← AutoHano Works

AutoHano Works Privacy Policy

This is an English translation of the Korean original. If the two differ, the Korean version applies.

Version 2026-10-10

AutoHano (자동하노 · AutoHano, the "Company") protects the personal information processed in AutoHano Works (the "Software") and its account service (works.autohano.com) as follows, in accordance with the Personal Information Protection Act.

1. Personal Information Processed and Purposes

| When | Items | Purpose | Retention period |

|---|---|---|---|

| Sign-in (Google, Naver, Kakao) | Email, name (or nickname), sign-in provider and the account identifier at that provider | Account verification, linking licenses, preventing accounts from being shared, responding to inquiries | Until the account is deleted |

| Sign-in and checks | Installation ID (random value), PC name, time of sign-in and checks, whether the PC is designated and time of designation, time the designation was cleared | Managing the number of simultaneous PCs per account and designated PCs, preventing fraudulent use | Until the account is deleted |

| Sign-in records | Sign-in time, sign-in method | Checking for fraudulent use | 1 year |

| Downloads | Account identifier, time and version downloaded | Distribution management | 1 year |

| AI connection (remote) | Account identifier, name of the connected AI tool and connection time, refresh token | Maintaining the connection | Until disconnection, or 90 days |

| AutoHano generation server | Account identifier, job number, time and result status | Managing the number of uses, preventing fraudulent use | 1 year |

| License purchase (payment on works.autohano.com, Naver Smartstore, license codes) | Email (for Smartstore, the Works sign-in email entered in the order), account identifier, order number, product, amount paid, dates and times of payment, start of use and expiry, transaction and order numbers of the payment service provider and Smartstore, refund amount | Providing plans, refunds, tax processing | 5 years under the Act on the Consumer Protection in Electronic Commerce (kept even if the account is deleted) |

| Product improvement data | Installation ID, app version, OS, feature usage counts, structural information about files that failed to be added (size, extension, format signature, error code), format information about ladders that were not read exactly or were read differently from XG5000 (element type numbers, positions, byte layout; text only as character counts) | Improving parsers and features | 2 years |

| Inquiries | Email, content of the inquiry | Replying | 3 years |

The Company does not accept personal information of children under 14 years of age.

2. Data on the User's PC

In the installed version, the original PLC and HMI screen project files and the history added by the User are stored only on the User's PC and are not sent to the Company's servers. Part of the content leaves the PC only in the following cases.

  • AI connection: the ST source, ladder, addresses, comments and changes requested by the AI tool the User has connected are passed to that AI tool. With a remote connection (Claude or ChatGPT on the web, etc.), this content is passed through the Company's account server, and the account server does not store it.
  • AutoHano generation server: if the User chooses server generation, the program text is sent to the Company's server, processed by XG5000, and then deleted together with the result file within 24 hours.
  • Product improvement data: only the structural and format information in section 1 is sent; file contents (devices, comments, circuits) are not sent. The original of a failed file is sent only if the User has consented for that file. The data sent can be viewed exactly as sent in [Settings] in the Software.
  • Under no plan does the Company have any person view the logic of the User's files or use it for AI training. The retention and training settings of a connected AI service follow that service's terms.

    3. Entrustment of Processing and Sign-in Providers

    | Recipient | Work entrusted |

    |---|---|

    | Cloudflare, Inc. | Relaying connections in front of the servers and encrypted communication, distributing installation files, storing encrypted backups |

    | Zoho Corporation | Receiving and sending inquiry emails |

    Sign-in is done through the sign-in services of Google (Google LLC), NAVER Corp. and Kakao Corp. As a result, the Company receives only the email, name and account identifier.

    The Company does not sell personal information, and does not provide it to third parties except for transfers resulting from an AI connection requested by the User and requests made under law.

    4. Transfer Abroad

    This notice is given under Article 28-8 of the Personal Information Protection Act.

    | Recipient | Country | Items | Purpose | Timing and method | Retention period |

    |---|---|---|---|---|---|

    | Cloudflare, Inc. (cloudflare.com/privacypolicy) | The United States and other countries where Cloudflare data centers are located | Access records (IP, request time), encrypted backups | Relaying connections and security, storing backups | Sent over the network when the service is used; backups are encrypted and sent daily | Access records: per Cloudflare's policy; backups: 30 days |

    | Zoho Corporation (zoho.com/privacy.html) | United States | Email and inquiry content of the person making an inquiry | Receiving and sending email | Sent over the network when an inquiry is made | 3 years |

    If you do not want the transfer abroad, you may choose not to use the account service; however, use of the Software that requires sign-in is then restricted.

    5. Advertising Information

    The Company sends announcements of news, discounts and events by email only if the User has separately consented. Consent is optional, and not consenting places no restriction on free use. The User can opt out at any time through the instructions at the bottom of each email or at [email protected], and the Company reconfirms consent every 2 years.

    6. Rights of Data Subjects and Account Deletion

  • The User may at any time request access to, correction, deletion or suspension of processing of their personal information, and may withdraw consent. Requests sent to [email protected] are handled within 10 days.
  • Deletion can also be done directly through [Settings → Account → Delete account] in the Software. On deletion, the account, device (including designated PCs), sign-in, download, AI connection and generation server records in section 1 are deleted immediately, and they are deleted from backups by rotation within 30 days.
  • License purchase records remain in the account server's payment records and the Company's issuance ledger for the retention period under the Act on the Consumer Protection in Electronic Commerce (5 years). Information that Naver receives when payment is made on Naver Smartstore (payment method, delivery information, etc.) is governed by Naver's privacy policy, and the Company views only as much as is needed to process orders in the seller center. A plan with time remaining ends when the account is deleted, so please apply for cancellation (refund) first.
  • 7. Destruction

    Records whose retention period has ended are deleted daily by the account server. Electronic files are deleted by a method that makes them unrecoverable.

    8. Security Measures

  • Account tokens are signed and valid only on that PC, and the Company does not receive or store passwords.
  • Server secrets and private keys are kept only in files with restricted access rights, and backups are encrypted with a key that only the Company can decrypt.
  • Requests from outside are limited in number per path, and administrative functions can be used only with an administrator token.
  • Product improvement data is distinguished only by installation ID.
  • 9. Cookies

    works.autohano.com uses only one session cookie, lasting one day, for downloads and payment after sign-in. No advertising or analytics cookies are used.

    10. Chief Privacy Officer

  • Officer: Hanho Lee (Representative)
  • Contact: [email protected] · [email protected]
  • 11. Remedies for Infringement of Rights

    If you need advice about an infringement of personal information, you can contact the following bodies: Personal Information Infringement Report Center (118, no area code), Personal Information Dispute Mediation Committee (1833-6972), Supreme Prosecutors' Office (1301, no area code), Korean National Police Agency (182, no area code).

    12. Changes

    If this Policy changes, it is posted in the Software and on works.autohano.com, and important changes are also announced by email.

    Company: AutoHano (자동하노) · Representative: Hanho Lee · Business registration no. 173-49-01174

    Supplementary provision. This Policy applies from 2026-10-01.