Privacy Policy

1. Purpose of Processing Personal Information

UDID Inc. (hereinafter "the Company") processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and necessary measures such as obtaining separate consent will be implemented if the purpose of use changes.

• Membership registration and management: Identity verification and prevention of fraudulent use
• Service provision: Integration of social media accounts including Instagram, AI-based fan message management, automatic comment responses, and AI-assisted support and reply generation through customer support chat (web chat)
• Marketing and transmission of advertising information: Providing event information and participation opportunities and other advertising information. Processing for this purpose and the transmission of advertising information take place only where the data subject has given separate, explicit prior consent, and such consent is not replaced by consent to the Terms of Service or to this Policy.
• Handling of customer inquiries: Receiving inquiries submitted through customer support chat (web chat) and messenger channels, verifying the person making the inquiry, conducting support conversations, notifying the outcome and progress of processing, and retaining support records
• Service improvement and quality management: Analysing service usage statistics, reviewing and improving support quality, and maintaining the knowledge materials used for automated responses

2. Personal Information Items Collected

The Company collects the following personal information in order to provide the Service. The items collected differ depending on how the Service is used (member use / customer support chat use). For customer support chat, the items actually collected vary according to the pre-chat form configured by the Member for their own channel. Required and optional items are indicated separately on each input screen.

• Required at sign-up: Email address, password, nickname
• Social login: Social account unique identifier, profile image, name
• Instagram integration: Instagram account ID, access token, profile information, posts, comments, and direct message (DM) data, and account and post insights (views, reach, engagement, follower demographics). When connecting through a Facebook Page: the linked Facebook Page ID and name, the Page access token, and the Facebook user identifier
• Automatically collected during member use: IP address, cookies, service usage records, visit history
• Required when using customer support chat (web chat): The content of the inquiry, and the required fields of the pre-chat form configured by the Member (for example, name and contact number (mobile phone number))
• Optional when using customer support chat (web chat): Email address, inquiry type, order number, service account ID, company name, business registration number, address and other fields configured by the Member for handling inquiries, together with files attached by the person making the inquiry
• Automatically collected when using customer support chat (web chat): IP address, browser information (User-Agent), the address of the page from which the chat was opened, session identification cookies, and conversation and access records
• Items received from the connected site: Where an inquiry is made while signed in to a website or application operated by a Member, the name, email address, contact number and that site's user identifier that the site transmits with a digital signature

The Company does not collect unique identifying information (resident registration numbers, passport numbers, driver's license numbers, alien registration numbers) that is unnecessary for handling an inquiry, nor does it collect sensitive information such as ideology, beliefs, health, or sex life. Inquiring Users should take care not to enter such information into the body of an inquiry.

3. Processing and Retention Period

The Company processes and retains personal information within the retention period as required by law or as agreed upon during collection.

• Member information: Until membership withdrawal (destroyed within 30 days after withdrawal)
• Instagram integration data: Deleted immediately upon disconnection
• Service usage records: 3 years (E-Commerce Act)
• Login records: 3 months (Telecommunications Privacy Act)
• Customer support chat (web chat) records (inquiry content, support conversation, attached files): Retained until the purpose of handling the inquiry has been achieved; where applicable law requires retention, they are kept for the period prescribed by that law.
• Customer support chat (web chat) access and session records (IP address, browser information, page address): Retained only for as long as necessary to achieve service-delivery and security purposes. Plain access records with no conversation are not retained, and the access information (IP address, browser information) contained in inquiry records is deleted once it is no longer needed to handle the inquiry.
• Records of consent to, and opt-out from, advertising information: Retained for the period prescribed by applicable law, so that the fact of consent and of opt-out can be verified.

4. Provision to Third Parties and Outsourcing of Processing

The Company processes personal information only within the scope specified in Section 1 and provides personal information to third parties only with the consent of the data subject or as required by special provisions of law. In addition, to the extent necessary to provide the Service, the Company outsources personal information processing tasks as set out below, and supervises the trustees so that they do not violate applicable laws.

• Meta (Instagram): Authentication information for Instagram API integration
• Payment processors: Minimum information required for paid service payment processing
• AI service providers (OpenAI, Anthropic, Google): Comments and messages, and the inquiry content and support conversations from customer support chat (web chat), are processed for analysis and AI reply generation, and are used only within the scope of that purpose
• SMS and KakaoTalk notification message providers: Recipient contact details and message content, for sending notifications such as reply-arrival notices
• Cloud infrastructure providers: Provision of the servers and data storage required to operate the Service

5. Destruction of Personal Information

The Company destroys personal information without delay when it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved.

• Electronic files: Permanently deleted using irreversible methods
• Records and printouts: Shredded or incinerated

6. Rights and Obligations of Data Subjects

Data subjects may exercise the following personal information protection rights at any time:

• Request to access personal information
• Request correction of errors
• Request deletion
• Request to suspend processing
• Withdrawal of consent to, and opt-out from, advertising information

How to exercise your rights

You may exercise your rights by the methods below. Opting out of advertising information is processed free of charge. The Company processes requests within the period prescribed by applicable law from the date the request is received and informs the data subject of the result.

• Opting out of advertising SMS: Use the free opt-out method shown in the advertising message (an opt-out page link or a toll-free opt-out phone number). For the link, open it and press the confirmation button; the opt-out takes effect immediately. Informational and transactional notifications, such as reply-arrival notices, may still be sent after the opt-out.
• Opting out of reply-notification emails: Open the opt-out link shown in the email and press the confirmation button; the opt-out takes effect immediately.
• Other requests to access, correct, delete, or suspend processing: Submit the request in writing, by email or by similar means through the privacy officer contact details in Section 8 or through customer support.

7. Security Measures for Personal Information

The Company takes the following measures to ensure the safety of personal information:

• Encryption: Encrypted storage of passwords and sensitive information
• Technical measures against hacking: SSL/TLS encrypted communication, firewall operation
• Access control: Minimizing personnel handling personal information
• Regular security audits: Vulnerability checks and improvements

8. Privacy Officer

To obtain relief from infringement of personal information, data subjects may apply for dispute resolution or consultation to bodies such as the Personal Information Dispute Mediation Committee, the Privacy Infringement Report Center, the Cyber Investigation Division of the Supreme Prosecutors' Office, and the Cyber Investigation Bureau of the National Police Agency. Contact details and application methods for each body are available on that body's website.

9. Company Information

10. Changes to Privacy Policy

This Privacy Policy applies from August 16, 2026. The previous policy (effective July 1, 2026) is superseded by this Policy as of that date. Where content is added, deleted or amended, notice will be given through the website notice board from seven days before the effective date.