Privacy Policy

Last Updated: January 1, 2024

1. Privacy Policy Overview

IMG WAVE (이미지웨이브, operating Snap Post, hereinafter referred to as "the Company") values the privacy of its users and complies with relevant laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy informs users about how the personal information they provide is used and for what purposes, and what measures are taken to protect personal information.

2. Categories and Methods of Personal Information Collection

The Company collects the following personal information to provide services: [Required Items] - During registration: Email address, password, name - During social login: Social account information (email, name, profile picture) - Facebook login: Facebook user ID, email address, name, profile picture - Google login: Google user ID, email address, name, profile picture - During payment: Payment information (payment method, payment amount) [Optional Items] - When creating invitations: Event information, dates, locations, gallery images [Automatically Collected Information] - During service usage, IP addresses, cookies, access logs, and device information may be automatically collected.

3. Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes: [Service Provision] - Member management: Use of membership services, identity verification, prevention of duplicate registration - Service provision: Providing invitation creation, editing, sharing, and management features - Payment processing: Processing payments and refunds for paid services [Service Improvement] - Analysis of service usage statistics - Development of new services and provision of personalized services [Marketing and Advertising] - Provision of event and promotional information (with consent)

4. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. [Member Information] - Retained until membership withdrawal - Immediately destroyed after withdrawal (except when there is an obligation to retain under relevant laws) [Social Login Data] - When a user disconnects their social login account or withdraws from the service, all associated social account data (user ID, access tokens, profile information received from the social platform) is promptly deleted from our systems. - Users may request deletion of their Facebook data at any time through our Data Deletion Request process. [Payment Information] - Retained for 5 years in accordance with the Electronic Commerce Act - Records on contracts or withdrawal of subscription: 5 years - Records on payment and supply of goods: 5 years - Records on consumer complaints or dispute resolution: 3 years

5. Procedures and Methods for Destruction of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. [Destruction Procedures] - Information entered by users for membership registration is transferred to a separate database after the purpose is achieved and stored for a certain period according to internal policies and legal requirements for information protection before being destroyed. [Destruction Methods] - Electronic files: Deleted using technical methods that make recovery and reproduction impossible - Paper documents: Shredded or incinerated

6. User Rights and Exercise Methods

Users may exercise the following rights at any time: - Request to view personal information - Request to correct personal information - Request to delete personal information - Request to suspend processing of personal information Rights may be exercised through written requests, telephone, email, etc., and the Company will take action without delay.

7. Personal Information Protection Officer (Data Protection Officer)

The Company has designated a Personal Information Protection Officer who is responsible for overall personal information processing and handles user complaints and damage relief related to personal information processing as follows: [Personal Information Protection Officer] - Name: Yeonwoo Lee - Position: CEO - Email: support@snappost.co - Phone: +82-70-8095-3061 If you need to report or consult about personal information infringement, you may contact the following organizations: - Federal Trade Commission (www.ftc.gov / 1-877-382-4357) - Identity Theft Resource Center (www.idtheftcenter.org / 1-888-400-5530)

8. Third-Party Services and Data Sharing

The Company uses the following third-party services for user authentication and may share limited data with these services: [Facebook (Meta Platforms, Inc.)] - Purpose: Social login authentication - Data received from Facebook: User ID, email address, name, profile picture - Data stored: Facebook user ID, email, name, profile picture (stored in our database for account identification) - Data shared with Facebook: No user data is proactively shared back to Facebook beyond what is required for the authentication process - Data deletion: Users may request deletion of their Facebook-related data by disconnecting their Facebook account from our service or by submitting a deletion request. When a user removes our app from their Facebook settings, we receive a data deletion callback and promptly remove all Facebook-related data from our systems. - For more information about Facebook's data practices, please refer to Facebook's Data Policy (https://www.facebook.com/policy.php). [Google (Google LLC)] - Purpose: Social login authentication - Data received: Google user ID, email address, name, profile picture All third-party authentication data is transmitted securely using TLS 1.2 or higher encryption.

9. Changes to Privacy Policy

When there are additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technologies, the changes will be announced through the website's notice board at least 7 days prior to implementation. However, if there are significant changes affecting user rights, we will notify users at least 30 days in advance.

IMG WAVE (Snap Post)

This policy is effective as of January 1, 2024.