Article 1 (Purpose)

This Privacy Policy aims to clearly define the methods and procedures for processing personal data collected through the services provided by Sup (hereinafter referred to as "Company"), and to explain the policies the Company adopts to protect users' personal information.

Article 2 (Personal Data Collected)

The Company may collect the following personal data for the purpose of providing the Service:

1. Required Information
   • During Registration: Name, email address, password, mobile phone number
   • During Service Use: Device information (model, OS version), IP address, location information (with user consent), log information (usage history, access times, etc.)
2. Optional Information
   • Profile picture, nickname, payment information (for paid services), payment history

Article 3 (Purpose of Collecting and Using Personal Data)

The Company uses the collected personal data for the following purposes:

1. Service Provision and Management
   • Membership registration and account management
   • Authentication and identification for service use
   • Resolving technical issues and providing customer support
2. Service Improvement and Marketing
   • Improving the service and enhancing the user experience
   • Providing information on new services, events, and advertisements (with user consent)
   • Providing analysis and statistics
3. Legal Compliance
   • Complying with applicable laws
   • Fulfilling service contracts and performing necessary procedures for dispute resolution

Article 4 (Retention and Use Period of Personal Data)

The Company retains and uses personal data until the purpose of collection is achieved. However, personal data may be retained for longer periods in the following cases:

1. Retention Required by Law
   • In cases where retention is required under applicable laws such as the Commercial Act or the Electronic Commerce Act (for a minimum of 5 years)
2. Retention with User Consent
   • Personal data may be retained for the period consented by the user.

Article 5 (Provision of Personal Data to Third Parties)

The Company does not generally provide users' personal data to external parties. However, personal data may be provided to third parties in the following cases:

1. With User Consent
   • If the user has agreed to the sharing of their data
2. Legal Requests
   • In cases where personal data is requested by law enforcement authorities, courts, or other entities in accordance with applicable laws
3. For Service Provision
   • Personal data may be shared with partner companies necessary for service provision. In such cases, the Company will notify the user of the specific data being shared and the purpose for which it will be used.