Privacy Policy
Effective date: August 1, 2026
SSAEM ("Company") complies with applicable privacy laws and processes your personal information as follows.
1. Information We Collect
| Type | Items | When |
|---|---|---|
| Required | Email, name (nickname), password (email signup; stored encrypted) | Sign-up |
| Social login | Social account identifier, nickname, email (with consent) — provided by Google, Kakao, or Naver | Social sign-up |
| Automatic | Learning records (progress), purchase history, access logs, cookies (language preference, login session) | Using the Service |
| Payment | Payment approval data (card details are handled by the payment processor and never stored by the Company) | Paid purchase |
2. Purposes of Use
- Identifying members, maintaining login sessions, account management
- Providing courses and managing progress and enrollment rights
- Processing payments and refunds, managing purchase history
- Responding to inquiries and delivering notices
- Statistical analysis for service improvement (in non-identifiable form)
3. Retention Period
- Account data: until account deletion (destroyed immediately, except where retention is required by law)
- Retention under Korean e-commerce law: contract/withdrawal records 5 years; payment/supply records 5 years; consumer dispute records 3 years
- Access logs: 3 months
4. Provision to Third Parties
We do not provide personal information to third parties except with your prior consent or where required by law.
5. Processing Delegation (including overseas transfer)
| Processor | Task | Note |
|---|---|---|
| Vercel Inc. | Web hosting | Overseas (US) |
| [TBD: Neon/Supabase] | Database operation | Overseas |
| Vimeo Inc. / Google (YouTube) | Video streaming | Overseas (US) |
| [TBD: payment processor] | Payment processing | When payments launch |
6. Your Rights
You may request access, correction, deletion, or suspension of processing of your personal information at any time via the contact below. Account deletion can also be requested there.
7. Cookies
The Service uses cookies to maintain login sessions and store your language preference. You can block cookies in your browser settings, but some features (such as login) will not work.
8. Security Measures
- One-way password hashing (bcrypt)
- HTTPS encryption in transit
- Least-privilege access control for administrator accounts
9. Privacy Officer
- Name: [TBD] / Title: [TBD]
- Contact: [TBD: email]
10. Notice of Changes
Changes to this policy will be announced in the Service at least 7 days before taking effect.