Privacy Policy

1. Purposes of processing personal information

The Company processes personal information only to the extent necessary for the following purposes.

• Membership registration, identity and business verification, sign-in and account management
• Product delivery, installation, updates, maintenance and customer support
• Handling inquiries, posts, incidents, misuse and disputes
• Collecting and centrally managing printer and multifunction printer status through OJMANAGER
• Finding and installing printers, and backing up and restoring installation information through OJSETUP
• Providing company information, business partner, sales, inventory, transaction document and tax invoice functions through OJ Form
• Providing printer, scan, driver, notification and on-site control functions on customer internal networks through OJBOX and OJ Box Mobile
• Entering into and performing service agreements, settling charges and complying with legal obligations
• Providing the OJ SCAN service
• Maintaining service security and stability, responding to incidents, and backing up and restoring service operating materials approved by the operator

Information processed on the device by OJ Arranger and OJ Recovery is used only to provide their respective functions and is not transmitted to Company servers.

2. Information processed and processing methods

2.1 OJP website and membership services

• Account information: name, email address, password and telephone number
• Company information: company name, business registration number, address, and information about the representative and contact persons
• Installation location information: building name, department, location and contact person information
• Customer support information: posts, comments, inquiries, attachments and response history
• Automatically generated information: access IP address, browser and operating system information, access date and time, cookies, sessions, service usage and error records

Passwords are not stored in plain text and are protected using secure hashing or encryption. Required and optional fields are identified on registration and information entry screens.

2.2 OJMANAGER

The following information may be processed to provide printer and multifunction printer management functions.

• User account, customer company and installation location information
• Printer model, serial number, IP address, MAC address and PC name
• Monochrome and color print counts, and remaining consumables such as toner and ink
• Device online status, errors and diagnostic information
• OJMANAGER client version, collection, connection and synchronization records
• Contract terms, meter reading history, billed amounts, and invoice issuance and outstanding payment status

The OJMANAGER client and background service may transmit the status and collection results of devices registered by the user to Company servers. This information is used for device management, contract and billing operations, incident response and customer support.

2.3 OJSETUP

The following information may be processed to find and install printers, and to back up and restore installation information.

• Discovered device information, including printer model, serial number, IP address and MAC address
• SNMP OIDs and response information needed for device discovery and capability checks
• Drivers to install, printer names, ports and Windows printer settings
• Installation methods, installation configuration files and restoration information saved by the user
• Direct-install links, link usage and expiration information
• Installation success or failure results, error information and program version

When cloud backup and direct-install functions are used, installation methods, installation settings and necessary driver information are stored on Company servers. Information discovered during network searches that is not necessary to provide the service is not stored on the servers.

2.4 OJ Arranger

To arrange Windows windows as requested by the user, OJ Arranger temporarily reads the following information from top-level windows on the current device.

• Executable file names and process identifiers
• Windows window class names and window titles
• Window positions, sizes, display states and monitor information
• User-configured profiles, window rules, keyboard shortcuts and monitor identifiers
• Executable paths, arguments and working folders specified by the user for quick launch
• OJ Groups names, classification rules and Windows Shell item identifiers

Original window titles are temporarily displayed on the rule selection screen and in diagnostic dialogs. Rules used to find an exact window again store an irreversible SHA-256 fingerprint instead of the original title.

OJ Arranger does not collect accounts, advertising identifiers, contacts, location, usage statistics, diagnostic logs or telemetry. It does not read other processes' memory, KakaoTalk messages, chat histories or account information, and does not capture or record the screen. All settings are stored only in the following local storage on the user's device and are not transmitted to Company or third-party servers.

%LOCALAPPDATA%\OJ Arranger\OJArranger.ini

KakaoTalk and its Korean name may be trademarks of Kakao Corp. OJ Arranger and Print Pro are not affiliated with or endorsed by Kakao Corp.

2.5 OJ Recovery

OJ Recovery backs up partitions on a storage device with Windows installed and restores them when needed. The following information may be processed within the device during backup and restoration.

• Disk, partition, file system and boot information
• Backup images, restoration information, task status and local task records
• Operating systems, programs, settings and user files included in the backup

This information and backup images are stored only on the PC concerned, a connected USB device or local storage designated by the user. OJ Recovery does not transmit backup or restoration information or backup image contents to Company or third-party servers. The Company does not view or retain that content.

If server communication functions such as product activation are added, the information processed, purposes, transmission status and retention periods will be disclosed in this policy and on product screens before those functions are provided.

2.6 OJ Form

OJ Form is a web-based business management service for company information, business partners, sales, inventory, transaction documents and tax invoices. Information entered by users is stored in the OJ Form web server database.

Information about OJ Form member companies

• Account information: name, email address, password and telephone number
• Basic company information: business registration number, company name, representative name, industry and business type
• Business location information: address, telephone number, fax number and email address
• Contract and support information: service usage status, inquiries and customer support history

Business partner and transaction information entered by member companies

• Basic business partner information: business registration number, business name, representative name, industry and business type
• Business partner contact information: address, telephone number, fax number, email address and business contact person information
• Sales and inventory information: items, specifications, quantities, unit prices, supply amounts, tax amounts, total amounts and transaction dates
• Transaction document information: quotations, transaction statements, incoming and outgoing goods, and payment information
• Tax invoice information: supplier and recipient information, preparation dates, supply amounts, tax amounts, items and issuance status

Users must not enter personal information that is unnecessary for the service, such as resident registration numbers, bank account numbers or card information, at their own discretion. If such information becomes essential for the service, the legal basis and protective measures will be reviewed and separate notice will be provided.

OJ Form member companies are responsible for lawfully collecting personal information about employees and business partner contacts that they enter and for providing the required notices to those individuals. The Company processes information entered into OJ Form under the member company's instructions for service delivery, storage, backup, disaster recovery and customer support.

2.7 OJBOX and OJ Box Mobile

OJBOX is an edge server installed on a customer's internal network. OJ Box Mobile is a mobile management app used by administrators on site. Depending on the functions provided, the following information may be processed.

• OJBOX device identifiers, firmware and app versions, and network status
• Customer company, installation location and administrator account information
• Printer models, serial numbers, IP addresses, MAC addresses, counters and remaining consumables
• Printer and multifunction printer status, errors, inspection and maintenance task records
• Control commands requested by administrators, such as head cleaning, ink charging and settings changes, and their results
• Mobile device identifiers and push notification tokens required to send notifications
• Printer drivers and installer files provided to OJSETUP
• Paths and connection settings for SMB or network folders designated by the user, and multifunction printer scan files

Scan files and driver files are stored on OJBOX within the customer's internal network or in storage designated by the user. Printer status and error information, remote command results and notification information may be transmitted to Company servers or registered administrator apps to provide management functions enabled by the user. The Company does not use scan file contents for advertising, user analytics or other purposes.

If the information processed or transmission methods change when OJBOX or mobile functions under development are officially added, this policy and product screens will be updated before those functions are provided.

2.8 OJ SCAN

412.kr is the operating server for the OJ SCAN service provided by the Company.

OJ SCAN temporarily receives and stores scan files sent by users in order to deliver them. Depending on the documents scanned by the user, scan files may contain personal information. The Company processes those files for the purposes of receiving, storing, delivering and deleting them as needed to provide the service, and does not use document contents for advertising or user analytics.

To keep the service stable and to respond to incidents, task records such as upload time, file format and processing time may be stored. Retention periods for files and task records follow Section 3.

2.9 Backup of server operating materials

The Company regularly backs up server system settings, program source code and other operating materials for stable service operation and disaster recovery.

These backups of server operating materials do not include users' personal information or scan results.

3. Processing and retention periods

The Company destroys personal information without delay when the processing purpose has been fulfilled or the retention period has expired. If other laws require retention, only the information subject to that requirement is stored separately for the statutory period.

The following records may be retained separately for the periods prescribed by applicable laws, including laws on electronic commerce.

Before withdrawing from OJ Form or terminating a service agreement, member companies must download and separately retain any necessary transaction and tax records. Once withdrawal is completed, the Company destroys operational data other than information subject to statutory retention obligations, and destroys recovery backups according to the maximum retention period and deletion procedure separately announced.

The deadline for completing deletion of OJ Form operational data and the maximum retention period of recovery backups will be announced separately when the service launches.

Access to recovery copies pending deletion is restricted to recovery purposes. When a backup is restored, deletion requests already received and processed are applied so that deleted personal information is not used again in normal operations.

4. Provision of personal information to third parties

As a rule, the Company does not provide personal information to third parties. Provision is limited to the following cases and to the extent permitted by applicable laws.

• The data subject has given prior consent
• Specific legal provisions apply or provision is necessary to comply with a legal obligation
• Provision is necessary to protect urgent interests relating to life, physical safety or property
• An OJ Form user explicitly requests a specific task, such as issuing a tax invoice, requiring information to be transmitted to the National Tax Service or an electronic tax invoice service

When a function requires provision to a third party, the recipient, purpose, information provided and retention period will be additionally explained on the relevant screen.

5. Entrustment of personal information processing

If personal information processing is entrusted to an external provider to deliver services, the Company discloses the provider, entrusted tasks and retention period in this policy. Entrustment agreements address restrictions on processing beyond the specified purpose, security measures, restrictions on re-entrustment, management and supervision, and liability for damages.

For information about employees and business partner contacts entered by OJ Form member companies, the member company acts as the personal information controller and the Company processes information as the entrusted service provider. The service agreement or personal information processing agreement covers the purposes and scope of the entrusted processing, safeguards, incident notification, and return or destruction of information when the agreement ends.

5.1 Current status of entrustment

The Company currently does not entrust personal information processing to external providers. If processing is entrusted in the future, the required details will be disclosed in this privacy policy in accordance with applicable laws.

5.2 Cross-border transfer of personal information

Backups of server operating materials do not include users' personal information or scan results, and therefore those backups do not involve any cross-border transfer of users' personal information. If processing is entrusted in the future, the required details will be disclosed in this privacy policy in accordance with applicable laws.

6. Procedures and methods for destruction

• When grounds for destruction arise, personal information is destroyed without delay in accordance with applicable laws and internal procedures.
• Materials that must be retained under other laws are separated into a dedicated database or storage location with restricted access.
• Electronic files are deleted using methods that prevent recovery or reproduction. Paper documents are shredded or incinerated.
• OJ Arranger local settings can be removed by closing the program and deleting the %LOCALAPPDATA%\OJ Arranger folder.
• Users must directly delete OJ Recovery backup files or erase the storage media.
• Administrators must directly delete OJBOX scan and driver files from the device or designated network storage.

7. Your rights and how to exercise them

Data subjects may request access to, correction or deletion of their personal information, suspension of processing, withdrawal of consent and membership withdrawal. After verifying the identity of the data subject or an authorized representative, the Company takes action without delay in accordance with applicable laws.

Employees and business partner contacts whose information is processed through OJ Form may first exercise their rights with the OJ Form member company that entered and manages the information. If a request is received directly by the Company, it works with that member company to handle the request.

Requests may be submitted by email, telephone or in writing to the customer support or personal information protection department referred to in Section 11. Data subjects who have not registered may also submit requests, and only the minimum information necessary is used to verify identity.

8. Measures to protect personal information

The Company applies the following measures to prevent loss, theft, leakage, forgery, alteration or damage to personal information.

• Granting minimum necessary access rights, updating or revoking them, and conducting regular reviews
• Storing passwords using secure hashing or encryption
• Protecting information in transit using secure methods such as HTTPS
• Retaining access records, preventing tampering and reviewing unusual access
• Using security software, reviewing vulnerabilities and applying updates
• Restricting access to backups and managing recovery procedures
• Minimizing backup app permissions, restricting and discarding access to authentication tokens, and preventing authentication credentials from appearing in public documents or general logs
• Encrypting backups that contain personal information, restricting access to decryption information, and deleting them according to the retention period
• Training personnel who handle personal information and maintaining internal management procedures

9. Cookies and automatically collected information

OJP, OJMANAGER web services and OJ Form may use cookies to maintain sign-in sessions, provide security, remember language and display settings, and improve services. Users may refuse cookies in their browser settings, but some functions, such as sign-in, may be limited.

The desktop and recovery functions of OJSETUP, OJ Arranger and OJ Recovery do not use web cookies. If OJMANAGER, OJBOX or OJ Box Mobile displays web-based screens, cookies or session storage may be used only for those web functions.

The Company does not use advertising identifiers or third-party advertising cookies for personalized advertising.

10. Personal information of children under 14

The Company's services are intended for businesses and workplace contacts, and are not offered to children under 14. The Company does not knowingly collect personal information from children under 14. If such collection is discovered, the information is deleted without delay after following procedures required by applicable laws, including verification of a legal representative.

11. Personal information protection department and inquiries

• Personal information controller: Print Pro
• Personal information protection department: Print Pro Customer Support
• Representative: 최정원
• Email: zcopy@naver.com
• Telephone: 070-5133-3777
• Customer support: https://ojp.kr/support
• Registered address (Korean): 경기도 성남시 중원구 둔촌대로388 크란츠테크노 407호

For counseling or remedies concerning personal information infringements, users may contact the following organizations.

• Personal Information Dispute Mediation Committee: 1833-6972, https://www.kopico.go.kr
• Personal Information Infringement Report Center: 118 (no area code), https://privacy.kisa.or.kr
• Korean National Police Agency Cybercrime Reporting System: 182 (no area code), https://ecrm.police.go.kr

12. Changes to this privacy policy

If laws, services or the information processed change, the Company updates this policy and posts notice on its website before the effective date. Changes that materially affect users' rights are separately notified using the methods and notice periods required by applicable laws.