Privacy Policy


Article 1 (Purpose of Processing Personal Information)

Hazy Hand (the "Company") processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with applicable privacy laws.

  1. Registration and management of users
    • Processing personal information for the purpose of confirming the intention to register, identifying and authenticating users for the provision of membership services, maintaining and managing membership qualifications, preventing unauthorized use of services, keeping records for dispute resolution, and various notifications.
  2. Provision of services
    • Processing personal information for the purpose of providing AI-based social media content analysis, content optimization recommendations, data visualization, and reporting services.
  3. Payment and service fee settlement
    • Processing personal information for the purpose of payment and management of service usage fees, token purchase and management.
  4. Marketing and advertising utilization
    • Processing personal information for the purpose of developing new services and providing customized services, providing event and advertising information, verifying the validity of services, determining access frequency, or statistics on service usage.

Article 2 (Personal Information Items Collected)

① The Company collects the following personal information to provide services and manage users.

  1. Required collection items
    • When registering: Email address, password, name (nickname), mobile phone number
    • Automatically generated during service use: IP address, access logs, cookies, service usage records
    • When making payments: Credit card information (card company, card number, expiration date, CVC number), bank account information (bank name, account number), mobile phone payment information (telecommunications company, mobile phone number)
  2. Optional collection items
    • Profile information: Profile picture, occupation, company name, social media account information
    • Marketing utilization information: Areas of interest, purpose of service use
    • Information for service improvement: Device information (model name, OS version)

② The following information may be automatically generated and collected during the service use process.

③ The following information may be provided when logging in through social media accounts.


Article 3 (Retention and Use Period of Personal Information)

① The Company processes and retains personal information within the personal information retention and use period stipulated by law or the personal information retention and use period agreed upon when collecting personal information from the data subject.

② The processing and retention period for each type of personal information is as follows:

  1. Registration and management of users: Until user account deletion However, in the following cases, it will be until the end of the relevant reason
    • In case of ongoing investigation or inquiry due to violation of relevant laws, until the end of such investigation or inquiry
    • In case of remaining debt/credit relationship due to service use, until the settlement of such debt/credit relationship
  2. Retention in accordance with applicable consumer protection laws in your jurisdiction
    • Records of contracts or subscription withdrawals
    • Records of payment and supply of goods
    • Records of consumer complaints or dispute handling

Article 4 (Provision of Personal Information to Third Parties)

① The Company provides personal information to third parties only in cases falling under applicable privacy laws, such as with the consent of the data subject or under special provisions of law.

② The Company provides personal information to third parties as follows:


Article 5 (International Transfer of Personal Information)

① As the Company provides global services, personal information may be transferred to servers and facilities located outside of your country or region. Your information may be processed and stored in the United States, Europe, Asia, or any other country where the Company or its service providers maintain facilities.

② The Company ensures that such international transfers comply with applicable data protection laws. When personal data is transferred outside your jurisdiction, the Company implements appropriate safeguards to ensure that your information is protected.

③ By using the Service, you consent to your personal information being transferred to other countries that may have different data protection rules than your country. The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.


Article 6 (Outsourcing of Personal Information Processing)

① The Company outsources personal information processing as follows for smooth personal information processing:

② When concluding an outsourcing contract, the Company specifies matters such as prohibition of personal information processing beyond the purpose of performing outsourced work, technical and administrative protection measures, restrictions on re-outsourcing, management and supervision of the outsourcee, and compensation for damages in the contract or other documents in accordance with applicable privacy laws, and supervises whether the outsourcee safely processes personal information.


Article 7 (Rights and Obligations of the Data Subject and Legal Representatives and How to Exercise Them)

① The data subject may exercise the following rights related to personal information protection against the Company at any time:

② The exercise of rights under paragraph 1 can be made to the Company in writing, by email, fax, etc., in accordance with applicable privacy laws, and the Company will take action without delay.

③ The exercise of rights under paragraph 1 may be made through a legal representative of the data subject or an agent who has been delegated. In this case, a power of attorney must be submitted.

④ The right to access and request suspension of processing of personal information may be restricted in accordance with applicable privacy laws.

⑤ A request for correction and deletion of personal information cannot be made if the personal information is specified as a collection target in other laws.

⑥ The Company verifies whether the person who made the request for access, correction, deletion, or suspension of processing is the person themselves or a legitimate agent.


Article 8 (Measures to Ensure the Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information:

  1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
  2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
  3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 9 (Use of Cookies and Similar Technologies)

① The Company uses 'cookies' and similar technologies that store and retrieve usage information to provide individualized customized services to users.

② A cookie is a small amount of information sent to a user's browser by a server used to operate a website and may be stored on the hard disk of users' PCs.


Article 10 (Personal Information Protection Officer)

① The Company designates the following personal information protection officer to be in charge of personal information processing and to handle complaints and damage relief related to personal information processing for data subjects:

② Data subjects may inquire about all personal information protection-related inquiries, complaints handling, and damage relief that occur while using the Company's services to the personal information protection officer. The Company will respond to and process inquiries from data subjects without delay.


Article 11 (Changes to the Privacy Policy)

① This privacy policy is effective from March 4, 2025.

② The Company will notify users of any changes to this privacy policy by posting the revised policy on our website with the effective date.

③ Previous privacy policies can be viewed below. Example) Applied from XX XX, 20XX to XX XX, 20XX (link)


Article 12 (Applicable Law and Jurisdiction)

① This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Korea, without regard to its conflict of law provisions.

② The Company strives to comply with the privacy and data protection laws applicable to users in various jurisdictions. If you reside in a country with data protection laws that differ from the Republic of Korea, please note that the Company processes your information in accordance with this Privacy Policy and applicable local laws.

③ In case of any dispute arising out of or in connection with this Privacy Policy, the parties shall first attempt to resolve the dispute through consultation. If the dispute is not resolved through consultation, legal action may be filed with the competent court in accordance with applicable laws.