Notice of Consent to the Collection and Use of Personal Information

This translation is provided for convenience. If there is any discrepancy, the Korean text prevails.

This Service collects only the information that is strictly necessary to provide saju readings and consultations. For each category, what is collected, why, and how long it is kept are set out below.

■ Sign-up and Login (E-mail Verification Code / Google Account)

- Items collected: e-mail address, sign-up time, last login time, time of consent to the collection and use of personal information. If you log in with Google, your Google account identifier and name (the display name provided by Google)

- Staying logged in: on a device that has been verified once, a key for staying logged in (a random value) is stored for 1 year. Only an irreversible transformed value is kept on the server, and the key is deleted from that device when you log out and from all devices when you withdraw.

- Purpose of collection: identity verification, login, viewing your consultation, report and order records, and continuing consultations on other devices

- Method of collection: the website (confirming the e-mail verification code on the login screen, or "Continue with Google")

- Retention period: destroyed immediately upon withdrawal of membership. Even after withdrawal, the order records themselves are retained for the period stated in the "Orders and Payment" item below, and only the link to the member is removed.

- Sign-up is optional. You can use readings and consultations without signing up.

■ Sending Login Verification Codes and Preventing Abuse

- Items collected: e-mail address, verification code (encrypted value), transformed value of the access IP (a value that cannot be converted back to the original IP)

- Purpose of collection: checking verification codes, and preventing repeated requests and fraudulent logins

- Retention period: destroyed 1 day after sending

■ Saved Consultation Information (Optional)

- Items collected: name, gender, date and time of birth, solar/lunar calendar (whether it is a leap month), place of birth

- Purpose of collection: so that you do not have to enter the same information again at your next consultation

- Method of collection: stored only when a logged-in member presses "Save" on the consultation screen.

- Retention period: destroyed immediately when the member presses "Delete" or withdraws

■ Provision of Fortune Content and Instant Consultation (Chatbot)

- Items collected: name (a nickname is allowed), gender, date and time of birth, solar/lunar calendar, place of birth, questions left in consultations and the answers to them

- Purpose of collection: saju calculation, writing readings and consultation answers, and answering in continuation of earlier consultations

- Method of collection: the website (product screens and consultation chat window)

- Retention period: the same as the "Orders and Payment" item below.

- If, during a consultation, the user enters the name, gender and date and time of birth of other persons (spouse, children, etc., up to 2 persons other than the user), this information is used only to compose the answers for that consultation and is retained for the same period as the order records. Please enter another person's information only if you have obtained that person's consent.

- To continue consultations, a consultation key (a random character string) is stored on the user's device (browser). It is deleted when the browser history is cleared.

■ Orders and Payment

- Items collected: order details (product, amount, order time), payment information (payment method, approval and transaction numbers — payment information such as card numbers is processed directly by the payment agency and is not retained by the Company), depositor name (for bank transfers), contact information (e-mail — only if provided), and the input information under "Provision of Fortune Content" above

- Purpose of collection: receiving orders, confirming payments and deposits, providing readings and consultations, processing refunds

- Retention period: pursuant to the Act on the Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률), records on contracts, withdrawal of subscription, payment and supply of goods: 5 years; records on consumer complaints or dispute resolution: 3 years

■ Saved Copies for Re-viewing Reports

- Items collected: text of the reports sent, viewing number, password (encrypted value)

- Purpose of collection: reopening and viewing reports you have received

- Retention period: automatically destroyed 1 year after storage

■ Service Usage Records

- Items collected: service usage records, access device information (browser, OS)

- Purpose of collection: service improvement, error checking, prevention of fraudulent use

- Retention period: destroyed immediately once the purpose of use has been achieved

■ Provision of Personal Information

- If a user places an order or consults through a shop (seller), the order details, depositor name and consultation content are provided to that shop for order processing, deposit confirmation and refunds. They are not provided to other shops.

■ Entrustment of Personal Information Processing and Overseas Transfer

- Writing readings and consultation answers (AI): Anthropic, PBC (United States) — Items transferred: name (nickname), gender, saju values calculated from the date and time of birth, consultation questions / Time and method of transfer: transmitted through encrypted communication each time a reading or answer is generated / Retention: in accordance with the trustee's policy; this Service uses the trustee on the condition that the trustee does not use the transmitted content for AI training.

- Payment processing: (주)코리아포트원 (payment integration), 엔에이치엔케이씨피(주) and (주)케이지이니시스 (credit card and simple payment approval, payment cancellation and refunds)

- E-mail sending: verification codes and notification e-mails are sent through a mail sending server (SMTP).

- Server operation: data is stored on the servers of a hosting company in Korea.

■ YouTube API Services and TikTok (Marketing Console)

- Our marketing console uses YouTube API Services. iamdosa and the partner shops on iamdosa can connect their own YouTube channel and upload short videos made from the shop's own marketing posts to that channel. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms), and the Google Privacy Policy (http://www.google.com/policies/privacy) applies.

- Information we access: the connected channel's ID and title (to show which channel is connected) and the OAuth token issued by Google. We do not read the channel's videos, comments, subscribers or viewing data.

- How we use it: the token is used only to upload, to the shop's own channel, the videos that the shop has approved in the console or has set to post automatically. It is not shared with other shops or any third party and is not used for advertising.

- Storage and deletion: we store the OAuth token only in encrypted form on our server (the short-lived access token, valid for about one hour, is also encrypted). When the channel is disconnected in the console, we ask Google to revoke the token and delete it from our server immediately. You can also revoke access at any time at https://security.google.com/settings/security/permissions.

- TikTok: when a shop connects a TikTok account, we store that account's open ID, display name and token, encrypted in the same way, and use them only to send the shop's videos to that account (to drafts or as posts). They are deleted when the account is disconnected, and access can also be removed in the TikTok app settings.

■ Rights of Users

- Users may at any time request access to, correction or deletion of, or suspension of the processing of their personal information. Members can delete saved consultation information themselves or withdraw on the login screen, and other requests will be handled without delay if you notify the shop you used or the Chief Privacy Officer below.

■ Chief Privacy Officer

- Name: 김춘웅 (Representative)

- Contact: vada2006@gmail.com

- For inquiries, complaints and remedies for damage related to personal information, please contact the address above, and they will be answered and handled without delay.

■ Remedies for Infringement of Rights

If you need to report or seek advice on an infringement of personal information, you may contact the organizations below.

- Personal Information Dispute Mediation Committee (개인정보분쟁조정위원회): (no area code) 1833-6972 (www.kopico.go.kr)

- Personal Information Infringement Report Center (개인정보침해신고센터): (no area code) 118 (privacy.kisa.or.kr)

- Supreme Prosecutors' Office (대검찰청): (no area code) 1301 (www.spo.go.kr)

- Korean National Police Agency (경찰청): (no area code) 182 (ecrm.police.go.kr)

* You may refuse the collection and use of personal information. However, if you refuse the required items, you cannot use the relevant services (readings, consultations, login). Refusing the optional item (saving consultation information) does not restrict your use of the Service.

Supplementary Provisions

- This notice applies from October 21, 2026. (Previous notice: effective October 15, 2026)