minicrew Privacy Policy
Effective date: May 20, 2026
Version: 2.0
Survivor ("we", "us", or "the Company") complies with the Korean Personal Information Protection Act (PIPA) and the Korean Act on Promotion of Information and Communications Network Utilization and Information Protection. This Policy explains how we collect, use, and protect User personal information.
minicrew does not require any separate account registration. We collect the minimum information necessary, only at the moments listed below.
At PRO License checkout (required)
- Email address (used to issue the License, identify the Buyer, and provide customer support)
- Buyer's name
- Payment information (payment tokens and identifiers issued by the designated payment service provider)
- Business registration number for business purchases (used to issue tax invoices; optional)
Automatically collected during Service use (required)
- IP address
- Browser type and operating system
- Access logs and usage logs
- Cookies and session identifiers
When you contact support (optional)
- Any personal information contained in your inquiry
1-2. Collection Methods
- Information you submit directly at checkout.
- Information automatically collected during Service use (cookies and logs).
- Payment result information received from the designated payment service provider.
- Service provision: issue and manage PRO Licenses; control access to Content.
- Payment processing: process payments, confirm results, and handle refunds.
- Customer support: respond to inquiries, resolve disputes, and deliver announcements.
- Service improvement: analyze usage statistics, develop new features, and track errors.
- Compliance: meet record-keeping obligations under the Korean Act on the Consumer Protection in Electronic Commerce and other applicable law.
- Abuse prevention: detect anomalous access and prevent unauthorized sharing of License keys.
We destroy personal information without delay once the purpose of collection has been achieved, except as required by law or as listed below.
- On data deletion request: processed immediately (statutory retention items below are retained for the required period).
- If no voluntary deletion request is made, Buyer information is retained for the lifetime of the PRO License.
- Dispute-handling retention: 30 days after a deletion request (then permanently deleted).
3-2. Statutory Retention
- Contract and subscription-withdrawal records: 5 years (Korean Act on the Consumer Protection in Electronic Commerce).
- Payment and supply records: 5 years (Korean Act on the Consumer Protection in Electronic Commerce).
- Consumer complaint and dispute records: 3 years (Korean Act on the Consumer Protection in Electronic Commerce).
- Advertising and display records: 6 months (Korean Act on the Consumer Protection in Electronic Commerce).
- Access logs: 3 months (Korean Protection of Communications Secrets Act).
4. Sharing with Third Parties
As a default, we do not share User personal information with external parties. The following are exceptions:
| Recipient | Purpose | Items shared | Retention period |
|---|---|---|---|
| Designated payment gateway (PG) provider | Payment processing and refunds | Buyer name, payment information | 5 years after the transaction (per applicable e-financial law) |
| Authorities acting under statutory authority | Compliance with legal obligations | Items required by the applicable statute | Period required by the applicable statute |
5. Processing on Our Behalf (Sub-processors)
We use the following sub-processors to provide the Service.
| Sub-processor | Service | Location |
|---|---|---|
| Vercel Inc. | Web hosting, CDN | United States |
| Supabase Inc. | Database management | Republic of Korea (Seoul region) |
| Designated payment gateway (PG) provider | Payment processing | Republic of Korea |
We send License-key emails from our own infrastructure and do not use a third-party email delivery vendor. This section will be updated if and when we add such a vendor.
6. Your Rights and How to Exercise Them
You may at any time exercise the following rights:
- Request a report on how your personal information is handled.
- Request access to your personal information.
- Request correction or deletion of your personal information.
- Request a halt to processing.
- Withdraw consent.
To exercise these rights, contact the Privacy Officer using the contact details in Section 10 below, from the email address you used at checkout. We will verify your identity and act without delay.
- Technical measures: HTTPS/TLS in transit, one-way hashing of License keys at rest, separation of access privileges.
- Administrative measures: least-privilege access, periodic access reviews.
- Physical measures: reliance on the data-center security of our cloud infrastructure providers (Vercel, Supabase).
8. Cookies and Other Automatic Collection
- We use cookies for session continuity and usage analytics.
- You can refuse cookies in your browser settings. Refusing cookies may limit some features of the Service.
9. Children Under 14
We do not allow Users under 14 to use the Service or to make purchases. Users aged 14 to under 19 must obtain consent from a legal guardian before purchasing a PRO License.
10. Privacy Officer
We have appointed a Privacy Officer who is responsible for personal-information processing and for handling user complaints and remediation requests:
- Privacy Officer: Seunghyun Baek (Representative)
- Email: privacy@survivor.dev
- Phone: +82-70-8095-2506
11. How to Get Help with Privacy Disputes
For privacy-related disputes, advice, or remediation in Korea, you may contact:
- Korea Internet & Security Agency — Privacy Infringement Report Center (privacy.kisa.or.kr / ☎ 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / ☎ 1833-6972)
- Supreme Prosecutors' Office — Cybercrime Investigation Division (spo.go.kr / ☎ 1301)
- National Police Agency — Cyber Bureau (police.go.kr / ☎ 182)
12. Change History
| Version | Effective date | Key changes |
|---|---|---|
| V1.0 | 2026-05-20 | Initial version (account-registration model) |
| V2.0 | 2026-05-20 | Switched to the no-signup, email-at-checkout identifier model (removed items related to passwords, OAuth, and login history) |
Amendments to this Policy will be posted at least 7 days in advance (or 30 days in advance for changes materially adverse to Users).
Note on Governing Law
The Service is provided by a Korean legal entity. This Policy and your use of the Service are governed by the laws of the Republic of Korea, including PIPA and the statutes referenced above, regardless of where you access the Service from.