StyleRoom Privacy Policy

Angelleague, Inc. (the “Company”) establishes and discloses this Privacy Policy as follows in order to protect the personal information of data subjects and to promptly and smoothly handle related complaints, in accordance with the Personal Information Protection Act (PIPA) and other applicable laws and regulations, in connection with the “StyleRoom” service.

Purpose of Collection and Items Collected

The Company collects personal information for the following purposes. The personal information being processed will not be used for purposes other than those set forth below, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with the Personal Information Protection Act.

When collecting personal information, the Company classifies the minimum personal information necessary for providing the Service as “Required Consent Items”, and other personal information as “Optional Consent Items,” and provides a procedure whereby Users can consent separately. The Company does not refuse to provide the Service on the ground that the User does not provide personal information other than the minimum required personal information.

The use of StyleRoom and the transfer of information received from Google APIs comply with the Google API Services User Data Policy. (Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy)

“Personal Information” means information relating to a living individual that can identify the individual, or information that cannot identify a specific individual by itself but can be easily combined with other information to identify the individual.
For the purpose of customer support to provide better services, the Company collects a User’s name, email address, phone number, or consultation history to identify and respond to customer inquiries received from Users. In addition, a customer may transmit error data 발생한 during use of the Service to the Company in order to receive more accurate diagnosis of errors. Such data is not mandatorily collected, and the Company will not use such personal information for purposes other than those stated below.

Purpose of Collection	Personal Information Collected	Consent Requirement
Membership status maintenance/management; prevention of fraudulent or improper use of the Service	Email address; name associated with the email address	Required
Service provision purposes	None	Optional

Retention and Use Period of Personal Information

The Company processes and retains personal information within the retention and use period prescribed by applicable laws and regulations, or within the retention and use period consented to by the data subject at the time of collection.

In principle, the Company destroys a User’s personal information without delay upon membership withdrawal. However, if the Company obtains separate consent from the User regarding the retention period of personal information, or if applicable laws require retention of information for a certain period, the Company will safely retain such personal information for the relevant period.

The Company does not provide Users’ personal information to other businesses overseas. However, for performance of contracts for providing information and communications services and for user convenience, the Company outsources certain personal information processing tasks to overseas entities as follows.

Outsourcing of Personal Information Processing

The Company outsources part of the tasks necessary for providing the Service to external vendors, and stipulates necessary matters and manages/supervises such vendors so that outsourced vendors safely process personal information in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.

Outsourced Service Provider	Description of Outsourced Tasks	Retention and Use Period of Personal Information
Amazon Web Services, Inc.	ata storage, AI services including generation and summarization of text, images, and videos, speech synthesis, translation, and related services	Until membership withdrawal or termination of the outsourcing agreement
Google	Use of account systems and user analytics, data storage, AI services including generation and summarization of text, images, and videos, speech synthesis, translation, and related services	Until membership withdrawal or termination of the outsourcing agreement
Channel Corporation	Use of customer inquiry response system	Until membership withdrawal or termination of the outsourcing agreement
Kakao	Use of account systems and user analytics	Until membership withdrawal or termination of the outsourcing agreement
Naver	Use of account systems and user analytics, speech synthesis	Until membership withdrawal or termination of the outsourcing agreement
Toss Payments	Domestic payment processing services	Until membership withdrawal or termination of the outsourcing agreement

Rights and Obligations of Data Subjects and How to Exercise Rights

Users, as data subjects, may exercise the following rights:

Request to Access Personal Information: Personal information files held by the Company may be requested to be accessed in accordance with Article 35 (Access to Personal Information) of the Personal Information Protection Act. However, requests to access personal information may be restricted under Article 35(5) of the Personal Information Protection Act as follows:
1. Where access is prohibited or restricted by law
2. Where there is concern that it may harm the life or body of another person, or unfairly infringe on another person’s property or other interests
3. Where it is likely to cause significant disruption when performing any of the following tasks:
  - Tasks related to academic background/skills and recruitment examinations, or qualification screening
  - Tasks related to ongoing evaluation or judgment regarding calculation of compensation or benefits
  - Tasks related to audits or investigations ongoing under other laws
Request for Correction/Deletion of Personal Information: With respect to personal information files held by the Company, a data subject may request correction or deletion of personal information in accordance with Article 36 (Correction/Deletion of Personal Information) of the Personal Information Protection Act. However, where the relevant personal information is expressly specified as subject to collection under other laws, deletion cannot be requested.
Request to Suspend Processing of Personal Information: With respect to personal information files held by the Company, a data subject may request suspension of processing of personal information in accordance with Article 37 (Suspension of Processing, etc.) of the Personal Information Protection Act. In addition, a legal representative of a child under the age of 14 may request access to, correction/deletion of, or suspension of processing of such child’s personal information. However, a request to suspend processing may be rejected under Article 37(2) of the Personal Information Protection Act:
- Where there is a special provision in law or it is unavoidable to comply with legal obligations
- Where there is concern that it may harm the life or body of another person, or unfairly infringe on another person’s property or other interests
- Where a public institution cannot perform its statutory duties unless it processes personal information
- Where it is difficult to perform a contract such that the Company cannot provide services agreed with the data subject unless it processes personal information, and the data subject has not clearly expressed an intention to terminate such contract