Piecepool Privacy Policy

Article 1 (Items of Personal Information Collected and Methods of Collection)

(1) The Company collects only the minimum personal information:

(2) The Company does not store the email address of the Google account and stores only the unique ID used to identify the account.

Article 2 (Purposes of Collection and Use of Personal Information)

1. Confirming the intent to register, and identifying and managing Members

2. Providing the core functions of the Service, such as dig records

3. Receiving and handling inquiries and reports, and replying with the results

4. Preventing and sanctioning improper use (violation of the Terms, manipulation of the evaluation systems, false reports, etc.)

5. Analyzing usage statistics to improve the Service (after de-identification)

6. Artist early access: notifying sign-ups when the artist upload space opens, and related notices

7. Contact regarding verified artists and POOL-registered content: requesting clarification on infringement reports and notifying their outcome, operational notices about registered content, and forwarding distribution or collaboration offers

Article 3 (Processing and Retention Period of Personal Information)

(1) A Member's personal information is retained until the Member withdraws, and is destroyed without delay upon withdrawal, with the following exceptions:

1. Dig records: may be retained with the profile name de-identified for the integrity of the Service (proof of the order of discovery). Notes may be requested for deletion upon withdrawal.

(2) Artist early access sign-up data is destroyed without delay one year after the sign-up date (approved sign-ups are kept while the artist account exists), and immediately upon a deletion request ([email protected]).

(3) A verified artist's contact email is destroyed without delay when the artist verification is revoked or the Member withdraws, and immediately upon the artist's deletion request (unless an infringement dispute is in progress).

Article 4 (Provision of Personal Information to Third Parties)

(1) The Company does not provide users' personal information to third parties, except where the user has given prior consent or where required by law.

Article 5 (Entrustment of Personal Information Processing)

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

(1) Users may at any time request access to, correction of, deletion of, or suspension of the processing of their personal information. Requests may be made through the in-Service contact feature or by email ([email protected]), and the Company will process them without delay.

(2) Because dig records have the nature set forth in Article 12 of the Terms of Service (public and unmodifiable), a request for deletion may be handled by de-identifying the profile name.

Article 7 (Destruction of Personal Information)

(1) The Company destroys, without delay, personal information whose retention period has expired or whose purpose of processing has been achieved. Electronic files are deleted by irrecoverable methods, and other records are shredded or incinerated.

Article 8 (Cookies and Other Automatic Collection Devices)

(1) The Service uses cookies to keep users logged in, to track sign-up progress, and to remember the language setting, and an anonymous identifier (browser storage) to count non-logged-in usage per person. The identifier does not identify an individual and is not used for advertising. Users may refuse or delete cookies and stored values through their browser settings; in that case, use of features requiring login may be restricted.

(2) The Service does not use advertising cookies or third-party tracking devices.

Article 9 (Personal Information Protection Officer)

Article 10 (Measures to Secure the Safety of Personal Information)

(1) The Company takes the following measures for the safe processing of personal information: minimization of access privileges, encryption in transit (HTTPS), retention of access records, and application of security updates.

Article 11 (Remedies for Infringement of Rights and Interests)

(1) Users may contact the following organizations to report or seek counseling on personal information infringement: Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without an area code), Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972), Supreme Prosecutors' Office (www.spo.go.kr / 1301), National Police Agency (ecrm.police.go.kr / 182)

Article 12 (Changes to the Privacy Policy)

(1) If the content of this Policy changes, notice will be given through the in-Service announcements from 7 days before the effective date.

(2) This Policy takes effect on August 13, 2026.

(3) Amended on August 15, 2026: added the artist early access items (Article 1 table, Article 2 no. 6, Article 3 (2)); those parts take effect on the amendment date.

(4) Second amendment on August 15, 2026: added the verified artist contact email and Instagram account items (Article 1 table, Article 2 no. 7, Article 3 (3)) and an optional Instagram account to the artist early access items; those parts take effect on the amendment date. This introduces a collection basis for information the artist provides voluntarily and is not a change adverse to existing users' rights.

(5) Amended on September 15, 2026 to match actual processing: removed Article 3(1) exception 3 (retention of restricted-account identifiers), moved the destruction point in Article 3(3) forward to "without delay upon revocation or withdrawal", added Cloudflare, Inc. (storage and network) to the Article 5 table, and specified the kinds of cookies and the anonymous identifier in Article 8(1). This reduces retention and expands disclosure, and takes effect on the amendment date.