Effective date: October 31, 2026
D.O.H International ("Company") processes personal data for: account registration and management (Google sign-in linkage, phone verification, membership status, suspension/withdrawal); providing the Service (campaign matching, applications/selections, reviewer and business profiles, product-trial feedback management, chat and notifications); payment processing (handling campaign connection fee payments and records); and handling inquiries.
1. Google sign-in (required): email, name, profile photo.
2. Registration / profile (required): nickname, name, country, date of birth, gender, agreement status.
3. Additional verification (required): phone number, verification status and time.
4. Reviewer profile (optional): bio, interested categories, activity country/region.
5. Business profile — required to create campaigns: business name (and local-language name), legal entity type, business registration number or equivalent (e.g., Korean business registration number, US EIN, Canadian BN), secondary tax ID (if any), representative name, business address, additional country-specific data.
6. Campaign connection fee payment (business, required): Payments are processed via Toss Payments; the Company does not collect or store card numbers or other payment credentials directly. The Company retains the order number, payment amount, payment method type, payment status, and payment timestamp.
7. Service-generated data: campaign applications/selections, product-trial feedback (reviews, survey responses, etc.), chat messages, notifications, project files.
8. Automatically collected: access logs, IP address, cookies, device information.
Member data is retained until withdrawal (or until related investigations conclude). Original email/phone number are separately retained for audit purposes per applicable law after withdrawal. Campaign/application/feedback data is retained for 3 years after campaign completion. Payment records are retained for 5 years under Korean e-commerce law.
Personal data is disclosed to third parties only with consent or a legal basis. During campaign matching, minimal necessary information (e.g., nickname, shipping contact/address) may be shared between the reviewer and the business.
The Company uses the following processors, some of which process data outside Korea:
| Processor | Purpose | Note |
|---|---|---|
| Google LLC | Social sign-in (OAuth) | Processed abroad (US) |
| Google Cloud | Storage of uploaded files/images | Processed abroad |
| Google Maps Platform | Displaying campaign location info (where applicable) | Processed abroad |
| Resend | Email delivery | Processed abroad |
| Toss Payments | Campaign connection fee payment processing (PG) | Processed domestically (Korea) |
| [SMS vendor] | Phone verification messages | [TODO: confirm actual vendor] |
[TODO: Where data of reviewers/businesses outside Korea (e.g., US) is transferred abroad, confirm notice/consent requirements under Korean law and any applicable foreign law (e.g., CCPA, PIPEDA) with counsel.]
Data subjects may request access, correction, deletion, or suspension of processing of their personal data by emailing hello@mangodio.com. The Company will act without delay.
Personal data whose retention period has expired or purpose has been achieved is destroyed without delay — irrecoverably for electronic files, and by shredding or incineration for paper documents.
Administrative (internal policy, staff training), technical (access control, access control systems, security software), and physical (restricted access to server rooms, etc.) measures are in place.
Privacy Officer
Privacy Manager
This policy is effective as of October 31, 2026 and changes will be notified at least 7 days before taking effect via an in-service notice.
Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Privacy Infringement Report Center, and other relevant Korean authorities, as listed in the Korean version.