Privacy Policy

1. Controller (Data Controller)

legalPrivacy.section1.body

2. Information We Collect

• Name, address, date of birth, telephone number, email address
• Identification documents (images of passport, driver's license, My Number card, etc.)
• Personal photos (face photos, face-to-face photos with ID)
• Financial institution account information (transfer destination) or payment receipt information such as cryptocurrency addresses
• Activity IDs and revenue data on each streaming platform
• Access logs, device information, IP addresses, and Cookie identifiers when using the service

3. Purposes of Use (Legal Basis)

• Registration assistance and identity verification for streaming platforms (necessary for contract performance)
• Compensation calculation and settlement handling operations
• Issuance and delivery of statements, and provision via My Page
• Contact and support from the operations team
• Prevention of service misuse and compliance with age verification
• Tax and accounting processing under the laws of each country (necessary for legal compliance)

Under Article 6 of the GDPR, the legal basis for the above processing is primarily "contract performance," "compliance with legal obligations," and "legitimate interests." Use for marketing purposes is limited to cases where prior consent has been obtained.

4. Storage and Security

Sensitive information such as identification documents and photos is stored after encryption with AES-256-GCM, and is managed in a state where plaintext (original images) does not exist on servers on a daily basis.

Staff responsible for the individual operate under confidentiality agreements. Even the service provider can view this information only after explicit access operations, limited to cases necessary for business execution, and all such operations are recorded in audit logs. The structure does not allow data to be routinely extracted and used for other purposes.

Decryption and transmission to the platform occur only when submission to the platform is required, and only to the minimum extent necessary; no plaintext is retained within our systems.

5. International Data Transfers

Because we are based in Delaware, USA, users' personal information may be stored on servers within the United States. For data transfers from within the EU, we comply with Standard Contractual Clauses (SCC) based on Article 45 et seq. of the GDPR and ensure an adequate level of protection. Users who provide personal information are deemed to have consented to such international transfers by agreeing to this policy.

6. Provision to Third Parties

We do not provide personal information to third parties without the consent of the individual, except in the following cases:

• The scope necessary for registration assistance to each streaming platform
• The scope necessary for settlement handling operations
• Cases based on the laws of each country (response to tax investigations or investigative agencies, etc.)
• Cases where business succession occurs due to merger or business transfer, etc.

7. User Rights

Users may exercise the following rights under applicable laws:

• Disclosure request of held personal information (GDPR Article 15 / CCPA Right to Know / APPI)
• Correction and deletion request of personal information (GDPR Articles 16 and 17 / CCPA Right to Delete / APPI)
• Use suspension and processing restriction request of personal information (GDPR Article 18)
• Portability request of personal information (GDPR Article 20)
• California residents may exercise the right to refuse the sale of personal information (CCPA, although we do not sell personal information)

After withdrawal, except for information that has a tax-related retention obligation, we will delete it within one year in principle. Please contact the operations team by email for requests.

8. Cookies and Access Analysis

Our site may conduct access analysis using cookies and similar technologies to improve services. You can also disable cookies through your browser settings. For access from EU regions, prior consent will be obtained for the use of non-essential cookies.

9. Contact / Complaints to Supervisory Authorities

For inquiries regarding the handling of personal information, please contact the operations team. EU region users have the right to file complaints with the supervisory authority (Data Protection Authority) in their location. California residents may request additional information about this policy from the operations team.

10. Revisions

We may change this policy as necessary. Significant changes will be notified in advance via My Page or email.