Privacy Policy
Unicorn Soft Co., Ltd. (hereinafter referred to as "the Company") complies with privacy protection regulations under relevant laws such as the Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Protection of Communications Secrets Act, and Telecommunications Business Act. We are committed to protecting users' rights by establishing a privacy policy in accordance with relevant laws.
The privacy policy contains the following information.
1. Purpose and Items of Personal Information Collection and Use
2. Method of Personal Information Collection and Consent
3. Third-Party Provision of Personal Information
4. Entrustment of Personal Information Processing
5. Processing and Retention Period of Personal Information
6. Personal Information Destruction Procedures and Methods
7. Rights and Obligations of Information Subjects and How to Exercise Them
8. Measures to Ensure the Safety of Personal Information
9. Installation/Operation of Automatic Personal Information Collection Devices and Refusal
10. Chief Privacy Officer and Contact Information
11. Changes to the Personal Information Processing Policy
1. Purpose and Items of Personal Information Collection and Use
The Company collects the following minimum personal information necessary for member registration, customer consultation, and service provision and use.
Member Registration (Required)
| Processing Purpose | Required Items |
|---|---|
| Service user identification and member management, confirmation of registration, identity verification, prevention of fraudulent use, handling of civil complaints such as inconveniences, delivery of notices | Email address, Password |
Service Use (Required)
| Purpose of Use | Required Items |
|---|---|
| Provision of services promised to users, provision of customized services, provision of complaints and processing history, service improvement, checking statistics on service use | Email address, OS, MCC/MNC operator country information, LTE/WIFI network information, Push reception status, PC specification information, Browser information, Cookies |
| Prevention of fraudulent service use | Email address, SSAID (Android), To be determined (iOS, Windows, Mac), IP Address |
Paid Service Use (Required)
| Purpose of Use | Required Items |
|---|---|
| Purchase of paid products, notification of product purchase results | Email address, Name, Card number, Expiration date, First 2 digits of password, Date of birth, Business registration number |
| Issuance of tax invoices and receipts | Email address, Name, Phone number |
| Settlement of usage fees, refund processing, transaction error processing | Email address, Transaction information |
Use for Marketing and Advertising (Optional)
| Purpose of Use | Required Items |
|---|---|
| Use in marketing such as product-related news and event discounts | Email address |
2. Method of Personal Information Collection and Consent
- Collection Method: The Company collects personal information through service registration procedures, service usage information, events, prize draws, personal information processing trustees or affiliates, and tools to collect generated information when using mobile and wireless internet services.
- Consent Method: The Company has a consent procedure at the time of each service when collecting and using customer's personal information, and provides a procedure for the customer to check 'Agree'. Clicking 'Agree' is considered as consenting to the collection and use of personal information.
3. Third-Party Provision of Personal Information
The Company uses personal information within the range notified in "1. Purpose and Items of Personal Information Collection and Use", and does not use it beyond this range or disclose personal information to the outside in principle without the prior consent of the information subject. However, the following cases are exceptions:
① When the information subject has agreed in advance
② When there is a request from an investigative agency according to the procedures and methods set by laws for the purpose of investigation or in accordance with the provisions of laws
4. Entrustment of Personal Information Processing
The Company entrusts personal information as follows for smooth business processing, and stipulates necessary matters so that personal information can be safely managed when entering into an entrustment contract in accordance with related laws.
The Company's personal information entrustment processing agencies and entrustment business contents are as follows.
| Trustee | Entrusted Business |
|---|---|
| Nice Payments Co., Ltd. | Domestic payment processing agency |
| Naver Financial Co., Ltd. | Domestic easy payment service agency |
| Kakao Pay Corp. | Domestic easy payment service agency |
| Koreaportone Co., Ltd. | PG business agency |
Among personal information processing entrustment, entrustment business processed by overseas corporations is as follows.
| Trustee | Transfer Purpose | Transfer Country | Transferred Personal Information | Transfer Date and Time | Information Management Officer and Contact Information | Retention and Use Period of Personal Information |
|---|---|---|---|---|---|---|
| Zendesk, Inc. | Record keeping for user consultation, complaints, disputes, etc. | USA (Northern Virginia) | Name, Email, Consultation content | Transfer via network whenever a consultation request is written | privacy@zendesk.com | Upon completion of consultation business |
| Amazon Web Service, Inc. | Data storage and system operation | Seoul (Seoul Region) | All personal information collected in the process of providing services | Transfer via network when inputting information necessary for service use | aws-korea-privacy@amazon.com | Until membership withdrawal or termination of entrustment contract |
| Trustee | Transfer Purpose | Transfer Country | Transferred Personal Information |
|---|---|---|---|
| Zendesk, Inc. | Record keeping for user consultation, complaints, disputes, etc. | USA (Northern Virginia) | Name, Email, Consultation content |
| Amazon Web Service, Inc. | Data storage and system operation | Seoul (Seoul Region) | All personal information collected in the process of providing services |
| Transfer Date and Time | Information Management Officer and Contact Information | Retention and Use Period of Personal Information |
|---|---|---|
| Transfer via network whenever a consultation request is written | privacy@zendesk.com | Upon completion of consultation business |
| Transfer via network when inputting information necessary for service use | aws-korea-privacy@amazon.com | Until membership withdrawal or termination of entrustment contract |
5. Processing and Retention Period of Personal Information
- Personal information is processed and retained within the retention/use period of personal information agreed upon when collecting personal information from the information subject, and in principle, personal information is destroyed without delay when the purpose of processing is achieved. However, if separate consent is obtained from the user for the personal information storage period, or if laws impose an obligation to store information for a certain period, the personal information is safely stored during that period.
- Even after membership withdrawal, if it is necessary to preserve it in accordance with the provisions of related laws, member information is stored for a certain period according to laws.
- To prevent misuse of the Service, including re-registration with the same email address after account deletion, the Company retains email address information for the minimum period necessary. When an account is deleted, the original email address is immediately destroyed and stored separately as an irreversible hash value that cannot be decrypted. The retention period is 3 months from the account deletion date and may be extended to 6 months if misuse is confirmed. The information is destroyed without delay when the retention period expires.
| Item to Preserve | Basis Law | Retention Period |
|---|---|---|
| Records on contracts or withdrawal of subscription, etc. | Act on the Consumer Protection in Electronic Commerce, etc. | 5 years |
| Records on payment and supply of goods, etc. | 5 years | |
| Records on consumer complaints or dispute resolution | 3 years | |
| Records on labeling/advertising | 6 months | |
| Records on electronic financial transactions | Electronic Financial Transactions Act | 5 years |
| Service visit records | Protection of Communications Secrets Act | 3 months |
6. Personal Information Destruction Procedures and Methods
- In principle, personal information is destroyed without delay when the purpose of processing is achieved.
- The procedures and methods for destroying personal information are as follows.① Destruction ProcedureInformation entered by the information subject is transferred to a separate DB (in the case of paper, a separate document box) after the purpose is achieved, and is destroyed after being stored for a certain period according to internal policies and reasons for storage under other related laws (see "5. Processing and Retention Period of Personal Information").② Destruction MethodPersonal information printed on paper is destroyed by shredding with a shredder or incineration.Personal information stored in electronic file form is deleted using technical methods that cannot reproduce the records.
7. Rights and Obligations of Information Subjects and How to Exercise Them
Information subjects can view or modify their registered personal information at any time, and can also request deletion of information and suspension of processing. If you want information deletion or suspension of processing, please contact the Chief Privacy Officer in writing, by phone, or by email, and we will take measures without delay.
8. Measures to Ensure the Safety of Personal Information
The Company takes technical, managerial, and physical measures to ensure safety so that personal information is not lost, stolen, leaked, falsified, or damaged in processing personal information.
- Minimization of and Training for Personal Information Processing Staff- The Company limits the staff processing personal information to those in charge, assigns separate passwords for this purpose, updates them regularly, and performs occasional training for those in charge, emphasizing personal information protection.
- Access Control for Unauthorized Persons- The Company has a separate physical storage place for the personal information system where personal information is stored after collection, and has established and is operating access control procedures for it.
- Operation of Dedicated Personal Information Protection Organization- Through the in-house dedicated personal information protection organization, we check the implementation of the Company's personal information processing policy and whether the person in charge complies with it, so that we can immediately correct and fix any problems found. However, even if the Company has fulfilled its personal information protection obligations, the Company is not responsible for damages not caused by the Company's fault, such as user negligence or accidents in areas not managed by the Company.
- Countermeasures Against Hacking, etc.- The Company is doing its best to prevent personal information from being leaked or damaged by hacking or computer viruses. We back up data from time to time to prepare for damage to personal information, use the latest vaccine programs to prevent users' personal information or materials from being leaked or damaged, and enable safe transmission of personal information on the network through encrypted communication, etc. And we use an intrusion detection system to control unauthorized access from the outside, and we are trying to have all possible technical devices to secure security systemically.
9. Installation/Operation of Automatic Personal Information Collection Devices and Refusal
The Company may use cookies to provide web-based services. Cookies are used to support faster and more convenient use.
- A cookie is a very small text file sent by the server used to operate the Company's website to the user's browser and is stored on the user's computer.
- The purpose of using cookies is to maintain the user's environment settings and provide optimized services by reading the contents of the cookie stored in the user's device when the user visits the website.
- Cookies do not store names, phone numbers, etc. that identify individuals, and users have the right to choose whether to install cookies. Therefore, users can allow all cookies, go through confirmation whenever they are stored, or refuse to store all cookies by setting options in the web browser. However, if the user refuses to install cookies, there may be difficulties in providing services.
※ Setting Method Example
- For Internet Explorer: Tools menu at the top of the web browser > Internet Options > Privacy >
- For Chrome: Settings menu on the right of the web browser > Show advanced settings at the bottom of the screen > Content settings button in Privacy > Cookies
10. Chief Privacy Officer and Contact Information
You can report all complaints related to personal information protection occurring in the process of using the website, etc. to the Chief Privacy Officer. The Company will provide prompt and sufficient answers to users' reports.
- Chief Privacy Officer
- Officer: Kwon Oh-nam
- Department: Personal Information Protection Part
- Contact: 070-4680-7219If you need to report or consult about other personal information infringements, please contact the following agencies.
- Personal Information Infringement Report Center ( http://privacy.kisa.or.kr / 118 without area code )
- Supreme Prosecutors' Office Cyber Crime Investigation Division ( http://www.spo.go.kr / 1301 without area code )
- Korean National Police Agency Cyber Bureau ( http://cyberbureau.police.go.kr / 182 without area code )
11. Changes to the Personal Information Processing Policy
If there are any additions, deletions, or modifications to the contents of the current Personal Information Processing Policy, we will notify you through the website 'Notice' or email at least 7 days before the revision. However, if there are important changes to user rights, such as the collection and use of personal information and provision to third parties, we will notify you at least 30 days in advance.
- Announcement Date: September 21, 2026
- Enforcement Date: October 22, 2026
View previous privacy policy