Privacy Policy

1. General

Looxid Labs Inc. (hereinafter 'Company') values and protects your personal information, complying with applicable laws including the GDPR (General Data Protection Regulation). This Privacy Policy describes what personal information is collected, used, and shared in connection with your use of LINK BAND products and related services (hereinafter 'Services').

2. Information We Collect

2.1 Account Registration & Service Use

• Required: Name, email address, password
• Optional: Phone number, institution/company name

2.2 Product Purchase

• Name, email, phone number, shipping address (country, city, street address, postal code)
• Payment information: Credit card details are processed directly by payment gateways (PayPal, Toss Payments); the Company does not store card numbers.

2.3 Automatically Collected Information

• IP address, browser type, browsing history (Google Analytics, etc.)
• Device information: LINK BAND serial number, firmware version (when connected via app/SDK)

2.4 Biometric Signal Data

EEG, PPG, and ACC data measured by LINK BAND is stored locally on your device and connected app/SDK. It is not automatically transmitted to Company servers. Such data is only collected and processed with your explicit consent for research purposes.

3. Purposes of Collection & Use

• Account management and identity verification
• Product sales, payment processing, shipping, and after-sales service
• Customer inquiries and complaint resolution
• New service development and marketing (with separate consent)
• Research data analysis (with separate IRB approval and consent)

4. Retention Period

The Company retains personal information for the period required by applicable laws or as consented to by the data subject at the time of collection.

• Account information: Until account deletion (3 months post-deletion for fraud prevention)
• Purchase & payment records: 5 years as required by e-commerce regulations
• Customer inquiry records: 3 years
• IP and access logs: 3 months as required by communications privacy laws

5. Third-Party Sharing

The Company generally does not share personal information with external parties, except in the following cases:

• Payment processors: PayPal (USA), Toss Payments (South Korea) — minimum information required for payment processing
• Shipping carriers: DHL Express, national postal services — name, address, and phone number for delivery
• Legal requirements: Upon lawful request by government authorities as required by applicable laws

The Company does not sell or rent personal information to third parties without prior consent.

6. Your Rights

You may exercise the following rights regarding your personal information at any time:

• Request access to personal information
• Request correction or deletion
• Request restriction of processing
• Request data portability (GDPR right to data portability)
• Withdraw consent (opt-out of marketing, etc.)

To exercise your rights, please contact the Data Protection Officer listed in Section 8 via email. The Company will respond without undue delay.

7. Security Measures

• Encryption: Personal information is encrypted in transit (TLS) and at rest. Passwords are stored using one-way hash functions.
• Access control: Access to personal information is restricted on a need-to-know basis with regular access log audits.
• Physical security: Servers are housed in access-controlled facilities.

8. Data Protection Officer

• Name: Yongseok Choi
• Position: CEO
• Email: privacy@looxidlabs.com

For privacy inquiries, complaints, and remedies, you may also contact the following authorities:

• Personal Information Protection Commission, Korea (www.pipc.go.kr)
• Privacy Infringement Report Center, Korea (privacy.kisa.or.kr)

9. Policy Updates

This Privacy Policy is effective as of May 10, 2026. Any changes will be announced on the website and via email at least 7 days before taking effect.