Orcar

Privacy Policy

Effective Date: July 14, 2025
Last Updated: July 14, 2025

ORCAR Studio Inc. (hereinafter referred to as "Company") values users personal information and processes it lawfully and manages it safely in accordance with relevant laws such as the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy provides guidance on the processing standards for personal information collected and processed through the Orcar Reservation Platform operated by the Company.

※ Actual vehicle ownership and rental, insurance processing, accident response, etc. are handled by our partner rental car business, Jeju Plus, Rainbow Car Rental, Family Car Rental, and the Company provides personal information for these purposes within the necessary scope.

1. Personal Information Items Collected and Collection Methods

CategoryItems CollectedCollection Method
Social LoginName, email, phone numberApple / Google Login
Driver VerificationDriver's license number, date of birthUser input
Foreign VerificationPassport number, International Driving Permit (IDP)Image upload
Remote VerificationSelfie photoPersona API submission
Payment ProcessingPartial card information, payment historyToss Payments, Stripe
NotificationName, phone numberKakaoTalk notification (Popbill)
Consultation LogConversation recordsAI consultation system log
Automatic CollectionIP, browser, device information, etc.Automatic collection when accessing website
File StorageDriver's license and passport imagesStored in S3 private bucket

2. Personal Information Collection and Use Purposes

  • • Account-based social login provision
  • • Driver verification and reservation management
  • • Remote identity verification (including selfie comparison)
  • • Vehicle reservation and payment processing
  • • Notification messages via KakaoTalk
  • • Essential information verification for accident and insurance response
  • • Customer consultation and record management through AI chatbot
  • • Storage and response according to laws

3. Third-Party Provision of Personal Information

The Company does not provide personal information to external parties without user consent in principle. However, exceptions are made in the following cases:

RecipientPurposeItems Provided
Jeju PlusVehicle handover, insurance registration, accident responseName, phone number, date of birth, driver's license number, passport number (incl. IDP)
Insurance CompanyAccident handling, insurance claimsName, license information, contract information
PersonaRemote identity verificationSelfie, license image, date of birth
Payment Processors (Toss, Stripe)Payment processingName, email, payment history
Popbill (KakaoTalk)Notification message deliveryName, phone number, message content

4. Personal Information Processing Consignment

ConsigneeCommissioned TasksRetention Period
PersonaRemote identity verificationUntil verification is completed
Amazon AWSServers and file storageUntil withdrawal or retention period expires
PopbillKakaoTalk message deliveryUntil the purpose is achieved
AI chatbot engineCustomer support automationRetained for 1 year, then deleted

5. Personal Information Retention and Use Period

ItemRetention Period
Reservation and payment history5 years (under the Act on Consumer Protection in Electronic Commerce)
Driver's license and verification information3 months after the end of rental
Passport / IDP imagesDeleted within 30 days after verification completion
AI consultation records1 year
Web logs (IP, etc.)3 months

6. Information Subject Rights and Exercise Methods

  • • Request for access, correction, deletion, and processing suspension of personal information
  • • Direct application through My Page or customer center
  • • Withdrawal of consent or inquiry: contact@orcar.kr

7. Personal Information Destruction Procedures and Methods

  • • Electronic files: Permanent deletion in unrecoverable manner
  • • Printed materials: Shredding or incineration
  • • Passport and license images: Deleted immediately after retention period or verification completion

8. Personal Information Protection Officer

RoleNameContact
Personal Information Protection OfficerPark Jeong-gicontact@orcar.kr

9. Notification and Changes

The Privacy Policy may be changed, and changes will be notified in advance through the website.

This policy applies from July 15, 2025.