Hello, this is Flitto.
Thank you for using Flitto.
We would like to inform you that Flitto Privacy Policy and Consent Form for the Collection and Use of Personal Information have been amended. Please refer to the following when using our services.
1. Effective Date of the Amended Documents
- The amended Privacy Policy and Consent Form for the Collection and Use of Personal Information will take effect and become enforceable as of August 25, 2026.
2. Key Amendments
-
Clarification of the legal bases for processing
- Processing items that are strictly necessary for the performance of the service contract — such as membership registration and identity verification, payment and point charging, and settlement and remittance — have been reclassified as "items processed without consent" (Article 15(1)(2) and (4) of the Personal Information Protection Act ("PIPA")), and the legal basis for processing service access and usage records (Article 15(1)(6) of the same Act) has been specified.
- Processing items that are strictly necessary for the performance of the service contract — such as membership registration and identity verification, payment and point charging, and settlement and remittance — have been reclassified as "items processed without consent" (Article 15(1)(2) and (4) of the Personal Information Protection Act ("PIPA")), and the legal basis for processing service access and usage records (Article 15(1)(6) of the same Act) has been specified.
-
Update of collected items by service
- Collection items, purposes, and retention periods have been broken down in detail to reflect procedures actually in operation, including newsletter subscription; customer center, email, and chatbot inquiries; inquiries to the AI Data, Data Marketplace, DataLab, Data Voucher, API Solutions, and Localization business units; first-time use of the Flitto Store; Cash-Out (domestic/overseas), PayPal, exceptional remittance, and Upwork Donation; and Flitto Workspace settlements.
- Collection items, purposes, and retention periods have been broken down in detail to reflect procedures actually in operation, including newsletter subscription; customer center, email, and chatbot inquiries; inquiries to the AI Data, Data Marketplace, DataLab, Data Voucher, API Solutions, and Localization business units; first-time use of the Flitto Store; Cash-Out (domestic/overseas), PayPal, exceptional remittance, and Upwork Donation; and Flitto Workspace settlements.
-
Clarification of the party processing payment and identity verification information
- It has been specified that sensitive payment and identification information such as card numbers, account numbers, and resident registration numbers is not stored on our servers but is processed directly by the payment gateway providers and identity verification agencies.
- It has been specified that sensitive payment and identification information such as card numbers, account numbers, and resident registration numbers is not stored on our servers but is processed directly by the payment gateway providers and identity verification agencies.
-
Reduction of collected items
- Collection of gender at the time of New Arcade sign-up has been discontinued.
- Collection of gender at the time of New Arcade sign-up has been discontinued.
-
Update on overseas transfers
- Google Workspace (Drive, Sheets), Microsoft (Clarity), Jotform, overseas receiving/intermediary banks, and the SWIFT network have been added, and Paymentwall's transfer destination country as well as the retention periods and security measures of each transferee have been corrected. In the case of Jotform, this applies only to users who apply for projects through the relevant form.
- Google Workspace (Drive, Sheets), Microsoft (Clarity), Jotform, overseas receiving/intermediary banks, and the SWIFT network have been added, and Paymentwall's transfer destination country as well as the retention periods and security measures of each transferee have been corrected. In the case of Jotform, this applies only to users who apply for projects through the relevant form.
-
Enhanced disclosure regarding behavioral information
- The retention periods for Google Analytics/Firebase and Microsoft Clarity have been specified, and opt-out methods have been added, including blocking cookies in the web browser, the Google Analytics Opt-out Browser Add-on, and Microsoft Clarity's support for the GPC (Global Privacy Control) signal.
- The retention periods for Google Analytics/Firebase and Microsoft Clarity have been specified, and opt-out methods have been added, including blocking cookies in the web browser, the Google Analytics Opt-out Browser Add-on, and Microsoft Clarity's support for the GPC (Global Privacy Control) signal.
-
Deletion of provisions following the termination of the Flitto Pro service
- The provisions relating to Flitto Pro collection items and the use of the YouTube API (current Article 12) have been deleted.
3. Advance Notice
The following are changes that may have a direct impact on you as a user.
- The retention period for voice information collected when participating in Flitto Arcade service missions will change from "1 year after account withdrawal" to "until the user withdraws consent." However, the necessity of retention will be reviewed every 3 years from the date of collection.
- Microsoft Corporation, Google LLC, Jotform Inc., and the overseas receiving bank/intermediary bank designated by the user as well as the SWIFT network will be added as transferees of personal information overseas.
- Receipt of marketing information will be reclassified from an item processed without consent to an item processed based on the user's consent.
- It has been specified that sensitive information such as card numbers, account numbers, and CI/DI collected during payment and identity verification is not stored on our servers but is processed directly through agency providers.
4. Comparison Table (Before and After)
-
Notation
- [New] newly added content / [Deleted] deleted content / [Moved] change in legal basis or article location / [Changed] revised content
- [New] newly added content / [Deleted] deleted content / [Moved] change in legal basis or article location / [Changed] revised content
- Overall
Item |
Current (eff. Mar. 24, 2026) |
Amended (eff. Aug. 25, 2026) |
Number of articles |
15 articles in total |
14 articles in total (due to deletion of the YouTube API article, article numbers from Article 12 onward are each moved up by one) |
Structure of the Article 1 table |
③ Processing based on user consent (Category / Service / Purpose of use / Collected items / Retention and use period), ④ Processing without consent (2 withholding tax items) |
③ Processing based on user consent (Category / Service / Purpose of collection and use / Items collected and used / Retention and use period), ④ Processing without consent (Article 15(1)(2) and (4) / Article 15(1)(6) / Income Tax Act) |
Notation of items |
Separate rows for [Required] and [Optional] |
Consolidated using parenthetical notation (Required), (Optional) (※ Where no particular notation is given, the item is a required collection item) |
(1) Purpose of Collection and Use of Personal Information
(1)-1. Introductory Wording (Article 1(3))
Current |
Amended |
Reason |
③ The Company uses the collected personal information only for the purposes set out below, and where the purpose changes, the Company obtains prior consent. |
③ The Company uses the following personal information items, with the consent of the user, only for the purposes set out below, and where the purpose changes, the Company obtains prior consent. |
To clearly distinguish between items processed on the bas |
(1)-2. Items Processed with the User's Consent
Category / Service |
Current |
Amended |
Reason |
Flitto Newsletter subscription |
– |
[New] Purpose of collection: Sending newsletters and marketing information, informing about new services Items collected: Email address, date and time of subscription, whether consent to subscribe was given Retention period: Destroyed without delay upon withdrawal of subscription (however, opt-out records are stored separately to prevent re-sending) |
To reflect the newsletter subscription procedure actually in operation (processor: Stibee) and to specify the basis for retaining opt-out records |
Flitto Customer Center inquiry |
Flitto Help complaint submission Items collected: (Required) Email address, content of the complaint Retention period: 3 years after completion of the complaint response |
[Changed] Required and optional items broken down by 7 inquiry types (① Arcade / New Arcade / Store / Account / Crowdsourced translation and proofreading / Other, ② Places, ③ Business, ④ Image Translation, ⑤ Workspace, ⑥ Chat Translation, ⑦ Live Translation) Common items collected: (Required) Email address, whether the address is a Flitto member email, inquiry type, inquiry Retention period: 3 years after the inquiry is handled (Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc.) |
To reflect differences in the items actually collected by inquiry channel and to specify the legal basis for the retention period |
Flitto email inquiry |
– |
[New] Purpose of collection: Responding to business-related inquiries, verifying grievances, contacting for fact-finding and notifying of the results Items collected: Email address, content of the inquiry Retention period: 3 years after the inquiry is handled |
To reflect the handling of inquiries received by email outside the customer center |
Provision of Flitto marketing services |
Category: Common and general Items collected: (Optional) Name, email address, device identification number, PUSH token Retention period: Upon account withdrawal, upon withdrawal of consent |
[Changed] Category: Flitto Retention period: Until the earlier of withdrawal of marketing consent or account withdrawal |
To correct the previous ambiguity in the destruction criteria caused by listing the two points in time in parallel |
AI Data & Data Marketplace website inquiry |
– |
[New] Items collected: (Required) Full name (surname, given name), country of residence, company name, email address, content of the inquiry / (Optional) Phone number Retention period: 3 years after the inquiry is handled |
To reflect newly established inquiry channels for each business unit |
DataLab website inquiry |
Flitto DataLab – Contact us Items collected: (Required) Full name, email address, country, company name, job title, message (request) / (Optional) Phone number |
[Changed] Items collected: (Required) Full name (surname, given name), country of residence, company name, email address, content of the inquiry / (Optional) Phone number Collection of job title deleted |
To minimize unnecessary items |
Data Voucher website inquiry |
– |
[New] Items collected: Company name, name of person in charge, email address, phone number, content of the inquiry Retention period: 3 years after the inquiry is handled |
To reflect newly established inquiry channels for each business unit |
API Solutions website inquiry |
– |
[New] Items collected: (Required) Name, company name, email address, phone number, content of the inquiry / (Optional) Business registration certificate, attached files Retention period: 3 years after the inquiry is handled |
Same as above |
API Solutions chatbot inquiry |
– |
[New] Items collected: Name, company name, email address, contact number, inquiry details Retention period: 3 years after the inquiry is handled |
Because this is a chatbot on a public website that can also be used by non-members and does not presuppose a contractual relationship, it is processed on the basis of the data subject's consent (※ As it differs in nature from the Flitto Enterprise chatbot inquiry, it is classified separately: see 1-3) |
Application to use the Flitto Arcade service |
Purpose of collection: Application for use (identifying the user, confirming intent to apply, preventing fraudulent use), creating research data for the advancement of artificial intelligence |
[Changed] Purpose of collection: Added participation in point-reward AI training data collection campaigns and provision of language-tailored services |
To specify the campaign-oriented purpose of the service |
Participation in Flitto Arcade missions |
Purpose of collection: Participation in personal voice recording missions, creation of research data for the advancement of artificial intelligence and commercial use Items collected: User voice information, information converted from voice to text (*used after de-identification by severing the link to the member account) Retention period: Upon account withdrawal |
[Changed] Purpose of collection: Scientific research for the advancement of speech recognition technology specified Note on items collected: Stored separately from member identification information immediately upon collection and strictly managed so that a specific individual cannot be identified without combining additional information Retention period: Upon withdrawal of the user's consent (however, the necessity of retention is reviewed every 3 years from the date of collection) |
To specify the criteria for separate storage and management of voice data and the destruction/review cycle |
Flitto Localization website inquiry |
– |
[New] Items collected: (Required) Inquiry type, company name, name of person in charge, email address, phone number, language selection (source and target languages), content of the inquiry / (Optional) Business registration certificate Retention period: 3 years after the inquiry is handled |
To reflect newly established inquiry channels for each business unit |
Use of common and general services |
Listed in table ③ (consent-based) |
[Moved] Moved to ④ Items processed without the user's consent (Article 15(1)(6) of the Act) → see (1)-4 |
Prevention of fraudulent use, response to disputes, and statistical analysis constitute processing necessary to achieve the legitimate interests of the Company |
(1)-3. Items Processed Without the User's Consent
Personal Information Protection Act (Article 15(1)(4))
Category / Service |
Current |
Amended |
Reason |
Flitto membership registration (email/SNS) and identity verification |
③ Based on user consent
Items collected: Email address, native language
(Required) Email address / (Optional) User name |
[Moved and Changed] ④ Basis: performance of contract
Items collected: Member ID, password, email address, native language
[Common] Access Token [Google] Name, profile picture, email address, ID, native language [Facebook] (Required) Name, profile picture, ID, native language / (Optional) Email address [Apple] (Required) Name, ID, native language / (Optional) Email address [Kakao] Email address, profile picture, nickname, ID, native language [Facebook, Apple] Alternative ID
Items collected: Email address, verification code Retention period: 1 year after account withdrawal |
Membership registration is processing essential to the conclusion and performance of the service use contract, and since the items actually provided differ by SNS operator, these are specified in detail |
Entry/modification of Flitto member information |
③ Based on user consent Purpose of collection: Provision of customized services, delivery of notices, sending newsletters Items collected: (Optional) Country of residence, languages spoken (foreign languages), mobile phone number |
[Moved and Changed] ④ Basis: performance of contract Purpose of collection: Provision of multilingual services and a customized UI, provision of country-specific services (time zone, access environment) and compliance with local laws (payment currency, etc.), identity verification and prevention of fraudulent use, delivery of important notices, handling of customer service (CS) inquiries Items collected: (Required) System language / (Optional) Languages used, country of residence, mobile phone number |
To correct system language — which is essential to service provision — to a required item, and to separate the newsletter-sending purpose into a distinct "newsletter subscription" item |
Flitto point charging (domestic users) |
③ Based on user consent Items collected: Card issuer name, card number, payment method, transaction number Retention period: 5 years from the date of payment |
[Moved and Changed] ④ Basis: performance of contract Items collected:
[Order information] Order ID, member ID of the orderer, payment amount, date and time of order/access, country of access [Payment history] Payment ID, date and time of payment, transaction ID (TID), name of payment method, partially masked card number/account number
[Credit card] (Required) Card number, expiration date, card issuer name (including IP in the case of BC Card) / (Optional) Email address [Mobile easy payment] Mobile phone number, full name, date of birth, gender, carrier information [Real-time account transfer] Bank name, account number, account holder name, date of birth [Easy payment] Linked identification value, CI/DI Retention period: 5 years after payment (Act on Consumer Protection in Electronic Commerce and its Enforcement Decree) |
Payment falls under performance of contract and statutory record-keeping obligations; the processing parties are described separately to make clear that the Company does not directly store sensitive information such as card numbers |
Flitto point charging (overseas users) |
– |
[New] Items collected:
[Order information] Order ID, member ID of the orderer, payment amount, date and time of order/access, country of access [Payment history] Payment ID, date and time of payment, transaction ID (TID), name of payment method (PayPal, Paymentwall), partially masked payment method information
[PayPal] Account ID, email address, payment amount, etc. [Paymentwall] Credit card information, bank account information, email address, payment amount, etc. Retention period: 5 years after payment |
To reflect the fact that domestic and overseas payment methods differ |
First-time use of the Flitto Store |
– |
[New] Purpose of collection: Identity verification upon first use of the Store, prevention of identity theft and fraudulent use, provision of a safe e-commerce environment
Retention period: 1 year after account withdrawal |
To reflect the newly introduced identity verification procedure for Store use and to clarify the party processing the verification information |
Application to purchase Flitto Store mobile vouchers/gift cards |
2 rows: application to purchase mobile vouchers, application for gift cards (Amazon Giftcard, Rakuten Point) Items collected: Full name, mobile phone number, email address Retention period: 5 years from the date of purchase/dispatch |
[Changed] Consolidated into 1 row Items collected: [Recipient information] Name, mobile phone number, email address [Orderer information] Member ID, email address, sign-up IP, order IP, identity verification result [Purchase information] Item, date and time of order, date and time of payment Retention period: 5 years after payment |
To distinguish recipient information from orderer information, and to specify the processing of IP addresses and verification results for the prevention of payment fraud and misuse |
Flitto Store Cash-Out application (domestic) |
Domestic user remittance application Items collected: Account holder name, first 7 digits of the resident registration number, bank where the account was opened, account number Retention period: 5 years from the date of payment |
[Changed] Items collected: [User information] Member ID, name, mobile phone number, email address, bank name, account holder name, account number [Remittance processing history] Date and time of remittance request, amount of points exchanged, remittance amount, remittance result, remittance date, unique remittance number (※ Regarding the collection of resident registration numbers, please refer to the withholding tax item below) Retention period: 5 years after remittance (Act on Consumer Protection in Electronic Commerce, Electronic Financial Transactions Act, Framework Act on National Taxes) |
Following a change in the method of verifying the real name of the account, collection of unique identifying information has been discontinued, and the basis for retaining remittance processing records has been specified |
Flitto Store Cash-Out application (overseas) |
Overseas user remittance application Items collected: Full name, address, mobile phone number, email address, receiving country, receiving bank (SWIFT), receiving account number, (Optional) intermediary bank |
[Changed] Items collected: [User information] Full name (surname, given name), middle name (if applicable), address (country, state/province, district/neighborhood, detailed address), postal code, phone number, email address [Account information] Country where the account was opened, bank name, bank address, bank identification code, account number, (if an intermediary bank exists) bank name and bank identification code [Remittance processing history] Date and time of remittance request, amount of points exchanged, remittance status, date and time, unique number, remittance amount, purpose of remittance, applied exchange rate and fees Purpose of collection: Added identity verification for compliance with the Foreign Exchange Transactions Act and international anti-money laundering (AML) regulations Retention period: 5 years after remittance |
To reflect the items and legal bases required for overseas remittance operations (validation of the receiving bank, AML compliance) |
Flitto Store PayPal remittance application |
PayPal Cash-out application Items collected: Full name, phone number, PayPal account, PayPal transaction number Retention period: 5 years from the date of payment |
[Changed] Items collected: [User information] Member ID, full name, mobile phone number, email address, PayPal account, IP at the time of sign-up, order IP [Remittance processing history] Date and time of remittance request, amount of points exchanged, currency, remittance status, transaction ID, remittance date and unique number, final remittance amount Purpose of use: Added detection and blocking of overseas abnormal transaction abuse and identity theft using the access IP Retention period: 5 years after remittance |
To reflect the purpose of responding to overseas abnormal transactions and the items actually processed |
Flitto Store exceptional remittance application |
– |
[New] (where Cash-Out is not available in the Store) Items collected: [Collected by the customer center] Member ID, inquiry history, screenshot of the remittance error [Collected via the Company's own form] Points requested for remittance, account holder name, bank name, account number, copy of the bankbook [Remittance processing history] Date and time of remittance request, amount of points exchanged, remittance result, date and time, unique remittance number (※ Regarding the collection of resident registration numbers, please refer to the withholding tax item below) Retention period: 5 years after remittance |
To reflect the manual remittance processing procedure in the policy and to specify the purpose of collecting a copy of the bankbook (prevention of identity theft and erroneous remittance) |
Flitto Store Upwork Donation withdrawal application |
Withdrawal application for residents of Ukraine (Upwork donation) Items collected: Full name, mobile phone number, email address, Upwork account Retention period: 5 years from the date of payment |
[Changed] Restriction to a region of residence removed from the title Items collected: [User information] Member ID, full name, mobile phone number, email address, order IP, Upwork Donation URL [Order details] Order amount, date and time of order [Payment receipt] Unique receipt identification number, date and time of payment, recipient name, recipient's country/city of residence, name of the transaction item, transaction amount, fees and taxes, total payment amount Retention period: 5 years after remittance |
To reflect the expansion of the service's eligible users and the items involved in issuing receipts |
New Arcade – service use |
Flitto NewArcade – application to use the service ③ Based on user consent Items collected: Full name, gender, date of birth, country of origin, country of residence, language information, mobile phone number |
[Moved and Changed] ④ Basis: performance of contract Purpose of collection: Confirming intent to register and verifying the freelancer's identity, assigning translation projects and providing progress updates and deliverables, evaluating the translator's competence and expertise, verifying whether the person is of legal age (has legal capacity) for the conclusion of a freelance service contract, creating research data Items collected: Full name (surname, given name), date of birth, country of origin, country of residence, language information, country code, mobile phone number (collection of gender discontinued) |
This constitutes processing for the performance of a freelance service contract, and the gender item, being unnecessary for achieving the purpose, has been deleted |
All items relating to Flitto Pro (professional translators) |
4 items: application as a professional translator, submission of credential documents, entry of personal information, entry of translation fee payment method (domestic/PayPal) |
[Deleted] |
Deleted due to termination of the service |
Flitto Enterprise membership registration |
③ Based on user consent Items collected: (Required) Full name, email address, mobile phone number, affiliated company information (company name, position) |
[Moved and Changed] ④ Basis: performance of contract Items collected: (Required) Manager's full name, email address, company name, position / (Optional) Country code, mobile phone number |
This constitutes performance of a corporate service contract, and the mobile phone number has been changed to an optional item |
Flitto Enterprise website chatbot inquiry |
– |
[New] ④ Basis: performance of contract Items collected: Name, email address, company name Retention period: 3 years after the inquiry is handled |
The Enterprise chatbot is a channel provided on dedicated sites for each client company, so it constitutes handling of inquiries arising in the course of performing an already concluded contract (※ The API Solutions chatbot inquiry, which can also be used by non-members, is classified separately on a consent basis) |
Flitto Workspace (WSP) identity verification |
Identity verification ③ Based on user consent Items collected: (Required) Mobile phone number (including country code), email, name, country of residence |
[Moved and Changed] ④ Basis: performance of contract Purpose of collection: Identity verification for membership registration, prevention of duplicate registration, prevention of identity theft and fraudulent use Items collected: Identity verification result, country/region (code), mobile phone number |
To separate the identity verification procedure from the membership registration procedure, and to list only the items actually stored at the verification stage |
Flitto Workspace membership registration |
Included in the identity verification item |
[New] Items collected: Flitto account, contact email address, name, country of residence Retention period: 1 year after account withdrawal |
Same as above |
Flitto Workspace entry/modification of member information |
– |
[New] Items collected: System language Purpose of use: Provision of customized services and optimization of the UI/UX language |
To reflect the items actually collected |
Flitto Workspace entry of settlement information and settlement processing |
5 rows: account real-name verification (bank where the account was opened, account number, date of birth, account holder name / not stored); entry of settlement method for domestic residents (account holder name, bank, account number); mobile identity verification for domestic residents (full name, date of birth, gender, CI, DI, mobile phone number and carrier, Korean/foreign national status / not stored); entry of settlement method for overseas residents (PayPal); entry of settlement method for overseas residents Retention period: 5 years from the date of payment |
[Changed] Consolidated into 1 row Items collected:
[User information] Identity verification result (account holder name), bank name, account number, date of birth [Information processed by the identity verification agency] (not stored on the Company's servers) Full name, date of birth, gender, CI, DI, mobile phone number and carrier, Korean/foreign national status
[PayPal] PayPal email address [Overseas account] (Required) Name, address, postal code, mobile phone number, email address, country where the account was opened, bank name, bank address, bank identification code, account number (Optional) Surname, middle name, intermediary bank information
(※ Regarding the collection of resident registration numbers, please refer to the withholding tax item below) Retention period: 5 years after remittance (Act on Consumer Protection in Electronic Commerce, Electronic Financial Transactions Act, Framework Act on National Taxes) |
To consolidate the settlement procedure into a single item, delete items not actually collected such as the PayPal transaction number, and distinguish information processed by agency providers from information stored by the Company |
Personal Information Protection Act (Article 15(1)(6))
Category / Service |
Current |
Amended |
Reason |
Access to and use of common and general services |
③ Consent-based Purpose of collection: Prevention of fraudulent use by problematic members, imposition of use restrictions, sanctions against acts obstructing service operation, preservation of records for dispute resolution, provision of statistics and customized services, ascertaining access frequency, service improvement and development, handling of user inquiries Items collected: (Required) Identity verification value, all normal and abnormal logs, records of improper use, behavioral information, cookies, IP address, device identification value, browser type Retention period: 3 months from the date of access |
[Moved and Changed] ④ Basis: Article 15(1)(6) of the Act (legitimate interests) Items collected: Notation "(automatically collected through the website)" added Retention period: Behavioral information and cookies are governed by Article 11 (Matters Concerning the Collection, Use of, and Refusal of Behavioral Information) (stored in the advertising provider's system); other information is retained for 3 months from the date of access |
To clarify that this constitutes a legitimate interest ground for processing without consent, and to align the retention period for behavioral information with the advertising provider's policy |
Personal Information Protection Act (Article 15(1)(2) and (4)) :Income Tax Act (Article 127 Withholding Obligation, Article 143 Issuance of Withholding Tax Receipts for Earned Income, and related statutes)
Category / Service |
Current |
Amended |
Reason |
Flitto Store / Workspace – withholding tax at the time of settlement and remittance |
2 rows for real-name verification for withholding tax purposes Items collected: Full name, resident registration number (alien registration number), income classification Legal basis: Income Tax Act Articles 127, 145, and 164; Enforcement Decree of the Framework Act on National Taxes Article 68(1) and (3) |
[Changed] Consolidated into 1 row Items collected: Full name, resident registration number/alien registration number, settlement amount Retention period: 5 years from the day following the statutory filing deadline for the relevant national tax for the taxable period to which the transaction belongs {Framework Act on National Taxes Article 85-3} Legal basis: Income Tax Act Articles 127, 143, 145, and 164 |
To state the retention period separately, supplement the supporting statutory provisions, and correct the items to those actually processed |
(2) Retention and Use Period of Personal Information
Current |
Amended |
Reason |
④ Statutory retention table: "Preservation of records on contracts or withdrawal of offers" (5 years) and "Preservation of records on payment and the supply of goods, etc." (5 years) listed as separate rows |
[Changed] The two items consolidated into 1 row ("Preservation of records on contracts or withdrawal of offers / Preservation of records on payment and the supply of goods, etc.," consumer identification information and contract/withdrawal-of-offer records, 5 years) |
To clean up duplicate entries for items with the same governing statute and retention period |
Income Tax Act row: Unique identifying information (resident registration number for Korean nationals, alien registration number for foreign nationals), full name, address |
[Changed] [Korean nationals] Resident registration number, full name / [Foreign nationals] Alien registration number, full name, address |
To distinguish the items actually retained for Korean and foreign nationals |
Notation in paragraphs ② and ③: "IP Address," "본인 확인값" |
[Changed] "IP 주소," "본인 확인 값" |
Standardization of Korean-language notation |
(3) Outsourcing of Personal Information Processing
(3)-1. Domestic Outsourcing
Outsourced task |
Current processor |
Amended processor |
Reason |
Remittance operations |
Hyphen Corporation, Hana Bank |
Hana Bank |
Hyphen Corporation is entrusted with account real-name verification services |
Newsletter dispatch / mailing list management |
Stibee, Inc., PEAT Inc. (PeatPaper) |
Stibee, Inc. |
PeatPaper is used only for sharing links to the company introduction materials, and no personal information is outsourced to it |
(3)-2. Overseas Transfer
Transferee |
Current |
Amended |
Reason |
Amazon Web Services Inc. |
IT infrastructure operation, cloud server management, and data storage |
[Changed] Identity verification added to the outsourced tasks; data encryption maintained among the security measures |
To reflect the actual scope of outsourcing |
Paymentwall, Inc. |
Country of transfer: United Kingdom / Contact information incorrectly stated |
[Changed] Country of transfer: United States / Contact: support@paymentwall.com |
Correction of facts |
PayPal |
Contact information incorrectly stated, security measures added |
[Changed] Contact: skrprivacy@paypal.com / Security measures: Compliance with PCI DSS Level 1 Service Provider certification, GDPR compliance, encryption of data in transit (TLS 1.2 or higher), payment information transmitted directly to the payment window (not routed through the Company's servers) |
Correction of facts |
Twilio |
Identity verification and phone number registration at the time of Flitto membership registration |
[Changed] Mobile phone number registration for Flitto and Flitto Workspace, and verification at the time of New Arcade membership registration |
To reflect the expanded scope of outsourcing |
Google LLC (Google Analytics / Firebase) |
Retention period: Until account withdrawal or termination of the outsourcing agreement |
[Changed] Retention period: The period set by the Google Analytics data retention setting (2 months from the date of collection), or until termination of the outsourcing agreement |
To reflect the actual data retention setting |
Google LLC (Google Workspace – Drive, Sheets) |
– |
[New] Purpose of collection: Managing the status of project applicants and storing test materials Items collected: All applicant-entered information, including full name, date of birth, email address, nationality, Flitto ID, project participation history, and mobile phone number Retention period: 3 years after the end of the recruitment process (destroyed without delay upon the applicant's request) |
To reflect actual processing in the freelancer recruitment process |
Microsoft Corporation (Clarity) |
– (stated only in Article 11 on behavioral information) |
[New] Purpose of collection: Analyzing user interaction with the website and improving usability Items collected: Behavioral information (mouse clicks, scrolling, dwell time, etc.) Retention period: 30 days for session replay data; up to 9 months for other data, or until termination of the outsourcing agreement |
To remedy the omission of this overseas transfer |
Jotform Inc. |
– |
[New] Purpose of collection: Operating online application forms for the recruitment of freelance workers and collecting and storing applicant information Items collected: Full name, email address, mobile phone number, country/region of residence, native language, working languages, available workload, career history/résumé, IP address and access logs, certification information Retention period: 3 years after the end of the recruitment process |
To remedy the omission of this overseas transfer |
Overseas receiving bank/intermediary bank designated by the user, and the SWIFT network |
– |
[New] Purpose of collection: Processing overseas remittances, validating the recipient's account, and complying with statutes such as AML requirements Items collected: Recipient's full name (in English), overseas receiving account number, receiving bank name and address, bank identification code, recipient's address Retention period: 5 years after remittance (or, where the laws of the relevant country impose a mandatory retention period, that period) Security measures: Compliance with SWIFT CSP, etc. |
To remedy the omission of the fact of overseas transfer in the case of overseas remittances |
(4) Personal Information Manager (Article 8)
Current |
Amended |
Reason |
Personal Information Officer: Department — Operations Team, Officer — Kim Jin-gu, Email — privacy@flitto.com |
[Changed] Name: Kim Jin-gu / Department: Operations Team / Title: CDO / Contact: privacy@flitto.com |
Supplementation of the officer's information |
Reporting and consultation bodies: Personal Information Dispute Mediation Committee, Privacy Infringement Report Center, Cyber Investigation Division of the Supreme Prosecutors' Office, Cyber Investigation Bureau of the National Police Agency (182) |
[Changed] Name and link corrected to the National Police Agency Cybercrime Reporting System (ECRM, 182) |
Updating of the institution's name |
④ Guidance on filing an administrative appeal (Central Administrative Appeals Commission) against dispositions taken by the head of a public institution in response to requests under Articles 35, 36, and 37 of the Personal Information Protection Act |
[Deleted] |
Deletion of a provision applicable to public institutions |
(5) Collection, Use of, and Refusal of Behavioral Information (Article 11)
Current |
Amended |
Reason |
① The Company directly collects and uses users' behavioral information |
[Changed] ① The Company directly collects and uses the behavioral information of users (including non-members) |
Clarification of the scope of application |
Google (Analytics, Firebase) retention, use, and destruction: "The Company does not directly collect or store the data" |
[Changed] The data is not separately stored on the Company's servers but is collected and stored in the advertising provider's system; the retention period is up to 2 months from the date of collection, after which it is destroyed in accordance with the advertising provider's retention policy |
Specification of the retention period |
Microsoft (Clarity) retention, use, and destruction: Same wording |
[Changed] Retention period specified as up to 9 months (30 days for session replay data) |
Same as above |
② Opt-out methods: Only refusal of mobile advertising identifier collection (Android/iOS) was described |
[Changed] ② Expanded opt-out methods:
|
Supplementation of guidance on opt-out methods in the web environment |
– |
[New] ③ Where a user refuses the collection of behavioral information, restrictions may arise in the use of customized services and certain functions, but there is no effect on the use of basic services |
Guidance on the effects of exercising the right to opt out and on the inquiry channel |
(6) Relocation of Article 12 and Subsequent Articles
Current |
Amended |
Reason |
Article 12 Matters concerning the use of the YouTube API (YouTube subtitle translation service, deemed consent to the YouTube Terms, method of revoking data access permissions) |
[Deleted] |
Termination of the relevant service |
Article 13 Matters concerning the use of Google reCAPTCHA |
[Moved] Article 12 (content unchanged) |
Renumbering of the article |
Article 14 Matters concerning personal location information |
[Moved] Article 13 (content unchanged; notation for the location information manager and grievance handling officer revised to specify the title of CDO and contact information) |
Renumbering of the article |
5. Withdrawal of Consent and Refusal of Overseas Transfer
- You may withdraw your consent at any time with respect to items processed on the basis of consent, such as the receipt of marketing information and participation in Flitto Arcade. Upon withdrawal, the relevant personal information will be destroyed in accordance with the amended Privacy Policy.
- Users may refuse the transfer of their personal information overseas. However, because cross-border data backups are performed in order to safely protect user data from disasters and other contingencies, refusing such transfer will result in restrictions on the use of the services. If you do not wish your information to be transferred, please proceed with account withdrawal or raise an objection through the Flitto Help Center.
- If you do not agree to the amendments, you may terminate the service use agreement by withdrawing your membership. If you do not raise a separate objection by the effective date, you will be deemed to have agreed to the amended content.
6. Contact
If you have any questions regarding the amendments, please contact us at the following.
- Personal Information Protection Officer: Lee Jung-soo (CEO) / help@flitto.com
- Personal Information Manager: Kim Jin-gu, Operations Team / privacy@flitto.com
The full text of the amended Privacy Policy will be available on the [Privacy Policy] page from the effective date. The pre-amendment policy will also be posted so that you may compare the two.
We will continue to do our utmost to provide a convenient and satisfying service.
Thank you.
The Flitto Team