We collect less.
And explain every use.

1. Who is responsible?

GenDistrict operates this corporate website and acts as the controller for project inquiries. GenDistrict Privacy handles privacy requests and complaints at contact@gendistrict.com.

Teams in Seoul, Bellevue and Santiago may collaborate on an inquiry. When a project requires a legal entity or contracting party, it will be identified in the proposal or contract.

2. What do we collect?

• Information you enter: name, work email, company or team, optional phone, type of help, timing and inquiry details
• Attachments: PDF, document, spreadsheet, image, CSV or text files you choose to send
• Security data: submission time, language, browser information and a one-way hash derived from the IP address. Hosting and security providers may temporarily process the request IP in their logs.
• Essential browser storage: the selected language and analytics choice may be saved in browser storage.
• Optional visit statistics: only after consent, GA4 may measure the page path (without query or hash), page title, display language, approximate location, browser and device information, session information and selected key buttons.

We do not use advertising tracking, ads personalization or Google Signals.

3. Why do we use it?

• To reply and route the inquiry to the right person
• To assess and propose requested training, consulting, products or AI systems
• To prevent duplicate, automated or abusive submissions
• To meet legal obligations and respond to disputes or security incidents

Inquiry data is not sold or used to train public AI models.

4. How long do we keep it and how is it deleted?

We keep inquiries and attachments only while needed to handle the inquiry and any related project evaluation, then delete them without undue delay. Each inquiry records a deletion target no later than 400 days after submission, and attachments are deleted automatically from the dedicated private bucket after 400 days.

Electronic files are deleted from the service so they are not readily recoverable; provider backups roll off under the provider’s backup cycle. We honor verified deletion requests unless the information must be kept for a legal obligation or active dispute. You can remove the language preference through your browser settings.

5. Who helps us process it?

The following providers may process data only as needed to operate the service.

• Google Cloud: inquiry API, Firestore database, private file storage and administrator authentication
• Google Analytics 4: optional visit statistics for consenting visitors
• AWS SES: new-inquiry email notifications
• Vercel: website hosting and secure delivery

We do not sell data or provide it to targeted advertising companies. If a project begins, a signed agreement and, where needed, a data processing addendum may set more specific rules.

6. International processing

GenDistrict collaborates across Korea, the United States and Chile and uses the providers above. Inquiry data may therefore be stored or processed in the United States and other countries where those providers operate. We use contractual and security safeguards required by applicable law.

7. How do we protect it?

• Encrypted HTTPS transport
• Private attachment storage with no public URL
• Access controls that require both authentication and administrator permission
• Least privilege, no-store caching and file type and size checks
• Administrator access logs and automatic attachment expiry

No system can guarantee perfect security. Do not send passwords, government identifiers, health information or other sensitive data that is unnecessary for the inquiry.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or objection, withdraw consent or ask for a copy. Email contact@gendistrict.com from the address used for the inquiry and describe the request. We may verify identity to protect other people’s data.

You may also complain to the privacy authority where you live.

9. Children

This business website is not directed to children. We do not knowingly collect personal information from anyone below the age set by applicable law.

10. Changes

Material changes will appear on this page with a new effective date. This version is effective 2026-08-11.

11. AgentDeck is separate

AgentDeck accounts, devices, usage and local-data boundaries are covered by the AgentDeck privacy notice.

12. Optional visit analytics and cookies

Across our public website, we use Google Analytics 4 (GA4) only after affirmative consent. GA4 may set first-party cookies in the _ga family to distinguish visitors and sessions. Their default lifetime is up to two years, although browser rules or deletion may end them earlier. Our policy limits user- and event-level analytics retention to 14 months; reports without user- or device-level identifiers may remain longer.

Form values, email addresses, prompts, inquiry content and files are never included in visit statistics. Advertising storage, advertising user data and ads personalization remain denied.

Before consent, the visit-statistics feature is not loaded and no analytics request is sent. Refusal stops collection, removes existing analytics cookies and does not limit the site or inquiry form. The choice is kept in essential browser storage. Use Cookie settings in any page footer to withdraw or choose again. We also disable analytics when Global Privacy Control or Do Not Track is enabled. Statistics may be processed in the United States and other countries where the service provider operates.