The Company collects the minimum personal information necessary to provide the Service. Collected items may consist of information directly entered by users during service use or information received during authentication/linking processes.

• Account Information: Email, name, profile image (optional), authentication identifier
• Contact Information: Phone number, phone verification status/time (optional)
• Service Settings: Sender name (optional), email send/receive settings (optional)
• Linked Information (optional): Instagram/Meta account identifier, username, tokens and expiration info (when using service features)
• Automatically Generated/Collected Information: Access logs, service usage records, error logs, cookie/session information (when necessary)

* Collection items may vary depending on service purpose/function. Non-essential information requires consent before collection or is optionally entered by users.

The Company processes personal information for the purposes below. Personal information being processed will not be used for purposes other than those stated below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with applicable laws.

• Identity verification for service provision such as membership registration/login
• Providing features and saving customized settings according to service use
• Providing core features including influencer management, email, DM send/receive
• Customer inquiry response, notice delivery, complaint handling
• Service quality improvement and security/fraud prevention
• Compliance with laws and internal policies
• Service improvement and new feature development: Training AI-based recommendation and automation algorithms, feature enhancement, and service usage statistical analysis (※ Pursuant to Article 15-2 of the Personal Information Protection Act, used after pseudonymization/anonymization within a scope reasonably related to the original collection purpose)

The Company retains information in principle during the service use period and destroys it without delay upon membership withdrawal or user data deletion request.

• Member Information: Until membership withdrawal (or purpose achievement)
• Legal Retention: As required by relevant laws such as e-commerce

The Company does not provide users' personal information to third parties in principle. However, provision may be made with user consent or when based on law.

The Company does not provide users' personal information to third parties in principle. However, when a government authority requests the submission of information pursuant to applicable law, the Company adheres to the following principles:

• Legality Review: The Company strictly reviews whether the government's request complies with lawful procedures (e.g., a warrant or a written request based on applicable law).
• Right to Object: If the basis for a request is deemed insufficient or unlawful, the Company may object to or refuse the request.
• Data Minimization: Even when information must be provided to fulfill a legal obligation, only the minimum amount of information necessary for the purpose of the request will be disclosed.
• Record Keeping: The content of government requests, legal basis, response outcomes, and responsible personnel information are documented and carefully maintained.

The Company may outsource part of personal information processing to external entities for service operation. When outsourcing, necessary matters are reflected in contracts and managed/supervised in accordance with relevant laws.

Users may exercise rights such as access, correction/deletion, processing suspension, and consent withdrawal at any time. Rights may be exercised through the contact information below.

The Company may use cookies (or similar technologies) for service provision and quality improvement. Users may refuse cookie storage through browser settings; some features may be limited.

(1) Where collected statistical and metadata may include information that can identify an individual, the Company may pseudonymize it ("Pseudonymized Information") so that a specific individual cannot be recognized, in accordance with Article 28-2 of the Personal Information Protection Act, for purposes such as statistical compilation and scientific research.

(2) For AI algorithm improvement and analysis, result data that does not require pseudonymization (e.g., simple reply rates, delivery success rates) is processed as "Anonymized Information" with identifiability fully removed and managed securely.

(3) When processing Pseudonymized Information, the Company implements technical, administrative, and physical safeguards. Sensitive identifying information such as influencer contact details and a brand's trade secrets are destroyed immediately or stored in strict separation so they are never disclosed to third parties.

Please contact us below for privacy-related inquiries.

• Company: BuzzBeeLab
• Contact: 070-8065-1350
• Privacy Officer: Oh Yun-seon (CEO)
• Email: yoh@buzzbeelab.com

When adding, deleting, or modifying this Privacy Policy, notice will be given at least 7 days before the effective date through service notice or the website.