Controller: Ypost Co., Ltd. ("the Company", "we") · Service: "Named" fortune-telling / saju service (namedsaju.com) · Effective date: 2026-07-31
1.1 The data controller responsible for your personal data is:
1.2 The Company is established outside the European Union. You can contact us directly about any data protection matter — including the rights described in this Policy — at help@namedsaju.com, and we handle requests from individuals in the EU/EEA on the same terms set out here. Where we are required to designate a representative in the Union under Article 27 GDPR, their name and contact details will be published in this Policy.
1.3 Data Protection Officer: we are not required to appoint a Data Protection Officer under Article 37 GDPR and have not appointed one. All privacy enquiries and data subject requests can be sent to help@namedsaju.com.
This Policy applies to personal data we process about users of the Service (website and mobile apps) who are located in the European Union / European Economic Area. Where local law grants stronger rights, that law prevails.
3.1 Account registration — required: email address, password, nickname, date of birth; optional: gender.
3.2 Service provision — required: user ID, email address, name; optional: date and time of birth.
3.3 Fortune/saju input — name, date of birth, time of birth, gender (of the subject and, for compatibility readings, of a second person).
3.4 Automatically collected — cookies and similar identifiers; device advertising identifiers (iOS IDFA / Android AAID); push notification token (FCM); usage/event data; error and diagnostic logs; IP address.
We process personal data only where we have a lawful basis under Article 6 GDPR:
| Purpose | Data | Legal basis (Art 6(1)) |
|---|---|---|
| Providing the Service (account, generating and delivering readings) | account, service, saju input | (b) performance of a contract |
| Payment processing and record-keeping | order, payment, contact | (b) contract; (c) legal obligation |
| Customer support and dispute handling | account, inquiry content | (b) contract; (f) legitimate interests |
| Service security, fraud and abuse prevention | usage logs, identifiers, IP | (f) legitimate interests |
| Product analytics and improvement | usage/event data | (a) consent (where cookies/trackers used) or (f) legitimate interests |
| Marketing communications and push campaigns | contact, push token | (a) consent |
| New service development | pseudonymised usage data | (f) legitimate interests |
5.1 We use strictly necessary cookies to operate the Service (e.g. login/session), which do not require consent.
5.2 We use non-essential cookies/trackers (analytics, marketing) only after you give consent via our cookie banner. You can accept or refuse each category, and refusal is as easy as acceptance.
5.3 You may withdraw or change your choices at any time via the "Cookie settings" link in the footer. Consent is requested again at most every 13 months.
5.4 Non-essential trackers (including Google Analytics) are not activated before consent.
6.1 We share personal data with the following recipients. Except where stated otherwise below, each acts as our processor under an Article 28 data processing agreement:
| Processor | Purpose | Data processed |
|---|---|---|
| OpenAI, L.L.C. | AI generation of fortune/saju content | name, date/time of birth, gender |
| Google LLC (Firebase Cloud Messaging) | mobile push notifications | push token, user identifier |
| Functional Software, Inc. (Sentry) | error / performance monitoring | error logs, device info, identifier, IP |
| Amazon Web Services, Inc. (S3) | storage of image/PDF results | result images / PDFs |
| PortOne (iamport) | domestic (KRW) payment processing | payment info, email, name |
| Dodo Payments | international payment, invoicing and settlement; acts as Merchant of Record (seller) for purchases made through the international checkout | order and payment data |
6.2 Dodo Payments acts as an independent controller. Because Dodo Payments is the Merchant of Record for the international checkout, it determines the processing of the payment and billing data it collects (including invoicing, tax and payment-related refunds) and is a separate controller for that data, governed by its own privacy policy.
6.3 PortOne, by contrast, acts as our payment processor under Article 28 for domestic (KRW) payments; for those transactions the Company remains the seller. In either case we do not receive your full card details.
7.1 Our servers are located in the Republic of Korea. Korea benefits from a European Commission adequacy decision (17 Dec 2021), so transfers to our Korean infrastructure are treated as transfers within the EEA and require no additional safeguards.
7.2 Certain processors are located in the United States (OpenAI, Google, AWS, Sentry). Transfers to them rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs), together with each processor's data processing agreement.
7.3 Specifically, our error-monitoring provider Functional Software, Inc. (Sentry) participates in and has self-certified compliance with the EU–US Data Privacy Framework; its data processing addendum additionally incorporates the Standard Contractual Clauses as a transfer mechanism.
7.4 You may request a copy of the relevant transfer safeguards by writing to help@namedsaju.com.
We keep personal data only as long as necessary for the purpose collected. Indicative periods for EU users:
Upon expiry, data is securely erased or irreversibly anonymised.
Under the GDPR you have the right to: access your data; rectification; erasure ("right to be forgotten"); restriction of processing; data portability; object to processing; and not to be subject to solely automated decisions with legal or similarly significant effects. Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise these rights, contact help@namedsaju.com (see Article 1.2). We respond within one month.
Fortune/saju readings are generated by automated AI processing based on the birth information you provide. These readings are entertainment content and do not produce legal or similarly significant effects. You may contact us for information about this processing.
The Service is not directed to children. In France, the digital age of consent is 15; users below that age require the consent of a holder of parental responsibility. We do not knowingly process such data without that consent.
We apply appropriate technical and organisational measures to protect personal data (encryption in transit, access controls, secure deletion). Personal data in electronic form is deleted using non-recoverable methods.
You have the right to lodge a complaint with a supervisory authority, in particular in France the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr — or the authority of your habitual residence.
We may update this Policy for legal or service reasons. We will give notice at least 7 days before the effective date, or at least 30 days before changes materially affecting your rights.
Ypost Co., Ltd. — help@namedsaju.com