Information and purposes
We process email, name, account identifiers and profile timestamps to create and administer accounts. Email/password signup stores a password hash, not a plaintext password. Optional Google sign-in uses identity information supplied by Google. Sessions, verification and recovery tokens support authentication and security. API-key names, prefixes, hashes, access times and usage counts support API authentication and limits. Support tickets contain the messages you submit. Technical and security records may include IP addresses and request metadata. If billing is enabled, customer, subscription and transaction identifiers support billing and account access; we do not store complete card numbers.
Retention and deletion
Account information is retained while the account is active and is subject to the account-deletion process when deletion is requested. Contract, payment and cancellation records are retained for 5 years, consumer complaint and dispute records for 3 years, and advertising records for 6 months where Korean statutory retention duties apply. Session and recovery records expire according to their security purpose. Security, usage and support records are retained for service operation and dispute handling; contact us for the applicable retention or a deletion request. Legally required records may be retained separately after account deletion.
Service providers
The current production service uses Amazon Web Services for application hosting, storage, logging and transactional email. The configured application and S3 storage region is Sydney, Australia (ap-southeast-2). Google processes information when you choose Google sign-in. Paddle processes purchase and payment information when checkout is enabled, under its own buyer terms and privacy notice. We do not sell personal information or use it for targeted advertising.
International processing
Using the service involves sending account, authentication, support and operational data over HTTPS to AWS infrastructure in Australia. Google sign-in and Paddle checkout may involve processing in other countries under those providers’ arrangements. See AWS Privacy Notice, Google Privacy Policy and Paddle Privacy Policy. Contact us for details of recipients, transfer safeguards and applicable retention. Where law requires additional notice or consent, it must be provided before the relevant processing begins.
Your rights and contact
You may request access, correction, deletion, restriction or withdrawal of consent through Customer support. You may also use the account tools to request deletion. We verify identity and respond within applicable legal deadlines, explaining any lawful limits. You may complain to the competent data protection authority.
Security and browser storage
We use HTTPS, access controls, password and API-key hashing, server-side secrets and key revocation. Necessary cookies support login and security; browser storage remembers language, currency choices and favorites. Google or Paddle may use their own cookies when their features are used. Blocking necessary cookies may prevent login or payment.