Privacy Policy

Effective Date: 2026-05-13
Last Updated: 2026-05-14
Version: 1.3.1

A Piece of Map Inc. ("APiM", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit apieceofmap.com (the "Website").

This Policy is governed by the Personal Information Protection Act of the Republic of Korea (PIPA), including the amendments effective 11 September 2026, and satisfies the Article 30 disclosure requirements.

Important: A Piece of Map Inc. is a Korean company operating the Website for informational and business-development purposes focused on the Asia-Pacific region. We do not sell products, accept payments, or solicit business from data subjects located outside the Republic of Korea through this Website. Distinct services such as APiM Galaxy (galaxy.apieceofmap.com) and Mapiker AI (mapiker.com, on launch) maintain their own privacy notices for their respective users.

---

1. Who We Are (Data Controller)

Chief Privacy Officer (CPO): Under PIPA Article 31 and the 2026 amendments, the CEO of A Piece of Map Inc. is the ultimate person responsible for the processing and protection of personal information. You may contact the CPO using the email address above.

---

2. Scope

This Policy applies to personal data we process through:

• The apieceofmap.com website (including the /ko/ path for Korean articles);
• The Contact form at /contact;
• The Newsletter subscription form ("APiM Insights");
• Cookies and similar technologies on the Website;
• Direct correspondence with us by email or postal mail.

This Policy does not cover:

• Third-party websites linked from ours (LinkedIn, partner solution sites, referenced sources);
• Separate services with their own notices, including APiM Galaxy (galaxy.apieceofmap.com) and Mapiker AI (mapiker.com, on launch);
• Personal data we process as a service provider on behalf of business clients (governed by separate Data Processing Agreements).

---

3. What Personal Data We Collect

3.1 Data you provide

3.2 Data collected automatically

We do not knowingly collect special categories of personal data (race, religion, political opinion, health, sexual orientation, etc.). We do not knowingly collect data from children — see §10.

3.3 Data we do not collect

• Payment card information (we do not process payments on this Website).
• Government-issued identifiers (resident registration number, passport number, driver licence, etc.).
• Biometric data.
• Precise geolocation data (we use only coarse country-level signals derived from IP for compliance).

---

4. Purpose and Legal Basis

We process personal data on the following lawful grounds under PIPA Article 15.

Consent withdrawal: You may withdraw consent at any time by emailing navigate@apieceofmap.com or by clicking "Unsubscribe" in any newsletter. Withdrawal does not affect the lawfulness of processing before the withdrawal.

PIPA separate consent: Where Korean law requires separate consent for distinct processing categories (e.g., marketing, overseas transfers), we present those choices individually rather than as a single blanket consent.

---

5. Retention Periods

After the applicable period, data is irreversibly deleted or fully anonymized.

---

6. Who We Share Data With (Sub-processors)

We share personal data only with sub-processors acting on our behalf under written Data Processing Agreements (DPAs), for the categories of services listed below:

• Website hosting and content delivery;
• Authoritative DNS;
• Newsletter and content management;
• Transactional email;
• Anonymized website analytics (with your consent);
• Anti-spam and embedded map services (the latter with your consent).

We do not sell personal data, and we do not use your data for advertising retargeting or to train AI or machine-learning models.

The specific recipients required by PIPA Article 28-8 are disclosed in §7 below.

---

7. Overseas Transfers (PIPA Article 28-8)

Because some of our sub-processors operate outside the Republic of Korea, your personal data may be transferred across borders. The following disclosure is provided under PIPA Article 28-8 (overseas transfer notification):

Items transferred: the data described in §3 of this Policy, to the extent each recipient processes it for the stated purpose.
Retention: as specified in each recipient's contract with us, not exceeding the retention periods in §5 above.
Transfer method: secure electronic transmission with encryption in transit (TLS 1.2 or higher) and contractual safeguards with each recipient.
Refusal right: you may refuse the transfer by not submitting forms, not subscribing to the newsletter, and rejecting non-essential cookies. Refusal after submission can be exercised by contacting us; some Website features may then become unavailable.
Further information: data subjects may obtain additional details about a recipient (including its current privacy contact) by emailing navigate@apieceofmap.com; we respond within the timeline in §8.1.

---

8. Your Rights

Under PIPA you have the following rights regarding your personal data:

8.1 How to exercise your rights

Email navigate@apieceofmap.com with subject line "Privacy Request — [Access / Delete / Correct / Suspend / …]".

We respond within 10 days under PIPA Enforcement Decree Article 41, extendable once with notice if more time is required to address your request.

We may ask for reasonable verification of identity to prevent unauthorized requests, in line with PIPA Enforcement Decree Article 41.

8.2 Right to lodge a complaint

You may also contact the Korean supervisory authorities:

• Personal Information Protection Commission (PIPC), https://www.pipc.go.kr (call 182 within Korea);
• KISA Privacy Infringement Reporting Center, https://privacy.kisa.or.kr (call 118);
• Personal Information Dispute Mediation Committee, https://www.kopico.go.kr (call 1833-6972).

---

9. Security

We apply organizational, technical, and physical measures appropriate to the risk of processing.

• Encryption in transit: TLS 1.2 or higher for all Website traffic;
• Encryption at rest: applied at the sub-processor layer;
• Access control: least-privilege role assignments; multi-factor authentication for administrator accounts;
• Vulnerability management: regular dependency updates and patching cycles;
• Anti-spam: industry-standard anti-spam service plus honeypot field on public forms;
• Logging and monitoring: server access logs reviewed for anomalous activity;
• Retention discipline: automated and manual deletion routines aligned with §5.

No system is completely secure. If we become aware of a personal data breach affecting your data, we will notify the Personal Information Protection Commission and affected data subjects without delay under PIPA Article 34; for breaches affecting 1,000 or more data subjects we will notify within 72 hours of becoming aware, in line with PIPA Enforcement Decree Article 39.

---

10. Children

The Website is a B2B platform and is not directed to children. We do not knowingly collect personal data from children under 14 years of age in line with PIPA Article 22-2. If you believe we have inadvertently collected such data, please contact navigate@apieceofmap.com for prompt deletion.

---

11. Cookies

Our use of cookies and similar technologies is described in the Cookie Policy. The cookie banner appears on first visit and lets you accept or reject non-essential cookies (analytics, embedded map). You can change your choice at any time via the "Cookie Preferences" link in the Website footer.

---

12. Automated Decisions and Profiling

We do not use the Website's personal data to make automated decisions producing legal or similarly significant effects. Analytics events are aggregated and not used to make individual decisions.

---

13. AI and Machine Learning

We do not use personal data submitted through this Website to train artificial-intelligence or machine-learning models. This applies to Contact form content, newsletter subscriber lists, and analytics events alike. We honour standard signals (robots.txt directives, noai and noimageai meta tags) to discourage unauthorized scraping for AI training, and our Terms of Service §3 prohibit such use.

---

14. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, services, or legal requirements. When we do, we will:

• Update the "Last Updated" and, where applicable, "Effective Date" at the top of this page;
• For material changes that affect your rights or our processing, publish a banner notice on apieceofmap.com and, where appropriate, notify active newsletter subscribers by email.

Prior versions are archived and available on request.

---

15. Governing Law and Jurisdiction

This Policy is governed by the laws of the Republic of Korea. Any dispute arising out of or relating to this Policy is subject to the exclusive jurisdiction of the Seongnam Branch of Suwon District Court, Republic of Korea.

---

16. Contact

For any privacy question or to exercise your rights, please contact us:

• Email: navigate@apieceofmap.com
• Subject prefix: "Privacy Request — …"
• Post: A Piece of Map Inc., 4,5F Greits Pangyo, 117 Bundangnaegok-ro, Bundang-gu, Seongnam-si, Gyeonggi-do 13529, Republic of Korea

---

This Policy is published in English. A Korean translation may be made available; in case of any discrepancy with the Korean version under matters of Korean law, the Korean version prevails. For all other purposes, the English version is authoritative.