DealiveryM Inc. (the "Company") operates the makerfeed service (the "Service") and establishes and discloses this Privacy Policy in compliance with the Personal Information Protection Act of Korea and other applicable laws.
Effective date: August 9, 2026 (revised: August 8, 2026; previous version: July 16, 2026)
Article 1 (Personal Information Collected and Collection Methods)
The Company collects the following personal information.
1. Sign-up and email login (required): email address, password, member type (manufacturer / buyer / influencer)
2. Social login via Google (required): email address, profile name, profile image
3. Profile creation (optional — collected to the extent entered by the user)
- Common: profile ID, display name, bio, profile photo, country
- Buyer / influencer members: company name, contact person name and title, phone number, messenger information (type and ID such as WhatsApp or WeChat), SNS accounts, website, sample shipping address (country, region, address line, postal code), company details (founding year, revenue, employees, key clients and brands), categories of interest, distribution channel types, target sales regions, annual sourcing budget and average order size, sourcing purpose, required certifications (vegan, halal, FDA, etc.); for influencers, main platform and follower counts per platform, content languages, main audience regions, age groups and gender, preferred collaboration types
- Manufacturer members: company name, company introduction, categories and other company profile information, desired export regions, trade types (finished-goods export, OEM, ODM), certifications held, minimum order quantity (MOQ) range and production capacity
4. Information generated during use of the Service: posts (video, image, text), comments, likes and follows, messages (DM) and inquiries (samples, quotes, etc.); device information, browser type and settings, operating system, IP address, access times, most recent access time, service usage records, cookies and similar identifiers
5. Paid subscription (manufacturer members): subscription plan and status, payment approval records (order number, payment amount and currency, approval time, transaction identifier). Card numbers and other payment credentials are collected and processed directly by our payment gateway, PAYVERSE (eromnet Co., Ltd.), in its payment window; the Company does not collect or store them. For recurring billing, the Company stores only the billing key (a reference value issued by the payment gateway in place of the card number), a masked card number and the card brand
Article 2 (Purposes of Collection and Use)
1. Member identification, sign-up confirmation, provision of membership services, and age requirement (14+) confirmation
2. Core features such as posting, recommending and searching product posts, and personalized recommendations and matching between members based on profile information
3. Communication between manufacturers and buyers/influencers (messages, sample/quote inquiries)
4. Operation of the lead-based contact sharing feature under Article 4
5. Automatic multilingual translation of posts and profiles
6. Application and management of paid subscriptions (including free trials), billing and settlement
7. Prevention of fraudulent or unauthorized use, service stability and error diagnosis
8. Responding to inquiries and delivering notices
9. Development of new services, statistical analysis and service improvement
Article 3 (Retention Period)
1. In principle, the Company retains personal information until membership withdrawal and destroys it without delay upon withdrawal.
2. Where preservation is required by law, the information is kept for the following periods:
- Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on payments and supply of goods: 5 years (same Act)
- Records on consumer complaints or dispute resolution: 3 years (same Act)
- Records on display and advertising: 6 months (same Act)
- Access logs and service usage records: 3 months (Protection of Communications Secrets Act)
Article 4 (Provision to Third Parties)
1. As a core feature of the Service, the Company provides personal information to third parties with the user's consent as follows:
- Recipient: manufacturer members with an active paid subscription (including free trial)
- Condition: only when a buyer/influencer member has first contacted that manufacturer (inquiry, message (DM), comment, etc. — a "lead")
- Items: the buyer/influencer member's email address, phone number, messenger information, SNS accounts, website, address, company name and company details entered in their profile
- Purpose: direct contact between members for product transactions and collaboration (including sample shipping)
- Recipient's retention period: until the purpose is achieved or the data subject requests deletion
2. The provision under Paragraph 1 occurs only if the buyer/influencer member consented at sign-up or when completing their profile. Members who do not consent may still browse the feed but cannot send messages to manufacturers. Users may delete their contact information from their profile at any time, and may request withdrawal of consent via team@dealiverym.com.
3. Otherwise, the Company does not provide personal information to outside parties without prior consent, except where required by law or by lawful requests of investigative agencies.
Article 5 (Outsourcing and Cross-Border Transfer)
1. The Company outsources processing as follows; some of it takes place abroad.
① Google LLC (USA) — account authentication (Firebase Authentication), messaging and real-time data (Cloud Firestore) / items: email address, authentication data, messages (DM) and inquiries, access records
② Google LLC (USA) — automatic translation of posts and profiles (Google Cloud Translation) / items: user-written text such as posts, comments and bios
③ Google LLC (USA) — usage analytics (Google Analytics 4; only if the user selects "Accept all" in the cookie banner) / items: cookie identifiers, device and browser information, usage records (behavioral data)
④ Vercel Inc. (USA) — service hosting and infrastructure / items: information transmitted while using the Service (including IP address and access records)
⑤ MongoDB, Inc. (MongoDB Atlas) — service database (members, posts, comments, etc.). The database is stored in the Seoul, South Korea region (AWS ap-northeast-2) and is not transferred abroad.
⑥ Functional Software, Inc. (Sentry) (USA) — error collection and stability diagnosis / items: device and browser information, IP address and error logs at the time of an error
⑦ BunnyWay d.o.o. (Bunny.net) (Slovenia; storage in Singapore and global CDN edges) — storage, encoding and delivery (CDN) of video and image content / items: post videos and images, profile photos
⑧ Resend, Inc. (USA) — delivery of service notification emails (unread message and inquiry alerts, etc.) / items: recipient email address, information included in the notification email (sending member's display name, number of unread messages, recipient's language setting)
⑨ eromnet Co., Ltd. (PAYVERSE) (Republic of Korea) — payment approval, recurring (automatic) billing, cancellation/refund processing, and billing-key issuance and management for paid subscriptions / items: order number, product name (subscription plan), payment amount and currency, member identifier, card information (collected directly by the payment gateway in its payment window; it does not pass through the Company's servers). This outsourcing is to a Korean company and does not constitute a cross-border transfer.
- Timing and method of transfer: continuous transmission over networks at the time of service use
- Recipient's retention: until the outsourcing purpose is achieved or the contract ends
2. Users may object to cross-border transfers by contacting the Privacy Officer (Article 13); however, as such transfers are essential to the Service, refusal may make all or part of the Service unavailable.
Article 6 (YouTube API Services and SNS Link Features)
1. The Service's SNS link features use YouTube API Services. In addition to this Policy, the Google Privacy Policy (http://www.google.com/policies/privacy) applies to users of these features.
2. When a user connects their own YouTube channel while composing a post, the Company retrieves the channel's video list via the YouTube Data API directly from the user's browser with the user's consent (Google OAuth). The access token issued for this is kept only temporarily in the user's browser memory and is never sent to or stored on the Company's servers; users may revoke this access at any time via the Google security settings page (https://security.google.com/settings/security/permissions).
3. When a user applies for SNS post syndication, the Company collects and uses public information about the YouTube channel submitted by the user (channel name; titles, descriptions, thumbnails and publication dates of public videos, etc.) via the YouTube Data API.
4. Instagram and TikTok linking operates by collecting and posting publicly available post information (title, author name, thumbnail, etc.) based on the account and post URLs submitted by the user. The Company does not log in to users' Instagram or TikTok accounts and does not access non-public information.
Article 7 (Children Under 14)
The Company does not accept sign-ups from, or collect personal information of, children under 14 (under 16 for residents of the EEA/UK). Users must confirm at sign-up that they meet this age requirement; if a violation is discovered, the Company will delete the account and its personal information without delay.
Article 8 (User Rights and How to Exercise Them)
1. Users may at any time request access, correction, deletion or suspension of processing of their personal information, withdraw consent, and withdraw membership.
2. Personal information can be viewed and edited in "Edit Profile" and withdrawal handled in "Settings" within the Service.
3. Rights may also be exercised by email (team@dealiverym.com); the Company will act without delay within statutory deadlines.
4. Legal representatives or authorized agents may exercise these rights; proof of lawful authorization may be requested.
Article 9 (Destruction of Personal Information)
The Company destroys personal information without delay once the retention period expires or the processing purpose is achieved. Information that must be preserved by law is stored separately and destroyed after the period ends. Electronic files are deleted using irreversible technical methods.
Article 10 (Security Measures)
- Encrypted password storage and encryption in transit (SSL/TLS)
- Access control and permission management for processing systems
- Contact information kept private by default (viewable only under Article 4 conditions) and masked on public screens
- Minimization and management of personnel handling personal information
Article 11 (Cookies and Similar Technologies)
The Company uses cookies and local storage to keep users signed in, remember settings, and analyze usage. The analytics tool (Google Analytics 4) loads only if the user selects "Accept all" in the cookie banner; selecting "Essential only" disables analytics cookies. Details and opt-out methods are described in the separate Cookie Policy.
Article 12 (Behavioral Information)
The Company collects in-service behavioral information (pages visited, clicks, etc.) via Google Analytics 4 to improve service quality. Such data is not used for targeted advertising and is used for statistical analysis only.
Article 13 (Privacy Officer)
- Privacy Officer: Yukyung Kang (CEO)
- Company: DealiveryM Inc.
- Contact: team@dealiverym.com / Tel: +82-2-741-3382
- Address: #107, 95, Guncheong-ro, Jochiwon-eup, Sejong-si, Sejong, South Korea (Postal code 30033)
Article 14 (Additional Notice for Users in the EEA, UK and Other Regions)
1. Legal bases (GDPR Article 6): performance of a contract (6(1)(b)) — sign-up, service provision, subscription management; legitimate interests (6(1)(f)) — service stability, fraud prevention, usage analytics; consent (6(1)(a)) — contact sharing under Article 4 and non-essential cookies; legal obligation (6(1)(c)) — statutory record-keeping.
2. Transfers: personal information is processed in the Republic of Korea and the countries listed in Article 5. For transfers outside the EEA, appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied.
3. Rights: EEA/UK residents have the rights of access, rectification, erasure, restriction, data portability and objection, and may lodge a complaint with their local supervisory authority.
Article 15 (Remedies)
For reports or consultation regarding privacy infringements, you may contact: Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972), Privacy Report Center (privacy.kisa.or.kr / 118), Supreme Prosecutors' Office Cyber Investigation (spo.go.kr / 1301), National Police Agency Cyber Bureau (ecrm.police.go.kr / 182).
Article 16 (Duty of Notice)
Changes to this Policy will be announced in the Service at least 7 days before taking effect; material changes affecting user rights (collected items, purposes, third-party provision, etc.) will be announced at least 30 days in advance, with renewed consent obtained where necessary.
