Privacy Policy

Barreleye Inc. (“Barreleye,” “we,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information obtained through our website and our products and services, including the Vis-BUS Series and Int Series (collectively, the “Channels”). This Policy is designed to reflect the Personal Information Protection Act of the Republic of Korea (PIPA) and applicable U.S. privacy laws and general data protection principles. By using our Channels, you agree to the practices described in this Policy.

Personal Information We Collect

We may collect the following categories of personal information through our Channels:

• Contact information of website visitors and customer personnel (e.g., name, email, company, phone number) voluntarily submitted through inquiry or contact forms.
• Account information used for customer support and product administration.
• Patient-related information processed through our products when used by a healthcare institution, limited to Patient ID, Patient Name, and Date of Birth, solely as necessary for case identification and clinical workflow.

Barreleye does not directly collect patient information for its own purposes; such information is entered and controlled by the healthcare institution using our products, and is processed by us only to the extent required to operate the software. Our website may use minimal, essential technologies (such as functional cookies) to support normal operation, and we minimize collection of personal information for marketing purposes.

How We Use Personal Information

We process personal information only for the following purposes:

• Providing, operating, and supporting the Vis-BUS Series, Int Series, and related products and services.
• Enabling healthcare institutions to identify patient cases within the software.
• Responding to inquiries, providing customer support, and maintaining business relationships.
• Complying with applicable regulatory, quality, and legal obligations.

We do not use patient-related information processed through our products for marketing purposes. Any marketing-related communication relies on separately and voluntarily provided contact information, collected to the minimum extent necessary.

AI and Data Usage

The Vis-BUS Series and Int Series incorporate artificial intelligence (AI) technology designed to support, not replace, the clinical judgment of healthcare professionals. Our AI features are decision-support tools and do not generate independent diagnoses.

• AI models are developed and validated using de-identified or pseudonymized data.
• No directly identifying information, such as patient name or date of birth, is used in AI model training or development.

Personal Information Sharing

We do not sell personal information and disclose it only in the following limited circumstances:

• With service providers (e.g., cloud hosting, IT infrastructure) acting on our instructions and subject to appropriate confidentiality and security obligations.
• With regulatory authorities where required by law, such as medical device regulatory submissions or audits.
• In connection with a corporate transaction (e.g., merger or acquisition), subject to confidentiality safeguards.

We do not share patient-related information processed through our products with third parties except as required to operate the software or comply with law.

Data Transfers

As Barreleye supports customers in multiple regions, personal information may be transferred to and processed in countries other than where it was originally collected, including the Republic of Korea and the United States. Where such transfers occur, we apply appropriate contractual and technical safeguards consistent with PIPA and applicable U.S. privacy requirements.

User Rights and Contact

You may exercise your rights to access, correct, delete, or request restriction of processing of your personal information at any time. We will respond within 10 days of receiving your request. Requests regarding patient-related information processed through our products should generally be directed to the healthcare institution using the product, as Barreleye does not independently control such records.

• Data Processor: IlKyu Cho
• Department: Information Security Team
• Contact: +82-2-6191-8222 | contact@barreleye.co.kr

Cybersecurity and Data Protection

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or disclosure, including:

• Access control and authentication measures to restrict data access to authorized personnel.
• Encryption of data where appropriate, both in transit and at rest.
• Audit logging and monitoring of systems handling personal and product-related data.
• Ongoing vulnerability management and timely application of security updates.
• Compliance with applicable privacy and information security regulations and standards relevant to medical device software.

Retention of Personal Information

Personal information is retained only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law, including medical device record-keeping obligations. Patient-related information processed within our products remains under the control and retention policies of the healthcare institution operating the software.

Children's Personal Information

Our Channels are intended for a general audience and are not directed to children under the applicable legal age. We do not knowingly collect personal information from children through our Channels and will take steps to delete such information promptly if we become aware that it has been collected.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, products, or applicable law. The “Effective Date” at the top of this Policy indicates when it was most recently revised, and material changes will be communicated through our website.

Terms of Service

These Terms of Service (the “Terms”) govern the rights, obligations, and conditions of use between Barreleye Inc. (“Barreleye,” “we,” or “us”) and healthcare institutions and users (“Users”) who are issued an account to access the Vis-BUS Series and Int Series software (the “Service”). By being issued and using a Service account, the User agrees to these Terms.

Account Issuance and Management

Users cannot create a Service account directly. Accounts must be requested from and issued by Barreleye. Only a User ID and password are registered at the time of account issuance, based on the information requested by the User.

• Users may not share or transfer their ID or password to any third party and are responsible for safeguarding them.
• Users must notify Barreleye immediately upon becoming aware of any unauthorized use of their account.
• Barreleye is not liable for damages arising from a User's failure to safeguard their account credentials.

Use and Restrictions of the Service

Barreleye will use reasonable efforts to provide the Service in normal operating condition. Users must use the Service only within the purpose and scope provided by Barreleye.

• Unauthorized copying, reverse engineering, redistribution, or provision of the Service to third parties is prohibited.
• Users must use the Service in a manner consistent with applicable law and its intended medical device purpose.

AI-Based Features and Limitation of Responsibility

The AI-based features included in the Service are decision-support tools intended to assist, not replace, the clinical judgment of healthcare professionals, and do not generate independent diagnoses. The Service's analysis results do not replace the professional judgment of healthcare providers, and final diagnostic and clinical decisions remain the responsibility of the healthcare professionals and institutions using the Service.

Intellectual Property

All intellectual property rights in the Service and related software, interfaces, and content belong to Barreleye or third parties who have granted rights to Barreleye. These Terms grant Users only a right to use the Service and no other rights.

Modification, Suspension, and Termination

Barreleye may modify or temporarily suspend the Service for improvement, maintenance, or operational reasons. If a User violates these Terms or uses the Service improperly, Barreleye may suspend or terminate the account after providing prior notice.

Limitation of Liability

To the extent permitted by applicable law, Barreleye is not liable for indirect or incidental damages arising from use of, or inability to use, the Service. This limitation does not apply to damages caused by Barreleye's willful misconduct or gross negligence.

Changes to These Terms

These Terms may be revised to reflect changes in applicable law or the operational needs of the Service. Any revisions will be announced through our website.

Governing Law and Jurisdiction

These Terms are governed by the laws of the Republic of Korea. Any dispute arising in connection with these Terms shall be subject to the court of competent jurisdiction as determined by applicable law.

Contact

For questions about these Terms, please contact:

• Data Processor: IlKyu Cho
• Department: Information Security Team
• Contact: +82-2-6191-8222 | contact@barreleye.co.kr