Privacy Policy

1. Personal Data We Collect

On registration and sign-in (Google OAuth): email address, name, and profile picture. The Company does not access your Google account password.

Data you enter while using the Service: property (guesthouse/hotel) details, room and rate data, booking data, guest data (name, phone, email, nationality, memos, etc.), and billing data.

Data received from the payment gateway and stored by the Company when you register payment for the paid service (OTA channel connection): the billing key needed for recurring charges (a payment-authorization token, not the card itself), card brand, and the last four digits of the card number. Other sensitive payment-method information, such as the full card number, is held by the payment gateway and is not stored by the Company.

Data collected automatically: access logs (IP address, access time) and cookies (sign-in session, language preference).

2. Purposes of Collection and Use

Account authentication and membership management: identity verification via Google accounts, keeping you signed in, and processing staff invitations and joins.

Providing PMS features: booking and occupancy management, rate and availability management, invoicing, and channel (OTA) synchronization.

Notifications: sending web push notifications about booking changes, only where you have opted in.

Service improvement: diagnosing errors and improving the quality and reliability of the Service.

3. Retention Period

In principle, the Company destroys personal data without undue delay when you close your account or request deletion.

Where retention is required by law (such as the Act on Consumer Protection in Electronic Commerce or the Protection of Communications Secrets Act), data is kept for the statutory period and used for no other purpose.

4. Disclosure to Third Parties

The Company does not, in principle, disclose personal data to third parties.

However, if you activate an OTA channel connection, the property's rate, availability, and booking data is synchronized — via the Channex channel manager — with the OTAs you connect (e.g. Booking.com, Airbnb). This processing serves the service you requested.

Data may otherwise be disclosed only where a legal basis exists or where an investigative agency requests it under procedures prescribed by law.

5. Processing Delegation and Cross-Border Transfer

To provide the Service reliably, the Company entrusts processing to: Amazon Web Services (AWS, Seoul region ap-northeast-2) — service hosting and operating infrastructure; Supabase — database (managed PostgreSQL) and authentication; Channex — OTA channel connectivity (only where you activate a channel connection).

Payment processing: PortOne Inc. (payment gateway integration), Toss Payments Corporation (payment processing) — payment method information and transaction history.

Electronic tax invoice issuance: LinkHub Corporation (Popbill) — business registration number, business name, representative name, address, email.

Where a processor is an overseas business or uses overseas infrastructure, personal data may be transferred abroad. The Company selects processors with appropriate safeguards under applicable law and ensures through contracts that personal data is managed securely.

6. Nature of Guest Data and Responsibility

For guest data entered into the Service, the user (the lodging operator) is the data controller who decides on its collection and use.

The Company stores and processes that data solely to provide the Service to the user, acting as a processor, and does not use guest data beyond the user's instructions.

Users must collect and process guest data lawfully in accordance with applicable laws.

7. Destruction of Personal Data

Personal data is destroyed without undue delay once the grounds for destruction arise.

Electronic files are deleted using technical methods that prevent recovery; other records and printouts are shredded or incinerated.

8. Your Rights and How to Exercise Them

You may at any time request access to, correction or deletion of, or suspension of the processing of your personal data.

Requests can be sent to support@mintcinc.com; the Company acts on them without undue delay in accordance with applicable law.

Guests who wish to access, correct, or delete their own data should contact the lodging business (the user) in the first instance; the Company supports the user's handling of such requests.

9. Cookies

The Service uses only essential cookies — for keeping you signed in and remembering your language preference. No advertising or tracking cookies are used.

You can refuse cookies in your browser settings, but features that require sign-in may then be unavailable.

10. Data Protection Officer

The Company designates a data protection officer to oversee personal-data processing and handle related inquiries, complaints, and remedies: Data Protection Officer, MintC Inc., support@mintcinc.com.

For reports or counseling regarding privacy infringements, you may also contact the Korea Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 in Korea).

11. Changes to This Policy

Additions, deletions, or amendments to this policy are announced on this page at least 7 days before they take effect.

This policy takes effect on July 16, 2026.