Privacy Policy

1. Operator

Agent Direct is a service operated by KOISRA Co., Ltd. (“KOISRA,” “we,” “us”). KOISRA is the controller of personal information collected through this website. Privacy questions may be submitted through the contact form until a direct privacy contact is approved for publication.

2. Information we collect

The inquiry form requires a service of interest, company name, company website, country of establishment, contact name, business email, Korean-presence status, a high-level description of the product or service, and consent. Optional fields include job title, telephone number, preferred contact method, approximate Korean user or customer band, authority-contact status, desired date, service-specific high-level answers and an additional message.

We also process limited technical and attribution data: source and landing page, referring URL, strictly limited UTM values, submission timestamps, consent version, a non-guessable inquiry reference, an idempotency key, email-delivery status, and a short-lived HMAC-derived network abuse identifier. We do not intentionally store raw IP addresses, full user-agent strings, raw request headers, CSRF tokens or anti-bot tokens in the inquiry record.

3. Do not submit sensitive information

The public form is for sales inquiries only. Do not submit credentials, identity documents, files, personal-data requests, breach details, health or financial information, regulator evidence, confidential technical information or other sensitive material. Secure channels for due diligence and live representative matters are arranged separately after initial contact.

4. Purposes

• Review and respond to the inquiry.
• Conduct a preliminary non-legal applicability screening.
• Discuss a potentially relevant service, due diligence and next steps.
• Maintain security, prevent abuse and duplicate submissions, and troubleshoot delivery.
• Maintain records needed to manage and demonstrate consent and communications.

5. Required and optional fields

Fields marked with an asterisk are required to review and respond to an inquiry. Optional qualification information may improve the preliminary review but is not required. We do not request separate marketing consent because the website does not enroll visitors in marketing communications.

6. Recipients and service providers

Authorized KOISRA personnel may access inquiry information on a need-to-know basis. The production configuration may use a hosting provider, MySQL or MariaDB database service, SMTP provider, backup service and optional Cloudflare Turnstile service. The actual providers must be recorded in KOISRA’s internal processing register before production. No analytics, advertising tags, session-replay tools or non-essential third-party scripts are enabled in this release.

7. International access and transfers

The website is operated for an international audience. Production hosting, email routing, backups or authorized business communication may involve processing outside the visitor’s country. Before launch, KOISRA must document the actual provider locations and any transfer mechanism required by applicable law.

8. Retention

The supplied server configuration sets an inquiry deletion-due date 365 days after submission. The abuse-prevention hash is configured for a 48-hour retention window. Automatic deletion is disabled until KOISRA approves the retention and backup policy. Once approved and enabled, scheduled cleanup uses record identifiers and counts without logging inquiry content. Information may be retained longer where reasonably necessary for a legal obligation, dispute, security investigation or requested business relationship.

9. Security

The implementation uses encrypted transport in production, server-side validation, CSRF controls, same-origin checks, prepared database statements, rate limiting, duplicate-submission controls, restricted logging, security headers, and separate private configuration. No internet transmission or storage system can be guaranteed absolutely secure.

10. Cookies and local storage

The inquiry flow uses one short-lived, strictly necessary, Secure, HttpOnly and SameSite CSRF cookie. It is used only to protect form submission and is not used for advertising or analytics. No non-essential cookie or local-storage technology is enabled, so the site does not display a consent banner or publish a separate cookie policy in this release.

11. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or other action concerning your personal information. Submit a request through the contact page and state that it concerns website inquiry data. We may need to verify the request before acting.

12. Sales inquiries versus representative operations

This policy covers the website inquiry system. If KOISRA is appointed as a domestic representative, the foreign company and KOISRA will define separate data flows, responsibilities, secure channels, retention rules and procedures in the service documentation. Appointment alone does not determine whether KOISRA is a processor for a particular activity.

13. Changes

We may update this policy when the website, providers or legal requirements change. The version and effective date shown above identify the published policy that applied when consent was recorded.