LifePostbox

Privacy Policy

Privacy Policy

Morak operates LifePostbox and processes only the personal data needed to provide personalized digital letter reports, authentication, payment, support, analytics, and security.

Effective date and last updated: June 2, 2026

Business: Morak · Representative: Sooyeon Kim · Contact: 010-9454-2294

1. Key Terms

Service
The LifePostbox website, free previews, paid digital letter reports, authentication, checkout, PDF download, and support features.
Letter Report
Personalized digital entertainment content generated from birth date, birth time, calendar type, gender, name or nickname, birth location where applicable, and related chart calculations.
Viewing
Opening the paid body of a reading. Cover pages, payment screens, waiting screens, and login screens are not treated as paid-content viewing.

2. Data We Collect

Account
Email address, authentication provider user ID, login status, and signup or login timestamps.
Reading Input
Name or nickname, gender, birth date, birth time or unknown-time flag, solar or lunar calendar selection, leap-month flag, birth location for astrology, chart calculation data, and generated letter report content.
Payment
Order ID, product, amount, payment status, buyer name, email, phone number, payment provider identifiers, refund request details, and viewing status.
Support
Inquiry details, contact information, order information, support history, screenshots, and materials voluntarily provided by the user.
Security & Analytics
IP address, User-Agent, request logs, error logs, cookies, local storage IDs, page views, clicks, checkout events, UTM parameters, and device or browser information.

3. How We Use Data

  • To create and display free previews and paid personalized digital letter reports.
  • To authenticate users, restore access, process orders, provide refunds, and prevent abuse.
  • To let users reopen purchased reports and save or download the result as a PDF.
  • To operate customer support, troubleshoot errors, improve product quality, and measure advertising performance.
  • To maintain security, comply with legal obligations, and resolve disputes.

4. AI Processing

We may send reading inputs and chart calculations to AI API providers to generate personalized letter report text. We do not use user inputs or generated reports to train our own AI model.
  • Letter reports are for entertainment, reflection, and self-understanding.
  • Readings do not replace legal, medical, financial, employment, therapeutic, or other professional advice.
  • Do not enter unnecessary sensitive data, government ID numbers, account passwords, or another person's private information.

5. Processors and Third Parties

Supabase
Authentication, session management, database storage, order data, and reading data.
Render
Web and API hosting infrastructure.
PortOne / Paymentwall / Toss Payments
Payment authorization, cancellation, refund processing, and transaction verification.
Brevo
Transactional email delivery such as authentication, receipts, or service notices where used.
Google / OpenAI
AI generation or auxiliary analysis, depending on operational configuration.
PostHog
Product analytics such as views, clicks, conversion events, and feature usage.
Meta
Advertising measurement through Pixel and Conversions API, including hashed identifiers where applicable.

6. International Transfer

Some providers operate globally, so data may be processed outside Korea, including in the United States, the European Union, Japan, Singapore, or other regions used by the provider. Data is transferred through encrypted network communication where applicable.

7. Retention

  • Account, profile, and letter report access data are retained while the account remains active or until deletion is requested, unless legal retention duties apply.
  • Contract, payment, and supply records may be retained for 5 years under Korean e-commerce law.
  • Consumer complaint and dispute records may be retained for 3 years.
  • Access logs may be retained for 3 months where required by law.

8. Cookies and Tracking

We use cookies, local storage, pixels, and SDKs for authentication, security, checkout continuity, analytics, and advertising measurement. You can block or delete cookies in your browser settings, but essential features may stop working.

9. Your Rights

You may request access, correction, deletion, suspension of processing, or withdrawal of consent. Logged-in users may also use the Delete account button in the Profile page. We may need to verify your identity before handling the request, and legal retention duties may limit deletion.

Contact
010-9454-2294 or the in-service support channel.
Controller
Sooyeon Kim, representative of Morak.
Address
30, Art center-daero 97beon-gil, Yeonsu-gu, Incheon, Korea.

10. Changes

We may update this Privacy Policy when laws, service features, vendors, or data practices change. Material changes will be announced through the service or another reasonable channel.