Vueron Technology Co., Ltd.
Last Updated: January 6, 2026
Vueron Technology Co., Ltd. (“Vueron,” “Company,” “we,” “us,” or “our”) is committed to protecting personal information and complying with applicable data protection laws and regulations, including the Korean Personal Information Protection Act (“PIPA”), the GDPR, and other applicable laws.
This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal information in connection with the X Factory platform and related services (the “Service”).
This Privacy Policy applies to:
users who create accounts and use the Service;
visitors to our websites;
individuals whose personal information is processed in connection with our business operations, marketing, customer support, or contractual relationships.
1. Scope and Roles
1.1 Applicability
This Privacy Policy applies where Vueron processes personal information as a Data Controller.
Where Vueron processes personal information contained in Customer Data on behalf of business customers, Vueron acts as a Data Processor, and such processing is governed by the applicable Data Processing Addendum (“DPA”).
1.2 Controller vs. Processor
Data Controller: Vueron acts as a controller for account information, authentication data, billing contacts, website usage data, and communications collected directly by Vueron.
Data Processor: For LiDAR data, point cloud data, images, videos, or other sensor data uploaded by customers to the X Factory platform (“Customer Data”), Vueron acts as a processor on behalf of the customer.
1.3 Relationship with DPA
This Privacy Policy does not replace or override any DPA entered into between Vueron and a customer.
In case of any conflict regarding the processing of Customer Data where Vueron acts as a processor, the DPA shall prevail.
2. Personal Information We Collect
(a) Account and Identification Information (Required)
Name
Email address
Organization or company name
User role or account type
Authentication identifiers (including Google OAuth identifiers)
(b) Technical and Usage Information (Automatically Collected)
IP address
Device, browser, and operating system information
Access logs and service usage records
Cookies and similar tracking technologies
(c) Communication and Support Information
Inquiries, support tickets, and correspondence
Feedback and survey responses
(d) Billing and Business Contact Information
Billing contact details
Contract-related contact information (for business customers)
(e) Customer-Generated Data (LiDAR / Sensor Data)
X Factory processes sensor data uploaded by customers solely to provide the Service.
Customers, as Data Controllers, are responsible for ensuring that Customer Data is collected and uploaded in compliance with applicable laws, including obtaining required consents and applying masking or anonymization (e.g., faces or license plates) where necessary.
Vueron does not intentionally collect sensitive personal information or unique identifiers within Customer Data.
3. Purposes of Processing
We process personal information for the following purposes:
(a) Service Provision and Operation
Account creation, authentication, and access control
Operation, maintenance, and improvement of the Service
Feature delivery, troubleshooting, and performance monitoring
(b) Customer Support and Communications
Responding to inquiries and support requests
Providing service-related notices and updates
(c) Security and Compliance
Fraud prevention and abuse detection
System security monitoring
Compliance with applicable laws and lawful requests
(d) Marketing and Communications (Opt-in Only)
Newsletters, event invitations, and promotional materials, where consent has been obtained
Personal information is not used for AI model training or service-wide algorithm improvement unless explicit, separate consent has been obtained in accordance with the Terms of Service or DPA.
4. Legal Basis for Processing (Where Applicable)
Where required by applicable law, we process personal information based on one or more of the following legal grounds:
performance of a contract;
compliance with legal obligations;
legitimate interests (e.g., security, fraud prevention, service stability);
user consent, where required.
5. Retention and Destruction of Personal Information
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Account information: retained until account deletion
Service logs and security records: retained for a limited period for security and compliance purposes
Marketing information: retained until consent is withdrawn
Legal and compliance records: retained as required by applicable laws
Upon expiration of the retention period, personal information is securely deleted or irreversibly anonymized in accordance with internal policies and applicable laws.
6. Disclosure of Personal Information
We do not sell personal information.
We may disclose personal information only in the following circumstances:
where required by law or legal process;
with the data subject’s consent;
to service providers acting as processors on our behalf, solely for purposes necessary to operate and support the Service.
7. Outsourcing and Sub-processors
We may engage third-party service providers to process personal information on our behalf, including:
cloud infrastructure providers (e.g., Amazon Web Services);
authentication providers (e.g., Google OAuth);
customer support and communication tools.
Such providers are contractually required to process personal information only in accordance with our instructions and applicable laws and to implement appropriate security measures.
8. International Data Transfers
The Service is operated using global cloud infrastructure. As a result, personal information may be transferred to and processed in countries outside the user’s country of residence, including the United States.
We implement appropriate safeguards for international transfers as required by applicable law, such as contractual protections and security measures.
Users acknowledge that international transfers may occur when using the Service.
9. Data Security Measures
We implement reasonable technical and organizational measures to protect personal information, including:
encryption of data in transit and at rest;
access controls based on the principle of least privilege;
logical separation of customer data in multi-tenant environments;
security monitoring, logging, and incident response procedures.
10. Data Breach Response
In the event of a personal data breach, Vueron will take appropriate measures to mitigate harm and, where required by applicable law, notify affected individuals and/or authorities without undue delay.
11. User Rights
Depending on applicable law, users may have the right to:
access, correct, or delete personal information;
request restriction of processing;
withdraw consent at any time where processing is based on consent;
object to certain processing activities;
request data portability, where applicable.
Requests may be submitted using the contact information below. We may verify the requester’s identity before processing requests.
12. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Service, analyze usage, and enhance user experience.
Users may control cookie settings through their browser preferences.
13. Children’s Privacy
The Service is not intended for individuals under the age of 14 (or the minimum age required by applicable law).
We do not knowingly collect personal information from children.
14. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or our practices.
Updates will be posted on our website, and the revised policy will become effective as of the stated “Last Updated” date.
15. Contact Information
Personal Information Protection Officer / Privacy Contact
Vueron Technology Co., Ltd.
Email: info@vueron.com