YProfile privacy policy

Article 1 (Purpose)

This Privacy Policy explains how YProfile, a service provided by BizCode Co., Ltd. (the "Company"), collects, uses, retains, and destroys users' personal information.

Article 2 (Personal Information We Collect)

The Company processes the following personal information to provide the Service.

1. Account information: THE-Y account identifier and email — the password and password-reset information required for login authentication are handled directly by THE-Y and are not retained by the Company.
2. Page content: profile information written by Members, card content (images, videos, files, text, etc.), page addresses, and visibility settings.
3. Payment information: THE-Y order ID, payment amount, currency, applied exchange rate, payment status, selected provider, and receipt URL — sensitive payment details such as card numbers are not collected or retained by the Company or YProfile and are handled by the selected provider, Toss Payments or Paddle.
4. Service usage information: visitor analytics events (visit counts, clicks, referral sources, etc.), access logs, and device and browser information.
5. Team collaboration information: team member invitations and role information.

Article 3 (Purposes of Processing Personal Information)

1. Identifying Members and linking THE-Y accounts
2. Publishing pages and storing and displaying content
3. Processing payment, renewal, and refunds for Paid Plans
4. Providing visitor analytics and improving service quality
5. Sending service-related notifications and responding to customer inquiries
6. Preventing fraudulent use and maintaining service stability

Article 4 (Retention and Use Period of Personal Information)

Personal information is destroyed without delay upon a Member's withdrawal, in principle. Where retention is required under applicable law, information is instead retained separately for the periods below before destruction.

1. Records of contracts, withdrawal of subscription, payment, and supply of goods or services: 5 years (Act on Consumer Protection in Electronic Commerce)
2. Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
3. Access records (login records): 3 months (Protection of Communications Secrets Act)

Article 5 (Provision to Third Parties and Outsourced Processing)

The Company does not, in principle, sell or disclose users' personal information to outside parties, and outsources processing or discloses information only to the extent necessary, as follows.

1. THE-Y — member authentication, login, and account information management
2. Toss Payments or Paddle.com Market Ltd. — payment processing, refunds, receipt issuance, tax calculation, and fraud prevention through the provider selected by the user in THE-Y checkout (processed only as required for that provider and transaction region)
3. Infrastructure and hosting providers — data storage necessary to operate the Service
4. Information may also be disclosed to the extent required where the Company is subject to a legal obligation to submit it, or where a lawful request is made by an investigative authority through due process.

Article 6 (Rights of Users and Legal Guardians)

1. Users may request access to, correction of, deletion of, or suspension of processing of their personal information at any time.
2. Requests may be submitted through in-service account settings or to official.yshorts@gmail.com; the Company will act without delay in accordance with applicable law after verifying identity.
3. Children under the age of 14 may not register as Members without the consent of a legal guardian. If registration without such consent is confirmed, the Company may restrict use of the account and destroy the related information without delay.

Article 7 (Procedure and Method of Destroying Personal Information)

1. Personal information is destroyed without delay once the retention period has elapsed or the purpose of processing has been achieved.
2. Information in electronic file form is deleted using technical methods that prevent recovery, and information in paper form is shredded or incinerated.

Article 8 (Measures to Secure Personal Information)

The Company takes the following technical and administrative measures to protect personal information.

1. Encryption of data in transit (TLS) and encryption of key information at rest
2. Minimizing access privileges and operating access control systems
3. Minimizing the number of staff who handle personal information and conducting regular security reviews

Article 9 (Use and Rejection of Cookies)

1. The Company uses cookies to maintain login state, store language and theme preferences, and analyze service usage.
2. Users may refuse to store cookies through their browser settings, but doing so may make it difficult to use some features of the Service, such as staying logged in.

Article 10 (Protection of Children's Personal Information)

The Service is not directed at children under the age of 14. If the Company becomes aware that it has collected personal information from a child under 14 without a legal guardian's consent, it will destroy that information without delay.

Article 11 (Privacy Officer)

The Company has designated a privacy officer responsible for overseeing personal information processing.

Name: Choi Gun-seong | Email: official.yshorts@gmail.com

Users may direct any inquiry related to personal information arising from use of the Service to the contact above, and the Company will respond and act without delay.

Article 12 (Remedies for Infringement of Rights)

If you need to consult about an infringement of your personal information, you may contact the following bodies.

1. Personal Information Dispute Mediation Committee: 1833-6972 (kopico.go.kr)
2. Personal Information Infringement Report Center (Korea Internet & Security Agency): 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office Cyber Crime Investigation Division: 1301 (spo.go.kr)
4. National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

Article 13 (Changes to This Privacy Policy)

This Privacy Policy may be revised to reflect changes in law, policy, or the Service. Changes will be announced through in-service notices at least 7 days before the effective date (30 days for material changes).

Related documents

If you have questions about the conditions of using the Service, please review our terms of service.