Privacy Policy
Effective: May 22, 2026 · Last updated: July 13, 2026
This English translation is provided for convenience. If there is any inconsistency between the two versions, the Korean version prevails.
1. Purposes of Processing and Items Collected
The Company processes personal information for the following purposes: providing the Service, account authentication, payment, customer support, and sending post-event reports. The items collected are email address, name (or display name), profile photo (for OAuth sign-in), payment records and event operation records; access records (including IP address) may be generated and collected automatically in the course of using the Service.
2. Processing and Retention Period
Personal information is destroyed without delay when a member deletes their account. However, information the Company is legally required to retain (e.g. records of contracts, order withdrawals and payments for 5 years, and records of consumer complaints and dispute handling for 3 years, under e-commerce law) is kept for the required period. Event data (caption text, uploaded materials, etc.) is retained for 30 days to 1 year after the event depending on the plan, then deleted automatically (Enterprise per contract; the retention period is shown in the plan information on the dashboard). For events where the organizer selects “Do not store caption logs”, caption text is not stored on the server.
3. Provision to Third Parties
Personal information is not provided to third parties without the user's consent, except: (1) where required by law; (2) where provided to the payment gateway (Kiwoom Pay) to the extent necessary for payment processing.
4. Outsourcing and Cross-border Transfer
The following work is outsourced to provide the Service, and some processors are located overseas (United States): service development and operation — PUBLISH / speech recognition and translation — OpenAI (US) / cloud infrastructure and data storage — Supabase, Cloudflare, Vercel, Railway (US) / email delivery — Resend (US). At the time of use, the relevant information (the items of voice, caption and account data needed for each task) is transferred over the network to the overseas processors, and each processor handles personal information only to the extent necessary to perform the outsourced work. Users who do not wish their data to be transferred overseas may stop using the Service and delete their account.
5. Destruction Procedure and Method
Personal information whose retention period has passed or whose purpose of processing has been achieved is destroyed without delay. Electronic files are deleted using irrecoverable methods, and printed materials are shredded or incinerated.
6. Your Rights and How to Exercise Them
Users may at any time request access to, correction or deletion of, or suspension of processing of their personal information. Requests can be made via the settings screen in the Service or by email to info@barotalk.kr, and the Company will respond within 7 business days. Rights may also be exercised through a legal representative.
7. Security Measures
To process personal information safely, the Company applies measures including encryption in transit (TLS), one-way hashed password storage, minimization and management of access privileges, and retention of access logs.
8. Cookies and Automatic Collection
The Service uses essential cookies to maintain sign-in sessions. It does not use advertising cookies or behavioral tracking tools. Cookies can be refused in browser settings, in which case features that require sign-in may be limited.
9. Children Under 14
The Company does not collect personal information from children under 14, and children under 14 cannot sign up as members.
10. Privacy Officer and Remedies
Privacy officer: Kim Jiho (CEO), TokenPost Co., Ltd. · info@barotalk.kr · +82-2-6674-1012. For reports or consultation regarding privacy infringement, you can contact the Personal Information Infringement Report Center (dial 118, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr).
11. Changes to This Policy
When this policy is added to, deleted from or amended, notice is given via in-service announcements at least 7 days before the change takes effect. Material changes unfavorable to users are announced at least 30 days in advance.