Privacy Policy

주식회사 클라이원트 ("the Company") takes the privacy of Bloom Mixer users seriously and complies with the Korean Personal Information Protection Act and the Network Act.

1. What we collect

• Account: email, name, and profile photo from Google sign-in
• Profile (optional): mobile number, company/affiliation, role, LinkedIn URL, one-line intro, dinner preferences
• Applications: name, phone (from your profile), and your application answers (motivation, intro line, per-dinner preference choices)
• Post-dinner survey (optional): 5-point ratings and free-text answers. Free text is read only by the organizers; only aggregate statistics may be used to improve or promote the service.
• Payments: approval records (method, amount, time). Sensitive card data is handled by the payment provider and never stored on our servers. The provider's masked approval response is kept up to 180 days for dispute handling.

2. Why we use it

Processing applications, composing and announcing tables, payments and refunds, support, and service improvement. With your marketing consent, we also send news about upcoming dinners.

• Mobile number: urgent day-of updates (venue or group changes)
• Company / role / LinkedIn: organizer reference while matching (e.g. keeping same-company people at different tables). Never shown to your tablemates.
• One-line intro: shown to your tablemates as your introduction
• Preferences: input to the table-matching algorithm

3. How long we keep it

• Day-of seating data (display name, intro, guide link): anonymized within 30 days after the dinner
• Application contact details and answers: destroyed within 180 days after the dinner
• Survey free text: kept for organizer review; identifying links destroyed once the improvement purpose is served
• Masked payment approval responses: destroyed within 180 days
• Profile fields: destroyed 1 year after your last login; you can erase them anytime from My page
• Contract and withdrawal records: 5 years (E-Commerce Act)
• Payment and supply records: 5 years (E-Commerce Act)
• Consumer complaint and dispute records: 3 years (E-Commerce Act)
• On marketing-consent withdrawal, related data is destroyed without delay

4. Processors and disclosure

We do not share personal data with third parties, with one inherent exception: your display name and one-line intro are shown to the participants seated at your table through the day-of guide, and this data is anonymized within 30 days after the dinner. We entrust the following processing to providers:

• Payments: PortOne / Toss Payments
• Cloud infrastructure: Supabase, Amazon Web Services (Seoul region)
• Sign-in and email: Google

International transfer

During Google sign-in, your account information (email, name, profile) may be transferred to and processed by Google LLC (USA) for authentication, for as long as the sign-in service is provided. Cloud infrastructure (Supabase, AWS) runs in the Seoul region.

5. Your rights

You may access, correct, delete, or suspend processing of your personal data at any time, directly under My page > Profile (including Erase my info), or by writing to [email protected]. Payment and contract records kept under the E-Commerce Act (5 years) are excluded from deletion.

6. Privacy officer

금승도 ([email protected])

7. Security measures

Encryption in transit (HTTPS), least-privilege access, and no storage of card data.

This is a courtesy translation. If it differs from the Korean text, the Korean text governs.

Effective: 2026-08-25. Changes are announced in the service.