Security Policy

Established: October 10, 2026

This English version is provided for convenience. If it differs from the Japanese version, the Japanese version prevails. View the Japanese version

KoreDefo ("we", "us" or "our") sets out this Security Policy (this "Policy") so that, in providing the Service, we protect our customers' information assets from various threats and customers can use the Service with confidence.

1. Basic information security policy

We maintain the confidentiality, integrity and availability of the information assets we handle in the course of our business, and manage them appropriately in compliance with laws and regulations and this Policy.

2. Management structure

We appoint a person responsible for information security, who establishes, operates and reviews this Policy and the related internal rules.

3. Specific measures for handling data

1. The contents of Target Files (Excel workbooks, etc.), including cell values, formulas, sheet names and all other data, are processed only on your PC and are never transmitted to our servers or anywhere else outside it. The only communication with our servers is the license validity check, and the only data sent is the license key and a device identifier (a randomly generated string).
2. The information we obtain is limited to email addresses, the status and expiration date of licenses, the device identifier described in the preceding item, and other information necessary to provide the Service (for the Team plan, this includes the organization name, the email addresses of admins and members, and usage status). See our Privacy Policy for details.
3. License keys are issued with a cryptographic signature (public-key cryptography), in a format that allows forgery or tampering to be detected.
4. All communications between your PC and our servers are encrypted with TLS.
5. Credit card information is obtained and held directly by the payment processor (Stripe, Inc.) without passing through us. We do not hold card numbers or other payment information.
6. Access rights to the database are limited to personnel who need them for business purposes.

4. Management of service providers

In providing the Service, we use external cloud providers (database hosting, payment processing and email delivery). We select these providers after confirming the level of security each one offers, and limit the information entrusted to them to the minimum necessary for business purposes. The list of these providers is given in our Privacy Policy.

5. Response to security incidents

If we become aware of a security incident such as a data leak, we will promptly investigate the cause and endeavor to identify the scope of impact, prevent further damage and implement measures to prevent recurrence. If an incident affecting customer information occurs, we will promptly report it to the affected customers and the relevant authorities in accordance with applicable laws.

6. Business continuity

To prepare for system failures and similar events, we endeavor, to the extent possible, to keep providing the Service and to restore it quickly.

7. Continuous improvement

We regularly review this Policy and the implementation of our security measures in light of changes in the business environment and technology trends.

8. Contact

For inquiries about this Policy, or to report a security concern, contact us through the contact form.

KoreDefo