개인정보 처리방침

Privacy Policy

Effective July 30, 2026. Seonbae processes only the personal data needed to create accounts, operate the learning portal, support account recovery, arrange lessons, and answer enquiries. Contact: admissions@seonbae.com.

Data we process

Account data includes name, email, mobile number, account role, a password hash or Google authentication identifier, email-verification status, and consent records. Portal data may include lesson schedules, subjects, tutors, delivery method, location, notes, Zoom meeting status, participant identifiers, display name, email, and join and leave times. Essential cookies, IP address, device and hashed network identifiers used for request throttling, and security logs may be generated automatically. Raw passwords are not stored in Seonbae’s profile database.

Purposes and retention

We use data for authentication, account and portal delivery, secure email-based ID recovery and password reset, lesson administration, security, and customer support. Account data is retained until account deletion, subject to legal retention duties. Lesson data is normally retained for the service period and one year afterward; security logs are normally retained for no more than 90 days unless provider settings or law require otherwise.

Sharing, processors and overseas transfers

We do not sell personal data and do not ordinarily disclose it to third parties. Supabase provides authentication and database services; Vercel provides hosting; Google provides social authentication, SMTP email and web fonts; jsDelivr provides a font CDN. Data may be processed in India (Mumbai, ap-south-1), the United States, Singapore, and countries where these providers operate infrastructure. Transfers occur through encrypted connections when the relevant service is used and continue only for the service or legally required retention period.

Zoom provides the embedded online classroom and may process display names, meeting and participant identifiers, email, attendance events, and audio or video that a participant chooses to transmit. Camera and microphone access is controlled by the browser. Seonbae disables cloud and local recording by default; any recording requires advance notice and any consent required by law.

Your rights, cookies and children

You may request access, correction, deletion, restriction, or withdrawal of consent by email. Standard members may also delete their account directly from My Page after re-authentication. We use essential authentication cookies, not advertising cookies. An account for a child under 14 must be created and managed by a legal guardian; any separate collection from a child requires verifiable guardian consent.

Security and updates

We use encrypted transport, password hashing, role-based access, row-level database controls, limited administrator access, and security logging. Materially adverse changes will be announced in advance and renewed consent will be obtained when required.