trysaju Privacy Policy
Effective date: October 16, 2026
This is an English translation for convenience. If it differs from the Korean version, the Korean version prevails.
PioneerY (the "Company") sets this policy, under the Personal Information Protection Act, to protect users' personal information and to handle related complaints promptly while operating trysaju (https://trysaju.app, the "Service").
1. Personal information processed and purposes of processing
| Category | Items | Purpose | Stored? |
|---|---|---|---|
| Reading input | (Required) date of birth, solar/lunar calendar, whether it is a leap month, country and city of birth / (Required; "unknown" can be selected) time of birth / (Required) given name and family name / (Optional) MBTI | Calculating and showing the saju and zodiac reading (including how the user is addressed on the result screen) | Not stored on the server. Discarded right after calculation; the result stays only in the user's browser tab (session storage) and disappears when the tab is closed. |
| Anonymous identification | Anonymous session identifier (cookie) | Continuing to show payment history and the charms a user has received | Stored on the server |
| Charm delivery | Type of charm provided, time provided | Providing paid content, preventing duplicate use | Stored on the server |
| Payment | Order number, payment provider's order number, payment status (paid, failed, refunded), payment and refund times | Confirming payment, providing content, processing refunds, keeping legally required records | Stored on the server |
| Pre-payment confirmation | Text, version, and time of the notice on the restriction of purchase revocation; whether and when age 14 or older was confirmed; language | Proof of legally required notices and consents | Stored on the server |
| Automatically collected | Access records such as IP address, browser information, and access date and time | Operating the Service, handling failures, preventing misuse |
- The Company does not take sign-ups or logins and does not collect email addresses, phone numbers, or resident registration numbers.
- Payment-method information such as card numbers is processed directly by the payment provider; the Company does not receive it.
- The Company does not take face photos.
- The Company does not send entered information such as date of birth to external AI services.
2. Retention periods
- Reading input: not kept on the server
- Anonymous identification cookie: 1 year from the date it was last issued
- Payment and revocation records: under the Act on the Consumer Protection in Electronic Commerce, Etc., records of contracts, revocations, payments, and supply of goods are kept for 5 years, and records of consumer complaints and dispute handling for 3 years
- Charm delivery records: destroyed without delay when the user requests deletion or the Service ends.
- Access records: destroyed without delay once the purposes of operating the Service and preventing misuse are achieved.
3. Provision of personal information to third parties
The Company does not provide users' personal information to third parties. However, cases where there is a legal basis, or where an investigative agency requests it following procedures set by law, are exceptions.
4. Outsourcing of personal information processing
| Processor | Outsourced work |
|---|---|
| Cloudflare, Inc. | Website hosting |
| 주식회사 코리아포트원 | Payment processing (payment gateway integration) |
| 주식회사 카카오페이 | Payment processing (KakaoPay) |
| 주식회사 비바리퍼블리카 | Payment processing (TossPay) |
| PayPal | Payment processing (PayPal, international payments) |
Outsourcing contracts set out the prohibition of processing beyond the purpose, security measures, restrictions on re-outsourcing, and responsibility such as compensation for damages, and the Company manages and supervises the processors. Payment-related processors apply from the moment a payment starts.
5. Cross-border transfer of personal information (Article 28-8 of the Personal Information Protection Act)
To perform the service contract, the Company outsources and stores personal information processing abroad as follows.
| Transferee (contact) | Country | Items | Timing and method | Purpose | Retention period |
|---|---|---|---|---|---|
| Cloudflare, Inc. (privacy@cloudflare.com) | United States and other countries where Cloudflare servers are located | Access records, information transmitted while using the Service | Transmitted over the network from time to time while the Service is used | Website hosting | The retention period in section 2 above, or until the outsourcing contract ends |
| PayPal (PayPal customer service) | Countries where PayPal processes payments | Payment information for PayPal payments (payment amount, order number) | Transmitted over the network when paying with PayPal | Payment processing | Until the end of the legally required retention period for payment records |
How to refuse: if you do not want the cross-border transfer, you may stop using the Service or make a request to the officer below. However, the cross-border transfer is essential to providing the Service, so if you refuse, you cannot use the Service.
6. Destruction procedure and method
When the retention period ends or the purpose of processing is achieved, information is destroyed without delay. Electronic files are deleted in a way that cannot be recovered. Information that must be kept by law is stored separately from other information.
7. Rights of data subjects and how to exercise them
Users may at any time request access to their personal information, its correction or deletion, or suspension of its processing, or revoke their consent. Requests sent by email to the officer below are handled without delay. Because there are no member accounts, please include the information needed to verify your identity, such as an order number, with your request. Users can delete browser cookies and session storage themselves.
8. Children under 14
Paid content can be purchased only by persons aged 14 or older, and being 14 or older is confirmed before payment. The Company does not knowingly collect personal information from children under 14.
9. Security measures
- Restricted database access (row-level security, server-only access keys)
- Encryption in transit (HTTPS), secure cookie settings (HttpOnly, Secure)
- Signature verification of payment notifications
- Entered information such as date of birth is not stored on the server (minimal collection)
10. Cookies and other automatic collection tools
trysaju_sid: anonymous session identifier linking payment and charm history. Valid for 1 year.- Browser session storage: reading results. Deleted when the tab is closed.
- No advertising or behavioral analytics tools are used.
- You can refuse cookies in your browser settings. If you do, payments and charm history cannot be linked.
11. Privacy officer
- Name: Wonbin Lee (이원빈) (Representative)
- Email: wblee@pioneery.co
- Phone: 010-2601-5768
12. Remedies for infringement of rights
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
13. Changes to this policy
When this policy changes, the Company announces it on the Service screen from 7 days before it takes effect (from 30 days before, for important changes).
Business: PioneerY | Representative Wonbin Lee (이원빈) | Business registration number 803-27-01991 | Mail-order business report number 2026-의정부흥선-0672 | 50, Pyeonghwa-ro 658beon-gil, Uijeongbu-si, Gyeonggi-do (경기도 의정부시 평화로 658번길 50)