This is a draft under review. It will become final, with an effective date, after expert review.
This policy applies to Beyond, a service provided by Weplin.
Article 1 (Purposes)
Weplin (the “Company”) processes personal data to provide the online pet memorial service Beyond, for: identifying and recovering accounts, providing spaces, photos, letters and flowers, adoption and automatic payment, refunds, sending notices, handling reports and restricting use, data export, preventing abuse, statistics for service quality and cost management, and handling inquiries.
Article 2 (Data processed and legal basis)
Account: Kakao member number and verified email, Google account identifier and email, recovery email registered in settings, display name, avatar and pre-sign-in temporary account identifier. The name and profile photo from Google sign-in are held by the authentication service and are not used in the Service.
Account recovery and unlinking: recovery request email and target account, number of attempts, and the time and reason of a Kakao unlink.
Space: the pet’s name and species, birth and passing dates, tribute, the name the pet called you, photos, letters and flower messages. Photos have location and other metadata removed and are reduced for display; originals are not kept.
Payment: billing key issued by NICEPAY (stored encrypted), card company and last 4 digits, orders, payment and refund history, time of payment consent and terms version.
Card number, expiry date, date of birth or business number and the first 2 digits of the card password pass through the Company’s server to NICEPAY to obtain a billing key. The Company does not store or log them.
Reports and operations: the reporting account identifier (none for reports made without sign-in), reason and details, a copy of the reported content (letter text, flower message, tribute), space name, target account identifier, operator’s handling notes and handler, operator action records, block lists, and suspension reasons, periods and notice times.
Data export: request time and progress, and the ZIP files created.
Automatically generated: server records such as request time, account identifier, order and space numbers and errors, access records such as IP addresses from hosting, irreversible transformations of IP addresses and link information used to limit sharing-link views and reports made without sign-in, and feature usage counts recorded without account identifiers. If you write an inquiry email, the app version and browser information are added to its body automatically.
The above is processed without consent under Article 15(1)4 of the Personal Information Protection Act (entering into and performing a contract). Records kept by law rely on Article 15(1)2. No data is currently processed on the basis of consent.
Article 3 (Retention)
Account and space data: until you request deletion. Temporary accounts that never sign in are removed after 30 days.
Spaces whose subscription has ended: kept for 1 year, then deleted.
Accounts that cannot sign in because the Kakao account was closed, and unlink processing records: kept for 30 days, then deleted.
After account deletion, letters and flowers left in other people’s spaces remain, with the author made unidentifiable, until that space is deleted. The deletion screen says so.
Limit records for sharing-link views and reports made without sign-in: 3 days. Account recovery codes: 10 minutes. Deleted letters: until the next cleanup (within a day).
Report records: 1 year from handling; unhandled reports are kept until handled. When a reporting or reported account is deleted, its identifier is removed from report records. Operator action records: 1 year.
Block lists and suspension records (reason, period, notice time): until the account is deleted.
Data export files: 7 days after creation, deleted immediately when the account is deleted.
Records kept by law: contract, withdrawal, payment and supply records for 5 years and consumer complaint and dispute records for 3 years (Article 6 of the Act on Consumer Protection in Electronic Commerce and Article 6 of its Enforcement Decree), tax evidence for 5 years from the statutory filing deadline (Article 85-3 of the Framework Act on National Taxes), access records for 3 months (Article 15-2 of the Protection of Communications Secrets Act). They are kept separately and used only for those purposes.
Article 4 (Provision to third parties)
The Company does not provide personal data to third parties, except with your consent or as permitted by law.
Article 5 (Processors)
Google LLC and Google Cloud Korea: servers, database, storage of photos and download files, sign-in and hosting.
NICEPAY Payments Co., Ltd.: card registration and payment processing.
Kakao Corp.: Kakao sign-in.
Resend, Inc.: account recovery, payment and notice emails.
Article 6 (Overseas transfers)
The Service’s database and photos are stored in the Seoul region of the Republic of Korea (asia-northeast3). Under Article 28-8(1)3(a) of the Personal Information Protection Act, processing necessary to perform the service contract is entrusted overseas as below, and publishing this policy serves as notice.
Resend, Inc. (United States, with sending servers in Tokyo, Japan, contact: https://resend.com/legal/dpa): email address, subject and body, transferred over an encrypted network each time an email is sent, for account recovery, payment and notice emails, retained for 30 days after sending or until the end of the processing contract.
Google LLC (United States, contact: https://support.google.com/policies/contact/general_privacy_form): account identifier, email and access records, transferred over an encrypted network during sign-in and operation, for authentication and operation, retained until the end of the processing contract.
How to refuse and its effect: contact contact@weplin.kr or delete your account. If you refuse, sign-in and email notices cannot be provided and you cannot use the Service.
Article 7 (Destruction procedure and method)
Personal data whose retention period has ended or whose purpose is achieved is destroyed within 5 days through cleanup jobs or after confirmation by the privacy officer. Electronic files are deleted so they cannot be recovered.
Payment and refund history, orders, inquiries and access records kept by law are stored separately on the grounds in Article 3 and destroyed in the same way when the period ends.
Article 8 (Your rights and how to exercise them)
You may request access to, correction or deletion of your personal data or suspension of processing. You can edit or delete your display name and space data in the Service; deletion is under account deletion in settings and space deletion in space settings. Under “Download my data” in settings you can get the data of spaces where you are the Guardian as a ZIP file (Article 11 of the Terms).
Other requests go to contact@weplin.kr (privacy officer) and results are given within 10 days. A legal representative or authorized person may also make requests with a power of attorney. If a request is refused, the reason and how to object are given.
Article 9 (Information visible to others)
Spaces are private by default. The name the pet called you is visible only to the Guardian.
If a Guardian creates a sharing link, anyone with it can see the name, door, cover photo, tribute and today’s flower count without signing in. People who sign in and become members can see displayed photos, member-visible letters, flowers and their authors’ display names, and the Guardian can see members’ display names.
When a Guardian downloads data, the file includes members’ display names and the letters (including those visible only to the Guardian) and flower messages they wrote in the Guardian’s spaces. Account information such as email addresses and account identifiers is not included.
To review reports, operators can view private photos and text in reported spaces, and photo views are logged.
Information visible to others in planned features such as public spaces, the memorial hall and comfort letters is set out in Article 14.
Article 10 (Content you write yourself)
Tributes, letters, names, flower messages and photos are written or uploaded freely by you, and the Company does not collect or analyze personal data in them as separate items. They may include sensitive matters such as health or family relationships or other people’s names or faces, so please decide for yourself what to include.
If public features are provided, the scope of disclosure and how to keep content private will be explained on screen before anything is made public (Article 14). If your information appears in someone else’s space, you can report it or request deletion at contact@weplin.kr.
Article 11 (Children)
The Company does not accept children under 14 as members. If it learns such data has been collected, it destroys the data without delay.
Article 12 (Automatic collection and browser storage)
The browser stores sign-in state (browser database and storage), drafts of adoptions and letters, the path to return to after sign-in and display settings (storage), and copies of photos and app files (cache).
You can block or clear these under cookies and site data in your browser settings. If you do, sign-in will not be kept and saved drafts may be lost.
No advertising or behavioral analytics cookies or tools are currently used. If they are introduced, this policy will be changed and announced.
Article 13 (Security measures)
Encryption of billing keys and data in transit, short-lived photo addresses given only to authorized people, blocking of direct storage access, restricted administrator access, and no storing or logging of card data.
Article 14 (Processing for planned features)
The following features are not yet provided. What follows applies once each starts, and the relevant items will be added to Articles 2, 3, 5 and 6 and announced under Article 17 beforehand.
Public spaces: the record of choosing to publish (notice version and confirmation time) and the publishing time are processed and kept until the space is deleted. A public space’s name, door, tribute and today’s flower count are visible to signed-in users, and a list file containing the name, door, species, today’s flower count and space number can be retrieved without signing in. Photos, letters, the name the pet called you and other people’s flower messages are not shown. If you place a flower in a public space, your display name is visible to the Guardian and members. Before publishing, the scope of disclosure and how to turn publishing off are explained on screen under Article 23(3) of the Personal Information Protection Act, and the space is published only after confirmation.
Storage and delivery of the public space list file are entrusted to Cloudflare, Inc. (United States), and the name, species, door, today’s flower count and space number of public spaces are transferred over an encrypted network at each update every 5 minutes. When publishing is turned off or the space is deleted, it leaves the list at the next update (within 5 minutes), and data is retained until then or until the end of the processing contract. The storage location and contact will be added beforehand. To refuse the transfer, do not publish or turn publishing off.
Live memorial hall: the account identifier, display name, avatar, position and direction in the space (not GPS location), emotes and connecting IP address are processed. People in the hall together see display names, avatars, positions in the space and emotes. Positions and emotes are processed only in server memory while connected, are not stored or logged, and disappear when the connection ends. Once the way the real-time server is operated is decided, the processor, overseas transfer items and retention of connection records will be added to this policy beforehand.
Special paid flowers: the product, space and flower message are kept in the order record for up to 24 hours to process payment, and the message is not kept in the payment record. Payment and refund records follow the statutory retention periods in Article 3.
Paid decorations: ownership records (product, order number, refund time) are kept until the account is deleted, and payment and refund records follow the statutory retention periods in Article 3. Decorations placed in a space are visible to people who can view the space, but the purchase and amount are not.
Memory letters: settings (frequency, time, tone, notifications), letters in the inbox, browser notification tokens and the last activity time used to decide automatic stopping are processed. If notifications are on, notification text containing the pet’s name and the token are sent through Google LLC’s Firebase Cloud Messaging for delivery. Turning letters off keeps the settings for when you turn them on again. Settings and the inbox are deleted when the space or account is deleted, and this device’s notification token when you sign out or delete the account. The browser stores a service worker and push subscription for notifications.
Comfort letters: the account identifier, access date and a random number for selection are kept for 14 days for targeting and counting, and IP addresses and device information are not included in these records. Letter text, opt-out and notification settings, whether a thank-you was sent, the author identifier used for blocking and notification tokens (as for memory letters) are processed. Notifications contain only a title and an in-app path. The browser stores a value showing whether today’s access was recorded.
Comfort letters are read and reviewed by the operator before delivery, and when a sanction must be decided the operator may view the author’s display name, with that access kept on record for 1 year. Recipients see only the text and the date received, not the author, and authors do not see the recipient or pet information. If an author deletes their account, undelivered letters are deleted and delivered letters remain with the recipient with the author made unidentifiable. If a recipient deletes their account, their inbox is deleted. For a reported letter, a copy of the text and the author identifier are included in the report record.
Abuse prevention check: if the feature that blocks automated abuse (App Check) is turned on, Google LLC’s reCAPTCHA receives and processes device check information such as IP address, browser information and on-screen interaction signals, and uses cookies. This is for abuse prevention, not advertising or behavioral analytics, and it will be reflected in Articles 2, 5, 6 and 12 before it is turned on.
Article 15 (Privacy officer)
Officer: Kim Sangwoo, Representative / Email: contact@weplin.kr / Phone: 010-8695-1186
Article 16 (Remedies)
You may consult or report to the Personal Information Infringement Report Center (118), the Personal Information Dispute Mediation Committee (1833-6972), the Supreme Prosecutors’ Office (1301) or the National Police Agency (182).
Article 17 (Changes to this policy)
If this policy changes, it will be announced in the Service and on this page 7 days before taking effect.