Privacy Policy
Effective 2026-11-01
If the English and Korean versions conflict, the Korean version prevails.
LEMON|LAB (the “Operator”) processes personal information in accordance with the Personal Information Protection Act of Korea and related laws, as follows. Effective date: 2026-11-01.
1. Purposes of Processing
| Category | Purpose |
|---|---|
| Members | Sign-up and login, identity, account permissions, news likes and clips, work-email verification, customer inquiries |
| Inquiries | Receiving and answering research and partnership inquiries |
| Operations | Security, incident response, abuse prevention, performance of the Terms |
The Operator does not obtain marketing consent, send promotional messages, or run behavioral advertising.
2. Items Collected and Methods
| Channel | Required | Optional |
|---|---|---|
| Email sign-up | Email, password, name | — |
| Google sign-in | Email and name provided by Google | — |
| Account use | Like and clip records, login timestamps | Work email (when verifying full membership) |
| Inquiry form | Name, email, inquiry type, message | Organization, phone number |
| Automatic | Access logs, IP, browser information, auth cookies | — |
The Operator does not store passwords in plaintext. Authentication is handled by Supabase Auth.
3. Retention Periods
| Information | Period |
|---|---|
| Member account | Until withdrawal; destroyed without undue delay after withdrawal |
| Likes and clips | Until the member deletes them or withdraws |
| Inquiry content | Three (3) years after handling is complete, then destroyed. Earlier deletion may be requested within legal limits. |
| Access logs | Up to one (1) year |
| Statutory retention | Periods required by e-commerce and other applicable laws |
4. Third-Party Provision
The Operator does not provide personal information to third parties without the user’s consent or a legal basis.
5. Entrustment and Cross-Border Transfer
To operate the Service, processing may be entrusted to and transferred to the processors below.
| Processor | Role | Items transferred | Country / method | Retention |
|---|---|---|---|---|
| Supabase, Inc. | Member auth, database | Account and usage records | Singapore (ap-southeast-1) · encrypted transit | Until the entrustment ends or the member is deleted |
| Vercel Inc. | Web hosting, server logs | Access logs, IP | United States (iad1) · encrypted transit. This Policy will be updated if the region changes. | Per logging policy |
| Resend, Inc. | Inquiry email delivery | Name, email, inquiry content, optional contacts | United States · encrypted transit | As needed to send mail and handle failures |
| Google LLC | Social login | Google profile (email, name) | United States and others · OAuth | Per Google policy and account-link period |
If you refuse these transfers, related features such as registration and inquiry email cannot be used.
6. Rights of Data Subjects
Users may request access, correction, deletion, suspension of processing, or withdrawal. Some information is available at /account, or you may email chief@lemonlab.pro. The Operator responds within the period required by law. Requests that would harm another person’s life or property, or that would violate legal duties, may be limited.
7. Destruction
When the retention period ends or the purpose ceases, personal information is destroyed without undue delay. Electronic files are destroyed so they cannot be recovered; paper records are shredded or incinerated. Information that must be kept by law is stored separately.
8. Security Measures
The Operator applies access control, encryption in transit, separation of auth tokens and admin keys, retention of access logs, and least-privilege admin accounts.
9. Cookies
Only essential cookies for login persistence and security are used. Advertising or behavioral-analytics cookies are not used. Blocking cookies in the browser may disable login and related features.
10. Children Under 14
The Operator does not collect personal information from persons under 14. That age group may not use the Service.
11. Privacy Contact
- Contact: LEMON|LAB
- Email: chief@lemonlab.pro
Rights counseling in Korea: Personal Information Infringement Report Center (privacy.kisa.or.kr / 118), Personal Information Dispute Mediation Committee, Supreme Prosecutors’ Office, National Police Agency.
12. Changes to this Policy
If this Policy changes, notice will be posted at /privacy (and /en/privacy) before the effective date.
13. Language
This Policy is prepared in Korean and English. If there is any conflict or inconsistency between versions, the Korean version prevails.
Addendum
This Policy takes effect on 2026-11-01.