Privacy Policy

Required: email address, name (Google profile), sign-up timestamp.

User-entered: target credential (QBA/QASP-S/ABAT), occupation, education, affiliation, and optional date of birth, major, fieldwork start date.

Generated in use: fieldwork logs (date, hours, activity type, supervisor name, etc.), monthly status records, consent history.

Automatically collected: usage records, access logs, and cookies (to maintain the login session).

Member identification and login (Google OAuth) authentication; fieldwork log management and monthly reporting; exam study support; and service improvement and analytics (Google Analytics).

New service development, statistics, academic and market research, and marketing/event communications; analysis, utilization, and data-asset development using pseudonymized or anonymized information.

Personal information is destroyed without delay upon account withdrawal.

Fieldwork logs may be retained for up to 5 years for credentialing/audit purposes as required by law and certification bodies.

We may provide personal information to third parties: (a) with your prior consent, in which case we disclose the recipient, purpose, items, and retention period; (b) to certification bodies (e.g., QABA), partner supervisors, and collaborating education/research institutions to the extent necessary to provide the Service, support credentialing, and conduct research; and (c) where required by law or lawful request.

In accordance with the Personal Information Protection Act, we may use or provide to third parties pseudonymized or anonymized information — without additional consent — for statistics, scientific research, service improvement and new-service development, market analysis, and public-interest archiving, and may retain and utilize such information as a company data asset.

Data you enter or generate in the Service (such as fieldwork records) may be analyzed and processed within the above purposes to improve the Service and develop new services.

Supabase (auth/database/storage, Seoul region); Google LLC (OAuth login, Analytics); Vercel Inc. (hosting).

You may access, correct, delete, or restrict processing of your personal information at any time via the dashboard profile editor or the contact below.

Information whose retention period has elapsed or purpose achieved is destroyed without delay and permanently erased.

Access control with row-level security (RLS), HTTPS encryption in transit, and authentication/access logging.

Privacy matters (access, correction, deletion, restriction): SpectrumHub Operations Team — official.spectrumhub@gmail.com.

Material changes will be announced at least 7 days in advance. Effective date: 2026-05-30.