The Korean original is the authoritative version of this document. English and Japanese translations are provided for reference. If interpretations differ, the Korean original takes precedence.
Read the Korean original1. Purposes of processing personal information
Studio Yeonhong (the “Company”) processes personal information for the following purposes and does not use it for other purposes.
- Providing services to users
- Providing music playback and controls through the Yeonhee bot (the “Bot”)
- Dashboard login and verification of per-server control permissions
- Storing user-created playlists and server settings
- Membership enrollment, payments, automatic renewals, cancellation, refunds, and customer support
2. Processing and retention periods
The Company processes and retains personal information within the retention and usage period agreed to by the data subject when it is collected.
Retention periods for sensitive personal information are as follows.
- Search queries and playback requests: until processing of the track's playback is complete
- Dashboard login information: until logout or 30 days after the last access
- User-created playlists: until the user requests deletion
- Server settings: until the Bot leaves that server
- Membership operational information: for the membership period and as needed for cancellation and refund processing
- Records of contracts, withdrawal, payments, and service provision: five years under e-commerce laws
- Consumer complaints and dispute resolution records: three years under e-commerce laws
- Legally retained records are stored separately from operational information and used only for their retention purpose.
3. Disclosure to third parties
In principle, the Company processes personal information within the stated collection and usage purposes. Except in the following cases, it does not process it beyond those purposes or disclose it to third parties without prior consent.
- When separate consent has been obtained from the data subject
- When necessary to investigate crimes or initiate and maintain prosecution
- When services from another company are required to provide the service
Personal information is provided to third parties for Bot service delivery as follows.
| Platform | Service received | Personal information provided |
|---|---|---|
| Oracle Cloud | IaaS | User and server settings |
| Hosthatch | IaaS | User and server settings |
| Discord | OAuth login | Account identifiers used for dashboard login |
| NICE Payments Co., Ltd. and the payment processor chosen by the user | Outsourced payment authorization, recurring billing, cancellation, and refunds | Information necessary for payment, including order number, product name, amount, and payment method details |
| YouTube, YouTube Music | Music search and playback | Search queries entered by users |
| Spotify | Track information lookup | Links entered by users |
| SoundCloud | Music search and playback | Search queries entered by users |
4. Rights and obligations of data subjects and legal representatives, and how to exercise them
Data subjects may exercise the following privacy rights with the Company at any time.
- Request access to personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
5. Personal information collected
The Company collects the following personal information to make its services more convenient.
- Discord
- User: Discord user ID, search queries and links, command logs
- Server: Discord server ID, custom settings for Yeonhee
- Dashboard
- Login: Discord account ID, username, profile image, server list
- Usage: playback control actions performed in the dashboard
- Membership and payments
- Purchaser Discord ID, target server ID, product/order/subscription numbers, payment amount and time, method type, transaction identifier, recurring payment token, access period, accepted terms version and timestamp, cancellation and refund history
- Card number, expiry date, and verification details entered at registration are used only for transfer to the payment processor, and are not stored in service databases or logs. Subsequent recurring payments use the processor-issued token.
- Support inquiries and transaction verification details provided by the user for refunds
6. Personal information destruction procedures and methods
- Procedure
- Unnecessary personal information and files are securely destroyed under the privacy officer's responsibility, in accordance with applicable laws and internal procedures.
- Deadline
- Unless there is a legitimate reason otherwise, personal information is destroyed within one day after its retention period ends, or within five days after it is determined to be unnecessary, such as when its processing purpose has been fulfilled.
- Method
- Electronic records are destroyed using technical methods that prevent recovery.
- Printed personal information is shredded or incinerated.
7. Security measures
- Access restrictions
- Access to personal information is controlled by granting, modifying, and revoking database system permissions.
- Retention of access logs
- Records of access to personal information systems, including router access and data server usage logs, are retained and managed for at least one year.
- Encryption of personal information
- Personal information is stored and managed securely using encryption and other protections. Important data also receives additional safeguards, such as encryption in storage and transmission.
- Security software installation, regular checks and updates
- Security software is installed, updated, and checked regularly to prevent leaks and damage caused by hacking or computer viruses.
- Use within a closed network
- Data servers storing personal information are maintained on an internal network with external connections blocked to prevent outside access and leaks.
- Establishment and implementation of an internal management plan
- The Company establishes and implements an internal privacy management plan to handle personal information safely.
8. Privacy officer
The Company designates a department, privacy officer, and personnel as below to protect personal information and handle reports of infringements, complaints, and other privacy concerns.
- Privacy officer
- Name: Ham Hyeonjun
- Phone: 010-3970-8244
- E-mail : hyeonjun@yeonhong.studio
9. Changes to the Privacy Policy
This Privacy Policy applies from 2026. 09. 11.
Questions about these documents? Please Contact. For privacy inquiries, contact Ham Hyeonjun (hyeonjun@yeonhong.studio) .

