Privacy Policy
Last updated: January 1, 2026
Milo (the “Company”) operates the ‘Sajurang’ service (sajurang.org, the “Service”), and establishes and discloses this Privacy Policy as follows in order to protect users’ personal information and to handle related grievances promptly and smoothly in accordance with the Personal Information Protection Act and other applicable laws.
Article 1 (Personal Information Items Collected)
The Company collects the following personal information to provide the Service.
- Upon Kakao login (sign-up and authentication): email address, nickname, profile image
- When using the saju reading: name (alias), date of birth, time of birth, gender
- Upon paid payment: information necessary to process payment (payment methods, transaction records, etc. are processed through the payment processor Paddle)
- Automatically generated during use of the Service: access date and time, service usage records
Article 2 (Purposes of Collection and Use of Personal Information)
- member management, including member identification, identity verification, and login
- generation and provision of saju reading results based on the information entered
- storage of generated saju results and provision of the archive feature
- payment and settlement for paid content
- responding to customer inquiries and operating and improving the Service
Article 3 (Entrustment of Personal Information Processing and Provision to Third Parties)
To provide the Service smoothly, the Company entrusts personal information processing tasks to external specialized providers as set out below, and some entrustees are located overseas, so personal information may be transferred abroad.
| Entrustee | Entrusted Task | Items Transferred | Country of Transfer |
|---|---|---|---|
| Supabase, Inc. | data storage and member authentication | email, nickname, profile image, name (alias), date of birth / time of birth / gender, saju results | United States |
| Paddle.com Market Ltd. | paid payment processing and settlement | email, payment-related information | United Kingdom, etc. |
| Google LLC (Gemini API) | AI saju reading generation | input values necessary for generating readings, such as date of birth, time of birth, and gender | United States |
The date, time, and method of transferring personal information abroad occur by transmission over the network at the time of using the Service (sign-up, saju reading request, payment). Users may refuse to consent to the overseas transfer of their personal information, in which case use of all or part of the relevant Service may be restricted.
Article 4 (Retention and Use Period of Personal Information, and Destruction)
- As a rule, when the purpose of collecting and using personal information has been achieved or a user requests to withdraw membership, the Company destroys the relevant personal information without delay.
- However, where applicable laws require retention for a certain period, the information is retained for that period. (e.g., under the Act on the Consumer Protection in Electronic Commerce, etc.: records of contracts and withdrawal of subscription for 5 years, records of payment and supply of goods for 5 years, records of consumer complaints and dispute handling for 3 years)
- Information in electronic file form is permanently deleted using a method that makes recovery impossible, and other records are destroyed by shredding or incineration.
Article 5 (Users’ Rights and How to Exercise Them)
- Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, and may withdraw their consent.
- Rights may be exercised through features within the Service or by contacting the Personal Information Protection Officer below in writing, by email, or otherwise, and the Company takes the necessary measures without delay.
- Upon withdrawal of membership or withdrawal of consent, the Company destroys personal information in accordance with Article 4.
Article 6 (Measures to Ensure the Safety of Personal Information)
To process personal information safely, the Company implements the technical and administrative protective measures required by applicable laws, such as encryption of transmission sections and restriction and management of access rights.
Article 7 (Personal Information Protection Officer)
Users may direct inquiries regarding personal information protection, complaint handling, damage relief, and related matters arising during use of the Service to the Personal Information Protection Officer below.
- Personal Information Protection Officer: Yang Yeongjin
- Affiliation/Position: Representative
- Email: muso27723@gmail.com
Article 8 (Duty of Notification)
In the event of any addition, deletion, or amendment to this Privacy Policy, notice will be given through announcements within the Service at least 7 days before the amendment takes effect.