Privacy Policy

최종 수정일: March 14, 2026

Overview

Slate (the "Service Provider") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

1. Purpose of Processing Personal Information

The Service Provider processes personal information for the following purposes. Personal information being processed shall not be used for any purpose other than those stated below, and when the purpose of use changes, the Service Provider will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

Member registration and management: Verification of membership intent, identification and authentication for membership services, maintenance and management of membership, prevention of fraudulent use of services, various notices and notifications, and handling of complaints

Service provision: List creation and management, content provision, personalized services, identity verification, payment and settlement

Marketing and advertising: Development of new services (products) and provision of personalized services, provision of event and promotional information and participation opportunities

2. Processing and Retention Period of Personal Information

The Service Provider processes and retains personal information within the period of retention and use of personal information under applicable laws or the period of retention and use of personal information agreed upon when collecting personal information from the data subject.

Member information: Until membership withdrawal (provided that if an investigation or inquiry is in progress due to violation of relevant laws, until such investigation or inquiry is completed)

Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)

Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)

Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)

Website visit records: 3 months (Protection of Communications Secrets Act)

Data Storage Location

Data Storage Location

  • Database: Supabase (Cloud Service)
  • Data Storage Location: Mumbai, India (South Asia)
  • Data is stored outside the United States, and this is notified in accordance with CCPA/GDPR.

International Data Transfers

  • Transfer Country: India
  • Transfer Region: Mumbai
  • Transferred Data: User profiles, list data, personal information, etc.
  • Transfer Purpose: Service provision and data storage
  • Transfer Method: Cloud service transmission

3. Items of Personal Information Processed

Required items: Username, profile information (avatar, bio)

Optional items: Consent to receive marketing information

Automatically collected items: IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.

Collected via social login: Google (email, name, profile image), Kakao (nickname, profile image), Apple (name, email optional)

Note: This service supports social login only and does not directly collect or store passwords.

4. Provision of Personal Information to Third Parties

The Service Provider processes personal information of data subjects only within the scope specified for the processing purposes and provides personal information to third parties only when it falls under Article 17 and Article 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law.

For smooth service provision, we provide information to Supabase (authentication, database, storage), Google (social login), Kakao (social login, KakaoTalk sharing), etc., to the extent necessary.

5. Outsourcing of Personal Information Processing

The Service Provider outsources authentication services, database management, and file storage management to Supabase Inc. for smooth processing of personal information. When concluding an outsourcing agreement, the Service Provider specifies required matters in accordance with Article 26 of the Personal Information Protection Act and supervises the outsourced party to ensure that personal information is processed securely.

6. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may at any time exercise against the Service Provider the right to demand suspension of personal information processing, the right to request access, and the right to request correction or deletion.

Exercise of rights may be made to the Service Provider in writing, by email, by facsimile transmission (FAX), etc., and the Service Provider will take action without delay.

Request access, correction, or deletion of personal information

7. Destruction of Personal Information

The Service Provider destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period, achievement of the processing purpose, etc.

Information in electronic file form is destroyed using technical methods that make the records irreproducible, and personal information printed on paper is destroyed by shredding or incineration.

8. Personal Information Protection Officer

The Service Provider designates a personal information protection officer to be responsible for overall handling of personal information processing and to handle complaints and relief for data subjects related to personal information processing.

Service name: Slate. Please use the contact or inquiry feature in the app or web for inquiries.

9. Measures to Ensure Safety of Personal Information

The Service Provider takes administrative measures (establishment and implementation of internal management plans, regular employee training, etc.), technical measures (access rights management, installation of access control systems, encryption, installation of security programs), and physical measures (access control to computer rooms and data storage rooms) to ensure the safety of personal information.

10. Operation and Rejection of Cookies

The Service Provider uses cookies to provide users with personalized and customized services. For more information on cookies, please refer to the Cookie Policy.

11. Changes to the Privacy Policy

When there are additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technologies, the Service Provider will announce the changes through the website notice at least 7 days before the implementation of the changes.