Privacy Policy
Last Updated: June 8, 2026 | Effective Date: July 1, 2026
Bodaplay Co., Ltd. (hereinafter the "Company") highly values users' personal information and strictly complies with the relevant laws that information and communications service providers must observe, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
1. Personal Information We Collect
The Company collects only the minimum personal information necessary to provide the service.
- At sign-up, "email and name" are required fields. (Collected via Google social login)
- During use of the service, users may set profile information (company name, contact information).
- When connecting an SNS channel: identification information of the connected SNS account (account ID·channel name·profile), access tokens for authentication (OAuth tokens), and content posted by the member along with posting performance data (posting status, views, likes, comments, etc.) are collected and linked.
- When paying for paid services — Korean users (Toss Payments): information such as "card number (partial), card company name" is collected. A billing key is stored for automatic payment.
- When paying for paid services — Global users (Polar): payment is processed on Polar's hosted page, and Bodapark does not directly store credit card information.
The Company collects personal information through the following methods.
- When a user agrees to the collection of personal information and directly enters information during sign-up and use of the service
- When a user connects an SNS account (OAuth authentication) to provide channel information and posting permissions
- Consultation through customer support: web page, email, etc.
- When the Company receives personal information from an external service or partner organization (in such cases, the partner organization provides personal information to the Company only after obtaining the user's consent under the Personal Information Protection Act).
During use of the service, information such as device information (operating system, screen size, device ID), IP address, cookies, date and time of visit, and service usage records may be automatically generated and collected.
- A cookie is a very small text file sent by the server used to operate the website to the user's browser.
- Users have the right to choose whether to use cookies and can, through web browser settings, allow all cookies, confirm each time a cookie is stored, or refuse all cookie storage. However, refusing cookie storage may cause inconvenience in using some services that require login.
2. Use of Collected Personal Information
The Company uses personal information for member management, service development, service operation, etc.
- Verifying member identity / confirming intent to sign up, preventing unauthorized use
- Identity verification and payment processing for providing paid services
- Subscription and automatic payment management
- Posting·scheduling content to the member's connected SNS channels and collecting·displaying posting performance data (views·likes·comments, etc.)
- Providing customized content based on service usage records, access frequency, and service usage statistics and analysis
- Marketing and promotional purposes, such as providing event information, participation opportunities, and advertising information
- Building a safe service environment in terms of security and personal information protection
- Improving existing services, developing new services, handling inquiries, delivering notices
- Sanctions against members who violate the terms of service
Where personal information is additionally used or provided:
- Personal information may be used or provided without the user's consent in accordance with the law within a scope reasonably related to the purpose of collection, comprehensively considering the relevance to the original purpose of collection, the predictability of additional use, whether it infringes user interests, and whether necessary security measures are in place.
- It may be used after pseudonymization for purposes such as compiling statistics, scientific research, and preservation of public-interest records.
3. Provision of Personal Information to Third Parties and Outsourcing of Processing
To provide better services, the Company outsources some of the necessary work to external companies, and stipulates the necessary matters and manages·supervises so that the outsourced company can process personal information safely in accordance with the Personal Information Protection Act.
| Outsourced Company | Outsourced Work | Retention and Use Period |
|---|---|---|
| AWS | Data storage and cloud infrastructure | Until member withdrawal and termination of the outsourcing contract |
| Google Analytics | User data analysis | Until member withdrawal and termination of the outsourcing contract |
| Toss Payments | Payment processing for Korean users and automatic payment (billing key) management | Until member withdrawal and termination of the outsourcing contract |
| Polar | Payment processing for global users | Until member withdrawal and termination of the outsourcing contract |
| AI model providers | AI content generation processing | Until member withdrawal and termination of the outsourcing contract |
| Meta (Facebook·Instagram) | Member channel connection and content posting | Until member withdrawal and termination of the outsourcing contract |
| Google (YouTube) | YouTube channel connection, posting, and performance data collection | Until member withdrawal and termination of the outsourcing contract |
| TikTok | TikTok channel connection and content posting | Until member withdrawal and termination of the outsourcing contract |
Where the Company is obligated to submit personal information in accordance with relevant laws, or in emergency situations such as disasters, epidemics, or threats to life, personal information is provided only for the purpose of resolving that situation.
4. SNS Channel Connection and External Platform APIs
When a member connects an SNS channel, the Company collects·processes content posting, channel information, and posting performance data through each platform's official API within the scope of the authority delegated by the member. Members can disconnect and revoke permissions at any time through each platform's settings or within the Bodapark service.
YouTube connection: The Company uses Google API Clients (YouTube Data API) to collect YouTube account information and posting performance (views, likes, comments, etc.). Members can revoke the Company's API access at any time in Google Security Settings (https://security.google.com/settings/security/permissions). Members who use YouTube features are deemed to have agreed to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).
The Company does not sell to third parties or use for separate targeted advertising the member's post·channel data collected through SNS connection, other than for the purpose of providing posting·analysis results to the member.
5. AI Content Processing and AI·ML Model Training
To generate AI content, user input may be processed by third-party AI providers and cloud services. Data is processed only for the purpose of generating the requested output.
Bodapark does not use Google user data to develop, improve, or train AI and/or ML models.
If learning/training on user data is required for future service improvement/upgrades, we will notify you at least 30 days before the revision.
6. Retention·Use Period and Destruction of Personal Information
In principle, the Company destroys collected personal information without delay when a user withdraws their membership. However, if the user has separately agreed to a retention period or if there is a legal obligation to retain information for a specific period, it is safely retained for that period.
Where relevant laws stipulate retention of information for a certain period:
- Records related to contracts or withdrawal of subscription: retained for 5 years (E-Commerce Act)
- Records related to payment and supply of goods: retained for 5 years (E-Commerce Act)
- Records related to consumer complaints or dispute resolution: retained for 3 years (E-Commerce Act)
- Records related to electronic financial transactions: retained for 5 years (Electronic Financial Transactions Act)
- Records related to display and advertising: retained for 6 months (E-Commerce Act)
- Service visit records: retained for 3 months (Protection of Communications Secrets Act)
When a reason for destruction arises, electronic files are safely deleted by technical methods so that they cannot be recovered or reproduced, and printed materials are shredded or incinerated. When SNS connection is canceled, stored access tokens are destroyed without delay.
7. Rights of Users and Legal Representatives
Users may view or modify their personal information at any time and may request to withdraw consent to the collection and use of personal information through "Membership Withdrawal," etc.
Rights can be exercised directly on the "Settings" page within the service or requested via email (cs@bodaplay.ai).
When a request is made to correct an error in personal information, the relevant personal information will not be used or provided until the correction is completed.
The legal representative of a child under 14 years of age has the right to view, modify, delete, suspend processing of, and withdraw consent to the collection·use·provision of the child's personal information.
Cancellation of automatic payment: Users can cancel automatic payment at any time through the settings within the service or customer support. Upon a cancellation request, payment will stop from the next billing cycle, and the service for the current cycle can be used until the end.
8. Overseas Transfer of Personal Information
To provide the service, the Company may transfer personal information overseas as follows. (Article 28-8 of the Personal Information Protection Act)
| Recipient | Country | Items | Purpose | Retention Period |
|---|---|---|---|---|
| AWS (Amazon Web Services) | USA, etc. | Service usage data | Cloud infrastructure operation (processing outsourcing) | Until termination of the contract |
| AI model providers | USA, etc. | User input prompts | AI content generation (processing outsourcing) | Deleted immediately upon completion of output generation |
| Polar | USA | Payment information | Payment processing for global users | Until member withdrawal |
| Meta · Google(YouTube) · TikTok | USA, etc. | SNS account identification information, posted content, posting performance data | SNS channel connection and content posting (processing outsourcing) | Until disconnection or member withdrawal |
The recipient does not use personal information for purposes other than the purpose of transfer and takes appropriate safety measures to protect personal information.
9. Measures to Ensure Safety for Personal Information Protection
The Company makes the following efforts to protect users' valuable personal information.
Encryption of personal information
Important information and SNS access tokens are stored encrypted, and data is transmitted and received safely over the network using an encrypted communication channel (SSL/TLS).
Measures against hacking, viruses, etc.
The system is installed in an area where external access is controlled, and access control procedures are established·operated. Data is backed up regularly, and the latest antivirus programs are installed.
Minimization and training of staff handling personal information
The number of staff handling personal information is minimized, and regular training is conducted for relevant staff.
10. Personal Information Protection Officer and Responsible Department
The Company has designated a personal information protection officer and department as follows to handle inquiries and complaints related to users' personal information.
Personal Information Protection Officer and Department
- Name: Kim Jin
- Department: CSO
- Phone: 02-2071-0712
- Email: cso@bodaplay.ai
For other reports or consultations related to personal information infringement, you can contact the following organizations.
- Personal Information Infringement Report Center: https://privacy.kisa.or.kr / 118
- Cyber Investigation Division, Supreme Prosecutors' Office: https://spo.go.kr / 1301
- Cyber Bureau, National Police Agency: https://ecrm.police.go.kr / 182
11. Obligation to Notify Before Amending the Privacy Policy
If there are additions, deletions, or modifications to the content of this Privacy Policy, we will notify you at least 7 days in advance through a notice within the service or by email. However, in the case of significant changes to user rights, such as changes to the type of personal information collected or the purpose of use, we will notify you at least 30 days in advance.
Date of announcement: June 8, 2026
Effective date: July 1, 2026