Privacy Policy
the Company(hereinafter the "Company") complies with the Personal Information Protection Act and other relevant laws, and establishes and discloses this Privacy Policy as follows to safely process users’ personal information.
1. Personal data collected and how it is collected
| Category | Items collected | When collected |
|---|---|---|
| Registration (required) | Email, mobile number, name, OAuth identifiers (Google / Apple / Naver / Kakao) | At registration |
| Using the Service (required) | Date and time of birth, gender, place of birth, reading results | When using the Saju, compatibility, date-selection or name-analysis services |
| Payment (required) | Amount, payment method, order number, payment date and time | At payment |
| Marketing (optional) | Consent to receive marketing | At registration |
2. Purposes of collection and use
- Identifying and verifying members, and preventing misuse
- Providing the Saju, compatibility, date-selection and name-analysis services
- Processing payments, managing subscriptions and settling fees
- Sending service notices such as subscription expiry reminders
- (With optional consent) informing you about events and benefits
3. Retention and use period
As a rule the Company destroys personal data without delay when a member withdraws. However, the following information is retained for the stated period as required by law.
| Retained item | Retention period | Legal basis |
|---|---|---|
| Records of contracts or withdrawal of subscription | 5 years | Act on Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률) |
| Records of payment and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률) |
| Records of consumer complaints or dispute handling | 3 years | Act on Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률) |
On withdrawal, identifying data such as name, phone number and email is deleted or anonymised immediately. Payment records subject to the statutory retention above are kept for the retention period in a form that cannot identify an individual.
4. Provision of personal data to third parties
The Company does not, in principle, provide users’ personal information to outside parties. However, it provides the minimum information necessary for payment processing to a designated payment gateway (PG company), and makes an exception where required by law or upon a lawful request from an investigative agency.
5. Entrustment of personal data processing
To provide the Service the Company entrusts personal data processing as follows.
| Processor | Entrusted work |
|---|---|
| Spidercore Inc. (Cloudtype) | Server hosting and operation |
| Cloudflare, Inc. | Data backup storage (Cloudflare R2) |
| Anthropic PBC | Generating the wording of AI reports (Claude API) |
| Google LLC | Social login authentication (OAuth) |
| NAVER Cloud Corp. | Sending verification and notification email |
| Payment gateway (PG) provider | Payment processing and fraud prevention |
The Company sets out in each entrustment contract what is required to keep personal data secure, and discloses any change of processor through this Policy.
5-1. Transfer of personal data overseas
The Company transfers personal information overseas as follows for sentence generation in AI reports. Judgment (Gyeokguk, Yongsin, strength/weakness, etc.) is performed only on the Company’s servers, and AI only plays the role of explaining that result.
| Category | Detail |
|---|---|
| Recipient | Anthropic PBC (Claude API) |
| Recipient country | United States |
| Items transferred | Name (if entered), Myeongrihak judgment results (Gyeokguk, Yongsin, Five Elements composition, etc.), and contextual information needed to generate the report |
| Not transferred | Email, mobile number, payment information, password |
| Time and method of transfer | Sent over encrypted connection (HTTPS) at the moment the member requests an AI report |
| Purpose | To explain the judgment in plain language |
| Retention period | Per Anthropic’s API policy — not used for training. Generated reports are stored on the Company’s servers. |
Users may refuse the overseas transfer. However, if you refuse, the AI report service cannot be used, while judgment results (such as the free Saju reading) remain available as before. Please notify us of your refusal via the Privacy Officer contact below.
5-2. Automatic data collection tools
The Company uses the following to keep you signed in and make the Service easier to use.
- Browser local storage (localStorage) — login token, selected language
- You can delete or block this in your browser settings; if you block it, you may not stay signed in.
The Company serves ads through Google AdSense only on content (article) pages. Google and other third parties may use cookies to show ads based on your interests. No ads appear on the Saju/compatibility/date-selection input and result pages, checkout, or login screens. You can turn off personalized ads in Google Ad Settings (adssettings.google.com).
5-3. Measures to keep personal data secure
- Encryption in transit (HTTPS)
- Passwords stored in a form that cannot be decrypted
- Access rights to personal data systems kept to a minimum
- Data backup and recovery arrangements
6. Personal data of children under 14
The Company does not collect personal information from children under the age of 14, and confirms that a member is 14 or older at the time of registration. Legal guardians wishing for a child under 14 to use the Service should contact the Privacy Officer at the contact information below.
7. Your rights and how to exercise them
Users may at any time request to view, correct, delete, or suspend the processing of their personal information. Requests can be made through the "My Account" menu within the Service or via the Privacy Officer contact information below, and the Company will act without delay in accordance with applicable law.
8. Procedure and method of destruction
Where the purpose of processing has been achieved, for example on withdrawal of membership, information held as electronic files is permanently deleted by a method that makes recovery impossible.
9. Data protection officer
Under Article 31 of the Personal Information Protection Act and Article 32 of its Enforcement Decree, a personal information controller that qualifies as a small business owner under the Framework Act on Small Business Owners may choose not to designate a separate Privacy Officer, in which case the business owner (representative) personally becomes the Privacy Officer. the CompanyIf the Company falls under this case, the Privacy Officer listed below may be the same person as the representative.
| Category | Detail |
|---|---|
| Name | - |
| Contact | - |
You may contact the data protection officer about any personal data enquiry, complaint or remedy arising from use of the Service.
10. Changes to this Privacy Policy
This Policy applies from its effective date. Where content is added, deleted or amended because of changes in law or policy, notice is given from 7 days before the change takes effect.
Announcement date: · Effective date: same as the announcement date