PassPhoto Privacy Terms

This Privacy Policy (“Policy”) describes how Rocketworks Co., Ltd. (“Company”) collects, uses, and manages your personal information through https://passphoto.makepic.ai (the “Service”) and dedicated mobile applications (“Mobile Applications”).

1. Purpose of Collection and Use of Personal Information

The Company collects and uses personal information for the following purposes:

• Service provision and user management

• Fulfillment of contracts and payment processing

• Customer support and handling of complaints

• Compliance with legal obligations (e.g., issuance of tax invoices/receipts)

• Service improvement, analytics, and statistics

• Dispute resolution, complaint handling, and legal compliance

• Editing and provision of official document photos, such as ID and passport photos

• Processing and providing results for user-uploaded face data (photos)

2. Items of Personal Information Collected

The Company collects the following personal information:

• Required:

• Face data (photos): Photo files uploaded by users that include facial images

• Payment information: Name, phone number, partial card number, payment method, etc.

• Automatically collected: cookies, access IP, visit date and time, service usage logs, etc.

3. Retention and Use Period of Personal Information

Personal information is retained and used only for the period necessary to achieve the purposes of collection and use.After such purposes are achieved, the information is promptly destroyed.However, information may be retained for a certain period as required by relevant laws (e.g., the Act on Consumer Protection in Electronic Commerce, the Framework Act on National Taxes):

• Records on contracts or withdrawal of subscription: 5 years

• Records on payment and supply of goods: 5 years

• Records on consumer complaints or dispute resolution: 3 years

• Website visit records (log records, access location, etc.): 3 months

• Face data (photos): Stored for 7 days from the upload date, then automatically and permanently deleted

4. Provision of Personal Information to Third Parties

In principle, the Company does not provide users’ personal information to external parties.However, exceptions are made in the following cases:

• When the user has given prior consent

• When required by law or upon request from investigative agencies

• When necessary for service provision, such as payment processing, service improvement, or infrastructure provision (in such cases, a data processing agreement is concluded and managed)

• Face data (photos) is not provided or shared with any third party and is processed only for the purpose of providing the Service

5. Transfer of Personal Information Overseas

The Company may transfer personal information to overseas servers or foreign payment service providers to provide the Service.In such cases, separate consent will be obtained in accordance with Article 28-8 of the Personal Information Protection Act, and information will be managed securely.

• Recipients: Google

• Country: United States, etc.

• Items transferred: Information necessary for service provision

• Purpose: service provision

• Retention and use period: Same as in Section 3

6. Outsourcing of Personal Information Processing

The Company may outsource personal information processing to external specialized companies for service provision, payment processing, system maintenance, etc.

• Recipients: Payment service providers such as Infinisoft

• Items transferred: Information necessary for payment processing

• Purpose: Payment processing

• Retention and use period: Same as in Section 3

7. User Rights and How to Exercise Them

Users may exercise the following rights regarding their personal information at any time:

• Request access to, correction of, deletion of, or suspension of processing of personal information

• Withdraw consent and request account deletion

• Request data portability (where permitted by law)

• Request dispute resolution or counseling from the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center in case of infringement

Rights can be exercised through ‘My Page’ within the Service, Customer Center, or by email (support@rocketworks.io)

8. Personal Information of Children Under 14

The Company does not collect personal information from children under the age of 14, and no part of the Service is intended for children under 14.

9. Cookies

The Company may use cookies to provide customized services, improve the Service, and for statistical analysis.Users can refuse or delete cookies through browser settings.

10. Personal Information Protection Officer and Contact

• Personal Information Protection Officer: [ Kyeongwon Kim/ Director ]

• Contact: support@rocketworks.io

11. Changes to the Privacy Policy

This Policy may be amended in accordance with relevant laws and company policies.In the event of changes, notice will be provided via the Service or website.For significant changes, notice will be given at least 7 days in advance.