Petstrology Privacy Policy
Effective: June 23, 2026
Petstrology (K-Saju Pet, "we", "us", or "the Company") complies with applicable privacy laws and handles personal data lawfully and securely to protect your rights.
Under Article 30 of the Personal Information Protection Act (PIPA), we publish this Privacy Policy to explain how we process personal data and how you can contact us with privacy-related requests.
This Policy applies to https://ksajupet.com and the K-Saju Pet mobile app (WebView).
1. Purposes of processing
We process personal data only for the purposes below. If purposes change, we will take required steps such as obtaining separate consent under PIPA Article 18.
- Account registration, login, identity verification, fraud prevention
- Pet K-Saju (four pillars) analysis, saved results, you & your pet compatibility and fortune features
- Human premium report generation, storage, viewing, payment confirmation, optional email delivery
- Pet profiles and photos, Pet Show, community boards (Q&A, tips, free board, breed experiences, etc.)
- Customer support and service notices
- API rate limiting for guest basic saju and service stability
- Generative AI narratives for saju readings and premium reports (entertainment only; not medical, legal, or financial advice)
2. Personal data we process
We collect only the minimum data needed to provide the service.
| Category | Items | How collected |
|---|---|---|
| Account (required) | Email, password (stored hashed), display name, language and timezone preferences | You enter directly |
| Social login (optional) | Email, social profile ID and display name (per Google/Kakao policies) | When you choose Google or Kakao login |
| Pet saju (required; consent) | Pet name, species, optional gender, birth date/time (or unknown), IANA timezone, calendar type, privacy consent | You enter directly |
| Pet profile & Pet Show (optional) | Pet photos, posts, comments, likes, challenge entries | You upload or post |
| Pet parent saju & compatibility (optional) | Your birth date/time, timezone, optional gender | You enter directly |
| Human premium reports (required; consent) | Name, birth date/time, timezone, optional gender, optional email for delivery, payment/order IDs | You enter or generated at checkout |
| Support inquiries (optional) | Name/nickname, email, category, title, message | Support form at /support |
| Automatically generated | IP address (guest basic saju rate limit), auth session tokens, usage logs | Generated during service use |
We do not collect resident registration numbers, passport numbers, or other sensitive categories by design. Do not enter sensitive data in saju or report forms.
3. Children under 14
We do not knowingly collect personal data from children under 14 without parental consent. Registration and use by children under 14 require a legal guardian's consent.
If we learn that we collected a child's data without consent, we will delete it promptly. Guardians may request access, correction, deletion, or suspension of processing on behalf of the child.
4. Retention periods
We retain data only as long as required by law or as consented.
| Category | Period | Basis |
|---|---|---|
| Account, profile, pets, saju results | Until account deletion | Service provision |
| Community & Pet Show posts | Until post deletion or account deletion | Community operation |
| Human premium web reports | 30 days from payment | Security and viewing convenience |
| LLM result cache (if enabled) | Up to 90 days | Cost control for repeat generation |
| Support inquiries | 3 years after resolution | Dispute handling |
| Payment/contract records | 5 years | E-Commerce Consumer Protection Act (Korea) |
| Consumer complaint records | 3 years | E-Commerce Consumer Protection Act (Korea) |
| Advertising records | 6 months | E-Commerce Consumer Protection Act (Korea) |
| Website access logs (IP, etc.) | 3 months | Protection of Communications Secrets Act (Korea) |
5. Destruction procedure and method
When retention ends or the purpose is achieved, we destroy personal data without delay unless law requires continued storage.
- Procedure: reason occurs → privacy officer approval → permanent deletion or shredding
- Electronic files: deleted so they cannot be recovered
- Account deletion: via Profile or support request (admin accounts excluded; legally retained data excluded)
6. Provision to third parties
We do not provide personal data to third parties except with your consent or as required by law.
We do not sell personal data for marketing or advertising.
7. Criteria for additional use or provision
We do not additionally use or provide data without consent under PIPA Articles 15(3) and 17(4). If needed in the future, we will consider relevance, context, impact, and safeguards, and obtain consent when required.
8. Processing entrustment
We entrust processing to the vendors below under contracts with required safeguards.
| Processor | Tasks entrusted | Retention |
|---|---|---|
| Supabase, Inc. | Auth, database, file storage | Until contract ends |
| Vercel Inc. | Web hosting and CDN | Until contract ends |
| Google LLC (Generative Language API) | Saju narratives and premium report text | Until API request completes (no fine-tuning by us) |
| Anthropic PBC / OpenAI, LLC (if configured) | Premium report text (alternate LLM) | Until API request completes |
| Upstash | Guest basic saju rate limiting (IP) | Until limit window expires |
| Resend, Inc. (if configured) | Premium report email delivery | Per processor policy after send |
| PayPal / PortOne | Paid report checkout | Per payment law retention |
| Google LLC / Kakao Corp. | Social login (if you choose) | Until auth completes |
9. Cross-border transfer
Using cloud, AI, payment, and email services may transfer data overseas at the time of use over networks.
| Recipient | Country | Items | Purpose | Retention | How to refuse / impact |
|---|---|---|---|---|---|
| Supabase, Inc. | US, etc. | Account, pet, saju, community, payment-linked data | Storage and auth | Until deletion or contract ends | Refusal prevents account and cloud storage features |
| Vercel Inc. | US, etc. | Access/request metadata | Web delivery | Until request completes | Refusal prevents web service use |
| Google LLC (Gemini API) | US | Names, birth data, chart results for prompts | AI narratives | Until response completes (no training by us) | Refusal disables AI narratives |
| Resend / PayPal / PortOne, etc. | US, etc. | Email, payment identifiers | Email and payments | Per contract and law | Refusal disables those features |
10. Security measures
We apply administrative, technical, and physical safeguards including access control, HTTPS, Supabase RLS, API authentication, rate limiting, and vendor security measures.
11. Sensitive data and public posts
We do not collect sensitive categories separately. Photos and posts you publish in community or Pet Show may be visible to others—avoid posting identifying or sensitive content.
- Control visibility by not posting publicly or by deleting/editing your posts
- Choose whether to upload profile or pet photos
12. Pseudonymized data
We do not currently process pseudonymized personal data.
14. Behavioral information
We do not collect behavioral data for targeted ads and do not allow third parties to collect it on our site.
15. Your rights and how to exercise them
- Request access, correction, deletion, or suspension of processing
- Withdraw consent where processing is consent-based
- Delete your account from Profile or via support
Contact us at /support or by phone. We may request verification for agent requests.
16. Automated decision-making
Saju, fortune, compatibility, and premium reports are entertainment content produced by algorithms and optional AI. They are not automated decisions with legal or similarly significant effects. You may withdraw consent or request deletion.
17. Privacy officer and contact
| Role | Details |
|---|---|
| Privacy officer | CEO 이경미 |
| Organization | Petstrology |
| Phone | 042-300-5388 |
| jungho@ksajupet.com | |
| Inquiries | https://ksajupet.com/support |
18. Domestic representative
Not applicable—we are a Korea-based business.
19. Remedies for privacy violations
- PIPC (privacy.go.kr) / 182
- KISA Privacy Reporting Center (privacy.kisa.or.kr) / 118
- Supreme Prosecutors' Office Cyber Investigation (spo.go.kr) / 1301
- National Police Agency Cyber Bureau (ecrm.police.go.kr) / 182
20. Fixed video devices (CCTV)
We do not operate fixed video devices.
21. Mobile video devices
We do not operate mobile video devices.
22. Generative AI
We use generative AI APIs for pet/human saju narratives and premium report text (entertainment only).
- Inputs: names, birth data, chart results, report type and language as needed
- Storage: reports saved to your account; premium web viewing for 30 days after payment
- Training: we do not use your data for model fine-tuning; external API terms apply to processors
- Do not enter sensitive or unique ID numbers in forms
- You may avoid AI features, delete saved results, or delete your account
23. Changes to this Policy
Effective June 23, 2026. Material changes affecting your rights will be announced at least 30 days in advance on this page or site notices; other changes at least 7 days in advance.
- June 23, 2026: Full revision per PIPC 2026 Privacy Policy Guidelines