Privacy Policy

Effective date: 2026-07-12

CGWEB Inc. ("the Company") complies with applicable privacy laws including the Personal Information Protection Act of Korea, and processes personal information as follows. This policy applies to Injoys (injoys.com).

1. Information We Collect

We collect a name (or service name) and email when applying for the API, Google account email, name and profile when signing in socially, and an email when subscribing to the newsletter. Access logs, IP addresses, cookies, and API call records are generated and collected automatically during use.

2. Purpose of Use

Collected information is used only to provide the service (API key issuance, authentication, usage management), process payments and settlement, respond to inquiries, send newsletters, analyze statistics for service improvement, and prevent abuse.

3. Retention Period

Personal information is destroyed without delay once the purpose of collection is achieved. Information required to be retained by applicable laws (e.g., transaction records for 5 years under the E-Commerce Consumer Protection Act) is kept for the required period.

4. Processing Delegation and Third-Party Provision

Payment processing is delegated to Toss Payments, and for purchases made through Paddle, Paddle processes payment information directly as the Merchant of Record. We use Google (Gmail SMTP) for sending email. We do not provide personal information to third parties except as required by law.

5. Cross-Border Transfer

Payment and email related information may be processed abroad through Paddle (UK/US) and Google (US). Each processor's handling follows its own privacy policy.

6. Cookies and Analytics

We use cookies for language settings and session management, and may use Google Analytics for service improvement. You can refuse cookies in your browser settings, in which case some features may be limited.

7. Your Rights

You may request access to, correction or deletion of, or suspension of processing of your personal information at any time. Requests via the contact page or the posted contact details are handled without delay.

8. Security Measures

API keys are stored only as cryptographic digests (the raw key is not stored), transport is encrypted with HTTPS, and access to personal information is limited to the minimum necessary personnel.

9. Privacy Officer and Notices

The privacy officer is the representative of the Company and can be reached via the contact page. Changes to this policy are announced on the Service 7 days before taking effect. If a translated version conflicts with the Korean version, the Korean version prevails.

10. Personal Information of Children Under 14

The Company does not provide the Service to children under 14 and does not knowingly collect personal information from children under 14. If we learn that such information has been collected, we destroy it without delay.

11. Remedies for Rights Violations

You may seek counseling or dispute mediation for privacy violations from the following bodies (Republic of Korea): the Personal Information Dispute Mediation Committee (kopico.go.kr, +82-1833-6972), the Privacy Infringement Report Center (privacy.kisa.or.kr, 118), the Supreme Prosecutors' Office Cybercrime Division (1301), and the National Police Agency Cyber Bureau (182).

Data controller: CGWEB Inc. (씨지웹주식회사) · Website: injoys.com