Privacy Policy

Effective Date: April 1, 2026

This Privacy Policy has been translated from the Korean version for convenience only. In the event of any discrepancy, inconsistency, or conflict in interpretation between the Korean version and any translated version, the Korean version shall prevail.

1. General Provisions

The Company values the personal information of users of the PLANDOG service and complies with applicable laws and regulations, including the Personal Information Protection Act of Korea. Through this Privacy Policy, the Company explains what personal information it processes, for what purposes, for how long, and how users may exercise their rights.

2. Categories of Personal Information Processed

The Company may process the following personal information in the course of providing the Service.

2.1 Registration and Account Management

2.2 Service Use and Provision of Generation Functions

2.3 Payment and Order Processing

A. International Card Payment (Polar)

2.4 Inquiries and Dispute Handling

3. Purposes of Processing Personal Information

The Company processes personal information for the following purposes:

  1. membership registration, identity verification, account management, and login support;
  2. provision of AI-based document generation, screen design assistance, and other services;
  3. confirmation of credit payments, order management, and refund processing;
  4. responding to customer inquiries, handling complaints, resolving disputes, and delivering notices;
  5. service quality improvement, security monitoring, prevention of abusive use, and statistical analysis; and
  6. compliance with legal obligations, record retention, tax and accounting processing, and audit response.

4. Processing and Retention Period of Personal Information

  1. The Company retains personal information until the purpose of collection and use is achieved and, once such purpose has been achieved, destroys it without delay.
  2. However, where retention for a certain period is required under applicable laws, the Company will store the information separately for that period.

4.1 General Retention Periods

4.2 Retention Under Applicable Laws

5. Provision of Personal Information to Third Parties

The Company does not, in principle, provide users' personal information to external parties. However, exceptions may apply in the following cases:

  1. where the user has given prior consent;
  2. where disclosure is unavoidable in order to comply with a specific legal obligation;
  3. where requested by investigative authorities, courts, or other organizations with lawful authority; or
  4. where disclosure is lawfully made within the scope necessary to provide the Service to the user.

If the Company actually provides personal information to a third party, it will disclose through the Service interface or separate notice the recipient, purpose of provision, items provided, and retention/use period.

6. Outsourcing of Personal Information Processing

The Company may outsource part of its work to external service providers in order to provide the Service smoothly. When entering into outsourcing agreements, the Company manages and supervises such providers so that personal information is processed safely in accordance with applicable laws.

Service ProviderOutsourced Work
Polar and related payment infrastructure providersProcessing of international card payments, order/refund processing, and invoice issuance support
SmileServeInfrastructure operation and data storage
SupabaseLogin and DBMS

7. Cross-Border Transfer of Personal Information

The Company may transfer personal information outside Korea in the course of processing international card payments. In accordance with applicable laws, the Company discloses the legal basis for such transfer, the recipient, destination country, transferred items, purpose, and retention period.

RecipientDestination CountryTransferred ItemsPurpose of TransferTiming and MethodRetention/Use Period
Polar Software Inc. and related payment infrastructure providers United States and other countries necessary for payment processing Name, email, order/payment information, and tax information Card payment processing, order management, refunds, and invoice processing Network transmission at the time of payment Until the transaction purpose is achieved and for any additional period required by applicable law

Supabase currently uses servers located in Korea and is therefore not included in the cross-border transfer items within the current service operation scope.

8. Procedures and Methods for Destruction of Personal Information

  1. The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.
  2. Information that must be retained under applicable law will be stored in a separate database or separate storage location and destroyed after the prescribed period expires.
  3. Electronic files are deleted using technical methods that make recovery or reproduction impossible, and paper documents are destroyed by shredding, incineration, or equivalent methods.

9. Rights of Users and Their Legal Representatives and How to Exercise Them

  1. Users may request access to, correction of, deletion of, suspension of processing of, or withdrawal of consent for their personal information at any time.
  2. Users may directly modify certain personal information or request deletion through account settings within the Service or the customer inquiry channel.
  3. The Company will take action without delay except where the exercise of rights is restricted by applicable law.
  4. Users' rights may also be exercised through their legal representatives or authorized agents. In such cases, a power of attorney or other documentation required by applicable law may be requested.
  5. This Service is not intended for persons under 19 years of age, and minors may not use the Service.

10. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information:

  1. minimization of access authority and access control for personal information;
  2. encryption or equivalent protective measures for passwords and other important information;
  3. retention and inspection of security logs and access records;
  4. operation of security programs, vulnerability checks, and technical safeguards; and
  5. education for personnel handling personal information and establishment/implementation of internal management plans.

11. Use of Cookies and Similar Technologies

  1. The Company may use cookies or similar technologies for maintaining login sessions, improving services, analyzing usage patterns, and strengthening security.
  2. Users may refuse or delete cookies through browser settings. However, if cookie storage is refused, use of some services may be restricted.

12. Protection of Children's and Minors' Personal Information

This Service is not intended for persons under 19 years of age, and minors are not permitted to register for or use the Service. If the Company becomes aware that it has collected personal information of a child or minor requiring separate consent under applicable law without recognition, it will promptly delete the information or take other necessary measures.

13. Chief Privacy Officer and Contact Information

Users may contact the person below regarding inquiries, complaint handling, or relief related to the processing of personal information.

The Company will respond to and handle user inquiries without delay.

14. Methods of Remedy for Infringement of Rights and Interests

If users need to report or seek consultation regarding personal information infringement, they may contact the following organizations:

15. Changes to This Policy

The Company may amend this Privacy Policy. If there are material changes, the Company will provide prior notice of the effective date, reasons for change, and key details through notices within the Service or a linked page.

Addendum

This Policy will apply from April 1, 2026.