This English version is a reference translation. In case of any discrepancy, the Korean original prevails.
만들다.co (the "Company") values the personal information of its users and complies with the Personal Information Protection Act and related laws. This policy applies to Vibeo (the "Service"), operated by the Company.
1. Personal Information Collected and Legal Basis
Required Items (Performance of the Service Agreement)
| Item | Legal Basis |
|---|
| Email address | Performance of contract (PIPA Art. 15(1)(4)) |
| Password (stored encrypted) | Performance of contract |
Collected at Payment (Compliance with Legal Obligations)
| Item | Legal Basis |
|---|
| Payment method information | Act on Consumer Protection in Electronic Commerce Art. 6 (processed via Toss Payments, not stored by the Company) |
Automatically Collected Items (Legitimate Interest in Service Operation)
| Item | Collection Method | Legal Basis |
|---|
| Access IP address | Automatically collected via server logs | Legitimate interest (PIPA Art. 15(1)(6)) |
| Browser type and OS | Automatically collected via server logs | Legitimate interest |
| Service usage records | Automatically collected via server logs | Legitimate interest |
| Cookies (for session maintenance) | Browser cookies | Legitimate interest |
How to refuse cookies: You can refuse cookies under Browser Settings > Privacy and Security > Cookies and Site Data. However, if you refuse cookies, some features such as login may be restricted.
Uploaded Files (For Service Provision, Deleted Immediately After Processing)
| Item | Legal Basis |
|---|
| Photo and video files | Performance of contract (deleted immediately after video generation processing) |
Collected for Marketing Purposes (Separate Consent)
| Item | Legal Basis |
|---|
| Email address | Separate user consent (PIPA Art. 15(1)(1)) |
You will not suffer any disadvantage in using the Service even if you do not consent to receiving marketing communications.
2. Purpose of Collecting and Using Personal Information
| Purpose | Items Used |
|---|
| Membership registration and identity verification | Email, password |
| Service provision and video generation | Email, uploaded files, usage records |
| Payment processing and pass management | Payment information, email |
| Responding to customer inquiries | Email |
| Sending video completion notifications | Email |
| Service improvement and statistical analysis | Access IP, usage records, browser information |
| Promotion and event notices (for consenting users only) | Email |
3. Retention and Use Period of Personal Information
| Item | Retention Period | Basis |
|---|
| Member information (email, etc.) | Until account withdrawal | — |
| Payment records | 5 years | Act on Consumer Protection in Electronic Commerce Art. 6 |
| Access logs | 3 months | Protection of Communications Secrets Act Art. 15-2 |
| Uploaded files (photos and videos) | Deleted immediately upon completion of video processing | — |
| Completed videos | Until account withdrawal or direct deletion | — |
| Marketing consent information | Until consent is withdrawn | — |
4. Procedure and Method of Destroying Personal Information
Personal information whose retention period has expired or whose purpose of collection has been achieved is destroyed without delay.
- Electronic files: Permanently deleted by an unrecoverable method
- Paper documents: Shredded using a shredder
5. Provision of Personal Information to Third Parties and Outsourcing of Processing
Outsourcing of Processing
| Contractor | Location | Outsourced Task | Retention Period |
|---|
| Supabase Inc. | United States | Database and file storage | Until member withdrawal |
| Toss Payments | Republic of Korea | Payment processing | In accordance with the Act on Consumer Protection in Electronic Commerce |
| Resend Inc. | United States | Email delivery | Deleted immediately after delivery |
Overseas Transfer of Personal Information
Supabase Inc. and Resend Inc. are U.S.-based entities, and personal information is transferred overseas as follows.
| Item | Details |
|---|
| Country of transfer | United States |
| Recipient | Supabase Inc., Resend Inc. |
| Items transferred | Email address, service usage records, uploaded files (deleted after processing) |
| Timing and method of transfer | Transmitted over the network during service use |
| Purpose of transfer | Data storage and email delivery |
| Retention period | Until termination of the outsourcing agreement |
| Data protection measures | Standard Contractual Clauses (SCC) concluded |
5-2. Processing of Personal Information When Publishing to the Gallery (User's Choice)
- Only when a user directly chooses (opts in) to publish a video they created to the in-service "Gallery" will that video, along with the title and nickname entered by the user, be made public to an unspecified number of people. Publication is based on the user's explicit consent (PIPA Art. 15(1)(1)), and the default is private.
- Published videos may contain personal information such as people's faces. When publishing a video featuring third parties such as family members or children, the user must obtain the consent of those individuals (including legal guardians) before publishing.
- Published posts may be exposed in the Service gallery and on search engines. If a user switches to private, the post is excluded from gallery and search exposure without delay (it may take some time for external search engine caches to reflect the change).
- To handle reports of published posts, the reporter's account identifier and the reason for the report may be collected and retained.
- Publication-related information (public status, title, nickname) is retained until the user switches to private or withdraws from the account.
6. Processing of Personal Information of Children Under 14
- Children under the age of 14 must obtain the consent of a legal guardian (such as a parent) to use the Service.
- When the Company collects the personal information of a child under 14, it verifies whether the consent of a legal guardian has been obtained.
- A legal guardian may request access to, correction of, deletion of, or suspension of the processing of a child's personal information.
7. Consent to and Withdrawal from Marketing Communications
- Promotions, events, and new feature announcements are sent only to users who have consented to receiving marketing emails.
- Consent to receive communications may be withdrawn at any time.
- Method 1: Click the "Unsubscribe" link at the bottom of the email
- Method 2: Request unsubscription at support@vibeo.co.kr
8. Users' Rights and How to Exercise Them
Users (and their legal guardians) may exercise the following rights at any time.
- Request to access personal information
- Request to correct errors in personal information
- Request to delete personal information
- Request to suspend the processing of personal information
How to exercise: Send an email request to support@vibeo.co.kr
Processing deadline: Processed and the result notified within 10 days of the request date
However, where the law prescribes an obligation to retain personal information, requests for deletion or suspension of processing may be restricted, in which case the reason will be explained to you.
9. Personal Information Protection Officer
| Item | Details |
|---|
| Name | 정태양 |
| Position | Representative |
| Department | Operations Team |
| Phone | 010-5873-7428 |
| Email | support@vibeo.co.kr |
10. Personal Information Dispute Resolution Agencies
If you need remedies or consultation for damages caused by a personal information breach, you may contact the following agencies.
| Agency | Contact |
|---|
| Personal Information Protection Commission | www.privacy.go.kr / 182 (no area code) |
| Korea Internet & Security Agency (KISA) | privacy.kisa.or.kr / 118 (no area code) |
| Supreme Prosecutors' Office Cyber Investigation Division | www.spo.go.kr / 1301 (no area code) |
| National Police Agency Cyber Investigation Bureau | ecrm.cyber.go.kr / 182 (no area code) |
11. Notice of Changes to the Privacy Policy
This policy may be revised in response to changes in laws, policies, or the Service.
- Changes will be announced through in-service notices 7 days before the effective date.
- For material changes unfavorable to users (such as adding collected items or adding third-party provision), notice will be given 30 days before and a re-consent procedure will be carried out.
Business Information
| Item | Details |
|---|
| Business name | 만들다.co |
| Representative | 정태양 |
| Business registration no. | 506-33-04730 |
| Email | support@vibeo.co.kr |
