Privacy Policy
Effective date: August 1, 2026
SSAEM ("Company") complies with applicable privacy laws and processes your personal information as follows.
1. Information We Collect
| Type | Items | When |
|---|---|---|
| Required | Email, name (nickname), password (email signup; stored encrypted) | Sign-up |
| Social login | Social account identifier, nickname, email (with consent) — provided by Google, Kakao, or Naver | Social sign-up |
| Automatic | Learning records (progress), purchase history, access logs, cookies (language preference, login session, visit statistics) | Using the Service |
| Visit statistics | Page path viewed, referring host, anonymous visitor identifier (a random value stored in a cookie) — IP addresses and browser details are not stored | Page view |
| Payment | Payment approval data (card details are handled by the payment processor and never stored by the Company) | Paid purchase |
2. Purposes of Use
- Identifying members, maintaining login sessions, account management
- Providing courses and managing progress and enrollment rights
- Processing payments and refunds, managing purchase history
- Responding to inquiries and delivering notices
- Statistical analysis for service improvement (in non-identifiable form)
3. Retention Period
- Account data: until account deletion (destroyed immediately, except where retention is required by law)
- Retention under Korean e-commerce law: contract/withdrawal records 5 years; payment/supply records 5 years; consumer dispute records 3 years
- Access logs: 3 months
4. Provision to Third Parties
We do not provide personal information to third parties except with your prior consent or where required by law.
5. Processing Delegation (including overseas transfer)
| Processor | Task | Note |
|---|---|---|
| Vercel Inc. | Web hosting | Overseas (US) |
| [TBD: Neon/Supabase] | Database operation | Overseas |
| Vimeo Inc. / Google (YouTube) | Video streaming | Overseas (US) |
| [TBD: payment processor] | Payment processing | When payments launch |
6. Your Rights
You may request access, correction, deletion, or suspension of processing of your personal information at any time via the contact below. Account deletion can also be requested there.
7. Cookies
The Service uses cookies to maintain login sessions, store your language preference, and count unique visitors. The visit-statistics cookie holds only a random value and is not used to identify you personally. No third-party advertising or tracking cookies are used. You can block cookies in your browser settings, but some features (such as login) will not work.
8. Security Measures
- One-way password hashing (bcrypt)
- HTTPS encryption in transit
- Least-privilege access control for administrator accounts
9. Privacy Officer
- Name: [TBD] / Title: [TBD]
- Contact: [TBD: email]
10. Notice of Changes
Changes to this policy will be announced in the Service at least 7 days before taking effect.