LEGAL

Privacy Policy

Last updated and effective: August 19, 2026

This Policy explains how Jjollae handles personal information through jjollae.com, its order and receiving pages, and its desktop applications.

Jjollae is operated by an individual seller in the Republic of Korea. Privacy questions or requests: jjollae0202@gmail.com.

1. Information we process

Information you provide before payment

Please avoid including people, addresses, documents, or other unnecessary personal information in uploaded media.

Order and delivery information

We process the pet code, internal order ID, product type, price, order and production status, generated-file locations and integrity information, delivery status, and limited payment and refund transaction metadata. Receiving and order-management tokens are credentials used to authorize access; we do not intentionally include them in public URLs, analytics, or policy records.

Support and technical information

If you contact us, we process the details, message, attachments, pet code, and troubleshooting information you provide. Our hosting and infrastructure providers may automatically process technical request data such as IP address, browser or device type, requested URL, timestamps, and security or error logs to deliver and protect the Service.

Desktop app information

The app stores downloaded personalized content, settings, placement, and app state locally on your device. It does not collect keystrokes, screen contents, session replays, advertising identifiers, or app-usage analytics. It uses the internet to receive purchased content and check or download updates.

2. Why we process information

We process information to create, preview, deliver, and support your order; authenticate receiving and order-management requests; verify payments and handle refunds; troubleshoot production or delivery; maintain security and compatibility; respond to privacy, support, and dispute requests; and meet legal, tax, accounting, and consumer-protection obligations.

We do not use the order email for advertising or purchase reminders unless you separately opt in to marketing in the future. We do not sell personal information or use uploaded media for targeted advertising.

3. Service providers

ProviderRoleMain information involved
SupabaseDatabase, object storage, and server functionsEmail, pet name, uploaded media, production data, generated files, and order metadata
ReplicateManaged computing for image and video processingTemporarily accessible media, processing inputs and outputs, and technical logs
VercelWebsite hosting and deliveryWebsite request and security information
GrobleKorean checkout, payment intermediation, refunds, receipts, and transaction noticesBuyer and payment information handled by Groble; limited transaction metadata sent to Jjollae
Dodo PaymentsInternational checkout, payment processing, refunds, receipts, and transaction noticesBuyer and payment information handled by Dodo Payments; limited transaction metadata sent to Jjollae
GitHubDistribution hosting for certain application release filesDownload request and technical information

Replicate states that API prediction inputs, outputs, files, and logs are automatically removed after one hour by default. Jjollae separately saves the files needed to deliver and support an order; Replicate’s cleanup does not delete those saved copies.

We may disclose information when required by law, court order, or a valid government request, or when reasonably necessary to protect users, the Service, or another person’s rights. We do not disclose uploaded media to data brokers or advertisers.

4. International processing

Jjollae is operated from the Republic of Korea. Our Supabase project is primarily hosted in the Seoul region, although provider support and subprocessors may operate internationally. Replicate, Vercel, GitHub, Dodo Payments, and their subprocessors may process technical or service data outside Korea, including in the United States. Groble’s Korea-based payment processing and Dodo Payments’ international payment processing are governed by each provider’s separate privacy policy.

5. Retention and deletion

InformationRetention period
Uploaded videos and photos30 days after successful delivery, unless a support or remake case is open
Intermediate processing files and previewsUp to 30 days after successful delivery, unless a support or remake case is open
Delivered video and sticker-pack filesUp to 1 year after successful delivery for redelivery
Minimum transaction records required by lawGenerally 5 years from the transaction where the statutory retention requirement applies
Consumer complaint or dispute recordsGenerally 3 years where the statutory retention requirement applies
Support messages not included in a statutory recordUntil the request is resolved, then deleted unless retention is required for a related legal record
Local app content and preferencesUntil you remove the content, reset the app, or uninstall it, subject to operating-system behavior and separately exported copies

When the retention period expires or the purpose is complete, we delete or de-identify information unless continued retention is required by law or a legal hold. Statutory records are limited and separated from media no longer needed for production or redelivery. Backup copies may remain until the normal backup cycle completes and are protected from ordinary use.

6. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, withdrawal of consent, or a copy of personal information we control. We may need to verify your identity using the order email, pet code, or other limited transaction information. We will not ask you to publish or send a secret token through an insecure channel.

Some requests may be limited when information must be retained for transaction, tax, fraud-prevention, dispute, or other legal obligations. To make a request, contact jjollae0202@gmail.com.

7. Security, children, and automated processing

We use access controls, private storage, time-limited signed URLs, separate receiving and order-management capabilities, webhook signature verification, and limited payment-event storage. No internet service is completely secure. Keep receiving and order-management links private and contact us promptly if you believe one has been exposed.

The Service is not directed to children under 14. A parent or legal guardian should place and manage an order for a minor. Automated tools create media outputs and may flag technical failures, but Jjollae does not use automated processing to make decisions that produce legal or similarly significant effects about a person.

8. Changes and contact

We may update this Policy when the Service, providers, legal requirements, or data practices change. We will post the revised version with a new effective date and provide additional notice or obtain consent when required by law. Contact us at jjollae0202@gmail.com.