Feedcraft (hereinafter the "Company") complies with applicable laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and establishes and discloses the following privacy policy in order to protect users' personal information and to promptly handle related grievances.
Effective date: June 15, 2026
Article 1 (Items of Personal Information Collected)
The Company collects the following personal information for purposes such as membership registration, service provision, and handling of customer inquiries.
1. Membership registration and email login
- Required: email address, password
2. When using social login (Google)
- Required: email address, profile name, profile image
3. Information automatically generated and collected in the course of using the service
- Device information, browser type and settings, operating system, IP address, date and time of access, service usage records, cookies
4. When uploading content and conducting paid transactions
- Posts (video, image, text), transaction information necessary for payment and settlement
5. Identity verification (age verification)
- Members outside Korea (Veriff identity verification): full name, date of birth, verification session identifier
- Members in Korea (mobile phone identity verification): verification results provided by the identity verification agency (name, date of birth, etc.)
※ ID document and facial images are processed by the verification provider and are not stored by the Company.
6. When a content removal request is submitted
- Email address, request details (target content, reason, identity verification method)
Article 2 (Purposes of Collection and Use of Personal Information)
1. Identifying members, confirming intent to register, and providing membership-based services
2. Providing and operating core functions such as posting, recommending, and searching content
3. Processing transactions such as payment, settlement, and refunds for paid content
4. Preventing fraudulent use and unauthorized access, and ensuring service stability
5. Responding to customer inquiries and delivering notices
6. Developing new services, analyzing usage statistics, and improving service quality
7. Verifying users' age (19 or older) and verifying seller identity for compliance with payment network rules
Article 3 (Retention and Use Period of Personal Information)
1. As a general rule, the Company retains a user's personal information until the user withdraws membership, and destroys it without delay upon withdrawal.
2. However, where retention is required under applicable laws and regulations, the information is retained for the following periods.
- Records concerning contracts or withdrawal of subscription: 5 years (the Act on Consumer Protection in Electronic Commerce, etc.)
- Records concerning payment and the supply of goods, etc.: 5 years (the same Act)
- Records concerning consumer complaints or dispute resolution: 3 years (the same Act)
- Records of service use such as access logs: 3 months (the Protection of Communications Secrets Act)
- Creator identity verification records: 3 years after the end of creator activity (for payment card network audits)
Article 4 (Provision of Personal Information to Third Parties)
The Company processes users' personal information only within the scope notified in Article 2 and does not provide it to external parties without the user's prior consent. However, exceptions are made where required by the provisions of laws and regulations, or where there is a request in accordance with lawful procedures by an investigative authority.
Article 5 (Outsourcing of Personal Information Processing)
The Company may outsource certain tasks to external parties in order to provide services smoothly, and, in the event of such outsourcing, discloses the outsourced party and the details of the outsourced work through this policy.
- Authentication and account management: Google Firebase Authentication
- Content/data storage and infrastructure: cloud infrastructure provider
- Payment and settlement processing: payment gateway (PG) and settlement agency (where applicable)
- Identity verification (members in Korea): identity verification agencies and verification intermediary (PortOne)
When entering into outsourcing contracts, the Company stipulates the matters necessary to ensure that personal information is managed safely and supervises compliance therewith.
Article 6 (Transfer of Personal Information Abroad)
In order to provide stable services, the Company transfers (outsources) personal information processing tasks abroad as set forth below. Users may refuse such overseas transfer; however, in that case, use of all or part of the service may be restricted.
- Recipient / Receiving country / Purpose: Google LLC / United States / Authentication and account management
- Recipient / Receiving country / Purpose: Content storage and delivery (CDN) infrastructure provider / Overseas / Content storage and delivery
- Items transferred: Among the items collected under Article 1, information necessary for service provision
- Date and method of transfer: Transmission via the information and communications network at the time the service is used
- Retention and use period: Until the purpose of the outsourcing is achieved or the outsourcing contract is terminated
- Recipient / Country / Purpose: Veriff OÜ / Estonia (EU) / identity verification (age verification) for members outside Korea
* The specific recipients and countries may vary depending on the Company's infrastructure configuration, and any changes will be notified through this policy.
Article 7 (Processing of Personal Information of Children Under the Age of 14)
1. As the Company's service may contain adult content, use by persons under the age of 19 is restricted, and the Company does not accept membership registration or use by children under the age of 14.
2. The Company does not collect personal information of children under the age of 14, and where it is confirmed that such information has been collected, it is destroyed without delay.
Article 8 (Rights of Users and Legal Representatives and How to Exercise Them)
1. Users may at any time request to view, correct, or delete their personal information, to suspend its processing, or to withdraw membership.
2. Viewing and correcting personal information can be done directly through 'Edit Profile' and 'Settings' within the service, and withdrawal can be done directly in 'Settings'.
3. Rights may also be exercised by request to the Company in writing, by email, and the like, and the Company will take action without delay.
Article 9 (Procedures and Methods for Destroying Personal Information)
1. The Company destroys personal information without delay once the retention period has elapsed or the purpose of processing has been achieved.
2. Information in the form of electronic files is deleted using a technical method that renders it unrecoverable, and paper documents are shredded or incinerated.
Article 10 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
- Encrypted storage of passwords and encryption of transmission sections (SSL/TLS)
- Management of access privileges to and access control over personal information processing systems
- Minimizing the number of staff handling personal information and providing regular training
- Encrypted storage of identity verification data (name, date of birth)
Article 11 (Installation, Operation, and Refusal of Cookies)
The Company uses cookies to provide users with customized services. Details such as the types of cookies and how to refuse them are provided in a separate Cookie Policy.
Article 12 (Transmission of Advertising Information)
The Company transmits advertising information such as events and benefits only where the user has consented in advance to receiving it, and the user may withdraw consent to receipt at any time. Where the Company transmits advertising information during nighttime hours (from 9:00 p.m. to 8:00 a.m. the following day) in accordance with applicable laws and regulations, it obtains separate prior consent.
Article 13 (Personal Information Protection Officer)
The Company designates a Personal Information Protection Officer to take overall responsibility for matters relating to the processing of personal information and to handle users' complaints and provide remedies for damage in connection with the processing of personal information.
- Inquiries: jerrypicturesusa@gmail.com
- For Company information such as the officer and contact details, please refer to the 'Company Information' page.
Article 14 (Remedies for Infringement of Rights and Interests)
If you need to report or consult regarding an infringement of personal information, you may contact the following organizations.
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr / 1301)
- National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr / 182)
Article 15 (Duty of Notification)
In the event of any addition, deletion, or amendment to the contents of this privacy policy, notice will be given through notices within the service at least 7 days before the effective date. However, where there is a material change to users' rights, notice will be given at least 30 days in advance.