Feedcraft (hereinafter the "Company") complies with applicable laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and establishes and discloses the following privacy policy in order to protect users' personal information and to promptly handle related grievances.
Effective date: June 15, 2026
Article 1 (Items of Personal Information Collected)
The Company collects the following personal information for purposes such as membership registration, service provision, and handling of customer inquiries.
1. Membership registration and email login
- Required: email address, password
2. When using social login (Google)
- Required: email address, profile name, profile image
3. Information automatically generated and collected in the course of using the service
- Device information, browser type and settings, operating system, IP address, date and time of access, service usage records, cookies
4. When uploading content and conducting paid transactions
- Posts (video, image, text), transaction information necessary for payment and settlement
Article 2 (Purposes of Collection and Use of Personal Information)
1. Identifying members, confirming intent to register, and providing membership-based services
2. Providing and operating core functions such as posting, recommending, and searching content
3. Processing transactions such as payment, settlement, and refunds for paid content
4. Preventing fraudulent use and unauthorized access, and ensuring service stability
5. Responding to customer inquiries and delivering notices
6. Developing new services, analyzing usage statistics, and improving service quality
Article 3 (Retention and Use Period of Personal Information)
1. As a general rule, the Company retains a user's personal information until the user withdraws membership, and destroys it without delay upon withdrawal.
2. However, where retention is required under applicable laws and regulations, the information is retained for the following periods.
- Records concerning contracts or withdrawal of subscription: 5 years (the Act on Consumer Protection in Electronic Commerce, etc.)
- Records concerning payment and the supply of goods, etc.: 5 years (the same Act)
- Records concerning consumer complaints or dispute resolution: 3 years (the same Act)
- Records of service use such as access logs: 3 months (the Protection of Communications Secrets Act)
Article 4 (Provision of Personal Information to Third Parties)
The Company processes users' personal information only within the scope notified in Article 2 and does not provide it to external parties without the user's prior consent. However, exceptions are made where required by the provisions of laws and regulations, or where there is a request in accordance with lawful procedures by an investigative authority.
Article 5 (Outsourcing of Personal Information Processing)
The Company may outsource certain tasks to external parties in order to provide services smoothly, and, in the event of such outsourcing, discloses the outsourced party and the details of the outsourced work through this policy.
- Authentication and account management: Google Firebase Authentication
- Content/data storage and infrastructure: cloud infrastructure provider
- Payment and settlement processing: payment gateway (PG) and settlement agency (where applicable)
When entering into outsourcing contracts, the Company stipulates the matters necessary to ensure that personal information is managed safely and supervises compliance therewith.
Article 6 (Transfer of Personal Information Abroad)
In order to provide stable services, the Company transfers (outsources) personal information processing tasks abroad as set forth below. Users may refuse such overseas transfer; however, in that case, use of all or part of the service may be restricted.
- Recipient / Receiving country / Purpose: Google LLC / United States / Authentication and account management
- Recipient / Receiving country / Purpose: Content storage and delivery (CDN) infrastructure provider / Overseas / Content storage and delivery
- Items transferred: Among the items collected under Article 1, information necessary for service provision
- Date and method of transfer: Transmission via the information and communications network at the time the service is used
- Retention and use period: Until the purpose of the outsourcing is achieved or the outsourcing contract is terminated
* The specific recipients and countries may vary depending on the Company's infrastructure configuration, and any changes will be notified through this policy.
Article 7 (Processing of Personal Information of Children Under the Age of 14)
1. As the Company's service may contain adult content, use by persons under the age of 19 is restricted, and the Company does not accept membership registration or use by children under the age of 14.
2. The Company does not collect personal information of children under the age of 14, and where it is confirmed that such information has been collected, it is destroyed without delay.
Article 8 (Rights of Users and Legal Representatives and How to Exercise Them)
1. Users may at any time request to view, correct, or delete their personal information, to suspend its processing, or to withdraw membership.
2. Viewing and correcting personal information can be done directly through 'Edit Profile' and 'Settings' within the service, and withdrawal can be done directly in 'Settings'.
3. Rights may also be exercised by request to the Company in writing, by email, and the like, and the Company will take action without delay.
Article 9 (Procedures and Methods for Destroying Personal Information)
1. The Company destroys personal information without delay once the retention period has elapsed or the purpose of processing has been achieved.
2. Information in the form of electronic files is deleted using a technical method that renders it unrecoverable, and paper documents are shredded or incinerated.
Article 10 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
- Encrypted storage of passwords and encryption of transmission sections (SSL/TLS)
- Management of access privileges to and access control over personal information processing systems
- Minimizing the number of staff handling personal information and providing regular training
Article 11 (Installation, Operation, and Refusal of Cookies)
The Company uses cookies to provide users with customized services. Details such as the types of cookies and how to refuse them are provided in a separate Cookie Policy.
Article 12 (Transmission of Advertising Information)
The Company transmits advertising information such as events and benefits only where the user has consented in advance to receiving it, and the user may withdraw consent to receipt at any time. Where the Company transmits advertising information during nighttime hours (from 9:00 p.m. to 8:00 a.m. the following day) in accordance with applicable laws and regulations, it obtains separate prior consent.
Article 13 (Personal Information Protection Officer)
The Company designates a Personal Information Protection Officer to take overall responsibility for matters relating to the processing of personal information and to handle users' complaints and provide remedies for damage in connection with the processing of personal information.
- Inquiries: jerrypicturesusa@gmail.com
- For Company information such as the officer and contact details, please refer to the 'Company Information' page.
Article 14 (Remedies for Infringement of Rights and Interests)
If you need to report or consult regarding an infringement of personal information, you may contact the following organizations.
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr / 1301)
- National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr / 182)
Article 15 (Duty of Notification)
In the event of any addition, deletion, or amendment to the contents of this privacy policy, notice will be given through notices within the service at least 7 days before the effective date. However, where there is a material change to users' rights, notice will be given at least 30 days in advance.