Privacy Policy

Scope

This policy covers miriboa.sizlon.io and the business inquiries we receive through it. It does not cover data you process inside a licensed Sizlon product, which runs in your own environment.

What we collect

When you use the contact form we collect the details you provide — name, work email, company, and your message.

When you request a verification, we also collect your company name, business registration number (사업자등록번호), contact name, phone, work email, the notice reference, and any bid documents you upload for verification. The business registration number identifies your company across requests and for billing; uploaded documents are used only to perform the verification, kept confidential, and deleted within 15 days (or immediately on request).

When you create an account (email sign-in link) we collect your email address, and a password hash if you choose to set one. When you subscribe to notice alerts (Opportunity Matching) we collect your email address and your bidding keywords — you can also subscribe without an account through the site’s signup forms (including the alert form on the home page), in which case the subscription starts only after you click the link in a confirmation email (double opt-in — nothing is sent before you confirm). If you register a company profile we additionally collect the company credentials you enter (head-office region, company size, licenses and registrations, track record, grades), used only for eligibility screening.

This site is served as static pages; we do not use advertising trackers, and apart from the essential cookies that keep you signed in to your account, the site sets no cookies of its own. Our hosting provider may keep standard server logs for security and reliability. The contact, verification and alert-subscription forms use Cloudflare Turnstile to block spam — Cloudflare runs a lightweight challenge to confirm you are human and does not use it to track you across sites.

To understand how the site is used, we also keep minimal, cookieless visit statistics on Sizlon’s own server: page path, page language, referring page, how far the page was scrolled, and time on page. These records contain no name, account, or cookie; the IP address is not stored — visits are counted with a hash that changes daily and cannot be linked across days — and browsers that send “Do Not Track” are excluded.

How we use it

We use your information to respond to your inquiry, provide the information you asked for, follow up about a possible deployment, and to manage your account and provide and bill the services you sign up for (tender alerts, eligibility screening, verification). Your account is the integrated Sizlon account across the services Sizlon operates (Miriboa and the customer portal) — the same credentials sign you in to each. We do not sell personal information.

Product data

Licensed Sizlon software is deployed on-prem or connected, under your control — data it extracts or processes stays in your environment, and Sizlon does not access it except where a support engagement expressly requires it and you have authorized it.

For vendor-operated services such as Miriboa, the documents you submit are used only to perform the requested verification, are not shared with third parties, and are retained and deleted according to the engagement agreement (including any NDA).

Service providers and international transfer

This website and every verification request are handled on servers Sizlon operates itself, hosted on Amazon Web Services (AWS) in the Asia Pacific (Seoul) region — inside Korea. Contact-form submissions, documents you upload, result reports, and visit statistics are all stored on that server. We use a small number of other service providers whose servers may be located outside Korea, primarily in the United States: Google LLC relays the notification email about new inquiries (Gmail); Cloudflare, Inc. provides the Turnstile anti-spam check. Korea PortOne Inc. (PortOne, Korea) processes payments for pass purchases and subscriptions; card details are held by PortOne and the card acquirer it routes to, not by Sizlon. For subscriptions, Sizlon stores only an encrypted key used to re-charge. Anthropic, PBC (United States) analyses verification documents: text extracted from the bid documents you upload and from the notice documents is sent to this provider's API to extract requirements and judge compliance. The provider does not use API inputs to train models, and transmitted content is handled under the provider's API data-retention policy. The uploaded files themselves are never transmitted — text extraction runs on the Seoul-region server described above.

Each provider processes personal information only to deliver its service and is bound by its own data-protection commitments. Beyond these providers, we share personal information only where required by law.

Retention

Account details (email, password hash) are kept until you delete your account. Matching-subscription details (keywords, eligibility profile) are deleted without undue delay when you unsubscribe — the subscription email address alone is kept as a minimal record so your opt-out continues to be honoured, and is likewise deleted without undue delay if you request it. Company profiles registered on an account are account data, kept until you delete the account. We keep contact and inquiry records for up to three years from receipt, then delete them without undue delay. Records related to a paid verification — including the business registration number and billing details — are kept for five years where tax and e-commerce law require, then deleted. Bid documents uploaded for verification are kept confidential and deleted within 15 days, or immediately at your request. Verification result reports are kept for 12 months from the last delivery so you can retrieve them from your management link, then deleted and no longer retrievable — we delete them sooner on request. Electronic files are deleted by irrecoverable means.

Security

We apply reasonable technical and organizational measures to protect the information we hold. No method of transmission or storage is completely secure.

Your rights

Subject to applicable law — including the Personal Information Protection Act (PIPA) of the Republic of Korea — you may request access to, correction of, or deletion of your personal information. Email hello@sizlon.io to exercise these rights; we respond without undue delay.

Privacy officer

Sizlon’s privacy officer (개인정보 보호책임자) under Korean law is Kwangyeon Lee (CEO) · hello@sizlon.io — the contact for any privacy inquiry, complaint, or request for remedy.

If a matter is not resolved, you may seek help from Korea’s Personal Information Dispute Mediation Committee (www.kopico.go.kr · 1833-6972) or the KISA Privacy Incident Report Center (privacy.kisa.or.kr · 118).

Changes

We may update this policy; material changes are announced on this page at least seven days before they take effect. The current version is the one on this page, dated above.

Contact

Privacy questions or requests: hello@sizlon.io.