yaholab Inc. (the “Company”) establishes and discloses this Privacy Policy in accordance with the Korean Personal Information Protection Act, in order to protect users’ personal information and to handle related concerns promptly.
1. Personal information collected
a. On sign-up
- Required. Email address, name or nickname, and the identifier passed by the social login provider
- Collected through social login (Google, Kakao). We do not collect passwords. Where Kakao does not supply an email address, the account is created without one.
b. During use, entered by the user
- Student school history: country, school name, enrolment period, school system
- Entry and exit records: departure and arrival dates
- Parent employment: employment type, employer, period of service
- Target universities and document status
- Scanned copies of documents uploaded by the user
We do not collect or extract resident registration numbers or passport numbers. Where an uploaded document contains such numbers, the file is stored as provided and its contents are not parsed.
c. Collected automatically
- Access log, IP address, browser and device information, cookies
2. Purposes of use
- Member identification and account management
- Calculating applicant eligibility and providing document guidance
- Processing payments for paid services and issuing invoices
- Responding to enquiries and handling complaints
- Improving the Service and analysing usage in aggregate
3. Retention period
- Account information: until the account is deleted
- Data entered by the user: until the account is deleted, or until the user deletes it
- Records required by law: records of contracts and withdrawal of subscription, 5 years; records of payment and supply, 5 years; records of consumer complaints or dispute handling, 3 years; access logs, 3 months
4. Provision to third parties
The Company does not provide personal information to third parties, except where required by law and for payment processing as set out below.
| Recipient | Purpose | Items |
|---|---|---|
| Paddle.com Market Ltd. | Payment processing, tax filing, invoicing | Email, payment details, country |
| Google LLC | Serving advertisements and measuring performance | Cookie identifiers, IP address, browser information |
Paddle acts as merchant of record and is the seller in the payment transaction. Card details are never stored on the Company’s servers.
5. Processors
| Processor | Task |
|---|---|
| Vercel Inc. | Web hosting |
| Supabase Inc. | Account authentication, database and file storage |
| Paddle.com Market Ltd. | Payment processing and settlement |
6. Transfer outside Korea
Personal information may be stored outside Korea in order to operate the Service.
| Recipient | Country | Items and purpose |
|---|---|---|
| Vercel Inc. | United States | Service usage information · hosting |
| Paddle.com Market Ltd. | United Kingdom | Email and payment details · payment processing |
| Google LLC | United States | Cookie identifiers and access information · advertising |
Account and document data is held on servers located in Seoul, Republic of Korea. Transfers take place over the network at the time the Service is used. A user may refuse transfer outside Korea, in which case use of the Service will be limited.
7. Your rights
- You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time.
- Most items can be viewed and edited directly from your profile page.
- Requests may also be sent to support@tudy.im and are answered without delay.
8. Destruction
Once the retention period has expired or the purpose of processing has been achieved, the information is destroyed without delay. Electronic files are deleted by a method that prevents recovery.
9. Security measures
- Access to personal information is limited to the minimum number of staff
- Encryption in transit (HTTPS) and access control on stored files
- Uploaded documents are held in a private bucket. Only the account owner can open them, and viewing links expire after one hour
10. Cookies and advertising
The Company uses cookies to maintain login sessions and to remember settings. You may refuse cookies through your browser settings, though some features may then be unavailable.
The Service may display advertisements through Google AdSense. Google may use cookies to serve advertisements based on your prior visits to this and other sites. You can opt out of personalised advertising at Google’s Ads Settings.
11. Privacy officer
yaholab Inc. · Kwon Youngwook · support@tudy.im · +82 70-8888-8287
30 Songdomirae-ro, Yeonsu-gu, Incheon, Republic of Korea
12. Changes to this policy
Where this policy is added to, deleted from or amended, notice is given within the Service at least 7 days before the change takes effect.
This English text is provided for convenience. If it differs from the Korean version, the Korean version governs.
Teuknote