Privacy Policy
Version v1.0-beta · Effective 2026-04-21
English convenience translation. This is an English translation of ToonCat's Korean-language Privacy Policy, provided for convenience. The Korean version is the official, governing text; in case of any conflict, the Korean version prevails (see "Governing Language"). This is a pre-launch beta document and is subject to legal review.
Project July Co., Ltd. (the "Company") values Creators' personal information and complies with the Korean Personal Information Protection Act and related laws. Through this Policy, the Company informs Creators of how their personal information is used and what measures are taken to protect it.
1. Personal Information Collected
| Category | Items collected | When collected |
|---|---|---|
| Registration (required) | Email, password, pen name | At registration |
| Settlement information (optional; becomes required after official launch) | Real name, contact, address, bank name, account number, business registration number (if a business) | When entered by the Creator |
| Automatically collected | Access IP, cookies, service-usage records, device information | While using the Service |
2. Purposes of Collection and Use
- Member identification, identity verification, and maintenance/management of membership.
- Service provision such as content registration, management, and distribution.
- Revenue settlement and tax filing after the official launch.
- Preventing misuse and preserving records for dispute mediation.
- Notifying of important matters such as changes to terms or policies.
- Sending marketing information (only where separate consent has been obtained).
3. Retention and Use Period
- Principle: Personal information is destroyed without delay after a Creator requests withdrawal or the collection/use purpose is achieved.
- The following are retained for the stated periods:
- Settlement-related materials: 5 years (Framework Act on National Taxes).
- E-commerce records: 5 years (Act on Consumer Protection in Electronic Commerce).
- Access logs: 3 months (Protection of Communications Secrets Act).
- The schedule for handling on withdrawal follows Article 11 of the [Content License Agreement].
4. Outsourcing of Personal Information Processing
The Company outsources processing of personal information as follows for smooth service provision:
| Processor | Outsourced work | Period |
|---|---|---|
| Vercel Inc. | Web hosting and content delivery | Until withdrawal or termination of the outsourcing contract |
| Supabase Inc. | Database operation and authentication system | Until withdrawal or termination of the outsourcing contract |
| Google LLC (Google Cloud) | AI automatic translation (Gemini API paid tier) | Until withdrawal or termination of the outsourcing contract |
| Resend Inc. | Email delivery | Until withdrawal or termination of the outsourcing contract |
When concluding outsourcing contracts, the Company specifies measures for safe processing under Article 26 of the Personal Information Protection Act and supervises the processors' handling of personal information.
5. Cross-Border Transfer of Personal Information
All processors in Section 4 are headquartered overseas, and personal information is transferred abroad as follows:
| Transferee | Country | Time/method of transfer | Items transferred | Purpose | Retention period |
|---|---|---|---|---|---|
| Vercel Inc. | United States | Automatic transmission over the network during service use | Registration information, automatically collected information | Hosting | Same as outsourcing period |
| Supabase Inc. | Singapore (server region) | Same | Registration information, settlement information | DB operation | Same |
| Google LLC | United States | Same | Content text (no personal information) | AI translation | Same |
| Resend Inc. | United States | Same | Email address, pen name | Email delivery | Same |
A Creator may refuse the cross-border transfer of personal information; in that case, the Creator may be unable to use some or all of the Service.
6. Rights of the Data Subject
A Creator may exercise the following rights against the Company:
- Request access to, correction of, deletion of, or suspension of processing of personal information.
- Request withdrawal of membership.
- Withdraw consent.
Rights may be exercised via the in-service profile page or by contacting contact@tooncat.net, and the Company will act without delay.
7. Destruction of Personal Information
- Personal information is destroyed without delay once the retention period elapses or the processing purpose is achieved.
- Electronic files are permanently deleted in an unrecoverable manner; paper documents are shredded or incinerated.
8. Blocking Registration of Children Under 14
The Company does not accept registration by children under 14 and operates a procedure to confirm that a registrant is 14 or older.
9. Personal Information Protection Officer
| Item | Information |
|---|---|
| Protection officer | Kim Sol |
| Contact | contact@tooncat.net |
10. Notice of Changes
If this Policy changes, the Company gives notice within the Service 7 days before the change. However, where there is a material change to the rights of data subjects, notice is given 30 days in advance and individually by registration email.
Governing Language
This Policy is written in Korean and translated into other languages for convenience. The Korean-language version is the official and governing version. In the event of any conflict or difference in interpretation, the Korean version prevails. The Korean original is available at /legal/privacy.
This Policy applies from 2026-06-01.