Privacy Policy

1. Overview

Yave Networks ("Company") operates the YavePay subscription management service (pay.yave.net) and protects the personal data processed during subscription purchases under this policy. Account-related information such as sign-in and identity is governed by the Privacy Policy of the Yave Account Service (accounts.yave.net).

2. Information We Collect

• Payment method — the billing-key identifier issued by the payment gateway (PG), card issuer name, masked card display info, and currency (we do not store the original card number)
• Transaction history — payment, refund, and subscription records, amounts, timestamps, the Yave service concerned, and status
• Reward point ledger — earning, use, and expiry records
• Automatically collected — IP address, device/browser info, and payment/security activity logs (for fraud detection)

3. Purpose of Use

• Processing payments, recurring payments, and refunds, and confirming transactions
• Fraud detection and payment security
• Responding to inquiries and handling disputes
• Meeting legal obligations under the e-commerce and related laws

4. Processors and Third Parties

To process payments, the Company entrusts/provides necessary information to the following payment gateways.

• PortOne and connected PGs (KCP, etc.) — payment, billing-key issuance, and refund processing
• Yave services — the result of the user's purchase (success status, transaction identifier, etc.). Every Yave service is a software product the Company owns and operates itself, so this is internal use rather than provision to a third party.

We do not provide personal data to third parties for purposes other than the above without the user's consent.

5. Retention and Disposal

In accordance with applicable law, transaction records are retained for the following periods and then destroyed without delay.

• Records on contracts or withdrawal of subscription: 5 years
• Records on payment and supply of goods: 5 years
• Records on consumer complaints or dispute handling: 3 years
• Other information: destroyed once the purpose is achieved (payment methods are deleted immediately on removal or account withdrawal)

6. Your Rights

• You may request access, correction, deletion, or suspension of processing of your personal data.
• You can delete a registered payment method directly in Cards.
• To delete the account itself, request withdrawal in Yave Account settings.

7. Security Measures

• Card data is stored only as a PG billing key instead of the original number, and sensitive identifiers are encrypted at rest.
• All communications are encrypted in transit, and access controls apply to payment and management functions.
• Abnormal payment attempts are detected and blocked.

8. Contact

For privacy inquiries and access/correction/deletion requests, please contact help.yave.net.

9. Changes to This Policy

If this policy changes, we will give notice within the service or by email at least 7 days before the effective date (30 days for material changes).