Privacy Policy
Effective Date: 2026-02-22
1. Purpose of Processing
Pre-Post ("Company") processes personal information for the following purposes:
- Member registration and management: Membership service provision, identity verification, prevention of unauthorized use
- Service provision: generating the likely hostile comments on the userβs own unpublished draft
- Payment processing: Point purchases and transaction history management
- Service improvement: Usage statistics analysis and service quality improvement
2. Items Collected
The Company collects the following personal information to provide services:
- Required: Email address, encrypted password
- Automatically collected: Service usage logs, access IP, cookies, input content (for analysis purposes)
- Upon payment: Information required for payment processing (processed via Polar; no card numbers stored by Company)
3. Protection of Children Under 14
The Company does not collect or use personal information of children under 14 years of age. Children under 14 are not permitted to register for the service. If personal information of a child under 14 is found to have been collected, it will be deleted immediately.
4. Retention and Use Period
- Member information: Until account deletion
- E-commerce records: 5 years (Act on Consumer Protection in Electronic Commerce)
- Consumer complaints/disputes: 3 years
- Access logs: 3 months (Protection of Communications Secrets Act)
5. Destruction Procedures and Methods
Personal information is destroyed without delay after the retention period expires or processing purposes are achieved.
- Electronic files: Permanently deleted using methods that prevent recovery
- Backup data: Automatically destroyed upon next regular backup renewal
6. Third-Party Provision
The Company does not provide users' personal information to third parties, except as required by law.
7. Criteria for Additional Use and Provision
When making additional use or provision of personal information, the Company considers:
- Relevance to the original purpose of collection
- Predictability based on collection circumstances and processing practices
- Whether the interests of users are infringed
- Whether security measures such as encryption are in place
8. Processing Consignment
The Company consigns personal information processing as follows for service provision:
| Processor | Task | Retention |
|---|---|---|
| Supabase, Inc. | Database and authentication management | Until contract termination |
| Google LLC | AI analysis (Vertex AI) | Until contract termination |
| Anthropic, PBC | AI analysis (Claude API) | Until contract termination |
| Polar Software, Inc. | Payment processing | Until contract termination |
9. Overseas Transfer
The Company transfers users' personal information overseas to processing consignees for service provision. These transfers are made for contract performance purposes under Article 28-8(1)(1) of the PIPA, and are disclosed in this Privacy Policy instead of requiring separate consent.
| Country | Recipient | Items | Purpose |
|---|---|---|---|
| USA | Supabase, Inc. | Email, usage logs | Service provision |
| USA | Google LLC | Input content | AI analysis |
| USA | Anthropic, PBC | Input content | AI analysis |
| USA | Polar Software, Inc. | Payment information | Payment processing |
10. Security Measures
- One-way encryption of passwords
- HTTPS encryption for data in transit
- Minimization and management of access privileges
- Regular security vulnerability assessments
11. Sensitive Information
The Company does not collect or use sensitive information such as beliefs, political views, health, or sexual life information.
12. Pseudonymous Information
The Company does not process pseudonymous information.
14. Third-Party Behavioral Information
The Company does not collect or use third-party behavioral information.
15. Rights of Data Subjects
Users may exercise the following rights at any time:
- Right to access personal information
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to automated decisions
Rights may be exercised by emailing support@pre-post.tech or through the dashboard settings page.
16. Automated Decision-Making
Not applicable. The Company's AI service provides an analytical tool that predicts content performance metrics. It does not make automated decisions about users that produce legal or similarly significant effects. All final decisions (e.g., whether to publish content) are made by the user.
17. Privacy Officer
The Company designates a Privacy Officer to oversee personal information processing.
- Name: Representative
- Email: support@pre-post.tech
18. Domestic Representative
Not applicable (service operated domestically in Korea).
19. Remedies for Rights Violations
For personal information infringement remedies, users may contact the following organizations:
- Personal Information Protection Commission (PIPC): www.pipc.go.kr / 182 (no area code)
- KISA Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
20. Fixed Video Surveillance Equipment
Not applicable.
21. Mobile Video Surveillance Equipment
Not applicable.