Privacy policy
This document is a draft pending legal review. Items in brackets must be completed with business details and professional legal advice.
Effective date: [YYYY-MM-DD]
1. Personal information we process
HOUR (“the Company”) processes the following for the digital letter service: (1) letter content, the code that opens it, optional names, photos and voice recordings entered by the sender; (2) only if the sender wants an “opened” notice, the sender’s mobile number (optional); (3) security logs (IP addresses stored only in an irreversible form) and cookies. No account information (names, email, usernames, passwords) and no recipient contact details are collected.
2. Purposes
Writing, storing and delivering digital letters; the optional “opened” notice; preventing unauthorized access and responding to security incidents; answering inquiries. Phone numbers are never used for advertising or marketing.
3. Retention
Letter content and media are kept for [retention period — legal review required] and then destroyed. Security records are kept for [period]. Content is deleted without delay upon a valid deletion request.
4. Disclosure to third parties
We do not provide personal information to third parties except where required by law.
5. Processors and international transfers
[Hosting provider, SMS / KakaoTalk message provider, server country, transferred items, timing and method, retention — legal review required]. If the operator is outside Korea, cross-border transfer notices must be finalized.
6. Destruction
When retention ends or deletion is requested, database records and stored files are deleted irrecoverably. Backups are rotated out according to [backup retention schedule].
7. Your rights
You may request access, correction, deletion or suspension of processing at any time via the contact page. To verify you, we may ask for the product number with the card code, or proof of purchase.
8. Children
[Policy on use by children under 14 and guardian consent — legal review required]
9. Security measures
Encrypted storage of phone numbers and letter codes, one-way hashing of card codes, limits on code attempts, access control, encryption in transit (HTTPS), security logs, and private storage.
10. Cookies
Only essential cookies that briefly remember the device used to write or open a letter. The recipient’s reading cookie disappears when the browser closes or after a few idle minutes. No advertising or analytics cookies.
11. Privacy officer
Name: [name] · Contact: [email]. Domestic representative in Korea, if required: [details].
12. Remedies
You may contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr). EU residents may also contact their local data protection authority.