Privacy Policy

This privacy policy includes information about what information Firstage collects, uses, and manages.

Firstage Inc. (hereinafter "Company") complies with personal information protection regulations under the Act on Promotion of Information and Communications Network Utilization and Information Protection, Personal Information Protection Act, and other relevant laws, and has established a personal information processing policy to do its best to protect user rights.

Through its personal information processing policy, the Company informs members and content subscribers (hereinafter "users") of the Firstage service (hereinafter "Service") about the items of personal information collected, the purpose of collection and use of personal information, the period of retention and use of personal information, and measures taken to protect personal information.

This privacy policy is effective from January 26, 2025.

Items of Personal Information Collected, Purpose of Use, and Method of Collection

The Company collects and processes the minimum personal information necessary for the smooth use of the service.

Member Registration and Management

  • Purpose: Account creation, service access, identity verification, fraud prevention, customer support
  • Required Collection Items: Name, email address, password, mobile phone number
  • Optional Collection Items: Profile picture, company name, job title, department, affiliated organization, address, phone number
  • Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1

AI Service Provision and Improvement

  • Purpose: AI content generation, service quality enhancement, user experience improvement
  • Generated Data: AI prompt history, generated content, service usage records, user settings and environment information
  • Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1

Team/Organization Management

  • Purpose: Collaboration features, workspace management, member permission management
  • Collection Items: Team information, organizational structure, member permissions, shared content, workspace settings
  • Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1

Service Advertising and Marketing

  • Purpose: Personalized service provision, event notifications, new feature announcements
  • Collection Items: Name, email address, mobile phone number, company information, service usage patterns
  • Legal Basis: Personal Information Protection Act Article 22 (consent)

Payment and Settlement Processing

  • Purpose: Payment processing, fee settlement, refund processing
  • Required Items: For credit card payment - card number (partial), expiration date, first 2 digits of password, date of birth or business registration number
  • Other Items: Billing address, payment history
  • Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1

For the purpose of analyzing usage behavior and handling errors for service improvement, IP address, cookies, service usage records may be collected during the service use process.

Cookie use: Users can choose whether to store cookies, and if they refuse to store cookies, there may be limitations in using services that require login.

Retention and Use Period of Personal Information

In principle, the Company destroys a member's personal information without delay when the member withdraws or the purpose of use is achieved. However, if relevant laws require retention of information for a certain period, the personal information is safely stored for that period.

Contract and Subscription Withdrawal Records

  • Retention Reason: Act on Consumer Protection in Electronic Commerce, etc.
  • Retention Period: 5 years

Payment and Supply Records

  • Retention Reason: Act on Consumer Protection in Electronic Commerce, etc.
  • Retention Period: 5 years

Consumer Complaints and Dispute Handling Records

  • Retention Reason: Act on Consumer Protection in Electronic Commerce, etc.
  • Retention Period: 3 years

Identity Verification Records

  • Retention Reason: Act on Promotion of Information and Communications Network Utilization and Information Protection
  • Retention Period: 6 months

Website Visit Records

  • Retention Reason: Communications Secret Protection Act
  • Retention Period: 3 months

Provision and Outsourcing of Personal Information

In principle, the Company does not provide personal information to external parties without the user's consent. However, exceptions include cases where there is a request under law or when statistical data is provided in a form that cannot identify specific individuals.

Google Cloud Platform (GCP)

  • Outsourced Work: Cloud server operation and management, database management, Redis cache service
  • Retention Period: Until member withdrawal or until the end of the outsourcing contract

Vercel

  • Outsourced Work: Web application hosting and deployment service
  • Retention Period: Until member withdrawal or until the end of the outsourcing contract

MIXPANEL, INC

  • Outsourced Work: Service usage data analysis and user behavior pattern analysis
  • Retention Period: Until member withdrawal or until the end of the outsourcing contract

Intercom, Inc

  • Outsourced Work: Customer support, real-time chat, user communication
  • Retention Period: Until member withdrawal or until the end of the outsourcing contract

AI Service Providers

  • OpenAI, LLC: AI content generation and processing service (temporary processing, immediately deleted)
  • Anthropic, PBC: AI content generation and processing service (temporary processing, immediately deleted)
  • Google LLC (Gemini): AI content generation and processing service (temporary processing, immediately deleted)

Canva, Inc

  • Outsourced Work: Design template provision, design export service
  • Transmitted Information: Design ID, user authentication token, selected design information
  • Retention Period: Authentication token until disconnected from account settings, design metadata during service usage period
  • Privacy Policy: Canva Privacy Policy

AI Service Related Personal Information Processing

The Company processes personal information for AI-based service provision as follows.

AI Prompt and Generated Content Processing

  • AI Prompts: User input prompts may be analyzed for service improvement and quality enhancement
  • Generated Content: Text, images, etc. generated by AI are stored linked to user accounts
  • No Use for Training Data: User prompts or generated content are not used for AI model training

Third-party AI Service Integration

  • When using AI services such as OpenAI, Anthropic, Google Gemini, prompts are transmitted to those services
  • Transmitted data is used only for AI response generation and is immediately deleted after processing completion
  • Privacy policies of third-party AI service providers also apply

AI Data Retention and Deletion

  • AI prompts and generated content are deleted together when the account is deleted
  • Users can request deletion of their AI usage records at any time

Team/Organization Account Personal Information Processing

Team Administrator Rights

  • Team administrators can check team members' service usage status
  • Individual members' generated content or detailed activity history is viewable only by the member themselves

Data Processing when Organization Account is Terminated

  • When an organization account is terminated, administrators are provided a 30-day data backup period
  • All team data is completely deleted after the backup period ends
  • Individual members can continue using the service with personal accounts after leaving the organization

Personal Information Destruction Procedure and Method

In principle, the Company destroys a user's personal information without delay when the user withdraws or the purpose of use is achieved.

  • Electronic files: Deleted using technical methods that prevent recovery of records
  • Paper documents: Shredded with a shredder or incinerated

Personal Information Protection Officer and Department

The Company has designated the following personal information protection officer to promptly and sincerely handle inquiries related to personal information.

For other inquiries, you can contact the following institutions:

United States:

European Union:

Other regions:

  • Contact your local consumer protection or data protection authority

Request and Processing of Personal Information Deletion

The Company respects the user's right to self-determination of personal information and guarantees the right to request the deletion of personal information at any time.

Methods to Request Data Deletion

  1. Deletion through Member Withdrawal

    • Directly withdraw through the [My Page] > [Member Withdrawal] menu on the website
    • All personal information related to the account is immediately deleted upon withdrawal

  2. Deletion Request through Customer Center

    • Email: [email protected]
    • Phone: [Phone number]
    • Information required for request: Name, email address, range of data to be deleted

  3. Deletion of Social Login Linked Data

    • For data linked through social media such as Facebook, unlink from the app settings of the respective platform
    • For Facebook: Facebook settings > Apps and Websites > Firstage > Remove
    • Related data is immediately deleted when social media linking is removed

Processing Procedure and Time Required

  1. Processing begins within 24 hours after receiving the deletion request
  2. Processing is completed within a maximum of 7 days unless there are special circumstances
  3. The result is notified to the requester by email when processing is completed

Exceptions

Information that needs to be retained according to laws may be stored separately until the specified retention period, and this will be notified to the user when a deletion request is made.

Revision of Privacy Policy

The privacy policy may be changed according to laws and policies, and changes will be announced on the homepage from 7 days before implementation.

This privacy policy is effective from January 26, 2025.

    개인정보 처리방침 | Firstage | Firstage