Privacy Policy
IGONGGONGI(2002) (hereinafter the "Company") values users' personal information and complies with the Personal Information Protection Act and other applicable laws. This Policy explains for what purposes and in what manner the personal information users provide is processed, and what measures are taken to protect it.
Article 1 (Purposes of Processing, Items Collected, and Retention Period)
The Company processes personal information for the following purposes only and does not use it for any other purpose. The Company does not operate a separate membership-registration process; users use the Service via order number without logging in. Accordingly, the personal information below is destroyed upon expiration of the retention period stated for each item, rather than upon account deletion.
| Category | Purpose | Items Collected | Retention Period |
|---|---|---|---|
| Order and result provision | Receiving orders, generating and providing results | Name, email, date of birth, gender, questionnaire answers (time and place of birth only if the user chooses to provide them) | 5 years under the Act on Consumer Protection in Electronic Commerce |
| Photo-based analysis | Analyzing the user's features to generate the result, including automated analysis (see Article 1-3) | Photos of the user's face and body, optional style reference images | Deleted 30 days after the result is delivered, or 30 days after an order ends without a result (see Article 5) |
| Photo check | Checking uploaded photos for safety and suitability before a result is generated, and keeping a record of that check | Upload confirmation (time), check results and reasons, records of staff review actions | Same period as order information (the photos themselves are deleted as above) |
| Payment | Processing payments and managing payment history | Payment approval number, payment amount (card details, PayPal account details and other payment method information are managed by Toss Payments, PayPal, Paddle, or Dodo Payments and not stored directly by the Company) | 5 years under the Act on Consumer Protection in Electronic Commerce |
| Refund processing | Receiving and processing refund requests, identity verification | Name, email, date of birth, reason for refund | 3 years under the Act on Consumer Protection in Electronic Commerce |
| Marketing channel analysis | Analyzing the effectiveness of advertising/marketing channels | Referral (UTM) information | Retained together with order information, same period as above |
| Service region check | Applying the regions where the Service is offered, and understanding which regions visits and orders come from | Country estimated from the IP address (the IP address itself is not stored), browser time zone and language | Retained together with the order or visit record (for orders, same period as above) |
| Advertising measurement | Measuring the performance of our ads on Meta (Facebook/Instagram) | Pages viewed and order/purchase events, purchase amount, hashed (irreversibly encoded) email address and order number, IP address, browser information, Meta Pixel cookies | Processed by Meta under its own terms (see Article 4) |
| Service usage records | Confirming whether content has been viewed (to determine withdrawal-right restriction), improving service quality | Device/browser information, whether and when the result was viewed | 3 years |
| Email delivery | Sending order/payment/result notification emails and managing delivery history | Recipient email address | Same period as order information |
| Service usage behavior analysis | Analysis of page usage flow and service improvement | Scroll, click, and page navigation records within pages, device and browser information, referral source (UTM), order number (input field contents are masked at the time of collection) | Session recordings: 30 days; aggregated statistics: up to 13 months, then destroyed |
Article 1-2 (Photo Check)
- Uploaded photos are checked automatically before a result is generated. If a photo is flagged, a member of our team may view it for safety review only.
- The automatic check is performed by Anthropic, PBC on the Company's behalf (see Articles 1-3, 3 and 4). It is used only to decide whether a photo can be used for the result; it does not identify users.
- Photos are kept in private storage and can be opened only through short-lived links. Each time staff view a user's photos, it is recorded.
Article 1-3 (Automated Analysis for the Result)
- To prepare the result, the user's photos and questionnaire answers (including self-check answers about skin type, undertone, hair, and body) are analyzed automatically by Anthropic, PBC on the Company's behalf, together with the user's first name and order number. The analysis describes features relevant to styling, such as face proportions and hair texture. It does not identify users, and undertone is taken only from the user's answers, never from the photos.
- The analysis is used only to prepare the user's own result. The user's photos are not included in the result.
- On some pages, before payment, the everyday photo and a few answers (what the user wants help with and how much change they want) are also analyzed by Anthropic, PBC to show the user a short sample preview of the result. The preview is shown only to that user, only its text is kept, and the photo is handled and deleted as set out in Article 5.
- For orders that the Company determines are placed from mainland China (from the IP address and the device's time zone), none of the processing by Anthropic, PBC described above takes place: no sample preview is made, the photos are checked by the Company's team, and the result is prepared by the Company's staff without automated analysis.
- The Company may review a result before it is delivered. Users may ask the Company to review a result or the information it was based on (Article 6).
Article 2 (Provision of Personal Information to Third Parties)
The Company processes users' personal information only within the scope of the purposes stated in Article 1 and, in principle, does not provide it to third parties without user consent. Exceptions apply where required by law or requested by an investigative agency for investigative purposes in accordance with statutory procedures. Information shared with Meta for advertising measurement is described in Articles 1, 4, and 7-2. For orders paid through Paddle, Paddle.com Market Limited acts as reseller and Merchant of Record and processes the information needed for the sale under its own privacy notice (https://www.paddle.com/legal/privacy) (see Article 4). Likewise, for orders paid through Dodo Payments, Dodo Payments Inc. and its affiliates act as reseller and Merchant of Record and process the information needed for the sale under their own privacy policy (https://dodopayments.com/legal/privacy-policy) (see Article 4).
Article 3 (Outsourcing of Personal Information Processing)
The Company outsources the following personal-information processing tasks to external providers in order to operate the Service.
| Provider | Task Outsourced |
|---|---|
| Neon, Inc. | Database hosting and storage |
| Vercel Inc. | Website hosting, image and photo file storage |
| Anthropic, PBC | Automatic check of uploaded photos; automated analysis of photos and answers to prepare results |
| Resend, Inc. | Email delivery |
| Toss Payments Corporation | Payment processing (including PayPal payments in US dollars) |
| Korea PortOne Corp. | Payment integration services |
| Microsoft Corporation | Website usage behavior analysis (Microsoft Clarity) |
When entering into outsourcing agreements, the Company specifies the matters necessary to ensure personal information is managed safely, in accordance with Article 26 of the Personal Information Protection Act, and will announce any change of provider or outsourced task through this Policy.
Article 4 (Overseas Transfer of Personal Information)
The Company transfers personal information overseas as follows in order to operate the Service. Transfers take place over the network when the information is collected or used.
| Recipient | Country | Items Transferred | Purpose | Retention Period |
|---|---|---|---|---|
| Neon, Inc. | Singapore | All items listed in Article 1 except photos | Database hosting | Until termination of the outsourcing agreement |
| Vercel Inc. | Singapore, United States | Access logs, uploaded photos and style reference images (stored in Singapore), other image files | Website hosting, file storage | Photos: as set out in Article 5; other items: until termination of the outsourcing agreement |
| Anthropic, PBC | United States | Uploaded photos and style reference images, questionnaire answers, first name, order number | Automatic photo check, preparing results | Deleted by Anthropic within 30 days of processing; up to 2 years if flagged by Anthropic's automated systems as violating its usage policy, or longer where required by law. Not used to train Anthropic's models. |
| Resend, Inc. | United States | Email address, email content | Email delivery | Until termination of the outsourcing agreement |
| PayPal (through Toss Payments) | United States and other countries where PayPal operates | Order number and payment amount (for payments made with PayPal) | Processing payments in US dollars | Under PayPal's privacy statement |
| Paddle.com Market Limited | United Kingdom and other countries where Paddle and its payment providers operate | Order number, product and payment amount, email address; card or PayPal details, name, country and postcode entered on Paddle's checkout, and information Paddle collects there directly such as IP address (for orders paid through Paddle) | Selling the order as reseller and Merchant of Record, payment processing, receipts, refunds, tax compliance, fraud prevention | Under Paddle's privacy notice (https://www.paddle.com/legal/privacy) |
| Dodo Payments Inc. and its affiliates | United States, India and other countries where Dodo Payments and its payment providers operate | Order number, product and payment amount, name and email address; card or other payment details, country and (where tax requires it) postcode entered on Dodo Payments' checkout, and information Dodo Payments collects there directly such as IP address (for orders paid through Dodo Payments) | Selling the order as reseller and Merchant of Record, payment processing, tax calculation and collection, receipts, refunds, fraud prevention | Under Dodo Payments' privacy policy (https://dodopayments.com/legal/privacy-policy) |
| Microsoft Corporation | United States | Items collected for service usage behavior analysis under Article 1 | Usage behavior analysis | Session recordings: 30 days; aggregated statistics: up to 13 months |
| Meta Platforms, Inc. and its affiliates | United States (and other countries where Meta operates) | Items collected for advertising measurement under Article 1 | Advertising measurement | Under Meta's terms and data policy (https://www.facebook.com/privacy/policy) |
Article 5 (Destruction of Personal Information)
- The Company destroys personal information without delay once the retention period has expired or the processing purpose has been achieved.
- Personal information stored as electronic files is deleted using methods that prevent recovery.
- Information required to be retained by law is moved to a separate database or stored separately.
- Uploaded photos and style reference images are permanently deleted 30 days after the result is delivered, or 30 days after an order ends without a result. Photos that break the photo rules in the Terms of Service are deleted immediately. Users may ask for earlier deletion (Article 6). If a photo appears to contain illegal content involving a minor, the Company restricts all access to it and keeps it only as required to meet its legal obligations.
Article 6 (Rights of Data Subjects and How to Exercise Them)
- Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, including early deletion of their photos.
- Such requests may be made by email (support@pestolovesyou.com), and the Company will act on them without delay.
- However, requests for deletion may be restricted for information required to be retained under applicable law.
Article 7 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
- Administrative measures: Access to personal information is restricted to administrator accounts, and staff viewing of users' photos is recorded.
- Technical measures: Administrator passwords are stored encrypted, and HTTPS is applied to all communication channels. Uploaded photos are kept in private storage and can be opened only through short-lived links. Payment method information is not stored directly by the Company and is managed by the payment service provider (Toss Payments, or Paddle or Dodo Payments for orders paid through them).
Article 7-2 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
- The Company uses Microsoft Clarity cookies (such as _clck and _clsk) to analyze service usage behavior. Collected information is processed in accordance with the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).
- The Company uses the Meta Pixel and Meta Conversions API to measure the performance of its ads on Meta. The Meta Pixel uses cookies (such as _fbp). Collected information is processed in accordance with Meta's Privacy Policy (https://www.facebook.com/privacy/policy).
- Users may refuse or delete cookies through their browser settings, and doing so does not restrict their use of the Service.
Article 8 (Personal Information Protection Officer)
The Company has designated the following Personal Information Protection Officer, who oversees personal information processing and handles user complaints and remedies.
Name: Kang Minseon
Email: support@pestolovesyou.com
Article 9 (Remedies for Infringement of Rights)
Users who need to report or consult regarding an infringement of personal information may contact the following agencies.
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118, no area code needed)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Supreme Prosecutors' Office (spo.go.kr / 1301)
- National Police Agency (ecrm.police.go.kr / 182)
Article 10 (Age Requirement and Personal Information of Children)
The Service is available only to users who are 18 or older, and users confirm this before uploading photos. The Company does not knowingly collect personal information from children. If the photo check indicates that a person in an uploaded photo may be a minor, the photo is not used until reviewed. If it is discovered that a child has provided personal information, the Company will destroy it without delay, except where it must be kept to meet a legal obligation (Article 5).
Article 11 (Changes to This Privacy Policy)
This Policy applies from its effective date. Where there are changes required by law or policy, the Company will announce them through a notice at least 7 days before the change takes effect. However, for material changes to user rights, the Company will provide at least 30 days' advance notice.
Addendum
This Policy takes effect on August 21, 2026.
The amendments to this Policy (addition of usage behavior analysis via Microsoft Clarity) take effect on September 29, 2026.
The amendments to this Policy (uploaded photos and photo check, Anthropic, PBC, Meta advertising measurement, photo storage in Singapore, age requirement) take effect on October 18, 2026.
The amendments to this Policy (automated analysis by Anthropic, PBC to prepare results) take effect on October 19, 2026.
The amendments to this Policy (PayPal payments, sample preview before payment) take effect on October 19, 2026.
The amendments to this Policy (payments through Paddle) take effect on October 20, 2026.
The amendments to this Policy (payments through Dodo Payments) take effect on October 21, 2026.
The amendments to this Policy (service region check) take effect on October 21, 2026.
The amendments to this Policy (orders from mainland China) take effect on October 21, 2026.