Privacy Policy

1. Personal Data We Collect

• Required: email address (license key & receipt delivery, payment confirmation)
• Optional / B2B: name, business registration number (for tax invoices)
• Automatically collected: transaction identifiers assigned by the payment provider, access logs (security & fraud prevention)
• During license activation: a device identifier (UUID) randomly generated by the app, and a subscription identifier — used for device approval and seat management
• Never collected: raw card numbers, resident registration numbers

2. Purposes of Processing

• Confirm payment and automatically issue/deliver licenses
• Issue receipts and tax documents
• Respond to inquiries and handle disputes/refunds
• Prevent fraudulent payments and secure the service

3. Card Data

Card entry, authentication, and storage are handled directly by PCI DSS-certified processors (international: Paddle; domestic Korea: Toss Payments, etc.).

The Company's servers and database never receive or store raw card data — only transaction tokens/identifiers issued by the processor.

4. Third-Party Sharing and Processing

The Company entrusts or shares personal data with the following for payment, issuance, and tax purposes:

• Paddle.com Market Ltd. — international payment processing, receipts, tax (Merchant of Record)
• Toss Payments Co., Ltd. — domestic payment processing and settlement
• Tax-invoice provider (e.g., Popbill) — issuing tax documents
• Hosting/infrastructure: Vercel Inc., Supabase (database)

5. Cross-Border Transfer

International payment (Paddle) and some infrastructure (hosting/database) may be processed outside Korea.

Transferred items are minimal (email, transaction identifiers) for the purpose of payment processing and service delivery. By proceeding with payment, the user consents to such transfer.

6. Retention Period

Data is destroyed without delay once its purpose is met, except as required by law:

• Records on contracts/withdrawal: 5 years
• Records on payment and supply of goods: 5 years
• Records on consumer complaints/disputes: 3 years

7. Your Rights

Users may request access, correction, deletion, or suspension of processing of their personal data at any time; the Company will act without delay under applicable law.

Requests can be made to the data-protection officer below.

8. Cookies and Browser Storage

This site uses only minimal browser storage (localStorage) to remember language and theme preferences, and does not use advertising or tracking cookies.

9. Data Protection Officer

• Officer: Kyuhwan Hwang
• Contact: support@aroaduser.com
• Address: #307, 243, Digital-ro, Guro-gu, Seoul, Republic of Korea (08382)