatically by the push SDK)

b. About hotel guests (third parties)

When filing a lost-and-found report, a staff member may enter a guest's name, phone number and check-out date. This data concerns a third party rather than the App user, and is processed solely to identify and return lost property. Obtaining any consent required for this collection is the responsibility of the hotel as data controller; the Company only stores and relays it on the hotel's instructions.

c. Data we do not collect

• National identification numbers
• Payment or financial data (the App has no purchase functionality)
• Location data (no GPS permission is requested)
• Contacts, call logs or text messages
• Photos from the device photo library — the App uploads only images captured with the camera and offers no library picker
• Advertising identifiers, tracking or third-party advertising

2. Purposes

• Authenticating staff and controlling access to their hotel's data
• Assigning and tracking housekeeping tasks
• Enabling work-related communication between staff
• Translating messages into the user's own language, on the user's request
• Processing lost-and-found, facility damage and supply requests
• Delivering task and message notifications
• Maintaining service reliability and preventing misuse

3. Retention

• Account and profile data — until the service contract with the hotel ends or the employee leaves
• Task history and messages — 1 year from creation
• Reports and attached photos — 1 year from creation
• Guest name and contact number — deleted without delay once the lost-and-found case is closed (maximum 6 months)
• Push subscription identifier — until logout or app removal

4. Disclosure to Third Parties

We do not sell or disclose personal data to third parties, except with the user's prior consent, where required by law or lawful request from an investigative authority, or when reporting work results to the user's own hotel (the essential purpose of the service).

5. Processors

• OneSignal, Inc. (USA) — push notification delivery; receives the push subscription identifier, device model, OS version, language, time zone and country
• Google LLC (USA) — Firebase Cloud Messaging for Android push delivery; receives push token and notification content
• Google LLC (USA) — message translation (Gemini API), called only when a user taps the translate button on a specific message; receives the body text of that message only
• Apple Inc. (USA) — Apple Push Notification service for iOS push delivery; receives push token and notification content
• NAVER Cloud Corp. (Republic of Korea) — server and database hosting; stores all categories listed in Section 1

About translation. Translation runs only when a user taps the translate button on a specific message. The App never calls the translation provider directly; the message body alone is sent to our server, which then calls the Google Gemini API. No user name, employee code or device identifier is included. Results are cached on our server for 7 days to avoid repeat calls, then deleted.

6. Your Rights and How to Delete Your Data

You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time.

Because accounts are issued and managed by the employing hotel and the App has no self-service sign-up, accounts cannot be deleted from within the App. To request deletion:

1. In the App — open Settings and use the Data access / deletion request menu.
2. By email — write to info@rosegoldsoftware.co.kr stating your hotel name and employee code.

We respond within 30 days. Account and profile data are deleted; operational records the hotel needs for accounting may be retained in anonymised form.

7. Deletion Procedure

Personal data is destroyed without delay once the retention period expires or the purpose is fulfilled. Electronic records are permanently erased by non-recoverable means; printed records are shredded or incinerated.

8. Security Measures

• All traffic between the App and our servers is encrypted with HTTPS/WSS (TLS). Plaintext HTTP is blocked at the application level.
• Staff can only access data belonging to their own hotel; features are further restricted by role.
• Access tokens are short-lived and invalidated server-side on logout.
• The App requests only the device permissions it needs (camera, notifications).
• The number of personnel able to access personal data is kept to a minimum and they receive regular training.

9. Children

The App is a workplace tool for adults employed by a hotel and does not knowingly collect data from children under 14.

10. Contact

Seulgirowoon Nangmanjigi Co., Ltd.
55 Hanyangdaehak-ro, Sangrok-gu, Ansan, Gyeonggi 15588, Republic of Korea
Data Protection Team — info@rosegoldsoftware.co.kr

11. Changes

Material changes to this policy will be announced on this page at least 7 days before they take effect, or 30 days in advance where the change materially affects user rights.