Privacy Policy
Last Updated: May 27, 2026
[Governing Language Disclaimer] This English translation is provided solely for the convenience of the user. In the event of any conflict or discrepancy between this English version and the original Korean version, the Korean version shall prevail and govern.
Gradutor (Business Registration No.: 385-14-02696, hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act (PIPA) to protect the personal information of the data subjects and to handle any related grievances promptly and smoothly.
Article 1 (Purpose of Processing and Items of Personal Information Collected)
The "Company" collects and processes the minimum necessary personal information for the following purposes:
1. Parents/Students (Demand Side)
Items Collected: Name, Mobile Phone Number (for KakaoTalk integration), Email Address, Encrypted Payment Information.
Purpose of Processing: Provision of tutor matchmaking services, escrow payment processing and refunds, and sending Kakao AlimTalk notifications.
2. Tutors (Supply Side)
Items Collected: Name, Mobile Phone Number, CI/DI (Connecting Information/Duplication Information via Mobile Identity Verification), Email Address, Bank Account Details (for settlement), University Certificate, IB Official Transcript.
Purpose of Processing: Verification of identity via mobile authentication, verification of academic credentials, creation of public profiles, sending matchmaking AlimTalk notifications, and processing escrow payouts.
3. Information Automatically Collected During Service Use
Items Collected: IP Address, Cookies, Service Usage Records, Access Logs, Device Information.
Purpose of Processing: Prevention of fraudulent credit card use (chargebacks), detection and blocking of unauthorized use, and utilization as evidentiary material in payment disputes.
Article 2 (Provision of Personal Information to Third Parties - Public Profiles)
To provide the essential functions of the tutor matchmaking service, the "Company" provides the following personal information to third parties, strictly limited to cases where the tutor has consented to making their profile public:
Recipient: Parents and students utilizing the platform (Demand Side).
Items Provided: Name, University Affiliation, IB Score, and Verification Badge status (Verified).
Purpose of Recipient: To review tutor information and facilitate class matchmaking.
Retention Period: Until the tutor withdraws membership or changes their profile to private.
Article 3 (Processing and Retention Period / Principle of Destruction)
In principle, the "Company" retains and utilizes personal information until the user deletes their account (withdraws membership).
(Principle of Destruction of Verification Documents) Original images collected for the verification of a tutor's academic background (e.g., ID cards, IB transcripts) are permanently destroyed in an irrecoverable manner immediately upon the completion of the visual verification process. Only the 'Verified' status value is retained on the platform.
(Retention Pursuant to Relevant Laws) However, to fulfill obligations under the E-Commerce Act, prevent identity theft, and cooperate with law enforcement, the mobile authentication hashes (CI/DI) and the following information shall be securely retained for the specified periods:
Records on contracts or withdrawal of consent (cancellation): 5 years.
Records on payment and supply of goods, etc.: 5 years.
Records on consumer complaints or dispute resolution: 3 years.
Article 4 (Outsourcing of Personal Information Processing)
To ensure smooth service provision, escrow payments, and automated AlimTalk notifications, the "Company" outsources personal information processing to external specialized companies as follows, and continuously supervises them:
Delegated Processor: PortOne Co., Ltd. and affiliated PGs
Entrusted Tasks: Electronic payment processing (Credit Card, KakaoPay, NaverPay, PayPal), escrow service integration, and secure tutor payouts.
Automated AlimTalks: Kakao Corp. (Sending notifications for class reservations, payments, and video links).
Cloud Database: Supabase / AWS (Secure cloud storage of member databases and reservation statuses).
Article 5 (Procedure and Method of Destroying Personal Information)
Destruction Procedure: Personal information that has fulfilled its purpose is transferred to a separate DB, stored for a certain period in accordance with relevant laws, and then destroyed.
Destruction Method: Electronic files are permanently deleted so the record cannot be reproduced. Paper documents are destroyed by shredding or incineration.
Article 6 (Rights of the Data Subject and Method of Exercise)
The data subject may exercise the right to request access, correction, deletion, or suspension of processing of their personal information at any time through the 'My Page' function or by contacting customer support.
Article 7 (Measures to Ensure Safety of Personal Information)
The "Company" takes the following measures to ensure the safety of personal information:
Technical Measures: One-way encryption of passwords/payment information, security programs (Supabase RLS), and access control.
Administrative Measures: Minimization of staff handling personal information and regular security training.
Article 8 (Chief Privacy Officer)
The "Company" designates the following Chief Privacy Officer:
Name: Jihoon Ahn (CEO).
Email: support@gradutor.com.
