Privacy Policy

1. Purpose of Processing Personal Information

UDID Inc. (hereinafter "the Company") processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and necessary measures such as obtaining separate consent will be implemented if the purpose of use changes.

• Membership registration and management: Identity verification and prevention of fraudulent use
• Service provision: Instagram account integration, AI-based fan message management, automatic comment responses
• Marketing and advertising: Providing event information and participation opportunities, service usage statistics

2. Personal Information Items Collected

The Company collects the following personal information for service provision:

• Required: Email address, password, nickname
• Social login: Social account unique identifier, profile image, name
• Instagram integration: Instagram account ID, access token, profile information, post and comment data
• Automatically collected: IP address, cookies, service usage records, visit history

3. Processing and Retention Period

The Company processes and retains personal information within the retention period as required by law or as agreed upon during collection.

• Member information: Until membership withdrawal (destroyed within 30 days after withdrawal)
• Instagram integration data: Deleted immediately upon disconnection
• Service usage records: 3 years (E-Commerce Act)
• Login records: 3 months (Telecommunications Privacy Act)

4. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in Article 1 and provides personal information to third parties only with the consent of the data subject or as required by special provisions of law.

• Meta (Instagram): Authentication information for Instagram API integration
• Payment processors: Minimum information required for paid service payment processing

5. Destruction of Personal Information

The Company destroys personal information without delay when it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved.

• Electronic files: Permanently deleted using irreversible methods
• Records and printouts: Shredded or incinerated

6. Rights and Obligations of Data Subjects

Data subjects may exercise the following personal information protection rights at any time:

• Request to access personal information
• Request correction of errors
• Request deletion
• Request to suspend processing

7. Security Measures for Personal Information

The Company takes the following measures to ensure the safety of personal information:

• Encryption: Encrypted storage of passwords and sensitive information
• Technical measures against hacking: SSL/TLS encrypted communication, firewall operation
• Access control: Minimizing personnel handling personal information
• Regular security audits: Vulnerability checks and improvements

8. Privacy Officer

9. Company Information

10. Changes to Privacy Policy

This Privacy Policy is effective from December 1, 2024. Any changes will be announced through website notices.