Privacy Policy

Version: 3.0 draft
Draft reviewed: October 19, 2026
Contact: Contact form

This is a proposed revision. The effective date and notice of changes will be announced separately.

1. Purpose of Processing Personal Information

Sangse (hereinafter "Company") processes personal information for the following purposes:

  • Member registration and management
  • Provision of AI-based product detail page generation service
  • Identity verification and personal identification for service use
  • Prevention of fraudulent use and unauthorized access
  • Service improvement and new service development
  • Customer inquiry handling and customer service provision

2. Personal Information Collected

Required Items:

  • Account: email address and account identifier
  • Service: submitted product information, images, reference URLs, generated content, edits, saved records, and usage
  • Billing: customer, order and subscription identifiers, payment status, amounts, and transaction records
  • Access IP information
  • Cookies, access logs

Optional Items:

  • Name and profile image you provide or your selected sign-in provider supplies
  • Contact details and message contents you submit when contacting support
  • Store identifiers, integration credentials, and product information supplied when connecting an external store

3. Retention Period of Personal Information

The Company processes and retains personal information within the retention period prescribed by law or agreed upon at the time of collection:

  • Member registration and management: Until membership withdrawal
  • Service provision: Until termination of service agreement
  • Statutory retention: For transactions covered by Korean e-commerce law, contract/withdrawal and payment/supply records are retained for 5 years, complaints/disputes for 3 years, and advertising records for 6 months.

4. Processing Inputs and Outputs for AI Services

Processing needed to generate content:

  • Product descriptions, images, reference materials, and editing requests are sent to the relevant AI provider for generation and analysis.
  • Faces, names, or contact details included in those materials may also be transmitted. Do not submit unnecessary personal information. Uploaded or generated images may receive public URLs accessible to anyone who has the address.
  • You must have an appropriate legal basis and permission to upload materials containing another person’s personal information.
  • This policy does not constitute blanket consent to AI training. Processing for a separate purpose requires an appropriate legal basis and any necessary notice or consent.

5. Third-Party Disclosure of Personal Information

The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the data subject or special provisions of law.

6. External Services Used for Processing

The following external services support service delivery. Google sign-in connects to the authentication provider you select; information sent to each service depends on the function it performs:

  • Cloud Services: Supabase (authentication, database, and file storage), Vercel (hosting, traffic and performance measurement)
  • Authentication Services: Google OAuth (when you choose Google sign-in)
  • AI Services: OpenAI, Google, Anthropic (text/image generation and analysis according to the selected feature and model)
  • Payment Services: Polar (payments, subscriptions, and transactions)
  • Usage Analytics: PostHog (consent-based feature analytics)
  • Email Services: Resend (service-related email delivery)

7. Rights and Obligations of Data Subjects

Data subjects may exercise the following rights regarding personal information protection at any time:

  • Request notification of personal information processing status
  • Request access to personal information
  • Request correction or deletion of personal information
  • Request suspension of personal information processing

You may request access, correction, deletion, suspension, withdrawal of consent, or account closure through the contact email below. Requests are handled within statutory periods after verifying your identity or authority to act. If statutory retention or another legal restriction applies, we explain the reason.

8. Security Measures for Personal Information

The Company takes the following measures to ensure the security of personal information:

  • Account access restrictions through authentication and authorization
  • Encrypted transport and server-side credential management
  • Controls against abnormal requests and service abuse

9. Privacy Officer

The Company designates the following privacy officer, who oversees personal information processing and handles related complaints and remedies. The service operator's details are listed with it:

Business name
VERDEVITA
Representative
Park Eung Je
Privacy officer
Park Eung Je (Representative)
Business registration
110-41-07564
Mail-order report
2023-Hwaseong Dongtan-0965
Address
Unit 501, 5F, 290 Yulgok-ro, Jongno-gu, Seoul

10. Changes to Privacy Policy

This Privacy Policy is effective from the effective date, and any additions, deletions, or corrections to the content in accordance with laws and policies will be announced through notices 7 days prior to the implementation of changes.

11. Request for Access to Personal Information

Data subjects may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. The Company will endeavor to process requests for access to personal information promptly.

Department for Receiving and Processing Personal Information Access Requests

In charge: Privacy officer Park Eung Je

Email: patreot0312@fronmpt.com

Contact: Contact form

12. Destruction of Personal Information

Personal information that is no longer necessary after its retention period or purpose ends is to be destroyed without delay. Records subject to statutory retention are kept for that purpose and destroyed when the period ends. Electronic records are deleted using methods that prevent recovery, and paper records are shredded or incinerated. Transaction records may need to be retained separately after account closure.

13. Cookies and Usage Analytics

Cookies and browser storage maintain sign-in and interface preferences. Optional PostHog analytics is activated after consent. It processes page views, clicks, session identifiers, and feature usage events; depending on configuration, visited URLs, product names, editing identifiers, and session recordings may be included. Refusal does not affect basic service access. Browser settings let you delete or block cookies and site data, which may reset sign-in and preferences. Requests to delete previously collected information or withdraw consent can be sent to our contact email. Vercel traffic and performance measurements operate separately from the PostHog consent setting.

14. Overseas Processing and External Integrations

Cloud, AI, and payment services may process submitted materials and account or transaction information overseas. Connecting an external store involves processing store identifiers, credentials, and product information needed for the requested integration. Contact us about integrations or personal information processing. Refusing or stopping processing essential to a feature may limit access to that feature.