Privacy Policy

Unmyung Baekgwa is a service operated from the Republic of Korea by Monster. This policy is based on the Republic of Korea’s Personal Information Protection Act and related laws. This English version is provided for your convenience.

Monster (the “Company”) complies with the Personal Information Protection Act and other applicable laws, and establishes and discloses this Privacy Policy to protect the personal information of users of the “Unmyung Baekgwa” service.

1. Personal Information We Collect

The Company collects the following information to generate Reports and provide the Service.

• Report generation data: name, date of birth, time of birth, gender, solar/lunar calendar (including leap month), place of birth (optional), personality type (optional), and any questions you enter yourself.
• Identity verification / re-access data: mobile phone number (the last digits are used to verify you when re-opening a past Report).
• Payment data: payment method and transaction records (actual card numbers and the like are handled by the payment provider and are not stored by the Company).
• Automatically collected data: access logs and cookies (for your own re-access and for administrator authentication).

2. Purposes of Collection and Use

• Generating and providing Saju and personality-analysis Reports
• Processing payments and refunds and maintaining transaction records
• Verifying the user’s identity and providing re-access to past Reports
• Responding to customer inquiries and handling disputes

3. Retention and Use Period

• Reports and input data: retained to provide the past-Report re-access service, and destroyed without delay upon the user’s deletion request or after 3 years from the date of collection. However, payment and transaction records subject to a retention obligation under the laws below are retained separately for the applicable period.
• Retention under applicable law: the following records are retained under the Act on Consumer Protection in Electronic Commerce.
  • Records on payment and supply of goods: 5 years
  • Records on contracts or withdrawal of subscription: 5 years
  • Records on consumer complaints or dispute handling: 3 years

4. Outsourcing of Processing

The Company outsources the processing of personal information as follows, and stipulates in the outsourcing contracts that personal information is managed securely.

• Anthropic, PBC — generation of the AI Report body (your Saju information and questions are processed)
• Railway — service hosting and data storage
• Payment provider — payment processing and cancellation

5. Cross-Border Transfer

In the course of generating and hosting Reports, some personal information may be transferred to processing systems located outside the Republic of Korea. Users are deemed to consent to this when proceeding with payment; you have the right to refuse consent, in which case use of the Service may be limited.

• Recipients: Anthropic, PBC / Railway
• Countries: United States and others (locations of the processing systems)
• Items transferred: input data needed to generate the Report (name, Saju information, questions, etc.)
• Purpose, timing, and method: transferred over the network at the time of use, in order to generate the Report

6. Provision to Third Parties

The Company does not use users’ personal information beyond the purposes set out in this policy, nor provide it to third parties, except where specially provided by law or where there is a lawful request from an investigative agency.

7. Rights of Data Subjects and How to Exercise Them

Users may at any time request access, correction, deletion, or suspension of processing of their personal information. If you contact the Privacy Officer below, we will act without delay.

8. Personal Information of Children Under 14

Where the Service wishes to collect and use the personal information of a child under 14, it obtains the consent of the legal representative (guardian). The legal representative may request access, correction, deletion, or suspension of processing of the child’s personal information.

9. Cookies and Advertising Measurement

The Company uses cookies for the user’s own re-access to Reports and for administrator authentication. Users may refuse cookie storage through their browser settings; in that case, some functions such as personal re-access may be limited.

We also use the following providers’ analytics and conversion-tracking tools to measure advertising performance. These tools record which pages were visited, how the visit arrived, and whether a purchase was completed along with its amount. No personally identifying information — name, birth date, or phone number — is sent to them.

• Meta Platforms, Inc. — Meta Pixel (Facebook and Instagram ad measurement)
• NAVER Corp. — NAVER Ads conversion tracking (NAVER search and display ad measurement)

If you prefer not to be measured for advertising purposes, you can block cookies in your browser or opt out of personalized advertising in each provider’s ad settings. Opting out does not limit your use of the service.

10. Security Measures

• Encrypted (one-way) storage of passwords and authentication data
• Minimization of and access control over access rights to personal information
• Encryption of transmission (HTTPS)
• Retention of access records for sensitive processing

11. Destruction of Personal Information

Personal information whose retention period has elapsed or whose purpose has been achieved is destroyed without delay. Electronic files are deleted by technical means that make recovery impossible, and printed materials are shredded or incinerated.

12. Privacy Officer

Users may direct privacy-related inquiries, complaints, or requests for relief to the officer below, and the Company will respond promptly and sufficiently.

• Privacy Officer: 고영주
• Contact: [email protected] / 010-2295-6666

For reports or consultation regarding personal information infringement, you may also contact Korea’s Personal Information Dispute Mediation Committee (1833-6972), the Privacy Infringement Report Center (118), and similar bodies.

13. Changes to This Policy

If there are additions, deletions, or amendments to this policy, we will give notice through the Service at least 7 days before the effective date.

This Privacy Policy takes effect on 2026-06-19.