Privacy Policy

Sign-up: email address, name (display name), password (stored encrypted, for email sign-up), and a record of confirming "I am 14 years of age or older". If you sign up with Google, the email address, name, and profile photo that Google provides.

Purchases: depositor name, and order, deposit, and refund records.

Instructors: real name, contact details, the bank account to which course fees are paid (the account number is stored encrypted), and, for business operators, the business registration number. For individual instructors, the resident registration number (stored encrypted), used only for withholding tax filings on course fees under Article 68(3) of the Enforcement Decree of the Framework Act on National Taxes.

Usage records: learning progress and daily study time, playback device identifier (a random value generated per browser), a hash of the connecting IP address (the original IP address is not stored), and browser information.

What members upload: profile (photo, introduction, links), beats, samples and posts, message content, and report and response content.

If you pay with PayPal (overseas purchasers): the PayPal order ID and payment ID, the amount paid (in US dollars), and the payment status. Payment method information such as card numbers and PayPal account information are received directly by PayPal, not by the Company.

If you pay by card or a Korean easy-pay service: the payment number, the amount paid and the payment status. Card numbers and other payment details go directly to the payment gateway; we do not receive them.

Verifying members and managing accounts, selling classes and confirming deposits, providing courses, settlement of accounts, handling refunds and disputes, preventing account sharing and leakage of videos and textbooks, and sending service emails (sign-up confirmation and password reset).

Advertising and marketing emails are sent only to members who have separately consented.

To prevent leakage, videos and textbooks (PDF) display a partially masked email address (only the first 3 characters are visible) and the order code.

On withdrawal, account information and the profile photo are destroyed without delay. Beats and samples are handled as the member chose at withdrawal: if "Delete" is chosen, they are destroyed after 30 days; if "Keep" is chosen, they remain without author information (Section 4). However, records required by law are kept separately for the periods below.

Records of contracts and withdrawal of purchases: 5 years; records of payment and supply of goods: 5 years; records of consumer complaints and dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce); connection logs: 3 months (Protection of Communications Secrets Act).

On withdrawal, without delay, the account's email address and name are deleted or altered so that they can no longer identify the person, the profile photo is deleted from storage, the password and Google account link information are deleted from the database, and the login sessions on all devices are terminated. For instructors, the real name, contact details, settlement bank account, business registration number, and resident registration number are also deleted.

Transaction records that must be kept by law (Section 3 above) are retained only as order, payment, and refund records separated from member information, and are deleted when the retention period ends.

The profile photo is deleted from storage immediately upon withdrawal, without waiting 30 days. If deletion fails, it is retried without delay.

Beats and samples are chosen by the member on the withdrawal screen. If "Delete" (default) is chosen, they are taken down from public view immediately upon withdrawal and, in case of accidental withdrawal, the audio, video, images, and sample sounds attached to the works are deleted from storage 30 days later. After deletion the works are no longer public, and samples keep only their name and description while the sound is removed. If you wish to have them deleted sooner than 30 days, please make a request to the Chief Privacy Officer below. We will delete them without delay upon receiving the request.

If "Keep" is chosen, beats and samples remain public, the author is displayed only as "Withdrawn member", and the profile link and photo are not shown. Those beats and samples remain without author information, and the sample sources credited by other members are also retained. If you wish to have kept beats and samples deleted, please make a request to the Chief Privacy Officer below. We will delete them without delay upon receiving the request.

Photos, videos, and sounds attached to posts are deleted from storage 30 days after withdrawal, whichever option is chosen. The post remains as written by a "Withdrawn member", but the attached files are removed.

Video, PDF, and cover files of classes and textbooks that purchasing members must be able to keep using, and course completion photos, are not included in this automatic deletion. If you wish to have them deleted, please make a request to the Chief Privacy Officer.

Domestic outsourcing: Processor: the instructor of each class or textbook. Outsourced task: providing the course, such as answering students' inquiries and giving feedback. Information entrusted: display name, inquiry content, and the beat for which feedback was requested. Retention and use period: until the outsourced task ends. The instructor, as the creator of the class or textbook, uses this information on the Company's behalf only for the purpose of providing the course, and the Company manages and supervises the processor (Article 26 of the Personal Information Protection Act).

To operate the Service, we also outsource the processing of personal information to the companies below. These companies are located outside Korea, so personal information is transferred abroad (Article 28-8 of the Personal Information Protection Act). Transfers take place from time to time over the network while you use the Service.

The items transferred, the purposes, the retention periods, and each company's privacy contact are shown in the table below.

If you do not want your information transferred abroad, you may refrain from signing up or, after signing up, withdraw or notify us of your refusal at the contact above. If you refuse the transfer, you cannot use the Service because the operation of the Service itself depends on these companies (sign-up is not possible).

Payment processing is entrusted to PayPal only if you pay with PayPal, and the information is transferred abroad as shown in the PayPal row of the table below. If you do not want this transfer, you can purchase by bank transfer instead of PayPal.

For card and easy-pay payments, payment processing is entrusted to PortOne (payment integration service) and the payment gateway (PG). This data is not transferred abroad.

Domestic outsourcing: Processor: KG Inicis Co., Ltd.. Outsourced task: processing card and virtual-account payments (payment gateway). Information entrusted: the purchaser's name, mobile phone number and email, the order name and the amount paid (card numbers and other payment details go directly to KG Inicis). Retention and use period: until the outsourced task ends (or for any longer period required by law).

Domestic outsourcing: Processor: Korea PortOne Co., Ltd.. Outsourced task: payment integration (passing payment requests to the payment gateway and receiving the results). Information entrusted: the purchaser's name, mobile phone number and email, the order name, the amount paid and the payment number. Retention and use period: until the outsourced task ends (or for any longer period required by law).

We do not provide personal information to third parties. However, we comply with requests made in accordance with the law.

The display name, inquiry content, and feedback-request beats visible to the instructor of a purchased class or textbook are not provision to a third party but the outsourcing of processing described in Section 5 above.

Persons under 14 cannot sign up. At sign-up, we require the confirmation checkbox "I am 14 years of age or older".

Members may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, and may withdraw consent (by withdrawing from the Service). You can do this yourself in profile editing and the management screens, or by making a request at the contact below, and we will handle it without delay.

Passwords, bank account numbers, and resident registration numbers are stored encrypted. For connecting IP addresses, only a hash is kept instead of the original value. Administrator functions can be used only by authorized accounts. All communications are encrypted (HTTPS).

We use cookies to keep you signed in. We do not use advertising tracking cookies. If you block cookies in your browser settings, you cannot use features that require signing in.

Kim Changmyoung (Representative) · hello@grey.iaiu.net

To report a personal information infringement: Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without an area code).

This Policy applies from October 1, 2026. If it changes, notice will be given from 7 days before the change takes effect.