Privacy notice

1. Information we use and why

Client applications: project title, discipline, description, budget, timing and the contact person’s name, phone number and email help us assess and respond to a request. Optional information includes company name, preferred designers, receipt or invoice type, business registration number, attachments and referral data (UTM parameters and referrer). We use these to assess the request, prepare documentation and understand referral sources.

Designer applications: name, email, discipline and portfolio link are used for review and correspondence. Optional experience, source-file availability, other work commitments, business status or number and notes support suitability review and payout preparation.

If you use an interview, we may store answers, the conversation, a prepared brief, review findings, assessments, progress and examples needed to investigate errors. We use this information to assess project requests or applications and investigate service problems.

Accounts and community: we process email, authentication and session information, nickname, bio, role, interests, website, profile image, posts, comments, uploaded images, likes, bookmarks and follows to provide these features. Other users can see public profiles and posts.

We also process inquiry correspondence, mail processing records, contracts, receipts, payouts and invoice records to respond to you, fulfill agreements, resolve disputes and meet legal duties. Hosting and authentication services may process IP addresses, browser details, access logs and error logs.

2. Forms, choices and email inquiries

You may decline to provide information or consent, though we may then be unable to process a request that needs it. Optional information is not required to submit an application with the required fields. We use information within the purposes you agreed to, or under another applicable basis such as performing a contract or meeting a legal duty.

Unsubmitted Korean application fields and selected files remain in the current page until you consent and submit. We do not create a persistent browser draft of these personal details. If a submission fails after some files have uploaded, those files may remain on the server and are included in our deletion review.

The English inquiry tool prepares an email draft; it does not send a message or submit an application to our server. We receive your details only when you send the email yourself. We use the name, email, country, time zone, discipline, portfolio link and message you send to reply or review your application.

3. How long we keep information

Inquiries, unsuccessful or inactive applications, interview materials and related correspondence that do not lead to a contract or registration are kept for no more than six months from receipt. We delete them sooner when their purpose ends or a valid deletion request is received. Unfinished uploads are also deleted when no longer needed. Active contract, designer registration and account information is used while needed for that relationship; after it ends, we remove information that has no remaining retention basis.

Where law requires us to keep a record, we separate it from ordinary use and retain only what is required. For records covered by Korean e-commerce law, the periods are six months for advertising records, five years for contracts and withdrawal records, five years for payments and service provision, and three years for consumer complaints or disputes. Any other statutory retention requirement applies only to the relevant records and period.

4. Deletion and your rights

Our privacy officer manages deletion without undue delay when a purpose or retention period ends, with a monthly check for overlooked records. This is a manual process, not a claim that automated deletion is in place. Electronic records are deleted so they cannot be recovered; paper records are shredded or otherwise destroyed.

Records subject to mandatory retention are kept separately for the required period even if deletion is requested. Backup removal follows the provider’s actual deletion and replacement process; we do not promise immediate deletion from every backup. If a backup is restored, we check that previously deleted information is not put back into use.

You may request access, correction, deletion, restriction of processing or withdrawal of consent at plentypaperstudio@gmail.com. We verify identity or authority only as needed and handle the request under applicable legal procedures and deadlines. If a legal restriction prevents us from fulfilling part of it, we explain why. A minor’s legal representative may also exercise the relevant rights.

5. Sharing with designers

Project descriptions, company names, briefs and attachments can contain identifying information. We share only what is needed for a project. Once the participating designers are known, we separately identify the recipients, purpose, information, retention period and the right and consequences of declining, and obtain any required consent before sharing.

We share a client contact person’s details with the selected designer only as needed, after separate notice and consent. Except where law provides otherwise, we do not disclose information beyond the stated scope. Publishing profiles or work for promotion requires separate permission.

6. Service providers and international processing — details being verified

We currently use Supabase for data and file storage and authentication, Vercel for hosting, and Google Gmail to receive and reply to inquiries. These providers process information needed for those tasks.

We are still verifying the actual Supabase region and each provider’s processing and backup countries, recipient contact details, transfer method and timing, and retention periods. We do not claim that all information stays in Korea. Before formal launch, we need to complete and publish these details and establish the required legal basis, including notice or consent where applicable. That verification is not yet complete.

Resend’s automated mail service and external AI API integration are currently inactive in the production environment. Before enabling them, we will verify the information involved, providers, locations and legal basis, and provide any required notice and consent process. This does not mean that ordinary inquiry emails or login authentication emails are inactive.

7. Cookies, browser storage and safeguards

We initially choose a display language using the country code supplied by our hosting service, or your browser language if that code is unavailable. A language you select is stored in a cookie for one year. Authentication and session cookies support login. Referral information may be stored for the browser tab’s session.

You can delete or block cookies and site storage in your browser, although this may affect login and other features. We manage access permissions, authentication, secure transmission, publication settings and deletion procedures. Provider permissions and backup handling also require ongoing checks.

8. Privacy contact and changes

Privacy officer: KIM JUNG KI (김정기). Contact plentypaperstudio@gmail.com with privacy questions, complaints or rights requests.

We announce changes to this notice and when they apply on the website, and provide separate notice or seek consent where required.

Operator information

PlentyPaper (플렌티페이퍼)
Representative: Lee Seung Jae
Business registration no.: 369-46-00829
Suite 402, 97-7 Myeongdal-ro, Seocho-gu, Seoul, Republic of Korea
plentypaperstudio@gmail.com