1. Overview
CADI processes personal data under Korea’s Personal Information Protection Act. Operator: {{운영 주체}}. Effective date: {{시행일}} (not set).
2. What we collect, and how
Only fields verified in application code and the database schema are listed.
Account (users)
- Email, password hash, first_name, last_name
- Role, account status, optional student_id
- avatar_url when set
- google_id and provider for Google sign-in
- created_at, updated_at, last_access_at
Class operations
- Invites: email, name
- Enrollment: student account id
- Submissions: student account id, optional student_name_label from bulk-upload file names
- Automatic, manual, and final scores; stored grading JSON; teacher feedback text
Uploaded files
- file_name, file_path, type/size, uploader, linked assignment/submission
- CAD model files and assignment description files
Service records
- Forum posts and replies, notifications, 3D annotations, chat messages, dimension records
- JWT access and refresh tokens
The signup form’s institution field is not sent to the register API. Teacher and email verification codes are checked at signup and are not stored as user columns.
3. Purpose
- Identify users, sign-in, role-based access
- Class invites, submissions, grading, and feedback
- Notifications and class forum
- Security and incident response (log retention: {{보관 기간}})
4. Retention
{{보관 기간}} — retention after account or class end is not yet decided.
5. Third-party provision
No verified third-party sharing list except where law requires it.
6. Processors
{{위탁 업체}} — hosting, mail, and object-storage vendors are not named in this draft.
7. Storage location / cross-border transfer
{{서버 위치}} — region is not verified here.
8. Destruction
Data is destroyed so it cannot be restored after the retention period. Procedure TBD with {{보관 기간}}.
9. Your rights
You may request access, correction, deletion, suspension, or withdrawal of consent. Personal-data inquiries: help@dadilabs.com
10. Security
Passwords are stored hashed. APIs require authentication. Further controls will follow {{운영 주체}} security policy.
11. Cookies
Sign-in tokens are stored in the browser. No verified marketing-cookie list is claimed.
12. Privacy officer
Officer: {{보호책임자}}
Contact: {{보호책임자 연락처}} (general inquiries: help@dadilabs.com)
13. Remedies
You may contact the Personal Information Dispute Mediation Committee, KISA’s reporting center, the Supreme Prosecutors’ Office, or the National Police Agency.
14. Changes
We will announce changes in the Service. The effective date follows {{시행일}}.