🔒 Privacy Policy

※ This Policy is a standard template; specific clauses will be updated once company policy and legal advice are finalized. Expert review is recommended before final enforcement.

(CompanyName) (hereinafter the "Company") complies with applicable laws such as the Republic of Korea's Personal Information Protection Act (PIPA) and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and, where applicable, also complies with international norms such as the EU General Data Protection Regulation (GDPR). To process users' personal data securely, the Company establishes and discloses the following Privacy Policy.

1. Personal Data We Collect

(Required) Email (login ID), password. (Optional) Nickname, name, mobile number, gender, birth year, country, and other items entered by the user at sign-up. (Automatically collected) Service usage records, access IP, access date and time, device/browser information, cookies. Purchase and payment history is collected when a payment is made.

2. Purposes and Legal Bases for Collecting and Using Personal Data

We use personal data for member management (identity verification, sign-in), product sales and license provision, payment and refund processing, responding to customer inquiries, service improvement, and prevention of misuse. The legal bases for processing are (under GDPR Article 6): ① the user's consent, ② performance of a contract, ③ compliance with a legal obligation, and ④ the Company's legitimate interests (misuse prevention and security). Receipt of marketing information is based on separate consent and may be withdrawn at any time.

3. Retention and Use Period of Personal Data

Personal data is destroyed without delay once the purpose of its collection and use has been achieved or upon membership withdrawal. However, information that must be retained for a certain period under applicable laws such as the Act on Consumer Protection in Electronic Commerce (e.g., records of contracts, payments, and withdrawal of subscription) is kept for the relevant statutory period.

4. Provision to Third Parties and Consignment of Processing

The Company does not provide personal data to third parties except where there is a legal basis or the user's consent. Where processing must be consigned to provide the service, such as payment processing or email delivery, the Company discloses the consignee and the scope of the consigned work, and manages and supervises the consignee to ensure compliance with applicable laws.

5. Overseas Transfer of Personal Data (International Transfers)

To operate the service, personal data may be stored and processed on overseas servers (such as cloud services). In such cases, the Company secures the safeguards required by applicable laws (a lawful basis for transfer, such as an adequacy decision or Standard Contractual Clauses (SCC)).

6. Rights of the User (Data Subject)

Users may at any time request access to, correction of, deletion of, or suspension of the processing of their personal data, and may withdraw consent by cancelling their membership. Users subject to the GDPR (in the EU/UK, etc.) additionally have the right to restriction of processing, the right to data portability, the right to object to processing, rights regarding automated decisions, and the right to lodge a complaint with a supervisory authority. Rights may be exercised via the contact below.

7. Children Under 14 / Minors

As a rule, the Company does not collect the personal data of children under 14 (under 16 where the GDPR applies) without the consent of a legal guardian.

8. Use of Cookies

Cookies may be used to keep you signed in and for usage statistics. You can refuse cookie storage through your browser settings, but in that case some features, such as sign-in, may be limited.

9. Destruction of Personal Data and Security Measures

Personal data whose retention period has expired or whose processing purpose has been achieved is destroyed by irrecoverable means, and the Company implements the necessary technical and administrative measures, such as access control, encryption of data in transit, encrypted storage of sensitive data, and access-log management.

10. Data Protection Officer and Contact

Inquiries regarding the processing of personal data and requests to exercise your rights may be directed to the contact below. Data Protection Officer: (Representative Name) / Support: (Support Email)

11. Changes to This Policy

If this Policy is changed, the changes and their effective date will be announced on the website in advance.
The Korean version of this Privacy Policy shall prevail in case of any discrepancy between translations.