Privacy Policy

STUDIO SOIO ("the Company") complies with the Korean Personal Information Protection Act. This policy transparently explains what we collect, why, how long we keep it, and how we protect it.

Article 1 — Items collected

(1) Chart analysis: birth date/time/city, gender. (2) Payment/account: email, payment-method identifier. (3) Automatic: IP, browser, access time, cookies. (4) Inquiries: content, timestamp, attachments.

Article 2 — Purposes

Report generation, payments, receipts, refunds, support, de-identified analytics, and legal compliance. We never pass your chart or account data to advertisers or send marketing messages without separate consent (for ads shown in the Android app, see Article 4).

Article 3 — Retention

Birth info is kept only during the session, then auto-discarded. Payment/contract records: 5 years; dispute records: 3 years; access logs: 3 months — per applicable law.

Article 4 — Third-party sharing

We do not share personal data with third parties, except with prior consent, where required by law, or as de-identified data for statistics/research. Android app ads (Google AdMob): the app may show a Google AdMob ad when opened; Google may collect the device advertising ID, IP address, device information and app-usage data to serve and measure ads and prevent fraud (see policies.google.com/technologies/partner-sites). Birth data, chart data and account details are never passed to the ad network. You can reset the advertising ID or limit personalized ads in your phone settings; EEA users see a consent prompt at app start.

Article 5 — Processing entrustment

(1) KG Inicis / PayPal — payment processing. (2) Google Cloud / Firebase — auth, database, cloud functions. (3) Anthropic, PBC (Claude, USA) — generating saju, compatibility, date-selection, naming, tarot, face and palm readings and AI companion replies. The birth date, birth time, gender and question needed for a reading, face/palm photos, and companion chat messages are sent; Anthropic does not use them to train its models. (4) Google (Gemini, USA) — backup readings when (3) fails, plus voice synthesis and voice chat (same items). All processors are contractually bound to PIPA compliance.

Article 6 — User rights

You may exercise access, correction, deletion, processing-suspension, or consent-withdrawal rights anytime. Email sajuby.help@gmail.com; requests are processed within 7 business days after identity verification. Some data must be retained under e-commerce law; we explain the basis when applicable.

Article 7 — Security measures

End-to-end HTTPS, PCI-DSS payment handling via PSPs, least-privilege DB access, ISO 27001 / SOC 2 certified cloud infrastructure (Google Cloud), and periodic security audits.

Article 8 — Cookies

We use first-party cookies for language preference, session state, and anonymous stats, and — on the website (in a browser) — the Meta Pixel and Google Analytics for ad measurement and remarketing (the app does not use the advertising pixel; in-app ads are served only by Google AdMob as described in Article 4). We never send sensitive data such as birth dates to advertising tools. You can reject cookies in browser settings or opt out of personalized ads in your ad settings.

Article 9 — DPO and remedies

DPO: sajuby.help@gmail.com. For unresolved privacy issues, file with the PIPC (kopico.go.kr · 1833-6972) or the KISA Privacy Center (privacy.kisa.or.kr · 118).

Article 10 — Company info & effect

STUDIO SOIO · CEO Kim Naeun · BRN 679-01-03964 · 130 Eonyang-ro, Eonyang-eup, Ulju-gun, Ulsan. Effective January 1, 2026; changes are announced 7 days in advance (30 days for unfavorable changes).