Privacy Policy
Effective date 2026-09-28
This English version is a translation provided for convenience. If it differs from the Korean version, the Korean version prevails.
A Cup of Commit (커밋한잔) publishes this policy to comply with applicable laws, such as the Korean Personal Information Protection Act, and to handle members' personal information safely while providing the 1Bookmark service.
1. Personal Information We Process
| Category | Items |
|---|---|
| Sign-in | Email address |
| Created while using the Service | Name (display name), profile image URL, bookmark, tag and space information, customer support inquiries |
| Collected automatically | Signed-in device names, sign-in and usage records (activity logs), connection information (IP address, browser information) |
| Paid services | Subscription plan, billing cycle, payment and cancellation history. A Cup of Commit does not store card numbers or other payment method details. |
We do not collect personal information from children under the age of 14.
2. Purposes of Processing
- Identifying members, signing in and managing accounts
- Providing the Service, such as saving, searching and sharing bookmarks
- Processing payments, renewals, cancellations and refunds for paid services
- Responding to inquiries and delivering notices
- Preventing abuse and keeping the Service stable
3. Retention Period
When a member deletes their account, we destroy their personal information without delay, or anonymize records shared with other members (such as the author of bookmarks in a team space) so that the member cannot be identified. However, information that must be kept under applicable laws is retained for the periods below.
| Information | Legal basis | Period |
|---|---|---|
| Records of contracts or withdrawal of purchases | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Records of payments and supply of goods | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Records of consumer complaints or dispute handling | Act on the Consumer Protection in Electronic Commerce | 3 years |
| Access records (sign-in records) | Protection of Communications Secrets Act | 3 months |
4. Provision to Third Parties
A Cup of Commit does not provide members' personal information to third parties, except where required by law.
In team spaces, members' names, email addresses and profile images are shown to each other as a basic feature of the Service.
5. Outsourcing and Transfer Abroad
A Cup of Commit outsources the processing of personal information as below to provide the Service, and some of it is processed outside Korea. Members who do not want their information transferred abroad may delete their account, in which case they cannot use the Service.
| Processor (country) | Outsourced task | Transferred items | Retention period |
|---|---|---|---|
| Vercel Inc. (USA) | Service hosting | All information processed while using the Service | Until account deletion or end of the outsourcing contract |
| Supabase Inc. (storage: Seoul region, Republic of Korea) | Database operation | All items in section 1 | Until account deletion or end of the outsourcing contract |
| Amazon Web Services, Inc. (USA, N. Virginia region) | Sending sign-in verification code emails | Email address | Until the email is sent |
| GitHub, Inc. (USA) | Showing profile images automatically | Email address | Until the lookup is complete |
| Automattic Inc. - Gravatar (USA) | Showing profile images automatically | Hash of the email address | Until the lookup is complete |
6. Destruction Procedure and Method
Personal information is destroyed without delay once its retention period ends or its purpose has been achieved. Electronic files are deleted in a way that cannot be recovered.
7. Rights of Data Subjects
Members may at any time request access to, correction or deletion of, or suspension of processing of their personal information. They can do this directly on the settings screen or by emailing help@commit2.app, and we will act without delay.
Members can delete their account at any time from My Profile.
8. Cookies and Other Automatic Collection Tools
A Cup of Commit uses cookies and browser storage to keep members signed in and to save display settings (language, theme). We do not use cookies for advertising or behavioral analytics.
Members can refuse cookies in their browser settings, but features that require sign-in will then be unavailable.
9. Security Measures
- Encryption in transit (HTTPS)
- Sign-in session management and per-device sign-out
- Minimizing the number of people who can access personal information
10. Privacy Officer
Privacy officer: 유병화 · Contact help@commit2.app
11. Remedies for Infringement
To report or get advice on a personal information infringement, you can contact the following Korean institutions.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)
- Korean National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)
12. Changes to This Policy
When we change this policy, we announce it on the Service from 7 days before it takes effect (30 days before for important changes).