Privacy Policy

This policy applies to personal information processed through the Unetia website, accounts, digital business cards, website creation and publishing, search, payments, and related support features.

For questions about privacy or Google user data, or to request access, correction, deletion, restriction, withdrawal of consent, or permanent account deletion, contact admin@unetia.com. We may verify your identity before completing a request to protect your account.

From the sign-in provider, we receive a provider-specific subject identifier and, within the consent granted by you, an email address and its verification status, name or nickname, and profile image. We also process your chosen Unetia ID, registration and onboarding times, language, and service settings.

We process business-card and website names, descriptions, tags, contact details and links, addresses, images, videos, translation source text, and publishing settings that you enter or upload. Only information that you choose to publish or allow in search is shown on the applicable public page or in search results. Business-card search visibility is off by default.

We may process membership and order identifiers, products or plans, amount, currency, payment status, refunds, settlement, and audit records. Raw payment-card details are handled by payment providers and are not stored directly by Unetia. We may also process request times, IP addresses, user agents, error, security and audit logs, and service-usage records for security and operations.

Google Sign-In requests only the OpenID Connect openid, email, and profile scopes. We receive your Google Account subject identifier, verified email address, name, and profile image to create or identify your Unetia account, maintain sign-in and a basic profile, secure the account, and provide support.

Unetia does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, your files, or your messages. The authorization code and access token or ID token received during sign-in are used only as needed to authenticate you. Unetia does not retain provider access tokens or refresh tokens in its database.

We do not use Google user data for advertising or remarketing, credit assessment, data sales, or the development, improvement, or training of generalized or non-personalized AI/ML models. We do not intentionally send Google OAuth identifiers, email addresses, names, or profile images to analytics or AI translation providers. We do not access Google Workspace API data.

We use personal information to create and authenticate accounts; create, store, publish, search, and share cards and websites; provide user-requested translation; process memberships, payments, and settlement; provide support; and perform the features you request.

We also use information as necessary to protect sessions, enforce access controls, detect and prevent abuse or attacks, diagnose failures, maintain auditability and service reliability, resolve disputes, and meet legal obligations. If we need to use information for a new purpose that is incompatible with these purposes, we will provide any notice or obtain any consent required by law first.

First-party public-card analytics store only per-card hourly view counts and do not retain raw visitor IP addresses, user-agent strings, or fingerprints.

For platform traffic analytics on the exact unetia.com host, Naver Analytics may receive visited URLs, referrers, visit times, cookies, and browser environment; Google Analytics may receive user and session statistics, approximate location, browser, and device information; and Microsoft Clarity may receive interactions such as clicks, scrolling and navigation, session recordings, browser and device information, and pseudonymous identifiers. These analytics scripts are not loaded on the development site or customer subdomains.

Cookie types, retention, and browser controls are described at /en/legal/cookie. Unetia does not separately configure Google Analytics personalized advertising or remarketing features.

Google, Apple, Naver, and Kakao process the OAuth sign-in selected by the user. PortOne and its connected payment providers process payments, refunds, and settlement. Cloudflare and our hosting, database, object-storage, and email providers support network protection and service operations. OpenAI may process content selected by a user only when that user explicitly invokes a translation action.

Naver Analytics, Google Analytics, and Microsoft Clarity may process the platform analytics described above. We disclose only the information reasonably necessary for each provider to perform its function and apply contractual, security, and legal safeguards. Depending on provider infrastructure, information may be processed outside your country.

We do not sell personal information or Google user data. We may disclose only what is necessary to comply with law, protect rights and safety, or respond to a valid request from a court or authority. If a merger, acquisition, or other business transfer occurs, we will apply the notice and safeguards required by applicable law.

Google Sign-In information and account-profile data are retained while the account is active. Security and audit logs may be retained for the period needed to prevent abuse, resolve disputes, and meet legal obligations. Payment, refund, and settlement records may be separately retained for periods required by commerce and tax laws. Information awaiting deletion in backups is removed through the backup rotation and recovery-protection lifecycle and is not restored to the active service.

Account withdrawal immediately blocks sign-in and public access through a soft deletion. The account and content may be retained for recovery, approved re-registration, and dispute handling until a separate permanent-deletion request is made. After a permanent-deletion request, the account enters deletion processing and business-card media, authentication identifiers, profile information, and related content are removed asynchronously. Non-personal records required for legal, security, and audit purposes and Unetia ID records needed to prevent impersonation or reuse may remain.

You may contact admin@unetia.com to request access to or a copy of your information, correction, deletion, restriction, or withdrawal of consent. You may also revoke Unetia's access from the third-party connections page of your Google Account. Revoking the Google connection alone does not delete your Unetia account or content already stored, so submit a separate account-deletion request if you want those records deleted.

You can change publishing and search settings within the service. You may decline optional information or analytics cookies, but login, saving, and editing cannot work without required account information and security cookies. Nothing in this policy limits a right to complain to a competent data-protection authority where applicable.

We use encryption in transit, host-only security cookies, access controls, least-privilege secret management, input validation, audit records, backups, and incident-response procedures. No internet transmission or storage method is absolutely secure. If a breach occurs, we will respond and provide notices as required by applicable law.

Unetia is not directed to children, and we do not knowingly collect personal information from a child who cannot lawfully use the service without parental consent. If we learn that this has occurred, we will verify the report and take appropriate action, including deletion where required.

When changes to the service or law require an update, we will revise the effective date on this page. Material changes will also be announced through the service or another reasonable channel.