TREND SEOUL

Privacy Policy

Last updated 2026-10-10

TREND SEOUL ("we", "the Company") operates the Creator Portal at portal.trendseoul.kr (the "Portal"). This policy explains what personal data we handle and how. We follow the Republic of Korea’s Personal Information Protection Act (PIPA): we collect only what the purpose requires, and we delete it when it is no longer needed.

1. Why we process your data

· To receive and verify creator registrations · To match you with campaigns and send you offers · To run campaigns (scheduling, draft review, upload verification) · To pay creator fees and file the required tax reports · To answer enquiries and resolve disputes We do not use your data outside these purposes. If the purpose changes, we ask for your consent again.

2. What we collect

[a] At registration (required) Name or working name, email, nationality, main platform and handle, languages you can create in, content categories, whether you can film in Seoul, visa status, whether you hold an Alien Registration Card, whether you hold a Korean bank account [b] At registration (optional) Phone number, KakaoTalk ID, other messenger ID (LINE, WeChat, etc.), whether you appear on camera, self-introduction, other channels [c] When you join a campaign Available shooting dates, answers to campaign application questions, drafts and final content you submit, published post links, checklist responses [d] When you request payment Account holder name (including romanized name), bank name, account number, a copy of your bankbook, a copy of your ID (Alien Registration Card or passport), a copy of your permit for activities outside your status where applicable, address [e] Collected automatically Login records, access times, service usage logs. We do not place advertising or behavioural analytics cookies. [f] Public metrics We may collect and analyse the public metrics (views, likes, comments, shares, saves) of the public accounts and posts you register with us, in order to measure campaign performance. We never access private accounts or private data.

3. How long we keep it

· Registration data: until you ask us to delete it. If there is no activity for 24 months, we delete it. · Campaign participation records: 3 years after the campaign ends (to evidence performance of the agreement and handle disputes). · Account numbers, ID numbers and document copies: deleted once payment is complete. This data is held in a separate encrypted store and is removed automatically when a payment is marked complete. Only the last four digits of the account number remain, for reconciliation. · Tax filing data (name, foreign registration number, address, amount paid, tax withheld): 5 years from the date of payment, as required by the Framework Act on National Taxes. It is stored encrypted and separately, and is never accessed for any purpose other than tax. · Login and access logs: 1 year.

4. Sharing with third parties

As a rule, we do not share your data. We share it only: · Where you have separately consented within a specific campaign. In that case the items shared with the advertiser, the purpose and the retention period are shown to you on that campaign’s screen before you agree. · Where we must report to the National Tax Service. · Where a law enforcement authority requests it through lawful process. We never sell your data and never pass it on for advertising purposes.

5. Processors we use

We entrust parts of the processing to the following companies in order to run the service. · Supabase Inc. — database, authentication, file storage (Singapore) · Vercel Inc. — web hosting (United States, Singapore) · Resend (Plus Five Five, Inc.) — transactional email (United States) · Google LLC — Google account sign-in (United States) · Notion Labs, Inc. — creator roster management (United States) Each processor receives only the items its task requires, under a contract requiring it to protect the data. Account numbers, ID numbers and tax data are stored only in encrypted form and are never exported to Notion or any other external tool.

6. Transfer outside Korea

Yes. The processors in section 5 run servers outside Korea, so your data is transferred abroad to the extent of that processing. · Items transferred: as listed per processor in section 5 · Countries: United States, Singapore · When and how: at the time you use the service, over encrypted connections · Purpose: to perform the entrusted work in section 5 · Retention: as set out in section 3 You may refuse this transfer. However, it is essential to providing the service, so if you refuse you will not be able to use the Portal.

7. Your rights

You may at any time ask us to: · Let you see your data · Correct anything that is wrong · Delete it · Stop processing it · Withdraw your consent (including opting out of campaign news by email and KakaoTalk) You can edit most of it yourself under "My page" in the Portal, or write to trendseoul.kr@gmail.com. We act within 10 days of receiving your request and tell you the outcome. We cannot delete records that the law requires us to keep — such as tax filing data — before their retention period ends. Even then, that data is used for no purpose other than tax.

8. How we protect it

· Sensitive data such as account and ID numbers is encrypted by the application before it is stored. Opening the database directly does not reveal it. · Row-level security is enabled on the database so that a signed-in user can only reach their own rows. · The storage holding payment documents is not reachable except by the service itself. · Only a minimal number of staff handle personal data. · All traffic is encrypted with HTTPS.

9. Cookies

The Portal uses only an authentication cookie to keep you signed in and a cookie holding your language choice. We set no advertising or behavioural tracking cookies. You may refuse cookies in your browser, but then you will not stay signed in.

10. Children under 14

The Portal does not accept registrations from children under 14. If we find that a user is under 14, we delete the account and its data immediately.

11. Data protection officer

· Officer: Jiheon Choi, Executive Director · Email: trendseoul.kr@gmail.com Please send any question, complaint or remedy request to the address above. You may also contact the following Korean bodies: · Personal Information Dispute Mediation Committee — 1833-6972 (kopico.go.kr) · Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr) · Supreme Prosecutors’ Office Cybercrime Division — 1301 · National Police Agency Cyber Bureau — 182

12. Changes to this policy

If this policy changes, we post the change on this page at least 7 days before it takes effect. Significant changes that disadvantage users are announced 30 days in advance, and we ask for fresh consent where required.