clipduty

Privacy Policy

Last updated: August 23, 2026

Clipduty (hereinafter "Company") takes the protection of your personal information seriously and complies with the Personal Information Protection Act of Korea and other applicable privacy laws.

This Privacy Policy explains how the personal information you provide is used and what measures the Company takes to protect it.

1. Personal Information Collected and Collection Methods

A. Items Collected

The Company collects the following personal information for membership registration and service provision:

  • Required: Name, email address, password
  • Business information: business registration number, company name, representative name, customs clearance code (required when registering as a business account)
  • Automatically collected during use: service usage records, access logs, IP address, browser and device information, cookies
  • Guest (non-member) identifier: a random identifier stored in a cookie and the IP address, used to provide the free trial and prevent repeated use
  • Documents uploaded by the user: invoices, packing lists and other customs documents, including counterparty information contained in them

B. Collection Methods

  • Directly entered by users during registration or service use
  • Collected during consultations via the customer support center
  • Automatic collection through log-generation and analytics tools

2. Purpose of Collection and Use

The Company uses collected personal information for the following purposes:

A. Service Delivery and Billing

  • Content delivery and customized service provision
  • Identity verification, payment processing, and fee collection

B. Membership Management

  • Identity verification and user identification for member services
  • Prevention of unauthorized or fraudulent use
  • Verification of registration intent and limiting duplicate registrations
  • Record-keeping for dispute resolution and complaint handling
  • Delivery of notices and important announcements

C. Marketing and Analytics

  • Development of new services and personalized recommendations
  • Providing event information and promotional opportunities
  • Usage frequency analysis and service usage statistics

3. Retention and Use Period

Personal information is destroyed without delay once the purpose of collection is achieved. The following information is retained for the specified periods:

A. Internal Policy

  • Abuse records: Purpose — abuse prevention / Retention period — 1 year

B. Applicable Law

  • Records on contracts or withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce)
  • Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
  • Records on consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce)
  • Records on credit information: 3 years (Act on Use and Protection of Credit Information)
  • Access logs: 3 months (Protection of Communications Secrets Act)
  • Import/export declaration documents and books: 5 years (Customs Act)

4. Destruction Procedures and Methods

A. Procedure

Personal information entered by users is moved to a separate database after its purpose is achieved and retained for the period required by internal policy and applicable law before being destroyed.

B. Methods

  • Personal information stored electronically is deleted using technical methods that prevent recovery.
  • Personal information printed on paper is shredded or incinerated.

5. Sharing and Disclosure

The Company uses personal information only within the scope described in Section 2 and does not disclose it to third parties without prior user consent, except in the following cases:

  • Where the user has given advance consent to disclosure
  • Where required by law or requested by a law enforcement agency pursuant to legal procedures

6. Entrustment of Personal Information Processing

The Company may entrust personal information processing to third parties to improve services, and ensures that entrustment agreements include adequate data protection provisions.

a. Processors (domestic and overseas)

  • Vercel Inc. — service hosting and infrastructure
  • Google Cloud Platform — database and file storage, AI processing (Vertex AI)
  • Google (Google Analytics) — aggregate usage analytics
  • Mixpanel, Inc. — aggregate usage analytics
  • Functional Software, Inc. (Sentry) — error collection and incident response
  • Sendinblue SAS (Brevo), Resend, Inc. — email delivery (verification, notices)
  • Microsoft Corporation — processing customs documents received in the mailbox the user connected

Note: transmission to Korea Customs Service (UNIPASS) is not outsourcing — it is the submission of your declaration under the procedure set by the Customs Act, at your instruction.

b. Transfer of personal data overseas

Some of the processors above are located outside Korea. In accordance with Article 28-8 of the Personal Information Protection Act, we disclose the following.

  • Items transferred: those items listed in section 1 that are necessary for the relevant service
  • Countries, timing and method: United States (Vercel, Google, Mixpanel, Sentry, Microsoft), France (Brevo) — transmitted over the network as the service is used
  • Contact of the recipient: as stated in each provider's own privacy policy
  • Purpose and retention: to perform the processing described above, until the processing agreement ends

You may refuse the overseas transfer. If you refuse, some or all of the service will be unavailable.

When entering into a processing agreement we set out in writing the obligation to comply with data protection law, the prohibition on disclosure, liability in the event of an incident, and the return or destruction of personal data when the agreement ends. We supervise whether processors handle personal data safely. Any change to the processors or their tasks will be disclosed through this policy.

7. User Rights and How to Exercise Them

  • Users and legal representatives may access, modify, or request deletion of their personal information (or that of a child under 14 in their care) at any time.
  • To access or modify personal information, click 'Edit Profile' (or equivalent). To withdraw consent or delete your account, click 'Delete Account' and complete identity verification.
  • You may also contact the Privacy Officer by mail, phone, or email and we will respond without delay.
  • Personal information for which a correction has been requested will not be used or disclosed until the correction is complete.

8. Cookies: Installation, Operation, and Opt-Out

The Company uses cookies to store and retrieve usage information to provide personalized services.

A. Purpose of Cookies

Used to keep you signed in, to prevent repeated use of the free guest trial, and to analyse access frequency and usage flow.

b. Types of cookies used

  • Essential cookies: sign-in session and security (CSRF) — sign-in is impossible if refused.
  • Guest identifier cookie (clipduty_guest_id): provides the free guest trial and prevents repeated use — retained for one year.
  • Analytics cookies (Google Analytics, Mixpanel): aggregate usage statistics — refusing them does not affect use of the service.

c. How to refuse cookies

You can refuse cookies in your browser settings (Chrome: Settings → Privacy and security → Third-party cookies / Safari: Settings → Privacy / Edge: Settings → Cookies and site permissions). Note that refusing essential cookies makes signed-in features unavailable.

9. Technical and Organizational Security Measures

The Company implements the following measures to protect personal information from loss, theft, leakage, alteration, or damage:

  • Password encryption: Member passwords are stored in encrypted form and known only to the user.
  • Anti-hacking measures: The Company takes active steps to prevent personal information from being leaked or damaged by hacking or malware.
  • Minimization and training: Access to personal information is limited to designated staff, who are issued dedicated credentials that are updated regularly.

10. Privacy Officer Contact Information

You may report all privacy-related complaints arising from your use of the Services to the Privacy Officer.

Privacy Officer

  • Name: Sanghwan Kim
  • Organization: Clipduty
  • Email: contact@clipduty.com

11. Changes to This Privacy Policy

Any additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technology will be announced on the Company's website no fewer than 7 days before taking effect.

This privacy policy takes effect on August 23, 2026.