Privacy policy

Buyers: delivery email, artist/project name, order number, purchased beat/license, payment amount/status/time, and refund, download, and email-delivery records. Card and bank details are handled directly by the selected provider (Toss Payments or PayPal) and are not stored by us.

Producers/operators: Google identifier, email and display name; profile and social links; audio, artwork and stems; rights/sample declarations; review/upload records; legal name, country, payout email, bank/account details, business registration number and documents, tax handling, statements, and payout history. Full account and business numbers are encrypted and only their last digits are displayed. We do not collect national resident-registration numbers or Google passwords.

Automatically generated: essential sign-in cookies and request, error, access-time, and security logs may be processed while providing the service.

We process data to form/perform contracts, verify payments, deliver agreements/receipts/files, handle refunds and recovery, authenticate producers and rights, settle sales, support customers, prevent abuse, and meet legal duties. Optional uses require separate consent. We currently use no behavioral advertising or marketing email.

• Contracts/cancellations and payment/supply records: 5 years
• Consumer complaint and dispute records: 3 years
• Display and advertising records: 6 months
• Google sign-in session: up to 7 days or until sign-out
• Producer review, contract, and settlement data: until the relationship and related settlement/disputes end, subject to mandatory legal retention

Expired data is irreversibly deleted. Records retained by law are segregated and used only for that purpose.

These providers may process data only as needed to operate the service.

• Toss Payments (Republic of Korea): payment authentication, approval, cancellation, and refund
• Google (OAuth, Apps Script, Gmail; including the United States): sign-in and purchase-email delivery. Email, display name, account identifier, or delivery content is transmitted over encrypted networks when used and retained until its purpose or legal period ends
• OpenAI Sites and underlying infrastructure (Cloudflare; global infrastructure including the United States): hosting for the site, database, files, and security logs. Order, upload, and access data is transmitted over encrypted networks and retained under this policy

If you do not want this processing, you may choose not to purchase/sign in and may exercise the rights below, subject to mandatory retention.

We do not sell or disclose personal data except with consent, where required by law, or to processors needed to perform the contract. Marketplace disclosures to external producers will be separately disclosed and consented to where required.

We use no buyer advertising or behavioral-analytics cookies. Essential cookies are used only for producer/operator security, OAuth validation, and sessions. Blocking them disables those signed-in areas.

You or an authorized representative may request access, portability where applicable, correction, deletion, restriction, or withdrawal of consent. Include details needed to verify identity. Requests may be limited for mandatory retention or others' rights.

We use server-side payment verification, administrator access control, encrypted transport, private document storage, encryption and masking of account/business numbers, expiring/rate-limited download links, and encryption for sensitive delivery-job data, with administrative safeguards.

Privacy contact: 권순진 · 010-4426-5633 · jinyrong884@gmail.com

You may also seek assistance from Korea's Personal Information Dispute Mediation Committee (+82-1833-6972) or privacy infringement hotline (118 in Korea).

Material changes will be posted at least 7 days before taking effect, or 30 days before a materially adverse change. Effective September 16, 2026.

Depending on the payment method, Toss Payments or PayPal processes payment, fraud-prevention and refund information. The site does not store card passwords or full card numbers. PayPal’s own privacy policy also applies to its independent processing. Google OAuth and purchase email, OpenAI Sites and Cloudflare hosting are used for the purposes described above. Resend is configured as an alternative email connection; we will update processor and international-transfer disclosures before using it.

Your activity name, biography, official link, uploaded profile photo and published beat details are public. Application materials and payout information are not published on your profile. Contact support to request access, rectification, deletion, restriction or withdrawal of consent. Where applicable, you may object to processing and complain to a supervisory authority. EU/EEA requests are normally handled within one month; we will explain any lawful extension. Records subject to mandatory retention are kept only as required.

These policies and the order agreement do not limit mandatory rights that apply to you. Choosing Korean law does not remove mandatory consumer protections in your country of residence or access to courts and dispute-resolution procedures available by law. Contact us before payment if translations differ or a term is unclear. No language automatically prevails to reduce statutory rights.