This policy will be effective from September 1, 2025.

Duudle Corp. (hereinafter referred to as "the Company") complies with the "Personal Information Protection Act" and related laws. This privacy policy is established and disclosed to protect users' personal information and clarify its processing purposes and methods.

Article 1: Purposes, Items, and Retention Period of Personal Information Processing

1. In principle, the Company does not directly collect users' personal information.

2. The purchase and payment for the plugin are processed through a third-party payment service, Lemon Squeezy. During the payment process, the necessary personal information (email address, payment method, billing information, etc.) is directly collected and processed by Lemon Squeezy. The Company does not have direct access to this information.

3. The personal information received by the Company from Lemon Squeezy is as follows, and no other information is collected.

1. For achieving the above purposes, the Company may store the issuance and use status of license keys ("license key usage data").

   • This data is managed as a technical log that cannot directly identify an individual, and therefore is not considered personal information when used alone.

   • However, when combined with other data like a purchaser's email, it is considered personal information and is protected under relevant laws.

2. The Company may retain some information for the duration specified by law and will not use it for any purpose other than as specified.

   • Records related to contracts and payments: 5 years (Act on Consumer Protection in Electronic Commerce)

   • Records related to customer complaints and dispute resolutions: 3 years (same law)

   • Access logs (including IP): 3 months (Protection of Communications Secrets Act)

Article 2: Procedures and Methods for Destroying Personal Information

1. The Company will destroy personal information without delay, and in principle, within 5 days when its retention period expires or its processing purposes are achieved.

2. Information in electronic file format will be deleted using unrecoverable methods, and paper documents will be shredded or incinerated.

Article 3: Delegation of Personal Information Processing

1. In principle, the Company does not delegate personal information to third parties.

2. However, parts of the tasks related to payment processing and license issuance are delegated to Lemon Squeezy, and Lemon Squeezy collects and processes the necessary personal information during the payment process.

3. When executing a contract for delegation, the Company specifies the prohibition of personal information processing for purposes other than delegated tasks, technical and managerial protection measures, restriction of re-delegation, liability for damages, etc., according to Article 26 of the "Personal Information Protection Act," and supervises whether the trustee processes the personal information safely.

Article 4: Measures to Ensure the Safety of Personal Information

The Company implements the following protective measures to prevent loss, theft, leakage, forgery, alteration, or damage to personal information.

1. Minimization of authorized access to personal information and operation of internal management systems

2. Data transmission security through the application of network section encryption (SSL)

3. Compliance with Lemon Squeezy's security policies related to payment and license management

Article 5: Operation of Cookies and Automatic Collection Devices

This plugin does not use cookies or other automatic collection devices.

Article 6: Users' Rights and Exercise Methods

1. Users can request access, correction, deletion, or suspension of processing of the personal information the Company retains.

2. However, requests for deletion may be restricted for personal information required to be retained for a certain period by law.

3. Users can exercise their rights through a representative by submitting a power of attorney according to Form No. 11 of the Personal Information Protection Act Enforcement Rules.

4. The Company will promptly respond to legitimate requests for access, deletion, or suspension of processing.

Article 7: Counseling and Remedies for Personal Information Infringement

Users can apply for counseling or remedies for personal information infringement to the following agencies.

• Personal Information Infringement Report Center (www.privacy.kisa.or.kr / Dial 118 without area code)

• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)

• Supreme Prosecutors' Office Cyber Crime Department (www.spo.go.kr / 02-3480-3573)

• Cyber Bureau Police Agency (www.cyberbureau.police.go.kr / Dial 182 without area code)

Article 8: Personal Information Protection Officer

The Company appoints a Personal Information Protection Officer as follows to handle users’ complaints and remedy damages concerning personal information processing.

• Personal Information Protection Officer

  • Name: Joon-Young Lee

  • Position: [Position Title]

  • Email: contact@duudle.io

Users can contact the above details for inquiries related to personal information protection while using this plugin, and the Company will respond without delay.

Article 9: Notification on Sending of Advertising Information

1. The Company will not send advertising information for profit purposes without the user's prior consent.

2. If sending information for profit purposes such as events and marketing is necessary, it will only be sent to users who have given prior consent following the relevant laws.

3. When electronically transmitted, the advertisement indicator, sender's contact, and free rejection methods will be specified according to the "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc." Article 50.

4. The Company confirms users’ consent for receiving advertising information every 2 years.

Article 10: Changes to the Privacy Policy

This privacy policy may be revised due to changes in laws, policies, or security technologies. In such a case, a prior notice will be provided on the official plugin page or sales platform.