Privacy Policy
Privacy Policy
How DaisySoft (데이지소프트, “we”) handles personal data on www.daisysoft.net and in apps you sign in to with a DaisySoft account (SpliTak, DaiLight and others), under Korea’s Personal Information Protection Act. The Korean version governs if the two differ. Effective October 24, 2026.
1. Data we process and how we collect it
| Purpose | Data | When and how |
|---|---|---|
| Account (required) | Email address, password (stored only as a one-way hash), account ID | When you sign up with email |
| Social sign-in (if you choose it) | Google: email, name, profile picture URL, Google account ID Apple: email (or Apple’s private relay address), name (if shared), Apple account ID | Received from Google or Apple when you choose to sign in with them |
| App licenses | Device identifier (an irreversible hash), device name, operating system, last seen time, free trial start records | When you sign in and activate a license in an app |
| Payments | Order ID, product, amount, date, status (paid or refunded), payment method details returned by the payment provider (card issuer, masked card number, approval number), billing key for subscriptions | Through Toss Payments when you buy or subscribe |
| Coupons | Coupons you redeem and when | When you redeem a coupon on My account |
| Generated automatically | IP address, access time, browser and app information, usage and error logs | While you use the service |
We never receive or store full card numbers, expiry dates or card passwords. Toss Payments handles them.
We do not collect resident registration numbers or sensitive data.
2. Why we process it
- Accounts: confirming sign-up, authentication, keeping you signed in, preventing abuse, account deletion
- Service: delivering licenses you bought or subscribed to, per-account device limits, free trials and preventing repeat trials, coupons
- Payments: charging, recurring billing, refunds, receipts and payment history
- Support: answering questions, service notices, handling disputes
- Operations: troubleshooting, security, and aggregated statistics that do not identify you
We do not use your data for advertising or marketing without separate consent.
3. How long we keep it
We keep account data until you delete your account, then delete it without delay, except for the following records we must keep by law.
| Records | Law | Period |
|---|---|---|
| Contracts and order cancellations | Act on Consumer Protection in Electronic Commerce | 5 years |
| Payments and delivery of goods | Act on Consumer Protection in Electronic Commerce | 5 years |
| Consumer complaints and disputes | Act on Consumer Protection in Electronic Commerce | 3 years |
| Advertising records | Act on Consumer Protection in Electronic Commerce | 6 months |
| Electronic financial transactions | Electronic Financial Transactions Act | 5 years |
| Access logs (sign-in records, IP addresses) | Protection of Communications Secrets Act | 3 months |
Payment records kept after deletion have your email and contact details removed and are used only for these purposes. Hashed device identifiers in trial records are kept while the product offers free trials, to stop repeat trials on the same device; they cannot identify you on their own.
4. Sharing with third parties
We do not provide your data to third parties except with your consent or where the law requires it.
5. Processors
| Processor | Task |
|---|---|
| Toss Payments Co., Ltd. | Card payments, recurring billing (billing keys), cancellations and refunds |
| Supabase Pte. Ltd. | Authentication, database storage, sign-in emails |
| Vercel Inc. | Website and server hosting, access logs |
We will update this policy if these processors or tasks change.
6. International transfers
Data is transferred over the network whenever you use the service, as follows.
| Recipient (contact) | Location | Data | Purpose | Retention |
|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.com) | Stored in Korea (Amazon Web Services Seoul region); company based in Singapore | Account, license, payment and coupon data in section 1 | Authentication, storage | Until account deletion or end of contract (legally required records for their period) |
| Vercel Inc. (privacy@vercel.com) | United States and other Vercel data center locations | IP address, access logs, account and payment data sent while handling requests | Website and server hosting | Deleted after handling requests; logs per Vercel’s retention (up to 3 months) |
If you do not want this transfer, do not create an account or delete it. Account features and paid products then cannot be used.
7. Deletion
When data is no longer needed we delete it without delay: electronic records are erased irrecoverably or anonymized, and paper records are shredded or burned. Records kept by law are stored separately.
8. Your rights
- You can ask to access, correct, delete or stop processing your data, or withdraw consent, at any time.
- On My account you can see subscriptions, licenses and payments, cancel subscriptions and delete your account yourself.
- For anything else, email the privacy officer below. We respond within 10 days.
- A legal representative or authorized agent can act for you with a power of attorney.
We do not accept sign-ups from children under 14 and delete such data as soon as we learn of it.
9. Cookies and browser storage
We use browser storage (local storage) to keep you signed in and remember your language. We do not use advertising or tracking cookies or third-party analytics. You can block or clear site data in your browser, but you may then be signed out.
10. Security
- Administrative: minimal staff access, oversight of processors
- Technical: HTTPS everywhere, one-way password hashing, restricted database access, two-factor authentication for administrators, audit logs
- Physical: storage in processors’ access-controlled data centers
11. Privacy officer
- Privacy officer: 이순호 (Representative)
- Email: hindoog@daisysoft.net
- Phone: +82 10-2915-2058
- Address: 경기도 양주시 회천로 200, 2504동 609호
12. Getting help
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
13. Changes
This policy applies from October 24, 2026. We announce changes on this site 7 days before they apply, or 30 days before for changes that work against you.