RetouchTools

Privacy Policy

최종 수정일: 2026-03-04

1. Data Controller

Business name: Pungpung Studi

Representative: Jaehyun Pung

Address: 301, 6 Sicheong-daero 84-gil, Geumcheon-gu, Seoul, Republic of Korea

Email: pung0805@gmail.com

We aim to respond to privacy requests within 30 days where legally required.

2. Categories of Data, Purpose, and Retention

Account data (email, auth identifiers): account creation, authentication, security, and account management.

Billing and ledger data (transaction IDs, payment status, credit ledger): payment processing, refunds, and accounting compliance.

Uploaded/generated content (images and metadata): requested retouch/composition processing and job history.

Usage and device logs (IP, browser, device, event logs): abuse prevention, security monitoring, and service optimization.

Support records (tickets, attachments): customer support and service quality improvement.

3. Legal Basis and Processing Purpose

We process personal data to provide contracted services, secure accounts, process payments, and maintain platform safety.

Where applicable, processing may rely on contract performance, legal obligations, legitimate interests, or consent.

4. Subprocessors

Supabase: authentication and session services.

Cloudflare R2: object storage for uploaded and generated files.

Replicate (or equivalent AI infrastructure): image generation/transformation workloads.

Railway/Vercel: application hosting and deployment infrastructure.

Payment providers (for example Lemon Squeezy or equivalent partners): payment and settlement operations.

Analytics providers (for example Google Analytics): aggregated usage analytics when enabled.

5. International Transfers

Some data may be processed in jurisdictions outside your country depending on infrastructure and subprocessors.

Where applicable, we use contractual and technical safeguards such as SCC-like mechanisms and encryption in transit/at rest.

6. Cookies and Tracking Technologies

Essential cookies: login session continuity and security functions.

Analytics cookies: usage understanding and product improvement (consent/configuration dependent).

Marketing cookies: campaign measurement (consent/configuration dependent).

Non-essential cookies can be managed through browser or in-service controls where available.

7. Security Measures

TLS encryption for data in transit.

Least-privilege and role-based access controls.

Operational monitoring for abuse and incident response.

Backup and recovery controls necessary for service continuity.

8. Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or withdrawal of consent.

Requests: pung0805@gmail.com

9. Children's Data

The service is not intended for children under 14.

If we identify data that should not have been processed, we will take appropriate remediation steps.

10. Account Deletion and Data Handling

You can request account deletion through service controls or support contact channels.

Data subject to legal retention obligations may be retained separately for required periods.

Backup data may be removed on a rolling deletion schedule.

11. Policy Updates

We may update this policy when laws, features, or operations change.

Material updates are announced in advance where required by law.

12. Contact

Email: pung0805@gmail.com

Address: 301, 6 Sicheong-daero 84-gil, Geumcheon-gu, Seoul, Republic of Korea