Vili Privacy Policy

Privacy Policy of Vili

This "Privacy Policy" outlines the guidelines that Vili must follow to ensure users can safely use the service. Vili complies with relevant laws and regulations of the Republic of Korea, as well as personal data protection guidelines. We collect, use, and provide personal data based on user consent and are committed to providing an easy-to-understand policy to actively protect users' rights.

Article 1: Personal Data

• Required Information: Email, password, username, profile picture, follower list, following list, contact details, service usage history, purchase and payment history, date of birth, gender.
• Processing Purpose: The personal data collected by Vili is used exclusively for member management, service provision and improvement, and new service development within Vili.
• Third-Party Provision: Vili does not provide personal data to third parties without explicit user consent, except as required by law. If a third-party provision is required, we notify the user of the recipient and purpose and obtain consent before proceeding.

Article 2: User Rights and Responsibilities

Users can view, modify, or withdraw their consent for the collection, use, or provision of personal data at any time. They can also request account deletion.

Article 3: Customer Support

Any inquiries, complaints, or suggestions regarding personal data protection during the use of Vili's services can be directed to Vili's Personal Data Protection Officer.

Article 1: Data Collection Methods

• We collect the minimum necessary personal data for service provision through user consent during account registration or service use.
• Data Collected During Account Creation: Email, password, username, profile picture, follower list, following list, contact details, service usage, purchase and payment history, date of birth, gender.
• Data Collected During Identity Verification: Name, gender, date of birth, mobile number, telecom provider, nationality, encrypted identification values (CI), duplicate membership confirmation information (DI).
• Data Collected During Paid Services: For credit card payments - Partial card number, card company. For mobile payments - Mobile number, payment approval number. For bank transfers - Account holder's name, account number, bank.

Article 2: Automatic Data Collection

During service use, device information, IP address, cookies, and service usage history may be automatically collected. This includes user-generated content, search terms, and interaction logs.

Article 3: Third-Party Data Collection

Vili may receive personal data from third parties, such as affiliated services, with the user's consent.

Article 1: Purpose of Data Use

• Vili uses personal data for member identification, service provision and improvement, development of new services, and more. Specific uses include:
• Verification of user identity and age.
• Sending messages between users and managing friends.
• Providing personalized content, recommendations, events, and advertisements based on demographic characteristics.
• Processing payments for paid services.
• Preventing fraudulent or inappropriate use of the service.

Article 2: Additional Data Use

Personal data may be used or provided to third parties without consent if it is related to the original purpose and does not infringe on user rights. This will be done by considering relevant legal provisions and user benefit.

Article 1: Third-Party Provision

• Vili does not provide user personal data to third parties without prior consent unless required by law.
• Data may be provided to third-party services, partners, or foreign entities, but only with user consent and clear notification regarding the recipient and country.

Article 2: Emergency Situations

In cases of emergencies such as disasters, infectious diseases, or life-threatening situations, Vili may provide personal data to relevant authorities without user consent.

Article 1: Destruction Procedure

• Personal data is destroyed without delay once the purpose of collection and use has been achieved. The method of destruction is determined based on the form of the data.
• For electronic files: Data is safely deleted to prevent recovery and reproduction.
• For records, printed materials, or written documents: These are shredded or incinerated.

Article 2: Information Retention and Destruction

• Certain information may be retained for a specific period based on internal policies before being destroyed:
• Stored for up to 1 year from account deletion: Vili account and withdrawal notice email address (encrypted) for sending guide emails and handling customer service inquiries. Records of fraudulent service use.
• Rights infringement or harmful content reports: Retained for 5 years before destruction.
• Personal data is destroyed after the retention period or once the purpose of collection has been achieved. Information that needs to be retained based on legal obligations will be stored separately and securely for the necessary period before destruction.

Article 1: User Rights

• Users may exercise the following rights regarding their personal data:
• Right to request access to personal data.
• Right to request correction of personal data.
• Right to request the suspension of personal data processing.
• Right to request deletion of personal data and withdraw consent or request account deletion.

Article 2: Exercise of Rights

Upon receiving a user's request, Vili will process it without delay. If a user requests the correction of errors in their personal data, Vili will not use or provide the personal data until the correction is completed.

Article 1: Encryption of Personal Data

Vili encrypts users' personal data. Personal data is transmitted through encrypted communication channels, and critical information such as passwords is stored in encrypted form.

Article 2: Protection Against Hacking and Viruses

• To prevent the leakage or damage of users' personal data due to hacking or viruses, Vili has established systems in areas controlled from external access.
• We operate intrusion detection and prevention systems that monitor and block unauthorized access 24/7.
• Anti-virus software is installed to prevent the system from being infected by malicious code or viruses, and we continuously research and apply the latest security technologies to our services.

Article 3: Minimization of Access to Personal Data

Access to personal data is limited to a minimum number of employees. Strict password policies and access rights management are applied to ensure that only authorized personnel can access the personal data processing system. Continuous audits are conducted to ensure compliance.

Article 1: Designation of Responsible Personnel

To handle user inquiries, complaints, and other matters related to personal data, Vili has appointed a Personal Data Protection Officer and designated a grievance handling department.

Article 2: Contact Information

Officer: Yuk Seung Hyun (Personal Data Protection Officer / DPO / Location Information Manager). Department: Tech Department

Article 1: Notification of Changes

• Vili may revise this privacy policy to reflect changes in relevant laws or services. If any amendments are made, Vili will notify users at least 7 days prior to the changes.
• In the case of significant changes to users' rights, Vili will notify users at least 30 days in advance.

Article 2: Commitment to User Privacy

Vili values the privacy of users' information and is committed to making every effort to ensure that users can use the service with confidence.