Your data is
yours. Here's the
plain version.

Purpose of Processing

The Company processes personal information for the following purposes:

• Providing the fortune-telling service (generating and delivering results)
• Customer support including handling error inquiries
• Statistical analysis for service quality improvement
• Compliance with applicable laws and dispute resolution

Personal Information Collected

— Free fortune service

• Items: Gender, calendar type, date of birth, birth time, whether born in Korea
• Method: Direct input by the user during service use

— Account registration & management

• Email sign-up: Email address, password
• Google social login: Google account email, profile information (name, profile picture, etc., within the scope provided by Google)

— Error inquiry

• Name (optional), email address (if a reply is needed)

— Automatically collected

• IP address, access date/time, usage records (visits/clicks/views), cookies, device information (browser/OS, etc.), referral source, etc.

Retention and Use Period

The Company destroys personal information without delay upon achieving the purpose of collection. Where retention is required by law, information is retained for the applicable period.

— Fortune input data (date of birth, birth time, etc.)

Retained for 90 days after service delivery, then destroyed.

— Account information

Retained until account deletion. If retention is required by law after deletion, retained for the legally required period.

— Records required by law (Act on Consumer Protection in Electronic Commerce)

• Records of contracts or withdrawal of offers: 5 years
• Records of consumer complaints or dispute resolution: 3 years

Provision to Third Parties

The Company does not provide personal information to third parties without the user's consent or a legal basis. If third-party provision becomes necessary in the future, the Company will notify users in advance and obtain separate consent.

Outsourcing of Processing

The Company does not currently outsource personal information processing to external parties. If outsourcing becomes necessary, the Company will disclose the outsourcee and the scope of work in this Policy.

International Transfer

The Company may use third-party services such as Google Analytics for statistical analysis and service improvement. In this process, certain information (e.g., cookies, usage records) may be transferred to and processed in countries outside Korea (including the United States).

Your Rights

Users may exercise the following rights at any time:

• Right to access personal information
• Right to rectification
• Right to erasure
• Right to restriction of processing

To exercise these rights, please contact us at team.mysota@gmail.com. The Company will respond without undue delay.

Destruction of Personal Information

1. Procedure: Personal information is destroyed after the purpose of collection is achieved, in accordance with internal policies and applicable laws.
2. Method: Electronic files are deleted using technical methods that prevent recovery; printed materials are shredded or incinerated.

Security Measures

• Access control and minimization of personnel with access to personal information
• Retention and tamper-proofing of access logs
• Installation and inspection of security programs; encryption of data in transit (SSL, etc.)
• Encryption of sensitive information

Privacy Officer

For inquiries, complaints, or advice regarding personal information, please contact:

Changes to This Policy

Any additions, deletions, or modifications to this Policy will be announced on the website at least 7 days before taking effect (30 days in advance for material changes).