Privacy Policy

Effective date: 2026-07-21

CGWEB Inc. ("the Company") complies with applicable privacy laws including the Personal Information Protection Act of Korea, and processes personal information as follows. This policy applies to Injoys (injoys.com).

1. Information We Collect

When applying for API access we collect a name (or service name) and email; for social login, the email, name and profile from your Google account; for newsletters, an email address; for revenue-share payouts, settlement account details (bank, account number, account holder); for content requests, a contact email and the request itself; where a product order occurs, the recipient's name, phone number and delivery address; and, through member activity, your nickname, comments and likes. Access logs, IP address (stored hashed), cookies, referrer and UTM parameters, ad click identifiers, browser and device information (User-Agent) and API call records are generated and collected automatically as you use the service.

2. Purpose of Use

Collected information is used only to provide the service (API key issuance, authentication, usage management), process payments and member revenue-sharing settlement, receive and handle content requests, respond to inquiries, send newsletters, serve ads and measure performance, analyze visit/referral statistics for service improvement, and prevent abuse.

3. Retention Period

Personal data is destroyed without delay once the purpose of collection has been achieved. Electronic files are deleted permanently by means that prevent recovery; any printed material is shredded or incinerated. When a member closes their account, the account and activity records are deleted immediately, and recipient details for product orders are destroyed once delivery, exchange and return handling is complete. Data that the law requires us to keep (records of contracts and withdrawal of subscription for 5 years, payment and supply records for 5 years, consumer complaint and dispute records for 3 years, and similar) is retained for the required period and then destroyed. In addition, after account closure a one-way hash of the login provider and account identifier is kept for 30 days to prevent abusive re-registration, then destroyed.

4. Processing Delegation and Third-Party Provision

We entrust the following work as needed to run the service: payment processing (Toss Payments), email delivery (Google, Gmail SMTP), spam prevention on enquiries (Google reCAPTCHA) and visit analytics (Google Analytics). For purchases made through Paddle, Paddle acts as Merchant of Record and handles payment data directly. Google AdSense advertising shown on the service is not an entrustment: the advertising provider collects information directly from the user's device, and the items and purposes are described in section 12. We do not otherwise provide personal data to third parties except where required by law.

5. Cross-Border Transfer

Personal data is transferred abroad as follows. (1) Recipient: Google LLC · Country: United States · Items: email address and message content (email delivery), cookies, device information and access logs (analytics, advertising, spam prevention) · When and how: transmitted over the network at the time the relevant feature is used · Purpose: email delivery, visit analytics, advertising, spam prevention · Retention: per each service's policy. (2) Recipient: Paddle.com Market Ltd · Country: United Kingdom and United States · Items: buyer email and payment/billing information · When and how: transmitted over the network at the time of payment · Purpose: payment processing and tax filing · Retention: the period required by law. You may refuse these transfers by contacting us through the enquiry page, although the related features (payment, email delivery) may then be unavailable.

6. Cookies and Analytics

We use cookies for language settings and session management, and may use Google Analytics for service improvement and Google AdSense cookies for serving ads. Interest-based advertising and behavioral information are described in Article 12. You can refuse cookies in your browser settings, in which case some features may be limited.

7. Your Rights

You may request access to, correction or deletion of, or suspension of processing of your personal information at any time. Requests via the contact page or the posted contact details are handled without delay.

8. Security Measures

API keys are stored only as cryptographic digests (the raw key is not stored), sensitive information such as settlement accounts is stored encrypted, transport is encrypted with HTTPS, and access to personal information is limited to the minimum necessary personnel.

9. Privacy Officer and Notices

The privacy officer is the representative of the Company and can be reached via the contact page. Changes to this policy are announced on the Service 7 days before taking effect. If a translated version conflicts with the Korean version, the Korean version prevails.

10. Personal Information of Children Under 14

The Company does not provide the Service to children under 14 and does not knowingly collect personal information from children under 14. If we learn that such information has been collected, we destroy it without delay.

11. Remedies for Rights Violations

You may seek counseling or dispute mediation for privacy violations from the following bodies (Republic of Korea): the Personal Information Dispute Mediation Committee (kopico.go.kr, +82-1833-6972), the Privacy Infringement Report Center (privacy.kisa.or.kr, 118), the Supreme Prosecutors' Office Cybercrime Division (1301), and the National Police Agency Cyber Bureau (182).

12. Interest-Based Advertising and Behavioral Information

The Company serves Google AdSense ads on the Service, and third-party advertisers such as Google may collect and use behavioral information (web visit/navigation paths, ad view/click history, etc.) via cookies and advertising identifiers to provide interest-based ads. Such information is processed under each advertiser's privacy policy, and the Company does not control the items or purposes of behavioral information collected directly by advertisers. The Company also collects and analyzes behavioral information such as visit/referral paths on its own for service improvement. You can opt out of interest-based ads and behavioral information collection through Google Ads Settings (adssettings.google.com), the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout), or your browser's cookie-blocking settings.

Data controller: CGWEB Inc. (씨지웹주식회사) · Website: injoys.com

Company: 씨지웹주식회사
Representative: 신익희
Address: 경기도 안양시 동안구 시민대로 230 (평촌아크로타워)
Phone: 0505-740-0505
Email: [email protected]
Business registration no.: 123-86-31154
Data protection officer: 신익희
Title: 개인정보보호팀장
Officer contact: 0505-740-0505