Privacy policy
Effective date: 15 September 2026 · privacy-m2-v1
I consent to personal data collection and use for the experience and review verification.
Controller and contact
HTAG Co., Ltd. (주식회사 에이치태그, Republic of Korea) is the controller for Kiyeon K-SAJU. Contact hs@htag.co.kr for privacy questions, access, correction, deletion or withdrawal of consent.
Privacy officer: 최홍석 (Chief Executive Officer), hs@htag.co.kr.
Purposes and data
To provide the cultural experience and report, verify participation, issue benefits and prevent duplicates, we process birth date, solar or lunar calendar selection, topic, language, consent time and version, and session identifiers. Birth time and nickname are optional.
Compatibility uses the other person's birth date and any optional birth time, nickname and relationship information. We do not collect their contact details.
Review verification uses submitted images, store, platform, approval records, and duplicate prevention hashes of phone numbers, device identifiers and images. The original phone number is used temporarily to generate a hash and is not stored.
The AI receives calculated Four Pillars, Five Elements and related derived information, topic, language and relationship tags. It does not receive original birth dates, birth times, nicknames, phone numbers or review images. Derived information may still be associated with a person within this service.
Use of the service automatically collects session cookies (up to 24 hours), duplicate prevention cookies (up to one year), and access records (IP address and browser information). The browser clears cookies when their respective validity periods end; access records are cleared under the hosting provider’s retention policy.
Retention and deletion
Original birth dates, birth times and nicknames for both people are deleted on approval. Access to unapproved sessions, AI input and reports expires 24 hours after the session starts. Database data is then deleted by hourly cleanup. Expired unapproved evidence and temporary files are deleted by daily cleanup.
Approved review images become due for deletion 90 days after approval; approval records and duplicate prevention hashes become due one year after approval. Daily cleanup runs at 03:15 Korean time. Failed file deletions are retried in later runs; deletion normally occurs in the next cleanup after the deadline.
The credit ledger is retained to verify amounts and balances, but its link to the approval record is removed when that record is deleted after one year. Privacy cleanup does not change ledger amounts.
International transfers and external processing
Necessary information is sent to the providers below over encrypted connections when you use the service or generate a report. The database and application servers are in Seoul, Republic of Korea.
Information may pass through the external providers’ global operational systems.
These providers process data to deliver the service, not for advertising sales. You may refuse or withdraw consent by contacting hs@htag.co.kr. Refusing required processing prevents us from providing the experience, reports and review benefits.
Backups and provider retention
The current plan does not keep separate automatic backups for restoring this service.
Our AI provider, OpenAI, is configured not to use request content to improve or train its models. It may retain content for up to 30 days to monitor abuse. Processing servers are not restricted to a particular country.
During AI processing, some information may be held temporarily for up to 24 hours to improve processing speed. Deleting inputs and reports from this service does not immediately end the external provider’s retention period.
Consent and rights
You may refuse required consent, but the experience and review benefits will then be unavailable. Optional information may be omitted. People under 14 may not use this service.
Contact hs@htag.co.kr to request access, correction, deletion, restriction of processing or withdrawal of consent. We may carry out the minimum identity verification needed to handle your request. This version applies to new consent and does not overwrite historical consent records.
Effective date and changes
This policy takes effect on 2026-09-15. Changes will be posted on this page with the revision date.
Processors and locations
| Provider | Work and data | Confirmed processing location |
|---|---|---|
| Supabase | Database and file storage: inputs, evidence, approvals, duplicate prevention values and AI results | Seoul, Republic of Korea |
| Vercel | Application operation: inputs, session information and access records needed to process requests | App servers: Seoul, Republic of Korea |
| OpenAI | AI report wording: calculated information, topic, language and relationship information | Not restricted to a particular country |