Privacy Policy

Effective: July 24, 2026 Last updated: July 24, 2026

This Privacy Policy describes how VIBE MAKER (the "Company"), which operates TVIEW LAB (the "Service"), collects, uses, and protects your personal information.

If you have questions about this Policy or want to exercise your privacy rights, please contact us.

§1. Information we collect

When you sign up (OAuth sign-in)

• Email address
• Display name
• User ID from your OAuth provider (Google or Kakao)
• Profile image URL, if provided by the OAuth provider

When you use the Service

• Login times and authentication method
• Pages you visit and requests you make
• IP address
• Browser type and operating system
• Session cookies

When you subscribe or purchase

• Subscription status (plan, start date, renewal date, cancellation date)
• Order history (item, amount, timestamp, status)
• Payment confirmation returned by the payment gateway

We do not receive or store your full card number, expiration date, or CVV. The payment gateway handles that directly.

When you subscribe to the newsletter

• Email address
• Subscription status (pending, confirmed, unsubscribed)
• Confirmation and unsubscribe tokens

When you contact us

• Email address
• What you write in your message

We collect only what we need. If we need to collect something new, we ask first.

§2. How we collect

We collect information through:

• Your OAuth sign-in (Google or Kakao provide us the fields you approve)
• Your interaction with our website
• Our payment gateway (payment confirmation only)
• Emails you send us directly
• Standard web technologies (server logs, cookies)

§3. How we use information

We use your information to:

• Identify and authenticate you
• Provide access to features, including paid content
• Process payments and refunds
• Send the newsletter and service-related notifications
• Respond to your inquiries
• Improve the Service through aggregate analytics
• Detect and prevent fraud, abuse, or security incidents
• Meet legal obligations

We do not use your information for purposes outside those listed above without first asking you.

§4. We do not sell your personal information

We do not sell, rent, or trade your personal information. We do not "share" it for cross-context behavioral advertising (as those terms are defined under California law).

§5. Who we share information with

We share information only with:

• You — always available on request
• Sub-processors we've engaged to run the Service (see §6)
• Government authorities — where legally required (e.g., a valid court order or lawful government request)

That is the complete list.

§6. Sub-processors

We use the following providers to run the Service. Each is contractually bound to handle your data securely and only for the purposes we've engaged them for.

Payment processing is handled by our payment gateway, which becomes an additional sub-processor when you make a purchase. Its identity is disclosed on the checkout page.

§7. International data transfers

The Company is based in the Republic of Korea. Because our sub-processors are US-based, your personal information will be transferred to and processed in the United States and other jurisdictions.

For users in the European Economic Area, the United Kingdom, and other jurisdictions requiring specific safeguards, transfers rely on the safeguards our sub-processors have in place (including Standard Contractual Clauses approved by the European Commission).

If you do not want your personal information transferred internationally, please do not use the Service.

§8. Retention

We retain your personal information only for as long as needed for the purposes described in this Policy.

When retention expires, we delete or anonymize the data promptly.

§9. Your rights

Wherever you live, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to fix inaccurate or incomplete information.
• Delete — ask us to delete your data, subject to legal retention requirements.
• Restrict — ask us to limit how we use your data.
• Object — object to specific processing where allowed by law.
• Withdraw consent — where processing is based on your consent, you can withdraw it at any time.
• Complain — to your local data protection authority.

To exercise any of these rights, contact us. We respond within 30 days.

For residents of the European Economic Area and the United Kingdom (GDPR / UK GDPR). In addition to the rights above, you have the right to data portability. The legal bases we rely on are (a) performance of a contract, to provide the Service; (b) legitimate interests, for security and improvement of the Service; and (c) legal obligation, for regulatory record-keeping. You can object to processing based on legitimate interests.

For California residents (CCPA / CPRA). In addition to the rights above, you have the right to know what personal information we collect and how we use it, and the right not to be discriminated against for exercising your privacy rights. As stated in §4, we do not sell or share your personal information. You may exercise rights via the contact channel below.

§10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. If you believe we have collected information from a child under 13, please contact us.

The Service is generally intended for adults. Some jurisdictions require additional consent for users under 16 (EU) or 18 (some others). Where required, please obtain your parent's or legal guardian's consent before using the Service.

§11. Security

We protect your data with:

• HTTPS encryption for all traffic between the Service and your browser
• SHA-256 hashed storage of authentication tokens and admin session tokens
• Row-level security policies on the database
• Two-factor authentication for administrator accounts
• Least-privilege access for staff, with regular access reviews
• Access and processing logs, reviewed periodically

No system is 100% secure. Despite our safeguards, if a data breach occurs that affects your personal information, we will notify you and applicable regulators without undue delay and in accordance with applicable law.

§12. Cookies

We use cookies to run the Service. Types, providers, and controls are described in our Cookie Policy.

§13. Data protection responsibility

The person responsible for privacy at TVIEW LAB is the Company's representative, Junseok Oh. Privacy inquiries reach the same channel as general inquiries: tviewlab@gmail.com.

§14. Changes to this Policy

If we materially change how we handle your data, we will notify you before the change takes effect (at least 30 days for material changes affecting your rights). Continuing to use the Service after the effective date means you accept the updated Policy.

Related documents

• Terms of Service — general terms of use
• Cookie Policy — cookies we use
• Subscription Terms — payments and billing
• Intellectual Property Policy — content use terms
• Disclaimer — nature of the Service
• Risk Disclosure — trading and investment risks

Contact

• Business name: VIBE MAKER

• Service: TVIEW LAB

• Website: https://tviewlab.com

• Contact: tviewlab@gmail.com

• Business registration no.: 850-38-01085

• E-commerce registration no.: 2026-Seoul-Gwanak-1164

• Address: 1921-1 Nambusunhwan-ro, 401-A4, Gwanak-gu, Seoul, Republic of Korea

• Phone: +82-504-2011-0469