1. Information we handle
Sognora (“we”) handles the following personal information to provide Nolpop.
| When | What |
|---|---|
| Signing up with email | Email address, password (stored encrypted), name |
| Signing up with Google | Email address, name, profile photo URL |
| Using the service | Photos you upload and the images you create, project names, credit history |
| Paying | Item, amount and time of payment, Kakao Pay transaction number (we never receive card numbers or other payment details) |
| Company inquiries | Company name, contact name, email address, message |
| Generated automatically | IP address, browser and device information, access times, service logs |
2. Why we use it
- Signing up and signing in, confirming it's you, and preventing misuse
- Running the photo tools and keeping their results
- Taking payments and making refunds, and adding and deducting credits
- Answering inquiries, talking with companies about adoption, and sending service notices
- Finding service errors and keeping the service secure
3. How long we keep it
When you delete your account, we close it right away. In case you deleted it by mistake, we keep your account information encrypted for 30 days and then destroy it.
Company inquiries are kept for one year after we've answered them, then deleted.
Korean law requires us to keep the following records separately for set periods.
| Record | Law | Period |
|---|---|---|
| Contracts and order withdrawals | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Payments and service supply | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Consumer complaints and disputes | Act on the Consumer Protection in Electronic Commerce | 3 years |
| Sign-in records | Protection of Communications Secrets Act | 3 months |
Once a retention period ends, the information is deleted so that it can't be recovered.
4. Sharing with third parties
We don't give your personal information to third parties, except where a law specifically requires it or an investigating authority requests it through the procedure the law sets out.
5. Processors and transfers abroad
To run the service, we entrust the following companies with processing personal information. Each receives only what its task needs and uses it for nothing else.
| Company | Task | Location |
|---|---|---|
| Kakao Pay Corp. | Payment processing | Republic of Korea |
| Amazon Web Services, Inc. | Storing and delivering photos and results | Japan (Tokyo) |
| Fly.io, Inc. | Running our servers | Japan (Tokyo) |
| Supabase, Inc. | Running the database | Japan (Tokyo) |
| Vercel Inc. | Running the website | United States |
| Resend, Inc. | Sending verification and service emails, forwarding inquiries | United States |
| OpenAI, L.L.C. | Analyzing and editing photos (running AI tools) | United States |
| Google LLC | Google sign-in | United States |
While you use the service, companies outside Korea receive over the network only the items from section 1 that their task needs. They keep them for the periods in section 3 or until our contract with them ends.
If you don't want your information transferred abroad, you can delete your account. The service can't run without these companies, so it can't be used without this transfer.
6. Your rights
You can ask at any time to see, correct or delete your personal information, or to stop its processing. You can edit your profile and delete your account yourself on the account page.
For anything else, email the privacy officer below. We'll confirm it's you and act without delay.
8. Security
Passwords are stored using one-way encryption, and all traffic travels over encrypted connections (HTTPS). Access to personal information is limited to the people and permissions the work requires, and access records are kept.
9. Privacy officer
Privacy officer: Shin Donghwi (Representative), shin@sognoragroup.com
You can also contact these Korean authorities about a privacy violation.
- Personal Information Dispute Mediation Committee: www.kopico.go.kr, 1833-6972
- Privacy Infringement Report Center (KISA): privacy.kisa.or.kr, 118
- Supreme Prosecutors' Office: www.spo.go.kr, 1301
- Korean National Police Agency: ecrm.police.go.kr, 182
10. Changes to this policy
This policy applies from the effective date above. We'll post any change on this page at least 7 days before it takes effect.
Business information
- Business name
- Sognora
- Representative
- Shin Donghwi
- Business registration no.
- 291-03-03550
- Mail-order business report no.
- 2026-Seoul Yeongdeungpo-0675
- Address
- 202-S14, 9 Gamasan-ro 25-gil, Guro-gu, Seoul, Republic of Korea
- Contact
- shin@sognoragroup.com