Privacy Policy
Effective October 7, 2026
This is an English translation. The Korean text is the binding version; where the two differ, the Korean text applies.
PromptSearch Inc. (the "Company") sets out this Privacy Policy under the Korean Personal Information Protection Act to protect the personal information of people who use PromptSearch (www.ptsearch.info, the "Service") and to deal quickly with their concerns.
1. What we process and why
| When | Information | Purpose |
|---|---|---|
| Sign-up (required) | Login name, password (stored encrypted) | Identifying members, logging in, stopping fraudulent sign-ups |
| E-mail verification (optional) | E-mail address | Confirming identity, password resets, notices, checking eligibility for free Studio credits |
| Profile (optional) | Nickname, profile image, bio, follow and block lists, NSFW display setting | Showing the profile, tailoring pages |
| Posts and comments | Text, images, videos and music members post and the metadata inside them (such as generation settings), prompts, comments, passwords for guest posts and comments (encrypted) | Publishing posts, prompt search, checking who may edit or delete |
| Studio creations | Prompts, generation settings, reference images, creations, credits and points used | Providing the Studio, managing usage, stopping abuse |
| Paying for paid services | Order history (item, amount, time, payment number), type of payment method | Payments and refunds, keeping transaction records. Card numbers and other payment details are handled by the payment providers; the Company does not store them. |
| Adult verification (optional) | Year of birth, a hash of the connecting information (CI), result of verification | Checking eligibility for adult content, detecting the same person verifying twice. Name, phone number and full date of birth are not stored. |
| Member ads (optional) | Ad images, link address, text, purchase and bid history | Reviewing and running ads, settlement |
| Business members (optional) | Business registration number, company name, representative's name, opening date, e-mail for tax invoices, business address, business type and item | Checking the business, issuing tax invoices, monthly usage statements |
| Enquiries (optional) | E-mail address, content of the enquiry | Answering enquiries, handling disputes |
| Collected automatically | IP address, access time, browser information (User-Agent), cookies, login records, visit, search, impression and click records | Security and abuse prevention (spam, bots, like manipulation), service statistics, ordering the Recommended tab |
2. How long we keep it
The Company destroys personal information without delay once its purpose is met. Member information is kept until the member closes their account; on closing, the login name, e-mail address, password, profile (nickname, image, bio) and adult verification details are deleted at once. Posts and comments not deleted before closing stay, with the author shown as "deleted_number". The following is kept for the periods below.
| Information | Period | Basis |
|---|---|---|
| Records of contracts and withdrawals of offers | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of payments and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of consumer complaints and disputes | 3 years | Act on Consumer Protection in Electronic Commerce |
| Records of labelling and advertising | 6 months | Act on Consumer Protection in Electronic Commerce |
| Business details and transaction records used for tax invoices | 5 years | Framework Act on National Taxes |
| Login and visit records (member number and time) | While used for service statistics. Once an account is closed its details are deleted, so the records no longer identify anyone. | Service statistics |
| IP addresses recorded with posts, comments and likes | While the post, comment or like exists | Checking spam and manipulation, handling rights-infringement reports |
3. Sharing with third parties
The Company does not use personal information beyond the purposes in section 1 or give it to third parties, except with the person's consent or when investigative or other authorities ask for it through the procedures the law sets.
When a member applies as a business, the Company checks the business's status by looking up its registration number, representative's name and opening date with the National Tax Service's business registration lookup (Public Data Portal), and gives the National Tax Service what it needs to issue and report tax invoices.
4. Processors
To provide the Service, the Company has the following companies process personal information on its behalf.
| Processor | Work |
|---|---|
| Korea PortOne Co., Ltd. | Payment integration, mobile identity verification (adult verification) |
| Toss Payments Co., Ltd. and other payment providers connected through PortOne | Processing, cancelling and refunding payments |
| Cloudflare, Inc. | Website delivery (CDN), security (bot blocking, Turnstile), storage of images, videos and other files (R2) |
| Google LLC | Sending verification and password-reset e-mails (Gmail) |
The Company's contracts with processors forbid processing beyond the work given, require security measures, limit sub-processing and provide for damages, and the Company oversees them. Changes of processor are announced in this policy.
5. Transfers abroad
Cloudflare and Google in section 4 are based outside Korea, so personal information is transferred abroad as below while the Service is used. People who do not want this can refuse by closing their account, but they then cannot use the Service.
| Recipient (contact) | Country | Information | When and how | Purpose and period |
|---|---|---|---|---|
| Cloudflare, Inc. (privacyquestions@cloudflare.com) | United States and other countries with Cloudflare data centres | IP address, browser information, cookies, files members upload and creations | Sent over the network on each visit and upload | Delivery, security, file storage. Until the account is closed or the file deleted, or until the contract ends |
| Google LLC (googlekrsupport@google.com) | United States | E-mail address, e-mail content | Sent over the network when verification or reset e-mails go out | Sending e-mail. Kept under Google's retention policy |
The Service loads its fonts from Google Fonts, so the browser sends its IP address and browser information to Google's servers when doing so.
6. How we destroy it
- Personal information whose period has ended or whose purpose is met is destroyed without delay. Information kept under the law is stored separately from other information.
- Electronic files are deleted so they cannot be recovered; paper documents are shredded or burned.
7. Your rights
- You can ask at any time to see, correct, delete or stop processing your personal information, and withdraw consent.
- You can change your profile, e-mail address and password, and close your account, in the account settings. For anything else, e-mail the privacy officer below; requests are handled within 10 days.
- A legal representative or someone you authorise can also make requests, with a letter of authorisation.
- Information other laws require us to keep cannot be deleted on request.
8. Children under 14
The Service does not accept sign-ups from children under 14. If we find we have collected a child's personal information, we destroy it without delay.
9. Cookies
- The Company uses cookies to keep you logged in (session), for security (CSRF), to remember your language, and to remember the Recommended tab's order and which tab you chose. The dark-mode setting is kept in browser storage (localStorage).
- For logged-in members, the language last used is also saved with the account, so notifications sent while you are away (such as app pushes) are written in it. It is deleted with the account.
- Visitors who are not logged in get a cookie with a random value so impressions and clicks on the Recommended tab can be grouped. It cannot identify a person.
- The Company does not use advertisers' tracking cookies.
- The same random value is used to count daily visitors and how they arrived (the previous site's domain, the kind of first page, the country, and whether the app was used), and uses of a post's "Remix in Studio" button. No IP address is stored for these statistics. When you log in, the value is linked to your member number so sign-ups can be counted by where they came from; after you leave, the statistics are no longer linked to a member.
- You can refuse cookies in your browser settings; some features such as logging in will then not work.
10. Activity data and recommendations
To order posts in the Recommended tab, the Company uses impressions, clicks, likes, prompt copies, box saves, subscriptions, "Not interested" marks and searches within the Service. For logged-in users, these records are used to work out the categories and prompt words they are interested in and to move posts they have already seen further down. "Not interested" marks are kept until the user undoes them or deletes the account. This information is not sent outside the Service or used for other companies' ads. Choosing the Latest tab instead of Recommended turns this ordering off.
The Company uses members' activity records (posts, likes, prompt copies, subscriptions and playlist adds received, Studio generations, generations other members started from their posts, days active and sign-up date) to give profile badges and titles and show them on the profile. No new information is collected for this. Members can choose which badges to show, or hide them all, in Settings › My badges, and badges based on days active are not shown until the member places them.
11. Security measures
- Passwords are stored with one-way encryption that cannot be reversed.
- All traffic is encrypted with HTTPS.
- Only a minimal number of administrators can reach personal information, and the admin address and access rights are managed separately.
- Attempts to log in, reset passwords and sign up are rate-limited, and bot access is blocked.
12. Privacy officer
For questions, complaints or remedies about personal information, contact the following and we will answer without delay.
- Privacy officer: Park Hyongsok (CEO)
- E-mail: promptsearch1018@gmail.com
13. Where to get help
For remedies for privacy infringements, you can apply for mediation or advice from the following Korean bodies.
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
14. Changes to this policy
This Privacy Policy applies from October 7, 2026. Changes are announced on the Service 7 days before they apply, and 30 days before for changes important to your rights.
PromptSearch Inc.
CEO Park Hyongsok
Business registration no. 584-87-02924
Address (12503) 182 Sudaeul-gil, Seojong-myeon, Yangpyeong-gun, Gyeonggi-do, Republic of Korea
E-mail promptsearch1018@gmail.com