This is an English translation provided for convenience. If there is any discrepancy between this translation and the Korean version, the Korean version prevails.
더소비 (the "Company") establishes and discloses this Privacy Policy as follows in order to protect the personal information of users of the Inflip service (the "Service") in accordance with the Personal Information Protection Act and other relevant laws, and to handle related complaints promptly and smoothly.
1. Purposes of Processing Personal Information
The Company processes personal information for the following purposes, and if a purpose changes, takes necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
Member management: Member identification and login, confirmation of intent to register, identity verification, prevention of fraudulent use, restrictions on use, notices and notifications, handling of complaints
Provision of transaction services: registration and review of IP products, Terms Negotiation, orders and conclusion of contracts, confirmation of bank transfer deposits, issuance of Licenses and preparation of contracts (certificates), royalty reporting, payment of Settlement Amounts, refunds and return of deposits, requests for return of Settlement Amounts
Dispute handling: receipt and fact-finding of disputes and violation reports, mediation support, processing of contract terminations and refunds, preservation of transaction records
Provision of influencer services: SNS channel verification and display of follower tiers, confirmation of eligibility for Sponsorship registration and application, confirmation of eligibility for community use
Communication: 1:1 chats and transaction chats, community, responding to Customer Center inquiries, sending service notifications (app push and email)
Service improvement and safety: management of access devices, prevention of account theft, response to service failures, usage statistics
Marketing (only where optional consent has been given): notices of events, benefits and new services
2. Items of Personal Information Processed
Category | Items | Time and Method of Collection |
|---|---|---|
Membership registration (required) | Email address, social login provider and the Member identifier issued by that provider, nickname | Received from the social login provider (Google, Apple, Kakao) at registration or entered by the Member |
Membership registration (where provided by the social provider) | Name on the social account (used only to automatically generate a nickname), profile photo URL | Where the Member has consented to its provision at the social login provider |
Member information (optional) | Mobile phone number, profile photo, SNS channel URL | Entered or registered by the Member (mobile phone number is required for Sponsorship registration and manual SNS verification) |
Security | PIN (encrypted value) | Set by the Member |
SNS verification | SNS platform, unique channel identifier, username, channel name, channel URL, follower count | Verified by the Member by connecting an SNS account (YouTube, Instagram, TikTok) or by submitting a channel URL (other platforms) |
Seller settlement | Settlement account (bank name, account number, account holder) | Registered by the Seller |
Buyer payment and refund | Refund account (bank name, account number, account holder), depositor name | Registered by the Buyer; verified against bank transaction history in the course of deposit confirmation |
Transactions | Order and contract details, Licenses, Terms Negotiation messages, royalty sales reports and supporting files, contents of dispute and violation reports and evidence images | Entered or attached by the Member in the course of using the Service |
Sponsorship | (Registrant) business name, address of the location, Sponsorship images / (Applicant) application message, planned visit date, channel and follower count at the time of application, mission posts and links | Entered by the Member when registering or applying for a Sponsorship |
Communication | Chat messages and attachments, community posts and comments, contents of Customer Center inquiries, contents of reports | Entered or attached by the Member in the course of using the Service |
Automatically generated information | IP address, access date and time, device and browser information, app push notification token, login records, service usage records, cookies | Automatically generated and collected in the course of using the Service |
The Company does not collect unique identification information, such as resident registration numbers, or sensitive information.
3. Retention and Use Period of Personal Information
The Company destroys personal information without delay once the purpose of processing has been achieved, such as upon membership withdrawal. However, for the prevention of fraudulent use and response to disputes, the information of withdrawn Members is retained for 90 days from the date of withdrawal and then destroyed (app push notification tokens are deleted immediately upon withdrawal), and information that must be preserved under relevant laws is retained for the following periods.
Information Retained | Legal Basis | Retention Period |
|---|---|---|
Records of contracts or withdrawal of subscriptions, etc. | Act on the Consumer Protection in Electronic Commerce | 5 years |
Records of payment and supply of goods, etc. | Act on the Consumer Protection in Electronic Commerce | 5 years |
Records of consumer complaints or dispute handling | Act on the Consumer Protection in Electronic Commerce | 3 years |
Records of labeling and advertising | Act on the Consumer Protection in Electronic Commerce | 6 months |
Books and supporting documents relating to transactions | Framework Act on National Taxes, Corporate Tax Act and Income Tax Act | 5 years |
Records of access to the Service (login records) | Protection of Communications Secrets Act | 3 months |
The contents of License contracts and the chat and dispute records relating to those contracts are retained for the same period as the above contract records, in order to protect the rights of the transaction counterparty and to resolve disputes.
4. Procedure and Method of Destruction of Personal Information
The Company destroys without delay personal information whose retention period has expired or whose purpose of processing has been achieved. Information that must be preserved under laws is stored separately from other information and is not used for any purpose other than preservation.
Information in electronic file form is deleted by a method that makes it unrecoverable, and paper documents are shredded or incinerated.
For withdrawn Members, items that can identify an individual, such as email address, nickname, contact information, bank account, profile photo and login information, are deleted or replaced with other values so that the individual can no longer be identified (anonymization). Information processed in this way, and transaction and post records from which an individual cannot be identified, may continue to be retained for the operation of the Service and the preservation of transaction records.
5. Provision of Personal Information to Third Parties
The Company processes users' personal information only within the scope of the purposes in Section 1, and provides it to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the user's consent or under special provisions of law. Due to the transaction structure of the Service, information is provided to transaction counterparties as follows.
Recipient | Purpose of Provision | Items Provided | Retention and Use Period |
|---|---|---|---|
Counterparty to the License contract (Seller or Buyer) | Conclusion and performance of the contract, preparation of the License certificate, dispute resolution | Nickname, email address, contract details, royalty report details | The contract period and the retention period under relevant laws |
Sponsorship registrant | Selection of applicants and conduct of the Sponsorship | Applicant's nickname, profile photo, verified channel and follower count, application message, planned visit date, mission posts and links | Until the Sponsorship has been completed |
Transaction counterparties must not use the information provided for any purpose other than the above or provide it to others.
6. Entrustment of Personal Information Processing
For smooth provision of the Service, the Company entrusts personal information processing tasks as follows, and, when concluding entrustment contracts, specifies the matters necessary to ensure that personal information is managed safely and supervises the trustees.
Trustee | Entrusted Task |
|---|---|
Amazon Web Services, Inc. | Operation of service servers and data storage (Seoul Region, Republic of Korea) |
Google LLC | Sending app push notifications (Firebase Cloud Messaging), sending emails |
Kakao Corp. ((주)카카오) | Address search and map display |
7. Overseas Transfer of Personal Information
The Company transfers personal information overseas as follows in order to send app push notifications and emails. Users may refuse the transfer for app push notifications by turning off the app's notification permission or by turning off notification groups in the notification settings. However, mandatory notifications relating to transactions and security cannot be refused because they are necessary for providing the Service.
Item | Details |
|---|---|
Recipient | Google LLC (privacy inquiries: https://support.google.com/policies) |
Destination countries | The United States and other countries where Google's data centers are located |
Time and method of transfer | Transmitted via information and communications networks each time a notification is sent |
Items transferred | App push notification token, email address, notification content |
Purpose of transfer | Sending app push notifications and emails |
Retention and use period | Until the purpose of sending is achieved (subject to the trustee's retention policy) |
8. Rights of Users and Method of Exercise
Users may at any time request access to, correction, deletion or suspension of processing of their personal information, or withdraw their consent.
Nickname, mobile phone number, profile photo, SNS links and settlement and refund accounts can be viewed and corrected directly on the My Information screen of the Service, and membership withdrawal can be made directly on the My Information screen.
Other requests may be made in writing, by email or otherwise to the Customer Center (1:1 Inquiry) or the Chief Privacy Officer, and the Company will take action and notify the result within 10 days from the date of receiving the request.
Deletion may not be requested for information that laws specify as subject to collection and require to be preserved, and a request may be refused in cases prescribed by law, such as where there is a risk of harm to another person's life or body. In such cases, the Company will notify the reason.
Users may exercise their rights through a legal representative or a person delegated by them, in which case a power of attorney must be submitted.
9. Personal Information of Children Under 14
The Company does not accept membership registration from children under the age of 14 and does not collect the personal information of children under the age of 14. If it is confirmed that a child under the age of 14 has registered, the relevant account and personal information will be deleted without delay.
10. Installation, Operation and Refusal of Devices that Automatically Collect Personal Information
The Company uses cookies to keep users logged in, and uses browser storage for screen settings and temporary saving of posts being written.
The Company currently does not use advertising or analytics tools that collect behavioral information. If it begins to use them, it will amend this Policy and give advance notice.
Users may refuse the storage of cookies in their browser settings. However, refusing cookies may make it difficult to use the Service, for example because the login state will not be maintained.
11. Measures to Ensure the Security of Personal Information
Administrative measures: establishment and implementation of an internal management plan, minimization and training of personal information handlers
Technical measures: management of access rights to personal information processing systems, IP restrictions and two-factor authentication for administrator access, one-way encrypted storage of passwords and PINs, encryption in transit (HTTPS), retention of administrator activity logs
Physical measures: use of security-certified cloud data centers
12. Chief Privacy Officer
The Company designates a Chief Privacy Officer as follows to oversee tasks relating to personal information processing and to handle users' complaints and provide relief for damage.
Chief Privacy Officer: 전승범
Contact: cs@inflip.kr
Customer Center: cs@inflip.kr
13. Remedies for Infringement of Rights
To obtain relief for infringement of personal information, users may apply for dispute resolution or consultation to the following organizations.
Personal Information Dispute Mediation Committee (개인정보 분쟁조정위원회): (no area code) 1833-6972, www.kopico.go.kr
Personal Information Infringement Report Center (개인정보 침해신고센터): (no area code) 118, privacy.kisa.or.kr
Supreme Prosecutors' Office (대검찰청): (no area code) 1301, www.spo.go.kr
Korean National Police Agency (경찰청): (no area code) 182, ecrm.police.go.kr
14. Changes to the Privacy Policy
This Privacy Policy applies from the effective date posted on the Service. When content is added or changed, notice is posted on the Service from 7 days before the effective date, and if there is a change material to users' rights, notice is posted from 30 days before.