Privacy Policy
Effective date: May 18, 2026
Data Bakery (hereinafter "Company") establishes this Privacy Policy in accordance with the Personal Information Protection Act to protect users' personal information and handle related grievances.
Article 1 (Personal Information Collected)
The Company collects the following personal information to provide the Service.
Upon registration:
- Email address, password (stored encrypted)
Upon Google OAuth login:
- Email address, Google account profile information
Upon paid payment:
- Payment method information (card details are processed by PortOne and not stored by the Company)
- Payment history
Automatically collected during Service use:
- Service usage records, access IP, cookies, session information
Article 2 (Purpose of Collection)
- Member identification and identity verification
- Service provision and operation
- Processing paid service payments and managing usage history
- Handling customer inquiries and delivering notices
- Service improvement and statistical analysis
Article 3 (Retention and Use Period)
- Until membership withdrawal or personal information deletion request
- However, if retention is required by applicable law, the information will be retained for the applicable period:
- Records on contracts and withdrawal of subscription: 5 years (E-Commerce Act)
- Records on payment and supply of goods: 5 years (E-Commerce Act)
- Records on consumer complaints and dispute resolution: 3 years (E-Commerce Act)
- Service access logs: 3 months (Protection of Communications Secrets Act)
Article 4 (Provision to Third Parties)
The Company does not, in principle, provide users' personal information to external parties. Exceptions include:
- When the user has given prior consent
- When required by applicable law
Article 5 (Outsourcing of Processing)
The Company outsources personal information processing as follows to provide the Service.
| Processor | Outsourced Task |
|---|---|
| PortOne, Inc. | Payment processing |
| Google LLC | Google OAuth authentication |
| Amazon Web Services | Server operation and data storage |
Article 6 (User Rights)
Users may exercise the following rights at any time:
- Request to access personal information
- Request correction of errors
- Request deletion (excluding legally required retention items)
- Request suspension of processing
Requests are accepted at info@databakeryasia.com and will be processed within 30 days in principle. If an extension is necessary, the Company will notify the User of the reason and the expected processing date.
Article 7 (Privacy Officer)
Email: info@databakeryasia.com
Article 8 (Use of Cookies)
The Company uses cookies to maintain sessions and operate the Service. Users may refuse cookie storage through browser settings; however, some service features may be restricted as a result.
Article 9 (Service Log Retention)
The Company may retain Users' Service usage records (including access logs and API call records) for up to one year for the purposes of dispute resolution and prevention of Service abuse. Such records may be used as evidence in the event of legal proceedings.
Data Bakery · info@databakeryasia.com