Privacy Policy

1. Personal Information We Collect

• Guest draft: couple names, event date and venue, template selections, cover photo, editing data, and temporary draft identifiers
• Sign-up and member use: email address, name, gender, birthday, birth year, phone number, login provider identifier, and service usage records
• Invitation editing and publishing: names, event details, family information, gift account details, photos, and image files entered by the user
• RSVP and guestbook: guest name, attendance response, party size, message, and verification data needed for deletion or management
• Automatically collected data: IP address, browser/device information, access time, cookies, localStorage, and sessionStorage service state

2. Purposes of Processing

• Creating, editing, saving, publishing, and sharing mobile wedding invitations
• Identifying users, maintaining login status, and linking guest drafts to user accounts
• Uploading photos, rendering invitation images, and generating share previews
• Collecting RSVP responses, displaying guestbook entries, and showing gift account information
• Preventing abuse, responding to incidents, handling support requests, and maintaining security logs

3. Retention Period

• Account information is retained until account deletion or a service termination request.
• Guest draft data is retained temporarily according to the service policy, then deleted or anonymized.
• Published invitation data is retained until the user deletes it or requests publication to stop.
• RSVP and guestbook data is retained until the related invitation is deleted or unpublished.
• Records required by law may be separately retained for the legally required period.

4. Third-Party Disclosure

The Company processes personal information within the purposes described in this Policy and does not provide it to third parties unless the user consents or applicable law permits or requires it.

5. Processing Delegation and Overseas Processing

The Company may use external infrastructure providers to operate the service. Changes to delegated processing will be reflected in this Policy.

• Supabase: authentication, database, and file storage infrastructure
• Vercel: web application hosting and deployment
• OpenAI: AI image generation or related AI processing when requested by the user

6. Payment Data

This Policy does not identify any payment gateway as a current processor. If paid features are introduced, the Company will separately disclose the payment method, processor, retention period, and refund standards and will update this Policy if required.

7. Cookies and Similar Technologies

The Company may use cookies, localStorage, and sessionStorage to maintain login, language preferences, draft recovery, and editor save state. Users can restrict cookies in browser settings, but some features may not work properly.

8. Deletion

The Company deletes personal information without delay when the retention period expires or the processing purpose is fulfilled. Electronic files are deleted in a way that makes recovery difficult, and legally retained records are stored separately.

9. User Rights

Users may request access, correction, deletion, suspension of processing, or withdrawal of consent by contacting nib.help@gmail.com or 010-6805-0741. The Company will verify the requester and respond under applicable law.

10. Security Measures

• Authentication and permission-based access controls
• Server-side validation for private images and proxy/signed URL policies
• Limited access to personal information by authorized operators
• Protection of secret keys and administrative privileges from client exposure
• Security log review and access blocking when incidents occur

11. Privacy Officer

• Name: 김영우
• Title: 대표
• Email: nib.help@gmail.com
• Phone: 010-6805-0741

12. Updates

This Policy applies from its effective date. Material changes will be announced through the service screen or notices before they take effect.