Privacy Policy

1. Common (sign-up): email, name/nickname, password (stored encrypted), phone (optional)

2. Advertiser: company name, business registration number

3. Creator: activity region, SNS channel URL/handle/follower count, bio

4. Payment: payment approval information via the payment processor (Toss Payments). Card numbers and other payment credentials are not stored by the Company.

5. Automatically collected: access IP, cookies, usage logs, device/browser information

(1) Member identification, sign-up/authentication and service provision; (2) advertiser–creator matching and campaign operation; (3) payment and settlement; (4) customer support and notices; (5) fraud prevention and service improvement.

1. In principle, personal information is destroyed without delay upon membership withdrawal.

2. However, the following are retained per law: records on contracts/withdrawal of offer — 5 years; records on payment and supply of goods — 5 years; records on consumer complaints/disputes — 3 years; access logs — 3 months.

1. The Company does not, in principle, provide personal information to third parties.

2. However, for campaign operation, when a creator applies to a campaign, the creator's profile and channel information are provided to that advertiser. This is an essential function of the service, and advertisers may not use such information beyond campaign purposes.

3. Exceptions apply where required by law or lawful request from investigative authorities.

The Company consigns processing as follows: Supabase (database/auth/storage, Seoul region) — member data storage and authentication; Vercel — hosting and infrastructure; Toss Payments — payment processing; Anthropic — AI campaign drafting/matching; Google — usage analytics and ad performance measurement.

1. Users may request access, correction, deletion or suspension of processing of their personal information at any time.

2. Requests may be made via in-service settings or contact@plander.io; the Company acts without delay.

Personal information is destroyed without delay once the retention period elapses or the purpose is achieved. Electronic files are deleted irrecoverably; printouts are shredded or incinerated.

(1) Encrypted storage of sensitive information such as passwords; (2) minimized data access via row-level security (RLS); (3) admin privilege control and access logging.

The Company may use cookies for service provision and usage analytics. Users may refuse cookie storage via browser settings, which may limit some service features.

For inquiries, complaints or remedies regarding personal information processing, contact:

Email: contact@plander.io