Privacy Policy

Last updated: April 20, 2026

This Privacy Policy explains how DVEM ("DVEM," "we," "us," or "our") collects, uses, stores, discloses, and protects information in connection with DVEM Gate ("Gate") and related websites, applications, and services (collectively, the "Services").

If you access or use the Services, you acknowledge this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Services.

1. Controller Information

Business name: DVEM
Representative: Deokmin Jang
Business Registration Number: 184-27-02002
Postal Code: 22009
Business Address: 10F, Suites 1001, V206 185 Incheon tower-daero, Yeonsu-gu, Incheon, Republic of Korea
Official contact: official@dvem.ai
Support contact: support@dvem.ai

2. Scope of This Policy

This Privacy Policy applies to information processed in connection with the Services, including product access, account access, approval workflows, evidence records, receipt records, credit or billing records, support interactions, and related product operations.

This Privacy Policy does not govern third-party services that may interoperate with or be linked from the Services. Your use of third-party services may be governed by their own privacy notices and terms.

3. Information We Collect

We may collect the following categories of information:

Account and identity information, such as your name, email address, authentication identifiers, organization or workspace identifiers, and access-related metadata.
Operational and product metadata, such as request IDs, action IDs, approval state, evidence references, receipt references, external references, timestamps, status values, workspace IDs, client IDs, and credit or usage records.
Support and communications information, such as the contents of messages you send to us, support requests, attachments you provide, and related correspondence metadata.
Billing and commercial information, such as plan, purchase, refund, credit, usage, or transaction-related metadata, including data received from payment processors or other commercial providers.
Technical and device information, such as browser type, device type, log data, IP-derived information, session data, and security or abuse prevention signals.

The current product experience is designed to be metadata-first. Unless explicitly stated otherwise, the console is not intended to expose raw email body content or comparable raw-content surfaces in the standard product experience.

4. How We Collect Information

We may collect information:

directly from you when you create an account, sign in, configure the Services, or contact us,
automatically when you access or use the Services,
from your organization or workspace administrators,
from third-party providers and integrations you choose to connect, and
from payment, hosting, authentication, infrastructure, or analytics providers used to operate the Services.

5. How We Use Information

We may use information to:

provide, operate, maintain, and improve the Services,
authenticate users and secure accounts and workspaces,
display and manage approvals, evidence, receipts, credits, and related product records,
process billing, credits, refunds, and commercial administration,
respond to support requests, legal requests, and product inquiries,
monitor reliability, abuse, fraud, misuse, security, and policy compliance,
debug, audit, investigate, and enforce our Terms or other policies,
communicate with you about the Services, and
comply with legal obligations and protect rights, safety, and integrity.

6. Legal Bases for Processing

Depending on the jurisdiction and context, we may process information because:

processing is necessary to provide the Services or perform a contract,
processing is necessary for our legitimate interests, including security, operations, support, and product improvement,
processing is necessary to comply with legal obligations, or
you or your organization have provided consent where consent is required.

7. How We Share Information

We may share information:

with service providers and vendors who help us operate the Services,
with authentication, hosting, infrastructure, payment, or communications providers,
with your organization, workspace administrators, or authorized users where relevant to the service model,
in connection with legal process, compliance, protection of rights, fraud prevention, or security response, and
in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.

We do not sell your personal information to advertisers. We also do not provide your private conversation content to advertisers.

8. Retention

We retain information for as long as reasonably necessary to provide the Services, maintain operational records, enforce agreements, resolve disputes, comply with legal obligations, support security, and preserve legitimate business records.

Retention periods may vary depending on the type of information, workspace settings, legal obligations, operational need, abuse prevention need, billing need, or support need.

9. International Processing

We may process information in multiple countries depending on where we, our vendors, our infrastructure, or our service providers operate. If you use the Services from a jurisdiction outside the Republic of Korea, you understand that information may be transferred to and processed in other jurisdictions, subject to applicable law.

10. Security

We use reasonable technical, administrative, and organizational measures designed to protect information against unauthorized access, disclosure, loss, misuse, or alteration. However, no system or transmission method is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on applicable law, you may have rights relating to your personal information, such as rights to access, correct, delete, restrict, object, or request portability of certain information.

You may also have rights to withdraw consent where processing is based on consent. Some rights may be limited by law, technical necessity, security requirements, contractual necessity, or the rights of others.

To make a request, contact us at official@dvem.ai or support@dvem.ai. We may request information necessary to verify your identity or authority before responding.

12. Children

The Services are not directed to children, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information through the Services, contact us so we can review the situation.

13. Third-Party Services

The Services may depend on or interoperate with third-party providers. We are not responsible for the privacy practices of third-party services, websites, products, or integrations that are not operated by DVEM.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice by updating the date above or by other reasonable means. Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated version.

15. Contact

Official or privacy-related matters: official@dvem.ai
Product support: support@dvem.ai

Pricing Refund Policy Support Terms Privacy