Privacy Policy

DOKORI (the "Company") handles users' personal information and other user data in connection with DOKORI (the "Service") as described below.

Article 1. Information We Collect

The Company may collect the following information in providing the Service:

1. Account Registration Information Name or display name, email address, password, profile image, biography, and other information necessary for account management
2. Transaction Information Purchase history, download history, order date and time, order number, purchased products, refund history, inquiry history, and other information necessary for transaction management
3. Creator Information Pen name or trade name, contact information, bank account details for transfers, qualified invoice issuer registration number, tax-related information, identity verification documents, and other information necessary for creator registration and payment processing
4. Product-Related Information Product name, description, price, thumbnail, map data, supplementary materials, license terms, tags, publication settings, and other information necessary for listing and selling products
5. Payment-Related Information Payment method, payment status, refund status, payment identifiers shared by the payment service provider with the Company, and other information necessary for payment management. Note: Sensitive payment information such as credit card numbers is not directly held by the Company; it is managed by the payment service provider.
6. Device and Usage Information IP address, cookies, log information, browser information, device identifiers, access date and time, referrer, operation history, and other information related to usage of the Service

Article 2. Purpose of Use

The Company uses collected information for the following purposes:

1. Providing, maintaining, and improving the Service
2. Account creation, identity verification, login authentication, and fraud prevention
3. Product sales, payment processing, download delivery, and refund handling
4. License Fee calculation, payment processing, and tax/accounting processing for Creators
5. Product review, rights verification, report handling, removal actions, and other rights protection measures
6. Responding to inquiries, sending important notices, and providing support
7. Investigating Terms violations, dispute resolution, and legal compliance
8. Analyzing Service usage, improving quality, and developing new features
9. Embedding purchaser identification information in Digital Products for the purpose of preventing and investigating unauthorized use
10. Campaigns, update notifications, and information about our services
11. Purposes incidental to the above

Article 3. Provision to Third Parties

The Company does not provide personal data to third parties except in the following cases:

1. With the consent of the individual
2. As required by law
3. When necessary to protect the life, body, or property of a person
4. When particularly necessary for improving public health or promoting the sound development of children
5. When cooperation with a national institution or local government is required
6. When provided to service providers as described in the following Article, to the extent necessary for the performance of their services

Article 4. Information Sharing with Creators

The Company is the seller to Buyers. Therefore, Buyers' names, addresses, phone numbers, and similar information are not disclosed to Creators as a matter of course. However, information may be shared with Creators to the minimum extent necessary in the following cases:

1. When necessary for rights processing, defect investigation, or refund decisions regarding a Product
2. When a Buyer requests content verification or support regarding a Product and sharing is necessary
3. When required by law or for dispute resolution

Article 5. Service Providers

1. The Company may outsource the following services to external providers in connection with the Service. In such cases, the Company shall appropriately select and supervise its service providers.

Service	Data Provided
Payment processing	Payment information (card numbers etc. are held only by the payment service provider), transaction information
Database and authentication	Account information, transaction information, service data
Hosting and CDN	IP addresses, access logs, traffic data
Search	Search queries, search target data
Analytics	Cookies, browsing behavior, device information
Email delivery	Email addresses, sent content
Error monitoring	Error logs, session information
Image processing	Image data (generally does not include personal information)
AI and machine learning	Data within the scope necessary for service improvement

2. In addition to the above, the Company may outsource data processing to appropriately selected external providers to the extent necessary for providing and improving the Service.

Article 6. Provision to Third Parties in Foreign Countries

1. Some service providers used by the Company are located in foreign countries. The Company outsources the handling of personal data after taking appropriate measures such as data processing agreements (DPAs) in accordance with applicable law.
2. The Company shall provide information regarding the names of destination countries and the personal information protection systems in those countries as necessary.

Article 7. Cookies and External Transmission

1. The Company may use cookies and similar technologies to improve convenience, prevent fraud, and analyze usage of the Service.
2. In accordance with the amended Telecommunications Business Act, the Company discloses the following information regarding data transmitted from users' devices to external providers:
   • The content of user information being transmitted
   • The name of the receiving entity
   • The purpose of use
3. Details regarding external transmission are described on the Service's help page or in an appendix to this Policy.
4. Users may restrict cookies through browser settings, but in such cases, some features of the Service may become unavailable.

Article 8. Security Measures

The Company implements the following security measures to prevent leakage, loss, damage, or unauthorized access to personal data:

1. Organizational security measures: Designation of a person responsible for personal information protection, establishment of handling regulations
2. Personnel security measures: Communication of precautions regarding the handling of personal data
3. Physical security measures: Prevention of theft of devices and electronic media, lock management
4. Technical security measures: Access control, communication encryption, log management, vulnerability response

Article 9. Retention Period

The Company retains user information for the period necessary to achieve the purpose of use or for the period required by law, and thereafter deletes or anonymizes it by appropriate means.

Article 10. Disclosure, Correction, and Suspension of Use

Users may, in accordance with applicable law, request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, or cessation of third-party provision of their retained personal data. Please contact the inquiry desk described in Article 14.

Article 11. Handling upon Account Deletion

1. When a user requests account deletion, the Company shall delete personal data within 30 days, except for data subject to statutory retention obligations.
2. The following data may be retained after account deletion due to legal obligations or legitimate interests:
   • Consent logs: 5 years (corresponding to the statute of limitations for consumer contracts)
   • Transaction records: 7 years (corresponding to tax law retention obligations)
   • Logs necessary for fraud investigation: 1 year

Article 12. Minors

Minors must obtain the consent of their legal guardian before using the Service.

Article 13. Amendments

The Company may amend this Policy as necessary. In the case of material changes, the Company shall provide notice through the Service or by other means deemed appropriate by the Company.

Article 14. Contact

• Business name: DOKORI (The legal name of the personal information handler will be disclosed upon request)
• Department: Privacy Inquiry Desk
• Email: support@dokori.net
• Address: Disclosed upon request