Privacy Policy

WriteAway ("Service") establishes and discloses this Privacy Policy to protect users' personal information in accordance with the Personal Information Protection Act and related laws, and to quickly and smoothly handle related complaints.

Article 1 — Purpose of Processing Personal Information

The Service processes personal information for the following purposes. Personal information will not be used for purposes other than those stated below, and necessary measures such as obtaining separate consent will be taken if purposes change.

• —Membership registration and management: User identification, service eligibility verification, customer inquiry response
• —Paid service provision: Payment processing, license management, refund processing
• —Service improvement: Usage statistics analysis, bug fixes and feature improvements

Article 2 — Personal Information Collected and Collection Methods

The Service is a local-first application that does not collect personal information when using core writing features. Minimal personal information is collected only in the following cases.

• —Upon registration: Email address, name (via Google OAuth social login)
• —Upon paid purchase: Payment information (processed through payment processor; sensitive payment data such as card numbers is not stored by the Service)
• —Automatically collected during use: Access logs, device information (OS type and version), IP address

Article 3 — Retention and Use Period

The Service will destroy personal information without delay after the purpose of collection and use has been achieved. However, if there is an obligation to preserve information under applicable laws, it will be retained for the period prescribed by law.

• —Member information: Destroyed immediately upon account deletion
• —Payment records: Retained for 5 years per the Act on Consumer Protection in E-Commerce
• —Access logs: Retained for 3 months per the Protection of Communications Secrets Act

Article 4 — Third-Party Provision

The Service processes personal information only within the scope stated in Article 1 and does not provide it to third parties without the user's prior consent, with the following exceptions.

• —When the user has given prior consent
• —When required by special provisions of law or to comply with legal obligations
• —When requested by investigative agencies through procedures prescribed by law

Article 5 — Outsourcing of Personal Information Processing

The Service outsources personal information processing as follows for smooth service provision.

• —Payment processing: Paddle — Payment and refund processing
• —Cloud infrastructure: Vercel — Website hosting and API server operation

Article 6 — Destruction Procedures and Methods

• —Destruction procedure: Personal information is moved to a separate DB after the purpose is achieved or retention period expires, and destroyed after a set period or immediately.
• —Destruction method: Information in electronic file format is permanently deleted using methods that prevent recovery.

Article 7 — Rights, Obligations and Exercise Methods of Data Subjects

Users may exercise the following rights at any time.

• —Request to access personal information
• —Request for correction of errors
• —Request for deletion
• —Request to suspend processing
• —These rights can be exercised via email at contact@writeaway.me, and action will be taken without delay.

Article 8 — Automatic Data Collection Devices

The Service may use cookies for the user's service experience.

• —Purpose of cookies: Maintaining login status, saving user preferences
• —How to refuse cookies: You can refuse cookie storage through your web browser settings. However, refusing cookies may limit the use of some services.

Article 9 — Security Measures

The Service takes the following measures to ensure the security of personal information.

• —Encryption: Important information such as passwords is encrypted for storage and management
• —Technical measures against hacking: SSL/TLS encrypted communication, security updates
• —Access control: Access to personal information is limited to the minimum necessary

Article 10 — Personal Information Protection Officer

The Service designates a Personal Information Protection Officer as follows to oversee personal information processing and handle user complaints and remedies.

• —Personal Information Protection Officer: Service Operator
• —Contact: contact@writeaway.me

Article 11 — Remedies for Infringement

Users may apply for dispute resolution or consultation with the following organizations for remedies due to personal information infringement.

• —Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• —Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• —Supreme Prosecutors' Office Cyber Investigation: 1301 (www.spo.go.kr)
• —National Police Agency Cyber Bureau: 182 (ecrm.cyber.go.kr)

Article 12 — Changes to Privacy Policy

This Privacy Policy may be updated in accordance with changes in laws, policies, or services. Changes will be announced in advance through notifications within the Service.