Privacy policy

Providing the service

• Processing sign-up and sign-in
• Providing article editing and contribution features
• Personalized content recommendations
• Sending notifications and updates

Improving the service

• Analyzing service usage statistics
• Developing and testing new features
• Fixing bugs and optimizing performance
• Improving the user experience

Safety and security

• Preventing and detecting abuse
• Blocking spam and malicious activity
• Complying with legal obligations
• Supporting dispute resolution

Third-party sharing

RUV Plex does not share personal information with third parties except in the following cases:

• When the user has given explicit consent
• When required by law
• Sharing with essential service partners (only minimum required information)

Publicly visible information

The following information is public by the nature of the service:

• Username and public profile information
• Articles you create and your edit history
• Comments on discussion pages
• Contribution statistics

Security measures

• Data encryption in transit and at rest (TLS 1.3, AES-256)
• Multi-tier access controls
• Regular security audits and penetration tests
• 24-hour security monitoring
• Established security incident response procedures

Retention periods

• Personal information is destroyed within 30 days of account withdrawal
• Information subject to legal retention obligations is kept for the required period
• Service usage logs: 3 years (Protection of Communications Secrets Act)
• Abuse records: 1 year

Rights you can exercise

• Request access to your personal information
• Request correction of your personal information
• Request deletion of your personal information
• Request suspension of processing
• Exercise data portability rights
• Opt out of marketing communications

How to exercise your rights

You can exercise your rights in the following ways:

• Directly on the settings page
• By contacting customer support (contact@ruvplex.com)
• By submitting a written request to our privacy officer

Essential cookies

These cookies are strictly necessary for operating the service.

• Maintaining your sign-in state
• Security features (CSRF protection, etc.)
• Saving user preferences

Analytics cookies

Used to improve the service. You can opt out.

• Service usage statistics (anonymized)
• Performance monitoring
• A/B testing

Managing cookies

• You can reject cookies in your browser settings
• Rejecting essential cookies may limit some features
• You can choose whether to enable analytics cookies on the settings page

Data storage locations

For service operations, your data may be stored in the following regions:

• Republic of Korea (primary servers)
• United States (CDN and backups)
• European Union (for EU users)

Data protection

• Standard Contractual Clauses (SCCs) are applied
• Compliance with international regulations including GDPR and CCPA
• Transfers only to countries with adequacy decisions

Legal basis (GDPR Article 6)

• Consent: Explicit consent to personal data processing at sign-up
• Contract performance: Processing necessary to provide the service
• Legal obligation: Retention of personal data required by law
• Legitimate interests: Service security and abuse prevention (where not overridden by user rights)

Data breach response

• Notification to the relevant supervisory authority within 72 hours of a personal data breach (GDPR Article 33)
• Promptly informing users of the breach, its scope, and remediation steps
• Analyzing the root cause and establishing measures to prevent recurrence
• Providing equivalent notice to California residents under the CCPA

Additional rights for EU/EEA users

• Right to lodge a complaint with a supervisory authority (GDPR Article 77)
• Right to object to automated decision-making and profiling
• Right to withdraw consent (without affecting the lawfulness of prior processing)
• Right to data portability: receive your data in a structured, machine-readable format

Notifications

• This policy may change when needed
• We will provide notice at least 30 days before material changes
• Changes will be announced via in-service notices and email
• Continued use after the effective date constitutes acceptance of the revised policy