Privacy Policy
Effective date: June 16, 2026 · Operator: Profile Agency
Profile Agency ("the Company") operates PLANDO ("the Service"). This Privacy Policy explains what personal data we collect, how we use it, and how we protect it, in compliance with applicable laws including the Korea Personal Information Protection Act (PIPA).
1. Personal Data We Collect
| Category | Items |
|---|
| Account | Email address, name, password (stored encrypted), sign-up method (Google account identifier when signing in with Google) |
| Payment & subscription | Subscription plan, payment-method identifiers (e.g., billing key — we do not store raw card numbers), payment and refund history |
| Social connections (Meta·YouTube) | Connected account information (channel name, channel ID, Instagram user ID, username), profile/posts/insights (reach, saved, follower demographics, etc.), and the page access token (stored encrypted on our server) |
| Content | Videos, images, and text content that the user uploads or generates |
| Automatically collected | Service usage records, access logs, device/browser information, cookies |
2. Purposes of Collection and Use
- User identification and login; providing and operating the Service
- Connecting social platforms (YouTube, Instagram, etc.) and publishing/scheduling content
- Processing subscription and recurring payments; refunds and customer support
- Service improvement, fraud prevention, and fulfilling legal obligations
3. Use of YouTube API Services and Data Handling (Important)
This Service uses YouTube API Services. When a user connects their YouTube channel, the Company accesses data solely to upload and schedule videos that the user has attached, and to confirm the connected channel.
- Data obtained from YouTube is not used or sold for any purpose other than those stated above, and is never used for advertising. We comply with the Limited Use requirements of the Google API Services User Data Policy.
- Users may disconnect at any time and can revoke this app's access directly via Google security settings at myaccount.google.com/permissions.
- Use of the YouTube API is also governed by the YouTube Terms of Service and the Google Privacy Policy.
3-1. Meta (Instagram) Platform Data Handling (Important)
This Service uses Meta's Instagram Graph API (via Facebook Login). When a user connects an Instagram professional account, the Company accesses data only for the purposes and scope below.
- Data accessed/collected: the connected account's profile (username, follower count, media count, bio), the user's own posts (caption, media, timestamp, likes, comments), insights (reach, saved, follower demographics), and the page access token.
- Purpose: limited to planning, scheduling/immediate publishing, and displaying performance (insights) for the user's own account.
- Data obtained from Meta is not used or sold for any purpose other than those stated above and is never used for advertising. Access tokens are stored encrypted on our server and are not exposed to the UI or third parties.
- Users may disconnect at any time in [Settings → Account & Data], and can revoke this app's access via Facebook Business Integrations settings.
- Use of the Meta platform is also governed by the Meta Platform Terms and the Instagram Data Policy.
4. Retention Period
- Account data: until account deletion. If retention is legally required after deletion, data is kept for the required period and then destroyed.
- Uploaded videos/media: under our operational policy, videos are auto-deleted after about 50 days and other media after about 90 days (already-published posts remain on the respective social platforms).
- Payment records: retained for 5 years under applicable e-commerce law.
- Users can disconnect Instagram or permanently delete their account and all data directly in [Settings → Account & Data]. Upon deletion/withdrawal, personally identifiable data (social tokens and connection info, imported posts/insights, brand/content data) is destroyed without delay.
- However, anonymized and aggregated statistics that cannot identify an individual (e.g., average performance metrics by industry or content type) may be retained and used for service improvement and content-trend analysis.
5. Disclosure to Third Parties and Sub-processors
We do not share personal data with third parties without the user's consent. To provide the Service, we use the following sub-processors:
| Sub-processor / Integration | Purpose |
|---|
| Google LLC (YouTube Data API) | Uploading/scheduling videos to the user's channel; confirming channel info |
| Meta Platforms (Instagram Graph API) | Publishing Instagram posts and Reels; reading the user's own profile/insights |
| Toss Payments Inc. | Subscription and recurring payment processing |
| Supabase Inc. | Database, authentication, and file storage (cloud infrastructure) |
| OpenAI, Google (Gemini), etc. | AI content generation at the user's request |
6. User Rights
Users may request access to, correction of, deletion of, or suspension of processing of their personal data at any time, and may withdraw consent by deleting their account. Data deletion can be performed directly within the Service at [Settings → Account & Data], or requested via the contact below.
7. Destruction of Personal Data
Personal data is destroyed without delay once the retention period expires or the purpose of processing is achieved. Electronic files are deleted irrecoverably; printed materials are shredded or incinerated.
8. Security Measures
The Company implements reasonable safeguards including access-rights management, access control (row-level security), encryption in transit and at rest, and retention of access logs.
9. Data Protection Officer
| Officer | AN SANG MIN |
| Email | jack324@naver.com |
| Company | Profile Agency · Business Reg. No. 309-32-00892 |
| Address | Unit 1013, Building B, GL Metro City Hangang, 10 Cheongcho-ro, Deogyang-gu, Goyang-si, Gyeonggi-do, Republic of Korea |
10. Changes to This Policy
Any addition, deletion, or modification of this Policy will be announced within the Service at least 7 days before it takes effect.