HeyLocal (hereinafter, the "Company") establishes this Privacy Policy to ensure the secure handling of Members’ personal information and to promptly and efficiently address any related inquiries or complaints, in accordance with applicable laws and regulations of the Republic of Korea.
| Purpose of Collection | Required/Optional | Personal Information Collected | Retention Period |
|---|---|---|---|
| Account Registration and Service Provision | Required | Email address (ID), Member type, Display name, Gender, Age group, Native language, Activity region, Interest category, User identifier | Until 6 months after membership withdrawal |
| Account Registration and Service Provision | Optional | Profile photo, Additional languages, Mobile phone number, Introduction text | |
| Service Improvement and Analysis | Required | Service usage data, Customer inquiry records, Error/Bug logs, Survey responses | Until the purpose of handling customer inquiries and service analysis is achieved |
| Marketing and Promotional Activities | Optional | Email address | Until consent is withdrawn |
| Retention of communication confirmation data pursuant to Article 15-2 of the Protection of Communications Secrets Act | Required | Computer communications, Internet log data, Access location data | 3 Months |
Personal information shall not be used for purposes other than those specified above. If the purpose of collection is changed, the Company shall take necessary measures, including obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.
However, personal information may be retained until the termination of the relevant cause in the following cases:
a. Where an investigation into a violation of applicable laws and regulations is in progress: until the conclusion of the investigation
b. Where a service sanction arises under the Company's Terms of Service and identification of the same individual and prevention of fraudulent use are required
• Fraudulent use records (posts, comments, chat contents, device information, duplicate registration verification Information): until the end of the sanction (maximum 5 years)
c. Where the retention period is required under applicable laws and regulations: until the end of the required retention period
The following information may be automatically generated and collected during the use of the Service:
• Service usage data, access logs, cookies, IP addresses, access timestamps, and device information (OS, device model, etc.).
For the purpose of data analysis and distributed storage, the Company outsources the processing and storage of personal information collected from Members to overseas as follows:
| Consignee | Outsourced Task | Data Transferred | Country of Transfer | Timing and Method of Transfer | Purpose of Transfer | Retention Period |
|---|---|---|---|---|---|---|
| Google LLC | Storage and management of data for Members’ authentication and service operation | Personal information necessary for service operation (Email, Login credentials, Information generated/stored during service use) | United States | Transmitted via network upon service use | Service provision and operational support | Until Member withdrawal or the end of the consignment task |
| Supabase Inc | Storage and management of Members’ information and service data | All collected personal information | United States | Transmitted via network upon service use | Database management and service provision | Until Member withdrawal or the end of the consignment task |