Privacy Policy
Effective date: 2026-10-30
This policy explains how LUNALINK ("the Company") collects, uses, and protects personal information in connection with purchases made on this site and account/entitlement management for LUNALINK apps. It complements, and does not replace, the privacy policy published within each individual app.
1. Information we collect
- Purchase data: when you buy through our web checkout, Paddle.com (our payment processor and Merchant of Record) collects your name, email, billing address, and payment details directly. We receive from Paddle only the minimum data needed to grant your purchase (email, order ID, product purchased, subscription status) — we do not receive or store your card details.
- Entitlement data: to verify and grant purchased features, we store a purchase/subscription identifier and its status (active, expired, refunded) linked to your app account or device.
- Support correspondence: if you contact us, we keep the content of that correspondence to respond and for record-keeping.
- Korean card subscription data: when you pay with a Korean card, the buyer name, mobile number, and email you enter on the checkout page, together with your card details, go directly to the card registration window of our payment integrator PortOne and our payment gateway NHN KCP; we do not receive or store them. The billing key used for recurring payments is held by PortOne and NHN KCP. When requesting a payment we send PortOne your account identifier, the order name, and the amount, and we receive and store the result (payment ID, amount, status, time).
- Sign-in data: when you sign in with Apple or Google, we receive and store, linked to your account, that provider's user identifier and the email address the provider has verified.
2. Purpose of use
We use this information to grant and maintain the digital features you purchased, process refunds and cancellations, respond to support requests, and comply with legal and tax obligations.
3. Sharing with third parties
We do not sell personal information. We share the minimum necessary data with:
- Paddle.com Market Limited — payment processing, tax handling, and buyer support for web purchases (Paddle acts as Merchant of Record and is independently responsible for the data it processes).
- Apple Inc. / Google LLC — for purchases made through the App Store or Google Play.
We disclose information beyond this only where required by law or upon a lawful request from an investigative authority.
4. Processing on our behalf (outsourcing)
We entrust the following processing of personal information to service providers.
| Processor | Task | Retention |
|---|---|---|
| PortOne (Korea PortOne Inc.) | Korean card payment integration: issuing billing keys, requesting and cancelling recurring payments | Until account deletion or the end of the service contract (or longer where the law requires retention) |
| NHN KCP Corp. | Korean card payment approval and cancellation, storing billing keys | Until account deletion or the end of the service contract (or longer where the law requires retention) |
| Cloudflare, Inc. | Website and application hosting and data storage; sending payment and account emails (Cloudflare Email Sending) | Until account deletion or the end of the service contract (or longer where the law requires retention) |
5. International transfers
The following providers process personal information outside Korea; PortOne and NHN KCP process it in Korea. You may decline the transfer by not using the related payment method or service, but you then cannot use that payment method or service.
- Paddle.com Market Limited (United Kingdom, third-party provision) — Data: the name, email, billing address, and payment details you enter in Paddle's checkout for international card payments, and the account identifier and product we send · When/how: transmitted over the network through the checkout and API at payment time · Purpose: payment and tax processing, buyer support · Retention: per Paddle's privacy policy and applicable law
- Cloudflare, Inc. (United States, outsourced processing — global data centers) — Data: the information in section 1 · When/how: transmitted over the network when you use the service · Purpose: hosting, data storage, email delivery · Retention: until account deletion or the end of the service contract
6. Retention
Purchase and entitlement records are retained for as long as needed to provide the purchased feature and to satisfy tax and accounting retention requirements under Korean law, after which they are deleted.
7. Your rights
You may request access to, correction of, or deletion of your personal information by contacting Contact. You may also contact the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972) or the KISA Privacy Complaint Center (privacy.kisa.or.kr, 118).
8. Security
All traffic to this site is encrypted in transit (HTTPS/TLS). We never see or store full card numbers — those are handled entirely by Paddle, NHN KCP, Apple, or Google.
9. Chief Privacy Officer
Chief Privacy Officer: Park Yeonghwa (CEO / 박영화) · LUNALINK · Email: hello@lunalink.co.kr · Contact