Privacy

Privacy standards for the EG Tone web service

EG Tone processes personal information only within the scope needed for account access, private beta registration, downloads, community, and user preset flows. This page reflects the pre-business-registration beta stage, and if paid sales begin we will add payment and settlement disclosures under the same principles.

Effective date2026.04.19

Current scopeBeta · account · downloads · community

1. What this policy covers

This policy applies to the EG Tone website, Google-based sign-in, beta gift-key registration, download authorization, and community and user preset surfaces.

If paid sales begin later, processing related directly to orders, payments, refunds, settlement, and tax handling will be disclosed again through checkout notices and updates to this policy.

2. Categories of personal information we process

Sign-in and account identity data: Google sign-in identifiers, email address, and Supabase user identifiers
Profile and environment data: nickname, preferred locale, preferred market code, avatar, and other information you choose to connect or enter
Access and download operations data: gift-key registration history, entitlement status, download history, device-link records, and offline access records
Community and preset data: posts, comments, recommendations, preset metadata, and operational data generated during uploads
Support data: email inquiries, response history, and any additional materials you provide for troubleshooting
Technical usage data: access timestamps, IP address, browser or device information, and security or operations logs

3. Why we use personal information

To identify members, maintain sign-in sessions, and verify account security
To manage beta code redemption, download authorization, device linking, and access status
To operate community and user preset sharing, including reports and dispute handling
To answer support questions, deliver notices, and contact users when necessary for service operation
To detect abuse, respond to security incidents, analyze failures, and stabilize the service
To improve service quality through statistics and operational analysis

4. External services, processors, and disclosures

EG Tone may rely on outside services for specific operational functions. At the current stage, the main categories are listed below.

Authentication, database, and storage operations: Supabase
Web deployment and hosting operations: Vercel
Social sign-in provider: Google
If paid sales begin, payment processor, settlement, and refund-related disclosures will be added through checkout and policy updates.

5. Standards for third-party provision

At the current beta stage, EG Tone does not provide user personal information to outside parties for advertising sales or external marketing purposes.

However, data may be provided within the scope permitted by law when there is a legal basis, a lawful request from an investigative or supervisory authority, or a genuine need for dispute handling.
If paid sales begin and a legally required disclosure or provision arises through payment, refunds, or tax handling, that information will be disclosed again through checkout and policy updates.
Processing by service providers and direct third-party provision are managed separately, and the service list disclosed at this stage is centered on processor or operational-support roles.

6. Overseas transfer, storage, and processing

EG Tone may rely on overseas-operated services for sign-in, hosting, and data storage. Where overseas transfer, storage, or entrusted processing is required to provide the service, EG Tone will reflect the disclosure items required by the Korean Personal Information Protection Act.

However, the repository does not yet fix the final production values for the live Supabase region, deployment environment, or final operating entity. The fields below must be replaced with actual values before a paid public launch.

Google sign-in: personal information may be processed through Google-operated overseas infrastructure during account authentication.
Vercel: overseas infrastructure may be used for web deployment and delivery processing.
Supabase: the actual country or region of the production project must be inserted into this policy before public launch.
Before public paid launch, the policy must include the transferred items, destination country, timing and method, recipient name and contact, purpose, retention period, and refusal method and effect.
Until the real production values are inserted, this section should not be treated as a completed overseas-transfer disclosure.

7. Retention and deletion principles

Account, profile, community, and preset-related data is deleted without undue delay or destroyed in a way that is difficult to restore once deletion or purpose completion is confirmed.
Some logs needed for security, abuse prevention, or dispute handling may be retained separately under internal standards and applicable law.
If paid sales begin, records related to orders, payments, refunds, tax, and consumer dispute handling may be kept separately for legally required periods.
When retention ends, data is deleted, anonymized, or otherwise destroyed using methods appropriate to the medium.

8. Your rights and how to exercise them

You may request access, correction, deletion, restriction of processing, or withdrawal of consent for your personal information where applicable.
Account details that are directly editable can be changed from your account screen after sign-in.
Account deletion requests can be submitted from the account screen, and data without legal retention requirements will be processed first.
Where immediate deletion is not possible because of legal, security, or dispute-handling reasons, data may be retained separately or put under restricted processing.
Questions about privacy and rights requests can be sent through the official contact channel below.

Submit a deletion request from the Account page

9. Cookies and similar technologies

EG Tone may use cookies or similar technologies to maintain sign-in sessions, confirm security state, preserve language settings, and support core service functions.

Authentication cookies for sign-in session continuity and security verification
Functional cookies used to remember language choice and similar baseline preferences
You can refuse or delete cookies through your browser settings, but some features such as sign-in persistence may then work only in a limited way.
If additional analytics or marketing tools are introduced later, EG Tone will disclose their scope and opt-out method through policy updates.

10. Security measures

We maintain internal controls such as least-privilege access, separated authentication boundaries, and operational logging.
We apply technical safeguards such as protected transport, separated secrets, and server-only trust boundaries.
We limit personal information access to the scope required for the task and review external processor arrangements accordingly.
If a security incident or abnormal signal is detected, we investigate the impact range and take necessary response and notice steps.

11. Privacy contact and responsible channel

At the current beta stage, privacy-related questions are handled through the official support email. Before paid public launch, EG Tone must also publish the privacy officer or responsible department, a contact phone number, and the seller disclosure fields required for paid sales.

Current official contact email: egtone.service@gmail.com
Required before launch: name of the privacy officer or responsible department
Required before launch: a reachable customer support phone number
Required before launch: seller name, representative, business address, and other paid-sales disclosure details

12. Policy changes

We update this policy when applicable law, service structure, data categories, processor relationships, or payment flows change. Material changes will be announced in advance through service notices or appropriate channels.