Pondmakers Inc. Privacy Policy

Pondmakers Inc. (hereinafter referred to as 'the Company') complies with the requirements of the "Personal Information Protection Act" and related laws to lawfully process personal information and safely manage it for the protection of the rights and freedoms of data subjects. Accordingly, pursuant to Article 30 of the "Personal Information Protection Act," we establish and publish the following privacy policy to guide data subjects on the procedures and standards for processing personal information, and to enable prompt and smooth handling of related grievances.

Article 1. Processing Items, Purposes, and Retention Periods of Personal Information

1. The Company processes personal information of data subjects as follows:

   Personal information being processed is not used for any purpose other than those listed below, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the "Personal Information Protection Act."

   1. Information collected upon member registration

      Collection items:

      • For general members: Email, password, nickname, whether under 14 years of age
      • For artist members:
        • Solo artists: Artist stage name, artist's real name, contact information, email, whether under 14 years of age
        • Group artists: Artist group name, each member's stage name, each member's real name, contact information, email, whether under 14 years of age

      Collection purpose:

      • Member identification/confirmation of registration intent
      • Verification of age 14 or older to prevent service use by children under 14
      • Maintenance and management of membership qualification
      • Prevention and sanctions against actions that interfere with the smooth operation of the service (including account theft and fraudulent usage)

      Retention period: Until member withdrawal

   2. Information collected when joining membership (paid subscription)

      Collection items: Name, phone number, email address, credit card number, card company name, order number, consent to recurring billing

      Collection purpose:

      • Identification and authentication for providing membership services
      • Sending contracts and invoices, and payment/settlement when using paid services
      • Recurring billing management

      Retention period: 5 years in accordance with the ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.

   3. Information collected when joining the chat service

      Collection items: Nickname (alias), birthday, chatroom configuration information (e.g., nickname settings, birthday settings, archive and other options), subscription start date

      Collection purpose:

      • Provision and operation of 1:1 chat
      • Sending personalized messages (using alias and anniversary information)
      • Anniversary management (e.g., birthdays, 100-day milestones, artist debut date/birthday)
      • Chatroom personalization and user experience improvement
      • Backup and restoration of chat history
      • Translation service
      • Filtering of inappropriate content (including profanity filtering)

      Retention period: Until member withdrawal

   4. Information collected during customer consultation (Kakao Channel)

      Collection items: Goodduck registration email, Goodduck nickname, artists followed on Goodduck, device model in use, country, member profile UID, access city

      Collection purpose: Handling inquiries or complaints

      Retention period: 3 years in accordance with the ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.

   5. Additional information collected for recurring payments

      Collection items:

      • Domestic card recurring payments: Card issuer, card number, date of birth
      • PayPal: PayPal email ID, payment authorization information
      • Common: Recurring billing start date, billing cycle, product information (distinguishing membership/chat service)

      Collection purpose:

      • Monthly recurring billing processing and management
      • Retry processing in case of payment failure
      • Viewing and management of payment history
      • Cancellation processing of recurring payments

      Retention period: 5 years in accordance with the ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.

2. The Company may collect additional personal information with the consent of users to provide various customer experiences.

   1. Information collected when winning Goodduck-hosted events

      Collection items:

      • For physical delivery items: Name, address, phone number
      • For mobile items: Mobile phone number
      • If the winner is a paid subscriber: Subscription period information, email address, mobile phone number

      Retention period: 3 months after the event ends

3. The Company receives personal information of customers from third parties in the following situations for the smooth provision of services:

   1. Payment for paid services

      Providing company: Danal Co., Ltd., PayPal Pte. Ltd.

      Items received:

      • Danal Co., Ltd.: Name, mobile phone number, date of birth, email address
      • PayPal Pte. Ltd.: Name, email address

      Purpose of receipt: Prevention of fraudulent use through identity verification, provision of payment information to the member

      Retention period: Until the purpose of collection and use is achieved. However, mandatory collection information is retained for 5 years in accordance with the ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.

   2. Booking for Goodduck planned performances

      Providing company: Melon Ticket, Interpark Ticket

      Items received: Name, mobile phone number, reservation number

      Purpose of receipt: For verification of the ticket purchaser and conducting the performance

      Retention period: 3 months after the performance ends

4. Automatically generated information such as visit time may be automatically generated and collected during app use.

Article 2. Processing and Retention Periods of Personal Information Under Laws

The Company processes and retains personal information within the retention/use period of personal information in accordance with laws or the retention/use period of personal information consented to by the data subject when collecting personal information. Once the collection and use purposes are achieved, the collected personal information is safely destroyed. However, the following information is preserved for the specified period for the following reasons:

1. Information retention reasons based on app terms of use

   Improper use records (abnormal service use records such as fraudulent registrations, disciplinary records, etc.)

   Preserved items: Account nickname, registration email, (in case of identity verification) mobile phone number, real name

   Reason for preservation: Prevention of fraudulent registration and use

   Preservation period: 3 years

   Note: “Improper use records” refers to records of usage restrictions imposed by the Company due to fraudulent registration or actions that violate the Operating Policy (e.g., prohibited postings).

2. Information retention reasons based on related laws

   When it is necessary to preserve information pursuant to relevant laws such as the Commercial Act and the Act on the Consumer Protection in Electronic Commerce, etc., the Company retains member information for the period specified by those laws. In such cases, the Company uses the information solely for the purpose of retention, and the retention periods are as follows:

   Preserved items	Legal basis	Preservation period
   Records concerning contract or subscription withdrawal	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.	5 years
   Records concerning payment and supply of goods	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.	5 years
   Records concerning consumer complaints or dispute resolution	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.	3 years
   Records concerning display/advertising	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.	6 months
   Service visit records	PROTECTION OF COMMUNICATIONS SECRETS ACT	3 months

Article 3. Provision and Entrustment of Personal Information

1. The Company does not provide personal information to external parties without the prior consent of users. However, personal information is provided only when users have directly consented to provide personal information to use the services of external partners, when the Company is obligated to submit personal information under relevant laws, and when urgent danger to the life or safety of users is confirmed and needs to be resolved.
2. The Company entrusts some of the tasks necessary for service provision to external companies, and stipulates necessary matters to ensure that the entrusted companies safely process personal information in accordance with the Personal Information Protection Act, and manages/supervises them. If users do not use services related to the work that the Company entrusts to the subcontractors, their personal information is not provided to the subcontractors.

Article 4. International Transfer of Collected Personal Information