Bestuff Privacy Notice

Operator and privacy contact

Bestuff is a South Korean sole proprietorship operated from the Republic of Korea. Proprietor and privacy responsible person: Myunghwan Gong. Address: 1602-ho, 101-dong, 13, Daemyeong-gil, Gunsan-si, Jeonbuk State, Republic of Korea. Privacy and rights requests: bestuffsolution@gmail.com, +82-10-5941-0083. This notice covers the six Bestuff applications and shared account; The Good Stuff publication and newsletter have separate notices.

Accounts, work and support

We use Supabase authentication for email/password and optional Google sign-in. Account identifiers, verified email, authentication and session records support sign-in, account recovery, owner-only access and abuse prevention. Bestuff's account service exchanges authentication information with Supabase; do not send your password or access token in a support message.

Signed-in work, revisions, autosave recovery records, application activity and operation receipts are associated with your account to save, recover and synchronize your work and prevent conflicting or duplicate operations. Content you choose to write may itself contain personal information. Do not enter someone else's sensitive or private information without a proper basis.

If you contact support, we receive your contact details, message and attachments you choose to send. We use them to respond, verify a request, resolve an issue and record its outcome. Send only information needed for the request.

We process the information necessary to provide the account, saving, recovery and support you request to perform that service. We separately retain records required by law. Necessary security controls and limited first-party service measurement support our legitimate interests in protecting and improving the service, within the scope described here and subject to your applicable rights.

Cookies and information on your device

An essential cookie maintains your Bestuff account session. Ordinary sessions expire after 30 days and account-recovery sessions after 15 minutes. You can sign out or block/delete cookies using your browser; blocking the required cookie prevents signed-in functions.

Language preferences, guest drafts, recovery copies and local application settings can remain in browser storage until you remove them. Guest drafts do not automatically import into a signed-in account. Clearing browser storage can remove local-only work and does not erase the server account.

Lecture Studio audio/video recordings stay in the browser's local database. They are not uploaded as Bestuff cloud work and are not included in JSON exports. Download them separately. Browser permissions control microphone and camera access.

Optional AI, connections and external resources

Lecture Studio can prepare text for you to review and copy to an external AI service. MacroScope can send your message, recent conversation and relevant application context directly from your browser to the AI provider you configure when you submit a request. The provider API key stays in local application storage and is excluded from Bestuff cloud workspaces, but is transmitted directly to that provider to authenticate your request. The provider's privacy practices apply to the information you send.

A connected tool receives only the application, operations and resources you authorize. Revoking its permission stops future Bestuff access, but cannot erase a copy the tool already received. Review the tool's privacy notice before granting access.

Some application pages request external resources such as fonts or map tiles. Those requests can disclose your IP address and browser/request metadata to the resource provider even without signing in. One-Page Reading requests Google Fonts. External sign-in, payment and AI providers can also process their own network and security records.

Access, security and product measurement

Permission grants, expiry/revocation records and operation receipts enforce the access you authorize. Administrative account and audit records contain verified email, role, change history and reasons needed to control operator access. The administration interface does not expose customers' private document contents.

Selected product events contain an event identifier, application, event type, broad channel, server time and a pseudonymous account identifier. Those event fields exclude email, written work, prompts, recordings, URLs and credentials. We use them to understand use and reliability. They are separate from authentication and infrastructure logs, which can contain network or account identifiers.

We use owner-scoped access controls, encrypted account secrets and encrypted backup archives. These measures do not mean that every database is encrypted end to end or that the operator can never access data necessary to provide the service.

Payment information

Paid checkout is not currently available. If you later choose to buy through Paddle, Paddle will collect the payment and billing details for that transaction. Bestuff's billing system keeps account-linked transaction and subscription identifiers, purchased-benefit records, payment/access status and event-verification receipts to deliver purchases, handle refunds and avoid duplicate changes. It does not store full card details or raw payment-event bodies.

Paddle processes the payment transaction under its own buyer terms and privacy notice. Cancelling a subscription does not delete transaction records that must be retained, and requesting account deletion is separate from cancelling future renewal.

Service providers and overseas processing

Necessary hosting, authentication and account-email services process data on Bestuff's instructions to provide the service you request. Overseas outsourcing/storage needed for that service is disclosed here under Article 28-8(1)(3) of Korea's Personal Information Protection Act. Transfers occur through encrypted network connections when you visit, sign in, save, recover or request email; encrypted recovery archives are also copied on the backup schedule. The following primary locations do not imply that every support, security or subprocessor operation stays in one country.

Supabase Pte. Ltd provides account authentication and saved-work storage, including account/email identifiers, Auth/session data, work, revisions and operation records. The project's primary database/Auth location is Seoul, Republic of Korea. Supabase's contractual/support operations include Singapore and the United States, with service subprocessors listed at https://supabase.com/legal/customer-resources/subprocessor-list. Stored application records follow the retention and request procedure below; provider support/security records follow their applicable purposes and legal obligations rather than a universal purge day. Contact: privacy@supabase.io.

Hetzner Online GmbH hosts the Bestuff application/account server and encrypted recovery archives in Helsinki, Finland; its EU technical support operates from Germany. Account/session records and service requests are processed there during use, and archived account/work data during scheduled backup and recovery. Retention follows the record and archive rules below while Bestuff operates the server; provider records have their own applicable legal purposes. App/API access logging is disabled in the reviewed server configuration, while application diagnostics rotate by size. Contact: data-protection@hetzner.com.

Cloudflare, Inc. carries requests for the proxied bestuff.org site and configured application subdomains and network/security metadata, including IP addresses, as requests pass through its global network. Its policy identifies principal storage in the United States and European Economic Area, with global access/transfers; this is not a country-exclusive service. Customer-content processing serves delivery/security and follows customer instructions, service completion and applicable law; Cloudflare's own network/security records follow its separate policy and necessary retention. Contact: privacyquestions@cloudflare.com. Details: https://www.cloudflare.com/privacypolicy/ and https://www.cloudflare.com/gdpr/subprocessors/.

Resend (Plus Five Five, Inc.) receives your email address, authentication-message contents and delivery metadata when an account email is requested. Storage is in the United States regardless of the sending region. Resend publishes 30-day email/log retention for Free, Pro and Scale plans, seven-day backup retention, and deletion of remaining customer data within 90 days after account termination; legal or independently controlled records may have separate requirements. These are provider rules, not a promise that deleting a Bestuff item immediately deletes an email. Contact: privacy@resend.com. Details: https://resend.com/security.

Google LLC provides the Gmail address used for support, optional Google sign-in and the Google Fonts requests in One-Page Reading. A support email sends its sender/address, message, chosen attachments and mail metadata to Google; font requests send ordinary IP/browser/request metadata, and optional sign-in exchanges the selected identity information. Google operates servers internationally, including in the United States, and does not provide Korea-only storage for these services. Support-message retention is described below; Google's own security/legal records and deletion process follow https://policies.google.com/privacy and https://policies.google.com/technologies/retention. Google's privacy contact route is available through that privacy policy.

Bestuff's operator in Korea also controls encrypted workstation recovery copies. Historical repository/Drive copies and independently preserved recovery material are included when we handle a deletion request; the current rotation alone does not delete those copies. Google storage used for historical Drive copies follows Google's international processing and deletion conditions above. Encryption limits readable access but does not turn personal data into anonymous data.

Paddle will be involved only if you choose a future paid transaction. The seller entity shown at checkout and https://www.paddle.com/legal/buyer-terms identify the applicable Paddle entity; it independently processes buyer/payment data and its global service/security transfers under https://www.paddle.com/legal/privacy. It retains transaction records required by law or disputes and may retain some buyer transaction information for five years. Contact: privacy@paddle.com. Optional AI and connected tools receive data only through the feature and provider you select, under that provider's own notice.

You can ask Bestuff to stop an overseas transfer or the related processing by email or phone. Stopping necessary hosting/authentication/email processing can prevent the related website, account, save, recovery or email function; we will explain the affected scope and handle any applicable request. Optional Google sign-in can be avoided by using email sign-in; optional AI, connections and future checkout can be left unused. External-resource requests can be blocked in your browser, which may affect fonts or maps. This does not recall copies already lawfully received.

Retention and recovery copies

We keep account data and saved work while providing the account and requested recovery functions. Current work and manual revisions have no automatic age-based purge; deleting an item can leave a recovery tombstone and previous versions. You can request account or specific-data erasure through the manual procedure below. Session, grant or benefit expiry alone does not delete every related record.

Autosave history is reduced when further saves occur using count, time-bucket and byte limits. Product-event queries exclude events older than 400 days, and later ingestion prunes older events. These are activity-triggered controls, not a promise of deletion exactly on a particular calendar day.

Encrypted application and account backups are made hourly and mirrored to an operator-controlled workstation. Managed archives keep the latest 24 captures and the newest capture for each of the newest 30 UTC dates represented in the archive. Historical or separately preserved archives can outlast that rotation. This is not a maximum of 30 calendar days and an item deletion does not immediately erase every archive.

When Korean transaction-record duties apply, we retain the required advertising records for six months, contract/withdrawal and payment/supply records for five years, and consumer complaint/dispute records for three years. We restrict retained records to the fields needed for that obligation and keep them separate from ordinary account use; these periods do not justify preserving unrelated authored work.

Support messages are kept while resolving the request. After resolution we remove unnecessary message content, attachments and temporary exports; a minimum complaint/dispute record remains only for its applicable period. If a specific legal hold applies, we record its reason and ending condition. Provider-controlled security/legal records can follow separate obligations; a provider's dashboard visibility window is not proof that all its copies have been erased.

Verified deletion requests are handled manually without undue delay, subject to applicable law. We identify the relevant active records and controlled recovery copies, erase or redact data that no longer has a basis, and verify the result. Necessary legal exceptions are restricted and explained. A minimal private closure record prevents a historical restore from silently returning erased data or access; it is retained only while an older controlled copy could recreate them or a separate legal duty requires it. We do not certify an unfinished provider or archive scope as erased.

Your requests and independent help

You or an authorized representative can request access, correction, deletion, suspension of processing or withdrawal of consent where applicable by contacting bestuffsolution@gmail.com or +82-10-5941-0083. We may request proportionate proof of account control or representative authority to protect your information. Do not send a password, card number or full identity document unsolicited.

Tell us whether you want an export, account closure, deletion of particular data, cancellation of future billing, or more than one of these. Export features vary by application. We will explain a lawful retention exception or a restriction that affects the request and the applicable response timing. Blocking necessary account processing prevents the related signed-in function; declining optional AI or connections does not require you to stop using unrelated functions.

Myunghwan Gong handles these requests through the support email/phone above. We record the requested scope, verify only the authority needed, explain any exception and respond within the applicable legal period. Account deletion has no self-service completion button today. A manual request is valid; you do not have to wait for a future automated tool or purchase a paid plan.

In Korea, independent privacy help is available from the Personal Information Infringement Report Center at https://privacy.kisa.or.kr (118) and the Personal Information Dispute Mediation Committee at https://www.kopico.go.kr (1833-6972). You may also use your local data-protection authority or other remedies available under law.

Accounts are not offered to children under 14. A legal representative can contact the privacy responsible person about a child's data. We will publish dated privacy changes and notify you or seek consent when required.