DUBHE Inc. (the “Company”) establishes and publishes this Privacy Policy to protect personal information processed in connection with the provision of the Alioth Research service and to handle related inquiries and complaints.
1. Consent to the Collection of Personal Information
When collecting and using personal information, the Company clearly explains the purpose of processing, items collected, retention period, and consequences of refusing consent, and obtains any consent required. When a user clicks the “Agree” button associated with that notice, the user is deemed to have consented to processing within the stated scope.
2. Purposes, Items, and Retention Periods
Ending TEAM access does not automatically withdraw your membership or delete data. Team use stops, but existing teams, members, roles, research, and responses are retained and become accessible again when the billing owner restores team access. This does not restart or indefinitely extend personal information retention periods. Membership withdrawal, data deletion, and the retention and deletion rules below continue to apply.
The Company processes personal information for the following purposes and does not use it for purposes other than those stated.
| Category | Items Collected | Purpose of Use | Retention and Use Period |
|---|---|---|---|
| Membership Registration and Management | Email address, password (stored using one-way encryption so the original password cannot be recovered), and name (nickname) | Identification of Service users and confirmation of intent to register | Deleted 30 days after membership withdrawal is complete. This period does not begin if withdrawal is incomplete because subscription cancellation or payments in progress still need to be confirmed. |
| Customer Inquiries | Email, inquiry details, attachments (optional) | Review of inquiries and notification of results | Minimum records needed to handle consumer complaints and disputes are retained for 3 years from the date handling ends after the final outcome is confirmed and communicated. If handling of the same case actually resumes, the period is calculated from the new completion date. This period is not applied to all general service inquiries. |
| Paid Subscriptions, Payments, and Refunds | Verified email address; billing country and postal code; information identifying the account, customer, subscription, transaction, payment item, and refund or adjustment; plan and service period; whether prices include tax, base currency, and base price; actual payment currency, tax-exclusive amount, tax, discounts, and final tax-inclusive total; information needed for billing-country, business, and tax classification; consent and applicable policy version; payment, cancellation, and refund status and processing times | Checking and matching payment records, providing paid-service access, processing cancellations and refunds, preventing duplicate processing and additional charges before withdrawal, and customer support | Minimum records needed to verify the contract, payment, cancellation, and refund for each monthly payment are retained for 5 years from the later of the end of the relevant service and final confirmation of cancellation or refund handling. Necessary consent records, notices provided at the time, and refund evidence are retained for the same transaction retention period. |
| Orders Closed Without Payment | Information identifying the order, an account reference represented by a substitute value instead of direct identifying information, selected plan, price, currency and billing country, whether a payment transaction was created, payment and cancellation status, and request and processing times | Check unpaid order status, investigate errors, handle customer inquiries and prevent duplicate processing | An unpaid order is retained for 90 days from the date its closure is confirmed following cancellation or expiry of the payment deadline. Orders with an unconfirmed payment result, pending cancellation confirmation, or an ongoing dispute are not deleted solely under this rule. Actual payment records and necessary consent records follow separate retention rules. |
| Usage and Refund Calculation Information | Plan allowances, service period and elapsed time, completed research response and email-send counts, time and contact method of the first valid refund request, and usage, calculated amount, and reasons for approval or rejection recorded at receipt | Determining full refunds for unused service or partial refunds based on usage, fixing the amount at receipt, and handling inquiries or disputes about separate refund rights. Research response content and email recipient lists are not provided to Paddle for payment purposes. | Minimum calculation details and usage totals needed to verify payments and refunds are retained for the transaction retention period. Records shared by several transactions are kept until all required retention periods for those transactions have ended. Research response content and full email recipient lists are not included in records retained as payment or refund evidence. |
| Purchase consent records | Substitute identifiers for the account, consent record and purchase attempt; receipt time, language and consent choices; publication details, versions, original text references and verification values for the documents shown at the time; processing purpose and basis; values used to check whether requests match and links to relevant orders | Verifying consent to purchase conditions, third-party provision and overseas transfer of personal information, confirming the notices provided at the time, and preventing duplicate processing | Consent records that did not lead to an actual payment are retained for 90 days from confirmed completion of the purchase attempt. If needed to verify a payment, consumer complaint or dispute, the retention period and exceptions for the relevant transaction or case apply. |
| Payment Processing Records | Information identifying payment notifications, requests and related processing tasks, transactions and targets; processing status, results and times; retry and processing task details; errors without sensitive information; and comparison values used to identify duplicate processing | Checking and matching payment results, investigating errors and retrying processing, and preventing duplicate processing of the same payment, cancellation or refund | Routine payment processing details are retained for 90 days after the payment provider result is confirmed and processing, including retries, has ended. If processing actually resumes, the period is calculated again from its completion. Minimum records needed to verify transactions or prevent duplicate processing follow the separate retention rules below. |
| Service Notifications | Email address, notification language, minimum information needed for changes to the plan and service status, information used to distinguish notifications, and delivery history (delivery status, number of delivery attempts, and delivery confirmation information) | Notify changes to service access, including plan activation and expiry | Retained for 90 days after delivery processing ends. Minimum records needed for legal retention obligations or ongoing refunds and disputes follow the separate retention rules below. |
These rules also apply to orders confirmed closed without payment after the one-hour payment window expires. One hour is the time allowed for payment, not the point when the order record is immediately deleted.
A purchase attempt is not considered complete solely from the consent time or whether an order exists. For an existing order, completion is based on confirmation that it ended without payment. If the attempt failed or stopped before an order was created, completion is based on the end of processing after retries and payment provider results are checked. Records still processing, eligible for retry, with unconfirmed results or cancellation, or under investigation are not deleted solely under this rule. Payments confirmed later follow payment-record retention rules.
Viewing or editing records, matching payment details, receiving the same payment notification again, or renewing a subscription for another month does not extend the retention period of an existing transaction or case. Minimum records preventing duplicate processing of payment notifications and requests follow the transaction 5-year rule when needed for an actual payment, or the 90-day rule from confirmed completion for an unpaid purchase attempt. Minimum records needed to stop old requests from being processed again are not deleted solely because time has passed.
Minimum information needed for active customer or subscription management, processing or unconfirmed results, ongoing disputes or litigation, or additional legal retention is kept only for the necessary purpose and period. When the reason ends, the existing retention and deletion rules apply. Routine payment processing details are not all retained as payment evidence. Original documents and publication details shared by several transactions, cases, or notices currently in use are kept until all necessary reference periods have ended. Information is not treated as anonymous simply because only identifiers, substitute account references, or comparison values remain instead of directly identifying details.
The Company collects billing country and postal code on the purchase preparation screen to check Paddle prices and create billing addresses. Paddle and payment institutions process the name, detailed billing address, business and tax details, and card information entered directly in Paddle checkout, along with device and browser information during checkout. The Company receives only the minimum results needed for payment, service access, and refunds, and does not store full card numbers, card security codes (CVCs), or credentials used for automatic payments.
Separate Retention Required by Law
The periods below apply to records the Company must retain under applicable Korean e-commerce laws. They do not apply uniformly to all transactions in every country or to all personal information processed by Paddle.
| Record | Retention Period |
|---|---|
| Records concerning labeling and advertising | 6 months |
| Records concerning contracts or withdrawal | 5 years |
| Records concerning payments and the supply of services | 5 years |
| Records concerning consumer complaints or dispute resolution | 3 years |
Member and research information is managed separately from payment records requiring additional retention. Only minimum records needed for legal retention or ongoing refunds and disputes are kept with restricted access, and they are deleted without delay once the purpose and retention period end. Any further retention is limited to the legal basis and necessary period, and the records are not used for marketing.
3. Methods of Collection
- Online collection through website registration, inquiries, and similar interactions
- Offline consultations received by telephone, fax, mail, and similar means
- Collection through automatic tools such as cookies
- Transaction, subscription, and refund results are received from Paddle during payment processing. Information entered directly into Paddle checkout is processed under the Paddle Privacy Policy.
4. Destruction Procedures and Methods
In principle, the Company destroys personal information without delay when it is no longer necessary, including when its retention period has expired or the processing purpose has been achieved.
- Procedure: Member information and research owned by the Member are deleted under the established deletion rules 30 days after withdrawal is complete. This rule does not apply to accounts whose withdrawal is incomplete because subscription cancellation or payment confirmation is pending. Minimum payment, refund, and dispute records requiring separate retention are not deleted with other member information; they are retained and deleted under Section 2. Orders closed without payment, purchase consent, and payment processing records also follow the retention periods and exceptions in Section 2.
- Method: Electronic files are destroyed using technical methods that prevent recovery, and paper documents are shredded or incinerated.
5. Payment Seller and Privacy Roles
Paddle is the legal seller for payment transactions, while the Company provides Alioth Research. Each party is responsible for personal information processing within its own purposes and scope.
The Paddle contracting entity for your purchase location is identified in the Paddle Buyer Terms and checkout. Paddle explains its processing and rights channels in its Privacy Policy.
6. Third-party Sharing and International Transfers
We share the minimum personal data required for payment, subscription, and refund processing with Paddle. Third-party sharing and international transfers are based on the notices and required consents under applicable Korean law. Paddle acts as an independent controller and processes personal data under its Privacy Notice and applicable law.
| Item | Notice |
|---|---|
| Data shared | Email address, substitute references identifying the account and order, billing country and postal code, selected plan, price and currency, and payment, subscription and refund information |
| Purpose | Payment processing, automatic renewal, subscription management, refunds, payment documentation and fraud prevention. |
| Timing and method | Transmitted through encrypted communications when you apply for a paid subscription after consenting, or when payments, subscriptions or refunds under that contract are processed. |
| Publicly listed Paddle entities | Paddle.com Market Limited (United Kingdom), Paddle.com Inc. (United States), Paddle Payments Limited (Ireland), and Paddle.com Canada Ltd (Canada). The entity applicable to your transaction is identified in Paddle's Buyer Terms and checkout. |
| International processing | Paddle may process personal data internationally through its group entities and payment service providers. Its personal data processing and international transfer rules are described in Paddle's Privacy Notice. |
| Paddle's retention rules | Paddle retains personal data for as long as needed for the ongoing relationship and payment processing, and may retain it afterwards as necessary to comply with applicable law, resolve disputes, and enforce agreements. |
| Declining or withdrawing consent | You may decline or withdraw consent by choosing not to purchase or contacting our privacy officer. This may prevent a paid purchase, but does not prevent FREE use. Withdrawal does not automatically cancel a subscription or require immediate deletion of records that must be retained by law. |
Paddle's retention rules · privacy@paddle.com · Paddle Buyer Terms
When purchasing a paid subscription, you can separately consent to the purchase terms, third-party sharing, and international transfers of personal data. If you decline consent, you cannot purchase a paid subscription, but you can still use FREE.
Requests concerning information independently processed by Paddle may be sent through Paddle’s rights portal or privacy@paddle.com. The Company supports inquiries about its own processing.
7. Rights and Obligations of Data Subjects and Legal Representatives
- Users and their legal representatives can request access to, correction or deletion of personal information, suspension of processing, or withdrawal of consent from the privacy officer after verification of identity and authority to make the request.
- After withdrawal, support for refund, dispute, and privacy inquiries remains available without restoring your account or subscription. Signing up again with the same email does not automatically restore previous subscriptions or service access. Data that has already been deleted cannot be recovered.
- Requests to delete or suspend processing of minimum payment, contract, and dispute records that must be retained by law may be limited during the required retention period. The reason for any restriction is explained, and the records are not used outside the legally required purpose.
8. Safeguards for Personal Information
The Company implements the following measures to protect personal information:
- Storing passwords using one-way encryption so the original password cannot be recovered, and protecting transmitted data with encryption (SSL)
- Restricting access to systems that process personal information, protecting payment information during transmission, and minimizing personal information in processing records
- Operation of intrusion prevention systems and periodic antivirus updates
9. Use and Refusal of Cookies
The Company uses cookies to provide an optimized Service. Users may allow or refuse all cookies through their web browser settings. Refusing cookies may limit use of some Service features.
See Paddle notices for information about device data and cookies in its checkout. Processing needed for the service is kept separate from optional marketing consent. Simply reading the Terms or Privacy Policy does not mean you agree to payment or optional tracking.
10. Chief Privacy Officer
For questions regarding personal information protection, please contact the Chief Privacy Officer below.
- Title: Chief Privacy Officer
- Email: contact@aliothrs.com
11. Governing Law and Protection of Data Subjects
This Privacy Policy and the Company’s processing of personal information are protected and interpreted under the Personal Information Protection Act, the Act on Consumer Protection in Electronic Commerce, Etc., and other applicable laws of the Republic of Korea.
This English version is provided for convenience. To the extent permitted by applicable law, the Korean version prevails if there is any inconsistency in interpretation.
Governing-law or translation-priority provisions do not restrict privacy rights that cannot be waived under the laws of the user’s country of residence.
[Addendum]
Last updated: October 5, 2026.