Log in
Privacy

Privacy standards for the EG Tone web service

EG Tone processes only the minimum personal information needed for account creation, domestic paid sales, downloads, customer support, and community operation.

Effective date2026.05.13
Current scopeAccount · international sales · downloads · community

1. What this policy covers

This policy applies to the EG Tone website, Google-based sign-in, beta gift-key registration, download authorization, and community and user preset surfaces.

For paid sales, order, payment, refund, download, license entitlement, and tax information is processed together with the notices shown during checkout. International orders are sold through Polar (our Merchant of Record) with card processing by Stripe, who process the related payment and billing data.

2. Categories of personal information we process

  • Sign-in and account identity data: Google sign-in identifiers, email address, and Supabase user identifiers
  • Profile and environment data: nickname, preferred locale, preferred market code, avatar, and other information you choose to connect or enter
  • Access and download operations data: gift-key registration history, entitlement status, download history, device-link records, and offline access records
  • Community and preset data: posts, comments, recommendations, preset metadata, and operational data generated during uploads
  • Support data: email inquiries, response history, and any additional materials you provide for troubleshooting
  • Technical usage data: access timestamps, IP address, browser or device information, OS/DAW/error details needed for installation support, and security or operations logs
  • Preset content data: titles, descriptions, tags, cover images, preset JSON, versions, download/save/like/comment counts for public uploaded presets, and account-linking identifiers for private saved presets

3. Why we use personal information

  • To identify members, maintain sign-in sessions, and verify account security
  • To manage beta code redemption, download authorization, device linking, and access status
  • To operate community and user preset sharing, including reports and dispute handling
  • To answer support questions, deliver notices, and contact users when necessary for service operation
  • To detect abuse, respond to security incidents, analyze failures, and stabilize the service
  • To improve service quality through statistics and operational analysis
  • Search, display, sharing, downloads, recommendations, comments, statistical analysis, and service quality improvements for public uploaded presets
  • Analysis of private saved preset settings is limited to statistics that are made difficult to identify personally, and only when the user gives separate consent

4. External services, processors, and disclosures

EG Tone may rely on outside services for specific operational functions. At the current stage, the main categories are listed below.

  • Authentication, database, and storage operations: Supabase
  • Web deployment and hosting operations: Vercel
  • Social sign-in provider: Google
  • Paid sales and tax: Polar (our Merchant of Record) and its payment processor Stripe process the payment, billing, and tax information needed for authorization, settlement, tax, invoicing, refunds, and dispute handling. For Korean domestic sales, a local payment provider may process the equivalent information.

5. Standards for third-party provision

At the current beta stage, EG Tone does not provide user personal information to outside parties for advertising sales or external marketing purposes.

  • However, data may be provided within the scope permitted by law when there is a legal basis, a lawful request from an investigative or supervisory authority, or a genuine need for dispute handling.
  • For international orders, Polar (Merchant of Record) and Stripe process the payment and billing information needed for payment processing, tax, settlement, refunds, invoicing, and fraud/dispute response.
  • Processing by service providers and direct third-party provision are managed separately, and the service list disclosed here is centered on processor or operational-support roles.

6. Overseas transfer, storage, and processing

Providing the service involves processing personal data on infrastructure operated outside your country. We make the disclosures required by Korea's Personal Information Protection Act (PIPA), and for buyers in the EU and UK we process personal data in line with the GDPR and UK GDPR.

Payments for international orders are handled by Polar Software, Inc. (United States) as Merchant of Record, with card processing by Stripe (United States); these providers process your payment, billing, and contact data to complete the sale, tax, invoicing, and refunds. Cross-border transfers of EU/UK personal data rely on appropriate safeguards such as the Standard Contractual Clauses and, where applicable, the EU-US and UK Data Privacy Framework.

  • Google sign-in: personal data may be processed through Google-operated infrastructure during account authentication.
  • Vercel: website hosting, serverless functions, and CDN; static assets may be served through a global CDN.
  • Supabase: authentication, database, and storage operations for the production project.
  • Polar (United States) and Stripe (United States): payment, billing, tax, and invoicing for international orders, with transfers protected by Standard Contractual Clauses or the Data Privacy Framework where applicable.
  • You may have the right to object to or restrict cross-border processing; exercising it may limit purchase or service functionality. Contact our support channel with any questions or requests.

7. Retention and deletion principles

  • Account, profile, community, and preset-related data is generally deleted, anonymized, or destroyed in a hard-to-recover manner when the account is closed or the purpose is fulfilled.
  • Some logs needed for security, abuse prevention, or dispute handling may be retained separately under internal standards and applicable law.
  • If paid sales begin, records related to orders, payments, refunds, tax, and consumer dispute handling may be kept separately for legally required periods.
  • When retention ends, data is deleted, anonymized, or otherwise destroyed using methods appropriate to the medium.
  • When an account is deleted, private saved presets and account-only preset data are deleted or anonymized according to the terms and legally required retention duties.
  • Public preset posts that the user did not delete before account deletion may remain on the web for community continuity and access by other users, with author information shown anonymously as a withdrawn user or similar label.

8. Your rights and how to exercise them

  • You may request access, correction, deletion, restriction of processing, or withdrawal of consent for your personal information where applicable.
  • Account details that are directly editable can be changed from your account screen after sign-in.
  • Account deletion requests can be submitted from the account screen, and data without legal retention requirements will be processed first.
  • Where immediate deletion is not possible because of legal, security, or dispute-handling reasons, data may be retained separately or put under restricted processing.
  • Questions about privacy and rights requests can be sent through the official contact channel below.
  • To delete public preset posts as well, delete those presets before requesting account deletion, or contact us after account deletion to request a separate deletion review.
Submit a deletion request from the Account page

9. Cookies and similar technologies

EG Tone may use cookies or similar technologies to maintain sign-in sessions, confirm security state, preserve language settings, support core service functions, and analyze service quality.

  • Authentication cookies for sign-in session continuity and security verification
  • Functional cookies used to remember language choice and similar baseline preferences
  • You can refuse or delete cookies through your browser settings, but some features such as sign-in persistence may then work only in a limited way.
  • Google Analytics 4 may be used to collect usage statistics such as page visits, CTA clicks, and download button clicks for service improvement, while advertising personalization storage is denied by default.
  • Analytics collection follows the consent choice shown in the interface, and deleting browser storage may reset that choice.

10. Security measures

  • We maintain internal controls such as least-privilege access, separated authentication boundaries, and operational logging.
  • We apply technical safeguards such as protected transport, separated secrets, and server-only trust boundaries.
  • We limit personal information access to the scope required for the task and review external processor arrangements accordingly.
  • If a security incident or abnormal signal is detected, we investigate the impact range and take necessary response and notice steps.

11. Privacy contact and responsible channel

Privacy-related questions are handled through the official support email and phone number, and the privacy officer is 염성진. The seller business address and online sales registration number are shown in the site footer and terms.

  • Current official contact email: egtone.service@gmail.com
  • Privacy officer: 염성진
  • Customer support phone: 070-8064-1275
  • Seller business address and online sales registration number: disclosed in the site footer and seller terms

12. Policy changes

We update this policy when applicable law, service structure, data categories, processor relationships, or payment flows change. Material changes will be announced in advance through service notices or appropriate channels.