0. Personal Information Controller
The controller of personal information processed by AZ Entertainment (https://azentertainment.kr) is its operator, AZ Entertainment (AZ MCN), sole proprietor Jiseon Lee, Korean business registration no. 629-45-01136, A-3635, 301 Incheon tower-daero, Yeonsu-gu, Incheon, 22007, Republic of Korea.
- -Contact: content@azentertainment.kr
1. Personal Information Collected and Methods of Collection
The Company collects the following personal information to provide the AZ Entertainment service.
- -Required information: name, email address, Google account identifier (ID), profile photo URL
- -Optional information: contact details (telephone number), company name/trade name, business registration number
- -Information collected when connecting through Google OAuth: Google account email, name, profile image
- -Information collected when connecting through the YouTube API: YouTube channel ID, channel name, subscriber count, views/likes/comments per video, watch time, impressions, click-through rate (CTR), traffic sources, demographic data
- -Information collected when connecting through the Instagram API: Instagram user ID, username, follower count, post count, profile image
- -Information collected when connecting through the TikTok API: TikTok Open ID, display name, follower count, video count, like count
- -Automatically collected information: IP address, browser type, access date and time, cookies, service usage records
- -When entering into an MCN (creator agency) electronic agreement: name, email, date of birth, country of residence, signature image, signature records (timestamp, browser, and a hash of the IP address), and, for minors, the legal representative's name, email, and relationship (legal basis: Personal Information Protection Act, art. 15(1)4, conclusion and performance of a contract. Signature images are not used for analysis other than signature verification)
- -Brand inquiries and quotes (business inquiry form): contact person's name, e-mail address, telephone number (optional), company or trade name. If you tick "Buying as a business": billing country and address, tax identification number (Korean business registration number, EU VAT number, GST number, US EIN or a similar business number; do not enter a resident registration number, a Social Security Number or any other personal ID number) and the result of checking it (valid/invalid, the registry used, date and time). Legal basis: steps taken at your request before entering into a contract (Personal Information Protection Act, art. 15(1)4); for Korean business customers, issuing a tax invoice showing the business registration number, name and address is required by law (art. 15(1)2; Value-Added Tax Act art. 32(1) and Enforcement Decree art. 67(2)). Korean business registration numbers are checked against the National Tax Service business status service; other numbers are checked only for format. A successful check does not by itself decide the tax treatment, which also depends on how payment is made (added 2026-10-17)
- -Methods of collection: registration, Google/social OAuth authentication, automatic collection during use of the service
2. Purposes of Using Personal Information
Collected personal information is used for the following purposes.
- -Registration and membership management: identity verification, member identification, account management
- -Service provision: creator network (MCN) membership and electronic agreements, connecting creators with brand collaborations
- -YouTube/social media analytics: analyzing creators' channel performance, providing performance reports to advertisers
- -Settlement: settlement of creator earnings under MCN agreements
- -Customer support: responding to inquiries, dispute mediation, service notices
- -Service improvement: analyzing usage statistics, improving service quality, developing new features
- -Compliance with legal obligations: compliance with applicable laws, including the Act on the Consumer Protection in Electronic Commerce and the Protection of Communications Secrets Act
3. Google API Services User Data Policy
AZ Entertainment's use of Google API Services and transfer of information received from Google API Services to other apps comply with the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
- -Google user data is used only for the purposes specified in this Privacy Policy.
- -Google user data is not sold to third parties.
- -Google user data is not used for advertising purposes.
- -Google user data is not used to assess creditworthiness or for lending purposes.
- -Google user data may be transferred to third parties only with the user's explicit consent, for security/legal purposes, or in the event of a merger/acquisition involving the user.
- -Users may disconnect Google and request deletion of their data at any time through their account settings.
4. Use of YouTube API Services
AZ Entertainment uses YouTube API Services (https://developers.google.com/youtube/terms/api-services-terms-of-service). Data collected through YouTube API Services is subject to the Google Privacy Policy (https://policies.google.com/privacy).
- -Scope of YouTube data collection: channel statistics (subscribers, views), performance per video (views, likes, comments, watch time), daily channel statistics, traffic sources, demographic information
- -Purposes of using YouTube data: providing creator performance analytics dashboards, providing campaign performance reports to advertisers, optimizing creator-advertiser matching
- -YouTube data is not sold to or shared with third parties without the user's explicit consent.
- -Users may revoke this service's access to their YouTube data at any time through Google security settings (https://security.google.com/settings/security/permissions).
- -Upon revocation of access, the Company deletes the user's YouTube-related data without delay.
5. Retention and Use Periods for Personal Information
Personal information is destroyed without delay once the purpose of collection has been fulfilled. However, where retention is required by applicable laws, it is retained for the required period.
- -Account closure: destroyed within 30 days after closure (retained for 30 days to address disputes, then destroyed)
- -Records of electronic commerce contracts/withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce)
- -Records of payments/supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce)
- -Records of consumer complaints/dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)
- -Access logs: 3 months (Protection of Communications Secrets Act)
- -YouTube/social media analytics data: destroyed within 30 days after disconnection or account closure
- -MCN electronic agreement documents and signature records: 10 years after termination of the agreement (Commercial Act, art. 33)
- -Brand inquiries that did not lead to an order: 1 year from receipt
- -Invoices, tax identification numbers and verification records: 5 years after the VAT return deadline for the period of the transaction; 7 years for transactions with customers outside Korea (Value-Added Tax Act art. 71(3); Framework Act on National Taxes art. 85-3(2)). They are stored separately and used only for tax and accounting (Personal Information Protection Act art. 21(3))
6. Provision of Personal Information to Third Parties
In principle, the Company does not provide personal information to third parties without the user's consent. Exceptions are limited to the following cases.
- -Where the user has given prior consent
- -Where a creator's public channel statistics (subscriber count, views, etc.) are provided to an advertiser when executing a campaign (with the creator's prior consent)
- -Where required by law or requested by an investigative authority
- -Where necessary to provide the service (such as payment processors) and a processing entrustment agreement has been entered into
7. Entrustment of Personal Information Processing
The Company entrusts the processing of personal information as follows to ensure smooth service provision.
- -Cloud infrastructure (web hosting, databases, file storage, email delivery, agreement PDF generation): Cloudflare, Inc.
- -Backup email delivery (when Cloudflare delivery fails): Resend, Inc.
- -Collection of service errors: Functional Software, Inc. (Sentry)
- -Verification of bank transfer deposits: PayAction
- -Processors receive only the minimum information necessary for the entrusted purpose, and personal information protection obligations are imposed through processing entrustment agreements.
7-2. Overseas Transfer of Personal Information
The Company processes and stores personal information overseas as follows to provide the service (Personal Information Protection Act, art. 28-8(1)3(a)). Users who do not wish to allow such transfers may refuse by closing their accounts, but will then be unable to use the service.
- -Cloudflare, Inc. (United States and countries where Cloudflare data centers are located, privacy@cloudflare.com) — Information transferred: member information, service usage records, channel information, payment and settlement records, electronic agreement documents, business customer information (company name, country, billing address, tax identification number, verification record) / Purpose: web hosting, databases, file storage, email delivery / Timing and method: transmitted over the network when the service is used / Retention period: until account closure or the end of the statutory retention period
- -Resend, Inc. (United States) — Information transferred: email address, email body / Purpose: backup delivery of verification emails / Timing and method: transmitted over the network when Cloudflare delivery fails / Retention period: destroyed after delivery processing in accordance with the processor's retention standards
- -Functional Software, Inc. (Sentry, United States) — Information transferred: IP address, browser information, error records when an error occurs / Purpose: service error analysis / Timing and method: transmitted over the network when an error occurs / Retention period: 90 days
8. Users' Rights and How to Exercise Them
Users may exercise the following rights regarding their personal information at any time.
- -Request access to personal information: users may access their personal information held by the Company.
- -Request correction/deletion of personal information: users may request correction of inaccurate information or deletion of unnecessary information.
- -Request suspension of personal information processing: users may request that processing of their personal information be suspended.
- -Revoke access to Google/YouTube data: users may directly revoke access through Google security settings (https://security.google.com/settings/security/permissions).
- -Disconnect social media: users may disconnect Instagram, TikTok, and other platforms through the service settings.
- -Close an account: users may close their accounts through the service settings, and all personal information is destroyed upon account closure.
- -These rights may be exercised through the service settings or by email (content@azentertainment.kr), and requests are processed within 10 days of receipt.
9. Measures to Safeguard Personal Information
The Company takes the following technical, administrative, and physical measures to safeguard personal information.
- -Technical measures: encrypted transmission of personal information (TLS), encryption of stored data, row-level access controls, storage of login session tokens only as hashes
- -Administrative measures: limiting the number of employees handling personal information, regular security training
- -Social media token security: OAuth tokens are stored in encrypted form, and only the minimum necessary scopes are requested.
10. Use of Cookies
The Company uses cookies for users' convenience.
- -Purposes of using cookies: maintaining login status, saving user preferences, analyzing service usage
- -Cookie management: users may allow or block cookies through their browser settings.
- -Blocking cookies may restrict use of certain services.
11. Privacy Officer
The privacy officer responsible for overseeing personal information processing is as follows.
- -Service name: AZ Entertainment / Operator: AZ Entertainment (AZ MCN), sole proprietor Jiseon Lee, Korean business registration no. 629-45-01136, A-3635, 301 Incheon tower-daero, Yeonsu-gu, Incheon, 22007, Republic of Korea
- -Privacy officer: Jiseon Lee, Representative
- -Email: content@azentertainment.kr
- -Website: https://azentertainment.kr
- -Users may contact the officer above regarding all personal information protection inquiries, complaints, and requests for redress arising from use of the service.
12. Changes to the Privacy Policy
This Privacy Policy may be revised in response to changes in laws, policies, or the service. Changes will be announced in advance through service notices or email.
- -Effective date: 2026-10-13
- -2026-10-17: added brand inquiry, quote and invoice information (sections 1, 5 and 7-2)