개인정보처리방침

유튜브 연동은 YouTube 서비스 약관을 따르며, Google의 개인정보 처리에는 Google 개인정보처리방침이 적용됩니다.

Google User Data Sharing Disclosure (English). Tamarel does not share, sell, transfer, or disclose Google user data (connected channel information, OAuth access/refresh tokens, upload request contents) to any third party, except in the following cases: (1) at the user's explicit direction, meaning that when a user requests an upload, the video file and its metadata are transmitted via the YouTube API to the user's own YouTube channel (Google LLC), which is the requested feature itself; (2) when required by applicable law or a valid governmental request; (3) to the minimum extent necessary to investigate and respond to security incidents or abuse. We do not use Google user data for advertising, do not sell it, and do not use it to train or improve AI or machine learning models, whether generalized or otherwise. Data is stored encrypted on servers we operate directly; other than cloud infrastructure used as a transmission path (a Microsoft Azure virtual server), it is not provided to any subprocessor.

인스타그램 연동은 Instagram Platform Policy를 따르며, Meta의 개인정보 처리에는 Instagram(Meta) 개인정보처리방침이 적용됩니다.

Instagram User Data Disclosure (English). Tamarel uses the Instagram API with Instagram Login and requests two permissions, instagram_business_basic and instagram_business_content_publish, used solely to publish a Reel the user explicitly asked us to publish and to display which account is currently connected. The only Instagram data we access and store is the user ID, username, account type, the access token issued by Instagram together with its connection time and expiry time, and the contents of publishing requests the user submits. While a publish is in progress we also keep the pending media container ID so that the same video is never published twice, and we query the publishing status of that container and the account's daily content publishing limit. We do not read media already on the account, insights, comments, followers, or direct messages. Access tokens are encrypted at rest with symmetric encryption on servers we operate directly; the key file and the token file are restricted to the server account. Tokens are kept only while the connection is active, and long lived tokens (valid for about 60 days) are refreshed automatically. Tamarel does not share, sell, transfer, or disclose Instagram user data to any third party, except: (1) at the user's explicit direction, meaning that when a user requests publishing, the video and its caption are transmitted via the Instagram API to the user's own account, which is the requested feature itself; (2) when required by applicable law or a valid governmental request; (3) to the minimum extent necessary to investigate and respond to security incidents or abuse. We do not use Instagram user data for advertising, do not sell it, and do not use it to train or improve AI or machine learning models, whether generalized or otherwise. Deletion. When the user disconnects the account inside our service, the stored token and account information are deleted immediately. When the user revokes access on Instagram, Meta's Deauthorize Callback is verified by signature and the matching records are deleted automatically. When the user requests data deletion through Instagram, Meta's Data Deletion Request Callback is verified by signature, all stored tokens and account information for that Instagram user ID are deleted, and a confirmation code with a status URL (tamarel.kr/data-deletion/) is returned to Instagram; only the confirmation code, the Instagram user ID, and the deletion time are kept as proof of processing. Users may also request deletion by email at contact@tamarel.kr; see tamarel.kr/data-deletion/ for details.

Retention of publishing request contents. The video file and the caption submitted with a publishing request are used only to carry out that request. They are transmitted to Instagram, and the pending media container ID recorded during the publish is deleted as soon as the job finishes. The video and caption themselves stay in the user's Tamarel workspace so the user can reuse or re download them, and they are deleted when the user deletes that job and empties the trash, and in every case when the user closes the Tamarel account. Publishing content is never kept for any purpose other than the requested publish, and it is never analyzed. Access tokens and connected account information are kept only while the connection is active and are deleted immediately on disconnection, on revocation, on a Meta deletion callback, or on account closure. Access logs and IP addresses are kept for 3 months as required by the Protection of Communications Secrets Act, and records that Korean e commerce law requires us to keep (contract and payment records for 5 years, consumer complaint records for 3 years) are kept for those statutory periods.

Your rights. Users may at any time request access to, correction of, deletion of, or suspension of the processing of their personal data, and may withdraw consent by disconnecting the account or closing the Tamarel account. Requests sent to contact@tamarel.kr are handled and answered within 3 business days. Users may also complain to the Korea Internet and Security Agency Privacy Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

Children. Tamarel does not collect personal data from children under the age of 14. The service is built for church staff.

International transfer. Tamarel is operated from the Republic of Korea. When a user requests publishing, the video, its caption, and the access token needed to authenticate the request are transmitted through the Instagram API to Meta Platforms, Inc. (1601 Willow Road, Menlo Park, California, United States), which then processes them under its own privacy policy. This transfer is limited to what the requested publish needs, it happens only when the user asks for a publish, and no transfer occurs if the integration is not used. Apart from that, Instagram user data is stored encrypted on servers we operate directly, with Microsoft Azure virtual servers used for hosting and as a transmission path, mirroring the Google and YouTube statement above; no other subprocessor receives it.

Data controller. Juson D&P Co., Ltd. (주식회사 주손디앤피), operator of the Tamarel service, 101, 79 Mareunnae-ro, Jung-gu, Seoul, Republic of Korea, business registration number 201-86-16939, represented by Woochan Yang, contactable at contact@tamarel.kr or +82-70-5015-3299, with Mose Kim (CTO) as the data protection officer.