Privacy Policy

Effective date:November 1, 2024
Last updated:October 12, 2026

1. Purpose of Collection and Use of Personal Information

Deorot, the operator of Intome (the “Company”), processes personal information for the following purposes only. If purposes change, necessary steps such as separate consent are taken under Article 18 of the Personal Information Protection Act. This Policy applies to the Intome website and Intome within Toss; information processed may differ by service channel.

Membership registration and management: Maintenance and management of membership status, prevention of fraudulent use of services, various notifications
Provision of goods or services: Service provision, content provision, customized service provision
Payment and settlement: Invoice delivery, fee payment, fee collection
Customer support: Customer consultation and complaint handling, delivery of notices
Marketing and advertising: Events and promotional information only with any necessary separate consent. Toss Login alone is not treated as marketing consent.

2. Personal Information Items Collected

The Company processes the following personal information items.

Required Information for Website Registration

Email address and name
Password (stored as a non-reversible, one-way hash)

Website Social Sign-In

Authentication results from Google, Kakao and Naver are used for registration, sign-in and account linking. Provider passwords are not collected. Information is received only within the permissions you grant to the provider.

Sign-in provider	Information used by Intome	Purpose / retention period
Google	Google user identifier, email and name	Registration, sign-in and account linking / until account withdrawal
Kakao	Kakao user identifier, email and profile nickname	Registration, sign-in and account linking / until account withdrawal
Naver	Naver user identifier, email and name	Registration, sign-in and account linking / until account withdrawal

OAuth authorization codes and access tokens are used during authentication. Social authentication proofs awaiting consent are valid for 10 minutes. New member accounts are not created until consent is completed.

Registration and Service Consent Records

Member identifiers, consent items, document version, server-recorded consent time and service channel are used to verify consent and manage membership, and are destroyed upon withdrawal. Past registration alone does not generate consent records. Marketing consent is obtained separately and is not included in required service consent. Publishing this Privacy Policy does not constitute blanket consent to all personal information processing.

Optional Items

Phone number (optional; used for order or customer-support contact if provided for that purpose)
Card creation information: User-entered or uploaded wedding/first-birthday dates and venues, names of the couple, child and family, photos, videos, invitation and thank-you text, etc.
Bank account information (for gift money guidance)
Payment information (orderer email, phone number)

Information Processed Within Toss

Toss Login: The Toss user identifier (userKey) identifies accounts and verifies card ownership. Names provided as required on the Toss Login consent screen are currently not decrypted or separately stored on Intome servers. Toss passwords are not collected, and email, gender, date of birth, phone number and CI are currently not requested through Toss Login.
Card creation and sharing: We process names, family information, photos and videos, event dates and venues, contact details, bank accounts, text and sharing settings you enter. Obtain any necessary consent before entering another person’s information.
In-app purchases: Order and product identifiers, linked cards, and purchase, fulfillment and refund status are used to verify purchases and grant access rights. Intome does not directly collect full payment card numbers or passwords used by app markets.
Guestbook: Names and congratulatory messages entered by users are shown to card visitors; the card creator may delete messages. Anyone with the shared link can view published information, so check whether contact and bank details should be public.

Guestbooks, RSVPs and Customer Support

Website guestbooks process the writer’s name, message and deletion password. Toss guestbooks process names, messages and verification values for optional deletion passwords. Guestbook names and messages are public to card visitors. Website RSVPs show the card creator the respondent’s name, affiliation (such as bride or groom), attendance, party size, shuttle use and optional contact details for event preparation. They are destroyed when the card is deleted or its retention period ends. Inquiries and reports may include supplied names, email, contact details and inquiry text, used for support and dispute handling. Complaint and dispute records subject to statutory retention are kept for 3 years.

Automatically Collected Items

IP address, cookies, visit date and time
Service usage records, improper usage records

3. Retention and Use Period of Personal Information

The Company processes and retains personal information within the personal information retention and use period pursuant to laws or the personal information retention and use period agreed upon when collecting personal information from the data subject.

Upon Membership Withdrawal

Personal information is deleted immediately upon account withdrawal, except information that must be retained for periods prescribed by law. Personal information in cards is deleted immediately when the retention period below ends or the user requests card deletion or account withdrawal. Statutorily required transaction records are kept separately from card content and only to the extent needed for their retention purpose.

Retention of Card Content and Included Personal Information

Free cards: Card content and personal information in cards without watermark removal are automatically deleted 7 days after the first save. Editing or saving again does not extend this period.
Paid mobile wedding / first-birthday invitations: Retained for up to 90 days from the specified wedding / first-birthday event date.
Paid mobile thank-you cards: Retained for up to 90 days from purchase (the date payment for that card’s watermark removal is completed).
Wedding and first-birthday dates cannot be changed after watermark removal. Related card content and guestbooks are destroyed when retention ends; deletion or account withdrawal can also be requested before then.
Account identifiers are retained until account withdrawal or processing of a Toss Login disconnection notice. Toss in-app login sessions are valid for 7 days. Card retention and statutory retention of transaction records are separate.

Retention Under Relevant Laws

Records on contracts or withdrawal of subscription: 5 years (E-Commerce Act)
Records on payment and supply of goods: 5 years (E-Commerce Act)
Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
Display and advertising records: 6 months (E-Commerce Act)
Communications confirmation data, such as access logs: Retained for legally prescribed periods where retention duties under the Protection of Communications Secrets Act apply (3 months for internet log records, etc.). Other security and operational logs are kept only for the minimum time needed for their purpose.

4. Outsourcing and Overseas Transfer of Personal Information

The Company outsources the following tasks needed to provide the Service and protects personal information through contracts and supervision. Deorot directly operates the API and database. The website and Toss in-app service use different storage and payment channels.

Processor	Service channel	Tasks and information processed	Retention period
Contabo GmbH	Website and Toss in-app	Server infrastructure in Japan. Server processing and storage of membership, authentication and consent records, card content, photo URLs (web) and photo data (Toss), guestbooks, RSVPs, purchase verification and access information.	Item-specific periods in Section 3
Cloudflare, Inc. (R2)	Website	Storage and delivery of uploaded photos, images, audio files and object paths. Website photos use R2 object storage separate from the Contabo database.	Until card deletion, account withdrawal or retention expiry. Temporary uploads are cleaned up when their storage purpose ends.
Google LLC (Google Analytics)	Website	Usage statistics using cookies, online identifiers, page visits and device/browser information.	Event data: 2 months; user data: 14 months, reset upon new user activity. Aggregate reports are separate.
Cloudflare, Inc. (Web Analytics / RUM)	Website	Performance analysis of page load times, responsiveness, visited-page and referrer URLs. Configured to exclude EU visitor data.	Unsampled data: 7 days, then reduced and aggregated for long-term storage. Analytics display the most recent 6 months.
Google LLC (Gmail SMTP)	Website	Sending authentication, service notification and support emails using recipient email addresses, subject lines and message bodies.	Deleted when the sending purpose is fulfilled. Statutory complaint/dispute records are separately retained for 3 years.
Korea PortOne and the payment gateway shown at checkout	Website payments	Payment integration, authorization, cancellation and order/transaction verification	Statutory transaction records are retained under Section 3

Toss in-app purchases use Apps in Toss and the relevant app market’s payment process, not PortOne. Payment information directly collected by Toss or app markets is governed by their privacy notices.

4-1. Overseas Transfer to Contabo Servers in Japan

Category	Details
Recipient	Contabo GmbH (server infrastructure provider)
Contact	+49 (89) 3564717-71 / https://help.contabo.com/
Destination country	Japan
Information transferred	Website email, name, password hash, optional phone number and social identifiers; Toss user identifier and authentication information; consent records; card content (names, family information, event dates, venues, contact and bank details, text, photo URLs, etc.); photos saved in Toss; guestbooks and RSVPs; order/product identifiers, purchase/refund status, access and customer-support information.
Purpose	Registration, sign-in and account management; card creation, saving and sharing; purchase verification, customer support and server security
Timing and method	After separately explained consent, transmission and storage via encrypted network communications when using server features such as registration, sign-in, saving and sharing
Retention period	Account and consent records: until withdrawal. Free cards: 7 days from first save. Paid wedding/first-birthday invitations: 90 days from the specified event date. Thank-you cards: 90 days from purchase. Destroyed earlier upon card deletion or account withdrawal; statutory transaction records are retained separately under Section 3.
Legal basis	Separate overseas-transfer consent under Article 28-8(1)(1) of the Personal Information Protection Act
Refusal and withdrawal	You may stop registration, withdraw your account, or contact [email protected] / 0507-1406-9555. Refusing or withdrawing consent restricts member services using servers in Japan. Privacy rights and inquiries about existing purchases remain available.

4-2. Website Photo Storage and Other Overseas Processing

Website photos, images and audio are stored in Cloudflare R2, and files for cards made public are delivered through public file URLs. Anyone who knows the file URL can access the file, so check other people’s information and the scope of disclosure. Ending card sharing is separate from deleting the files themselves. Upon card deletion, expiry or account withdrawal, card content and responses are immediately processed for deletion and R2 file deletion is requested immediately. Storage errors are retried using a pending-deletion list. Files lawfully shared by other valid cards are processed according to those cards’ purposes and retention periods.

The Cloudflare R2 bucket used for website files,deorotis configured for APAC (Asia-Pacific). APAC does not identify a specific country and is separate from the location of Contabo servers in Japan. This regional setting alone does not establish the actual country where files are stored.

Google Analytics 4 is configured to retain event data for 2 months and user data for 14 months. New user activity resets that user’s retention period. Expired individual data is deleted through Google’s scheduled deletion process; aggregate statistics such as visitors and page views may remain in reports afterwards.

Cloudflare’s performance-measurement RUM script sends page load times, responsiveness, visited-page and referrer URLs and similar data to Cloudflare. It is currently enabled with EU visitor data excluded. Unsampled data is retained for 7 days, then reduced and aggregated for long-term storage. The analytics screen shows the most recent 6 months. The display window differs from the retention periods for raw and aggregate data.

Service emails are sent through Google Gmail SMTP. Recipient email addresses, subject lines, message bodies and other information needed to send emails are transferred to Google.

For overseas processing by Cloudflare and Google, the actual destination country is not inferred solely from the APAC setting or the provider’s headquarters address. Before publication, we will finalize and disclose each service’s destination countries, contact details, transfer timing and method, legal basis, and refusal/withdrawal procedures.

5. Procedures and Methods for Destruction of Personal Information

The Company destroys personal information without delay when it is no longer needed due to expiration of retention period or achievement of processing purpose.

Destruction Procedure

Personal information is immediately processed for deletion upon card deletion, expiry or account withdrawal. A deletion flag or access restriction alone does not count as completed destruction. Transaction and dispute records retained by law are stored separately with their legal basis and expiry dates identified, access restricted, used only for retention purposes and destroyed on expiry. When a Toss Login disconnection notice is received, the linked account, cards, photos, guestbooks, RSVPs and authentication sessions are deleted; only statutory records are kept separately for their required periods. Company-managed backups are included in deletion targets immediately. When restoring a backup, deletion records are applied so deleted information does not reappear. Failed deletions in external storage are retried and not considered complete.

Destruction Method

Electronic file format: Deleted using technical methods that prevent record reproduction
Paper documents: Shredded or incinerated

6. Provision of Personal Information to Third Parties

The Company processes personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the data subject or special provisions of law.

In principle, the Company does not provide personal information to external parties, except in the cases below. Within Toss, login information received from Toss with user consent is used for account linking. Information required during Toss Login and in-app purchases is governed by the relevant consent screens and the privacy notices of Toss and the relevant app market.

When the user has given prior consent
When required by investigative agencies according to procedures and methods prescribed by law for investigation purposes
When provided in a form that cannot identify specific individuals for statistical compilation, academic research, or market research

7. Rights of Users and Legal Representatives and How to Exercise Them

Data subjects may exercise the following rights related to personal information protection against the Company at any time.

Request to view personal information
Request for correction if there are errors
Request for deletion
Request to stop processing

Rights may be exercised in writing, by phone, email or fax, and the Company acts without delay. Access and suspension requests may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act. Toss users may exercise rights through in-app card deletion/account withdrawal or customer support below. Disconnecting Toss Login sends a notice to the server to delete the relevant Intome account and linked cards and sessions. Information requiring separate statutory retention is handled for the prescribed purposes and periods.

8. Measures to Ensure Safety of Personal Information

The Company takes the following measures to ensure the safety of personal information.

Administrative measures: Establishment and implementation of internal management plan, regular employee training, etc.
Technical measures: Access authority management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
Physical measures: Access control to computer rooms and data storage rooms

9. Personal Information Protection Officer

Privacy Officer: Kim Yeon-hee

Contact: 0507-1406-9555 / [email protected]

This Privacy Policy first took effect on November 1, 2024; this revision was drafted on October 12, 2026. Changes and their effective dates are announced through service notices. Changes requiring separate consent follow the relevant procedures.