Effective Date: August 14, 2025
neostory (the "Company") complies with the Personal Information Protection Act of the Republic of Korea and related regulations to protect the freedom and rights of data subjects, and processes and manages personal information lawfully and safely. In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses this Privacy Policy to inform data subjects of the procedures and standards for processing personal information, and to ensure that related grievances can be handled promptly and smoothly.
The Company processes personal information for the following purposes. Personal information processed will not be used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act. - Receiving and handling website inquiries (project proposals): confirming and responding to content production proposals and business inquiries, and providing feedback on the results - Handling of civil complaints: confirming inquiries, contacting/notifying for fact-finding, and notifying processing results
① The Company processes and retains personal information within the retention/use period stipulated by law or agreed upon when collecting personal information from data subjects. ② The processing and retention periods for each type of personal information are as follows. - Receiving and handling website inquiries (project proposals): As a general rule, the information is destroyed immediately after the inquiry has been processed; however, it may be retained for up to 3 months to allow follow-up on the consultation history, after which it is destroyed without delay. If a dispute arises due to a violation of relevant laws, the information will be retained until the dispute is resolved.
The Company processes personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of law. In principle, the Company does not provide personal information to external parties.
① The Company outsources personal information processing tasks as follows for smooth handling of personal information. - Outsourced party: Google LLC (Gmail/SMTP email delivery) - Outsourced task: Sending and receiving emails for website inquiries ② When entering into an outsourcing contract, the Company specifies in the contract matters such as the prohibition of processing personal information for purposes other than the outsourced task, technical and managerial protective measures, restrictions on re-outsourcing, management and supervision of the outsourced party, and liability for damages, in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the outsourced party processes personal information safely.
① Data subjects may exercise their rights to request access, correction, deletion, or suspension of processing of their personal information from the Company at any time. ② The rights under paragraph ① may be exercised in writing, by email, etc., pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay. ③ Rights may be exercised through a legal representative or an authorized agent of the data subject. In this case, a power of attorney in the prescribed form under the "Notification on Methods of Processing Personal Information" must be submitted.
The Company processes the following personal information items. [Receiving and handling website inquiries (project proposals)] - Required items: Name, email address, inquiry (proposal) content - Collection method: Submitted via the website inquiry form and sent by email
① The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose. ② Personal information stored in electronic file form is deleted using technical methods that render the records unrecoverable, and personal information recorded on paper is destroyed by shredding or incineration.
The Company takes the following measures to ensure the security of personal information. - Administrative measures: Minimizing and controlling access rights to personal information - Technical measures: Applying encrypted (TLS) communication to the email transmission channel used to process personal information - Physical measures: Storing documents and auxiliary storage media containing personal information in a secure, locked location
① The Company may use visit statistics analysis tools such as Vercel Analytics to analyze service usage, and automatic collection devices such as cookies may be used in this process. ② Data subjects may refuse to store cookies by adjusting their web browser settings, in which case some difficulties may arise in using the service.
① The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle data subjects' complaints and remedy damages related to personal information processing. ▶ Personal Information Protection Officer - Name: Hyunji Nam - Position: CEO - Contact: contact@neostory.kr ② Data subjects may direct any inquiries, complaints, or requests for damage relief related to personal information protection arising from the use of the Company's services to the Personal Information Protection Officer and the responsible department.
This Privacy Policy is effective from the effective date, and if there are additions, deletions, or corrections to the content in accordance with laws and policies, notice will be given through the website 7 days prior to the implementation of such changes.
Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, etc., to obtain relief for personal information infringement. For other reports or consultations regarding personal information infringement, please contact the following organizations. - Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) - Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr) - Supreme Prosecutors' Office: 1301 (www.spo.go.kr) - National Police Agency: 182 (ecrm.cyber.go.kr)