Privacy Policy
Last Updated: May 1, 2026
[Governing Language Disclaimer] This English translation is provided solely for the convenience of the user. In the event of any conflict or discrepancy between this English version and the original Korean version, the Korean version shall prevail and govern.
Gradutor (Business Registration No.: 2026-HwaseongByeongjeom-0766, hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act (PIPA) to protect the personal information of the data subjects and to handle any related grievances promptly and smoothly.
Article 1 (Purpose of Processing and Items of Personal Information Collected)
The "Company" collects and processes the minimum necessary personal information for the following purposes:
Parents/Students (Demand Side)
Items Collected: Name, Mobile Phone Number (for KakaoTalk integration), Email Address, Encrypted Payment Information.
Purpose of Processing: Provision of tutor matchmaking services, escrow payment processing and refunds, and sending Kakao AlimTalk notifications (class reservations/confirmations/cancellations).
Tutors (Supply Side)
Items Collected: Name, Mobile Phone Number (via Mobile Identity Verification), Email Address, Bank Account Details (for settlement). Additional items collected specifically for Verified Tier upgrades include: University Enrollment/Graduation Certificate and IB Official Transcript.
Purpose of Processing: Verification of baseline identity, verification of premium academic credentials, sending matchmaking AlimTalk notifications, and processing escrow payouts upon class completion.
Information Automatically Collected During Service Use
Items Collected: IP Address, Cookies, Service Usage Records, Access Logs, Device Information.
Purpose of Processing: Prevention of fraudulent credit card use (chargebacks), detection and blocking of unauthorized use, and utilization as evidentiary material in the event of payment disputes.
Article 2 (Processing and Retention Period of Personal Information / Principle of Destruction)
In principle, the "Company" retains and utilizes personal information until the user deletes their account (withdraws membership).
(Principle of Destruction of Tutor Verification Documents - "Destroy on Sight") Highly sensitive documents collected for the verification of a tutor's premium academic background (e.g., university certificates, IB transcripts) are permanently destroyed in an irrecoverable manner immediately upon the completion of the administrator's verification process. Only the 'Verified' status value is retained on the platform.
(Retention Pursuant to Relevant Laws) However, the following information shall be retained for the period specified in accordance with the Act on the Consumer Protection in Electronic Commerce, Etc.:
Records on contracts or cancellation of subscriptions: 5 years
Records on payment and supply of goods, etc.: 5 years
Records on consumer complaints or dispute resolution: 3 years
Article 3 (Provision of Personal Information to Third Parties and Outsourcing of Processing)
To ensure smooth service provision, escrow payments, and automated AlimTalk notifications, the "Company" outsources and provides personal information processing tasks to external specialized companies as follows. The Company continuously manages and supervises the entrusted companies to ensure the safe processing of personal information.
Payment and Escrow Processing (PortOne)
Recipient: PortOne Co., Ltd. and affiliated PG (Payment Gateway) companies
Outsourced Task: Credit card payment processing, recurring SaaS subscription billing, secure escrow fund retention, and tutor payouts.
Automated AlimTalk Notifications (Kakao)
Recipient: Kakao Corp.
Outsourced Task: Sending Kakao AlimTalk messages for class reservations, payment confirmations, and video link transmissions.
Cloud Database (Supabase)
Recipient: Supabase (AWS Hosting)
Outsourced Task: Secure cloud storage of platform member databases and reservation status information.
Article 4 (Procedure and Method of Destroying Personal Information)
Destruction Procedure: Personal information that has fulfilled its purpose of collection is transferred to a separate database (DB), stored for a certain period in accordance with internal policies and relevant laws, and then destroyed.
Destruction Method: Personal information recorded and stored in the form of electronic files is permanently deleted so that the record cannot be reproduced. Personal information recorded on paper documents is destroyed by shredding or incineration.
Article 5 (Rights of the Data Subject and Method of Exercise)
The data subject may exercise the right to request access, correction, deletion, or suspension of processing of their personal information from the "Company" at any time. This request can be made through the 'My Page' function on the website or by contacting the customer support email.
Article 6 (Measures to Ensure the Safety of Personal Information)
The "Company" takes the following measures to ensure the safety of personal information:
Technical Measures: One-way encryption of passwords and payment information, application of security programs against hacking (Supabase RLS), and access control to the personal information database.
Administrative Measures: Minimization of staff handling personal information and regular security training.
Article 7 (Chief Privacy Officer)
The "Company" designates the following Chief Privacy Officer to take overall responsibility for personal information processing tasks and to handle complaints and damage relief of data subjects:
Name: Jihoon Ahn (CEO)
Email: support@gradutor.com
