Privacy Policy
Effective date: May 10, 2026 · 개인정보처리방침 (PIPA-compliant)
1. 개인정보 수집 항목 및 목적 (Data Collected and Purpose)
Stunion collects the following personal information:
| Category | Items | Purpose |
|---|---|---|
| Account | Email, password (hashed) | Authentication and account management |
| Tutor profile | Name, phone, education, bio, photo, transcripts, test scores | Profile display and credential verification |
| Booking | Parent email, phone, student name, session details | Booking processing and communication |
| Payment | Transaction amount, payout amount, withholding | Payment processing and tax compliance |
| Usage | IP address, browser type, pages visited | Service improvement and security monitoring |
2. 개인정보 보유 및 이용 기간 (Retention Period)
Personal data is retained for as long as your account is active. Upon account deletion, data is permanently deleted within 30 days, except where retention is required by Korean law:
- Transaction records: 5 years (전자상거래 등에서의 소비자보호에 관한 법률)
- Tax withholding records: 5 years (국세기본법)
- User complaint records: 3 years
3. 개인정보 제3자 제공 (Third-Party Sharing)
Stunion does not sell personal data. Data is shared only with:
- Supabase Inc. — database and file storage (US, under DPA)
- PortOne / Iamport — payment processing (Korea)
- Resend / SendGrid — transactional email
- National Tax Service (국세청) — withholding tax remittance as required by law
4. 정보주체의 권리 (Your Rights)
Under the Personal Information Protection Act (개인정보보호법), you have the right to:
- Access the personal data Stunion holds about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent for optional data processing
To exercise these rights, contact andyyan0806@gmail.com. We respond within 10 business days.
5. 파일 업로드 보안 (File Storage Security)
Tutor credential documents (transcripts, test scores) are stored in a private Supabase Storage bucket with no public URL. Access is restricted to Stunion admin only. Profile photos are stored in a public bucket solely for display on tutor profile pages.
6. 쿠키 및 자동 수집 (Cookies)
Stunion uses session cookies necessary for authentication. No third-party advertising cookies are used. Analytics data (if PostHog is enabled) is collected in aggregate and does not identify individual users.
7. 개인정보 보호책임자 (Privacy Officer)
Privacy Officer: Gyubin An
Email: andyyan0806@gmail.com
You may also file a complaint with the Personal Information Protection Commission (개인정보보호위원회) at www.pipc.go.kr.
8. 변경 사항 고지 (Policy Updates)
Material changes to this policy will be notified by email at least 7 days before taking effect. The effective date at the top of this page reflects the most recent update.