Privacy Policy

• •Account information: email, name or nickname, login identifier
• •Authentication information: social login provider identifiers, token-related metadata
• •Payment-related information: payment status, subscription plan, billing dates, receipt/order identifiers, Paddle customer ID or transaction ID
• •Service usage information: access logs, IP address, browser/device information, usage, error logs
• •Customer support information: inquiry content, email, attachments, support records
• •Cookies and similar technologies
• •Content or files you input into the service, where applicable

We do not directly store sensitive payment instrument data such as card numbers or CVC; such data is handled by Paddle and its payment processors.

• •Account registration and management
• •Providing the service
• •Verifying paid plan and subscription status
• •Payment, billing, refunds, and tax/accounting processing
• •Customer support and notices
• •Security, fraud prevention, and incident response
• •Service improvement, statistics, and analytics
• •Compliance with legal obligations

Because we use overseas providers (e.g., Paddle, cloud, AI APIs, analytics), some personal information may be transferred and processed outside the Republic of Korea. For each provider we will disclose: recipient, country, items transferred, purpose, timing/method, retention/use period, and how to refuse (and the effect of refusing).

The recipients, items, purposes, and retention periods are as listed in the table in Section 4. Transfers occur over encrypted networks at the time you use the service. You may refuse cross-border transfers by contacting us at the email above; however, refusal may make it impossible to provide part or all of the service.

• •We delete personal information without undue delay upon account withdrawal.
• •Records on contracts and withdrawal of offers, and records on payment and supply of goods/services: 5 years (Act on Consumer Protection in Electronic Commerce).
• •Records on consumer complaints and dispute resolution: 3 years (same Act).
• •Records on display and advertising: 6 months (same Act).
• •Website access logs: 3 months (Protection of Communications Secrets Act).
• •Analytics data (Google Analytics): retained up to 14 months.
• •Backup data is deleted within 30 days.
• •A minimal set of records may be retained to prevent fraud and abuse.

• •Access, correction, deletion, and suspension of processing
• •Withdrawal of consent and account withdrawal
• •Requests can be made at [email protected]

• •We use cookies to keep you signed in, remember preferences, and understand usage.
• •We distinguish essential cookies from analytics/marketing cookies.
• •You can refuse cookies in your browser settings; some features may not work if you do.

• •Access control and least-privilege permissions
• •Encryption in transit and at rest where appropriate
• •Logging and monitoring
• •Backups and security updates
• •Administrative access controls

OurVerse is an educational service that may be used by children, typically with a parent's or guardian's involvement. Where a child is below the age of consent under applicable law (e.g., under 14 in Korea), account creation and payment should be carried out by a parent or legal guardian.

We do not knowingly collect personal information directly from children under 14. Accounts and payments must be created and made by a person aged 14 or older, such as a parent or legal guardian. If we learn that personal information of a child under 14 has been collected without the required legal guardian's consent, we will delete it without undue delay.

We will announce material changes to this policy in advance through the service, and the effective date is shown at the bottom of this page.