1. Scope and contact
This notice describes how HandyMax handles personal information for its website, accounts, product licensing and support. Contact hzm0407@gmail.com for privacy requests. Paddle handles the personal information it needs for its own checkout, tax, payment and fraud-prevention responsibilities under its own privacy notice. A linked login provider also has its own notice. This page does not replace those independent notices.
2. Information we process
Account information includes your email, profile name, avatar selection, language, verification and consent records. Product records include licenses, orders, subscriptions, refunds, product-scoped device identifiers, session and security events. Company services add membership, assigned role, invitations and seat assignments visible to authorized company administrators. Support includes information you choose to send and the correspondence needed to resolve a request. We do not request your payment-card number, password or private keys through support.
3. Why information is used
We use information to create and secure accounts, verify product access, deliver purchases, operate device and enterprise-seat controls, answer support requests, send service notices, prevent abuse and meet applicable recordkeeping obligations. Optional marketing requires separate consent and can be withdrawn without opting out of necessary security or billing messages. Where a legal basis is required, processing relies on the relevant service contract, legal obligation, consent or a permitted legitimate interest, as applicable.
5. Storage, security and retention
Account and licensing information is kept while the account or purchased right is provided. An account-closure request has a 30-day withdrawal window. When that window ends and no payment reconciliation or lawful hold blocks processing, active login credentials and linked login identities are deleted and profile identifiers are anonymized. Registration-verification records are subject to a 30-day deletion rule measured from their last update, and notification-recipient snapshots are subject to a 30-day anonymization rule measured from creation. Those two limited rules are not a promise that every contract, payment, dispute, consent, security, log or backup record is removed within 30 days. Other records are kept only for the applicable service, security, dispute or legal-record purpose described here; where no fixed statutory period applies, necessity is reviewed when the purpose ends or a verified request is received.
6. Deletion, anonymization and backups
Eligible electronic records are deleted with a database deletion operation or changed so they no longer identify the person. Records that must be retained by law or a valid hold are separated by purpose or access control and are not used for unrelated purposes. Disaster-recovery backups are access-restricted and are not used as the ordinary account database. An individual record cannot always be edited inside an existing backup; if a backup is restored, it must remain isolated until current account closures, anonymization and legal holds are reapplied. Backup copies may therefore outlive deletion from the active service. This policy does not promise that every backup is erased within the 30-day account-closure window.
7. Your choices and privacy requests
Use your account settings for available profile, language, marketing and account-closure controls. You may contact us to request access, correction, deletion or other rights available under applicable law. We may verify that a request comes from the account holder and explain any lawful restriction. Account closure has consequences for sign-in and purchased access; read the confirmation before proceeding. Company administrators may control work-related memberships but do not gain access to unrelated personal product purchases.
8. Browser storage and policy updates
The site uses essential session/security cookies and browser storage for language, theme and checkout continuity. These are distinct from consent to marketing. Any additional non-essential tracking must be assessed and disclosed before enablement. We identify material privacy changes by version and effective date rather than rewriting a past consent record. Contact support if you need clarification or a copy of the policy linked to your recorded consent.
9. Korean transaction records
Where Korean electronic-commerce recordkeeping duties apply, the relevant necessary records are retained separately by category: advertising records for 6 months; contracts or withdrawal for 5 years; payment and supply for 5 years; and consumer complaints or disputes for 3 years. These periods do not justify keeping unrelated device logs or support attachments. Public live payment is currently disabled, so payment-specific processing begins only if checkout is later enabled and an actual transaction occurs. Expiry of a statutory period triggers a category review and deletion or anonymization unless another lawful hold applies; it is not a representation that every historical backup is edited on that same day.
10. Privacy requests and complaints
The HandyMax individual operator handles privacy enquiries at hzm0407@gmail.com. Requests may include access, correction, deletion, restriction or withdrawal of consent, subject to applicable law and identity verification. An authorized representative may contact us with evidence of authority; do not send identity documents unless a necessary secure process has been agreed. Korean privacy complaints and counselling are also available through KISA at privacy.kisa.or.kr or telephone 118. Your HandyMax privacy contact is HUANG ZHEMIN, telephone +82 10-7772-2999; the KISA line is a separate external complaint channel.
Support & privacy contact
HandyMax · HUANG ZHEMIN