Privacy policy

1. Why we process personal data

• Registration, authentication, identity checks, and account management
• Providing the Service: Agent Cloud storage, Hub publication and discovery, bookmarks
• Subscription and credit payments, invoicing, refunds, and payment-fraud prevention
• Settling and paying creator earnings
• Keeping the Service stable, responding to incidents, and investigating abuse
• Meeting obligations imposed by law

2. What we hold, and for how long

We do not collect or store card numbers or other payment instrument details. Those are handled by Paddle.com Market Ltd. under its own policy.

3. Disclosure to third parties

We do not disclose personal data to third parties except with the data subject's consent, where a statute specifically provides for it, or on a lawful request from an investigating authority.

4. Processors

Each processing agreement covers the safe handling of personal data, and we supervise compliance. Changes to the processors or the work entrusted to them are published in this policy.

5. Transfer outside Korea

Several of the processors above operate servers outside the Republic of Korea, so personal data is transferred abroad to the extent needed to provide the Service. The data transferred is the account, usage, and billing-status information in section 2; the destinations are the regions those processors operate, including the United States; the transfer happens when the Service is used, over the network. A data subject may refuse the transfer, in which case use of the Service may be limited.

6. Destruction

Personal data is destroyed without delay once its retention period ends or its purpose is met. Electronic files are deleted so they cannot be recovered; printed material is shredded or incinerated. Data that must be kept under law is stored separately from other personal data.

7. Your rights

You may at any time ask to access, correct, delete, or suspend the processing of your personal data. Do it from the account page or write to appbridge@appbridge.co.kr; we act within 10 days of receiving the request. A legal representative or an authorised agent may exercise these rights on your behalf.

8. Cookies

We use cookies to keep you signed in and to remember your language. We do not collect behavioural data for advertising. You can refuse cookies in your browser, which will limit features such as staying signed in.

9. Security measures

• Access is limited to the smallest possible number of people, with managed permissions.
• Traffic is encrypted in transit and credentials are stored in a form that cannot be decrypted.
• Access logs are retained and protected against alteration.
• Content in an uploaded package that looks like a credential is removed before storage, and the removal is recorded.

10. Data protection officer

Data protection officer: the representative of Appbridge Inc. · appbridge@appbridge.co.kr. Questions, complaints, and remedy requests about personal data go to this address and are answered without delay.

11. Where else to complain

• Personal Information Dispute Mediation Committee — 1833-6972 / www.kopico.go.kr
• Korea Internet & Security Agency privacy centre — 118 / privacy.kisa.or.kr
• Supreme Prosecutors' Office cybercrime division — 1301 / www.spo.go.kr
• National Police Agency cyber bureau — 182 / ecrm.police.go.kr

12. Changes to this policy

This policy takes effect on 16 August 2026. Any addition, removal, or correction is announced in the Service at least 7 days before it applies.

Data controller

The data controller is Appbridge Inc. (Republic of Korea). Paddle.com Market Ltd. is a separate controller for the payment data it processes.