Dealivery M Co., Ltd. (the "Company") operates the MakerFeed service (the "Service") and establishes and discloses this Privacy Policy in compliance with the Personal Information Protection Act of Korea and other applicable laws.
Effective date: August 9, 2026 (previous version: July 16, 2026)
Article 1 (Personal Information Collected and Collection Methods)
The Company collects the following personal information.
1. Sign-up and email login (required): email address, password, member type (manufacturer / buyer / influencer)
2. Social login via Google (required): email address, profile name, profile image
3. Profile creation (optional — collected to the extent entered by the user)
- Common: profile ID, display name, bio, profile photo, country
- Buyer / influencer members: company name, contact person name and title, phone number, messenger information (type and ID such as WhatsApp or WeChat), SNS accounts, website, sample shipping address (country, region, address line, postal code), company details (founding year, revenue, employees, key clients and brands), categories of interest
- Manufacturer members: company name, company introduction, categories and other company profile information
4. Information generated during use of the Service: posts (video, image, text), comments, likes and follows, messages (DM) and inquiries (samples, quotes, etc.); device information, browser type and settings, operating system, IP address, access times, most recent access time, service usage records, cookies and similar identifiers
5. Paid subscription (manufacturer members): subscription plan and status, payment approval records (card numbers and other payment credentials are not stored by the Company and are processed by a payment gateway; this Policy will be updated when a payment gateway is introduced)
Article 2 (Purposes of Collection and Use)
1. Member identification, sign-up confirmation, provision of membership services, and age requirement (14+) confirmation
2. Core features such as posting, recommending and searching product posts
3. Communication between manufacturers and buyers/influencers (messages, sample/quote inquiries)
4. Operation of the lead-based contact sharing feature under Article 4
5. Automatic multilingual translation of posts and profiles
6. Application and management of paid subscriptions (including free trials), billing and settlement
7. Prevention of fraudulent or unauthorized use, service stability and error diagnosis
8. Responding to inquiries and delivering notices
9. Development of new services, statistical analysis and service improvement
Article 3 (Retention Period)
1. In principle, the Company retains personal information until membership withdrawal and destroys it without delay upon withdrawal.
2. Where preservation is required by law, the information is kept for the following periods:
- Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on payments and supply of goods: 5 years (same Act)
- Records on consumer complaints or dispute resolution: 3 years (same Act)
- Records on display and advertising: 6 months (same Act)
- Access logs and service usage records: 3 months (Protection of Communications Secrets Act)
Article 4 (Provision to Third Parties)
1. As a core feature of the Service, the Company provides personal information to third parties with the user's consent as follows:
- Recipient: manufacturer members with an active paid subscription (including free trial)
- Condition: only when a buyer/influencer member has first contacted that manufacturer (inquiry, message (DM), comment, etc. — a "lead")
- Items: the buyer/influencer member's email address, phone number, messenger information, SNS accounts, website, address, company name and company details entered in their profile
- Purpose: direct contact between members for product transactions and collaboration (including sample shipping)
- Recipient's retention period: until the purpose is achieved or the data subject requests deletion
2. The provision under Paragraph 1 occurs only if the buyer/influencer member consented at sign-up or when completing their profile. Members who do not consent may still browse the feed but cannot send messages to manufacturers. Users may delete their contact information from their profile at any time, and may request withdrawal of consent via team@dealiverym.com.
3. Otherwise, the Company does not provide personal information to outside parties without prior consent, except where required by law or by lawful requests of investigative agencies.
Article 5 (Outsourcing and Cross-Border Transfer)
1. The Company outsources processing as follows; some of it takes place abroad.
① Google LLC (USA) — account authentication (Firebase Authentication), messaging and real-time data (Cloud Firestore) / items: email address, authentication data, messages (DM) and inquiries, access records
② Google LLC (USA) — automatic translation of posts and profiles (Google Cloud Translation) / items: user-written text such as posts, comments and bios
③ Google LLC (USA) — usage analytics (Google Analytics 4; only if the user selects "Accept all" in the cookie banner) / items: cookie identifiers, device and browser information, usage records (behavioral data)
④ Vercel Inc. (USA) — service hosting and infrastructure / items: information transmitted while using the Service (including IP address and access records)
⑤ MongoDB, Inc. (MongoDB Atlas) — service database (members, posts, comments, etc.). The database is stored in the Seoul, South Korea region (AWS ap-northeast-2) and is not transferred abroad.
⑥ Functional Software, Inc. (Sentry) (USA) — error collection and stability diagnosis / items: device and browser information, IP address and error logs at the time of an error
⑦ BunnyWay d.o.o. (Bunny.net) (Slovenia; storage in Singapore and global CDN edges) — storage, encoding and delivery (CDN) of video and image content / items: post videos and images, profile photos
- Timing and method of transfer: continuous transmission over networks at the time of service use
- Recipient's retention: until the outsourcing purpose is achieved or the contract ends
2. Users may object to cross-border transfers by contacting the Privacy Officer (Article 12); however, as such transfers are essential to the Service, refusal may make all or part of the Service unavailable.
Article 6 (Children Under 14)
The Company does not accept sign-ups from, or collect personal information of, children under 14 (under 16 for residents of the EEA/UK). Users must confirm at sign-up that they meet this age requirement; if a violation is discovered, the Company will delete the account and its personal information without delay.
Article 7 (User Rights and How to Exercise Them)
1. Users may at any time request access, correction, deletion or suspension of processing of their personal information, withdraw consent, and withdraw membership.
2. Personal information can be viewed and edited in "Edit Profile" and withdrawal handled in "Settings" within the Service.
3. Rights may also be exercised by email (team@dealiverym.com); the Company will act without delay within statutory deadlines.
4. Legal representatives or authorized agents may exercise these rights; proof of lawful authorization may be requested.
Article 8 (Destruction of Personal Information)
The Company destroys personal information without delay once the retention period expires or the processing purpose is achieved. Information that must be preserved by law is stored separately and destroyed after the period ends. Electronic files are deleted using irreversible technical methods.
Article 9 (Security Measures)
- Encrypted password storage and encryption in transit (SSL/TLS)
- Access control and permission management for processing systems
- Contact information kept private by default (viewable only under Article 4 conditions) and masked on public screens
- Minimization and management of personnel handling personal information
Article 10 (Cookies and Similar Technologies)
The Company uses cookies and local storage to keep users signed in, remember settings, and analyze usage. The analytics tool (Google Analytics 4) loads only if the user selects "Accept all" in the cookie banner; selecting "Essential only" disables analytics cookies. Details and opt-out methods are described in the separate Cookie Policy.
Article 11 (Behavioral Information)
The Company collects in-service behavioral information (pages visited, clicks, etc.) via Google Analytics 4 to improve service quality. Such data is not used for targeted advertising and is used for statistical analysis only.
Article 12 (Privacy Officer)
- Privacy Officer: Yukyung Kang (CEO)
- Company: Dealivery M Co., Ltd.
- Contact: team@dealiverym.com / Tel: +82-2-741-3382
- Address: #503, Gasan A1 Tower, 205-27 Gasan digital 1-ro, Geumcheon-gu, Seoul, Republic of Korea
Article 13 (Additional Notice for Users in the EEA, UK and Other Regions)
1. Legal bases (GDPR Article 6): performance of a contract (6(1)(b)) — sign-up, service provision, subscription management; legitimate interests (6(1)(f)) — service stability, fraud prevention, usage analytics; consent (6(1)(a)) — contact sharing under Article 4 and non-essential cookies; legal obligation (6(1)(c)) — statutory record-keeping.
2. Transfers: personal information is processed in the Republic of Korea and the countries listed in Article 5. For transfers outside the EEA, appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied.
3. Rights: EEA/UK residents have the rights of access, rectification, erasure, restriction, data portability and objection, and may lodge a complaint with their local supervisory authority.
Article 14 (Remedies)
For reports or consultation regarding privacy infringements, you may contact: Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972), Privacy Report Center (privacy.kisa.or.kr / 118), Supreme Prosecutors' Office Cyber Investigation (spo.go.kr / 1301), National Police Agency Cyber Bureau (ecrm.police.go.kr / 182).
Article 15 (Duty of Notice)
Changes to this Policy will be announced in the Service at least 7 days before taking effect; material changes affecting user rights (collected items, purposes, third-party provision, etc.) will be announced at least 30 days in advance, with renewed consent obtained where necessary.