Skip to content

Privacy Policy

Privacy Policy

Effective: 2026-10-12

AZET LLC (the "Company"), the operator of Sponmi, protects users' personal information in accordance with the Korean Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection and other applicable laws, and publishes this privacy policy so that related concerns can be handled quickly and smoothly.

1. Controller

The controller of personal information processed on Sponmi is its operator, AZET LLC.

  • -Controller: AZET LLC / Address: 6545 Market Ave N Ste 100, Canton, OH 44721, USA / Email: help@azet.io
  • -The Company is located in the United States and has no address or place of business in Korea.
  • -Domestic representative in Korea: the Company does not meet the thresholds in the Korean Personal Information Protection Act art. 31-2(1) and Enforcement Decree art. 32-3(1) (total revenue of KRW 1 trillion or more in the previous year, a daily average of 1 million or more data subjects in Korea, and others), so it has not designated one. If it meets them, it will designate one and publish the name, address and contact details here.
  • -Personal information relating to MCN (creator agency) e-contracts is controlled by AZET Entertainment, not the Company (see "Processing by AZET Entertainment" below).

2. Information we collect and how

The Company collects the following personal information to provide the service.

  • -Required: name, email address, Google account identifier (ID), profile photo URL
  • -Optional: phone number, company or business name
  • -Creators and agencies acting as businesses (required): business name, representative's name, address, phone number, email, business registration number, collected to give counterparties the seller's identity details (Korean Act on Consumer Protection in Electronic Commerce art. 20(2); Enforcement Decree art. 25(1))
  • -With Google OAuth: Google account email, name, profile image
  • -With the YouTube API: YouTube channel ID, channel name, subscriber count, per-video views, likes and comments, watch time, impressions, click-through rate (CTR), traffic sources, demographic data
  • -With the Instagram API: Instagram user ID, username, follower count, post count, profile image
  • -With the TikTok API: TikTok Open ID, display name, follower count, video count, like count
  • -Payments and payouts: payer name, payment and refund records, and the payout account or payout method of creators who receive payouts (card numbers and other payment-method details are handled by the payment provider and not stored by the Company)
  • -Rights ledger (for licence deals): member identifiers of the parties, the licence text as approved and its SHA-256 hash, and the consent record (times of viewing, verification, approval and revocation, browser information (User-Agent), and a hash of the IP address)
  • -Prepaid balance (advertisers and licensees): top-up, reservation, deduction and refund history and the balance
  • -Derivative-upload tracking (licensees): post URLs the licensee registers, the posting channel, and snapshots of each post's public view count and status (checked through each platform's public API)
  • -Creators who are not members but whose videos are requested for a licence: channel name, channel URL, and a contact email they have published in the channel or video description, collected only to ask for permission
  • -Collected automatically: IP address, browser type, access times, cookies, service usage records
  • -How we collect: sign-up, Google/social OAuth, licence request and approval screens, lookups of public information on each platform, and automatic collection while you use the service

3. How we use it

We use the information we collect for the following purposes.

  • -Sign-up and account management: identity check, member identification, account management (Korean Personal Information Protection Act art. 15(1)(4))
  • -Brokering deals: primary-ad orders, usage and derivative licence requests and approvals, and giving seller identity details (same paragraph, items 4 and 2)
  • -Rights ledger and consent records: proving that a licence was formed and what it says, confirming revocation, expiry and takedown, and handling disputes (same paragraph, item 4)
  • -Calculating derivative royalties and confirming takedowns: checking public view counts and status of registered posts, and deducting from prepaid balances (same paragraph, item 4)
  • -Asking non-member creators for permission: we use contact details they published themselves, within the scope related to why they published them (Korean Supreme Court, 17 August 2016, case 2014Da235080). Anyone we contact may ask us for the source of the information, the purpose of processing and their right to ask us to stop (Korean Personal Information Protection Act art. 20(1))
  • -YouTube and social-media analytics: analysing creators' channel performance and giving advertisers performance reports
  • -Payments and payouts: holding payments, settling creators' earnings, topping up and refunding prepaid balances
  • -Support: answering enquiries, mediating disputes, handling takedown requests, service notices
  • -Improving the service: usage statistics, quality improvements, new features
  • -Legal compliance: e-commerce, communications-privacy and other applicable laws

4. Google API Services User Data Policy

Sponmi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

  • -Google user data is used only for the purposes stated in this privacy policy.
  • -We do not sell Google user data to third parties.
  • -We do not use Google user data for advertising.
  • -We do not use Google user data to determine creditworthiness or for lending.
  • -Google user data may be transferred to third parties only with the user's explicit consent, for security or legal purposes, or as part of a merger or acquisition.
  • -Users can disconnect Google at any time in account settings and ask for their data to be deleted.

5. YouTube API Services

Sponmi uses YouTube API Services (https://developers.google.com/youtube/terms/api-services-terms-of-service). Data collected through YouTube API Services is subject to the Google Privacy Policy (https://policies.google.com/privacy).

  • -YouTube data we collect: channel statistics (subscribers, views), per-video performance (views, likes, comments, watch time), daily channel statistics, traffic sources, demographics
  • -Why we use YouTube data: to provide creators' performance dashboards, give advertisers campaign performance reports, and improve creator-advertiser matching
  • -We do not sell or share YouTube data with third parties without the user's explicit consent.
  • -Users can revoke this service's access to their YouTube data at any time in Google security settings (https://security.google.com/settings/security/permissions).
  • -When access is revoked, the Company deletes that user's YouTube-related data without delay.

6. How long we keep it

We destroy personal information without delay once its purpose has been achieved, except where the law requires us to keep it for a set period.

  • -When you leave: destroyed within 30 days (kept for 30 days to handle disputes, then destroyed)
  • -Records of e-commerce contracts and withdrawals: 5 years (Korean e-commerce law)
  • -Records of payments and supply: 5 years (Korean e-commerce law)
  • -Records of consumer complaints and disputes: 3 years (Korean e-commerce law)
  • -Access logs: 3 months (Korean Protection of Communications Secrets Act)
  • -YouTube and social-media analytics data: destroyed within 30 days of disconnection or leaving
  • -Rights ledger (licence text, hash and consent record): 5 years from the day the licence ends (expiry or revocation), the same as contract records
  • -Prepaid-balance history and derivative view-count snapshots: 5 years, the same as payment records
  • -Contact details of non-member creators: once the request is closed (declined, or no reply for 1 year), destroyed except for the channel identifier and the decision, kept so we do not contact them again

7. Sharing with third parties

As a rule, the Company does not give personal information to third parties without the user's consent, except in the following cases.

  • -Where the user has consented in advance
  • -Counterparties: with consent obtained on the order or licence request/approval screen, we give the other member the information needed to perform the deal (the creator's channel information; the advertiser's or licensee's business name and posting channel URL) (Korean Personal Information Protection Act art. 17(1)(1))
  • -Identity details of members selling as businesses are given to counterparties as the law requires (same Act art. 17(1)(2); Korean Act on Consumer Protection in Electronic Commerce art. 20(2))
  • -When running a campaign, giving advertisers a creator's public channel statistics (subscribers, views and similar) (with the creator's prior consent)
  • -Where required by law or requested by investigative authorities
  • -Where needed to provide the service (payment providers and similar) under a processing agreement

8. Processing by AZET Entertainment

Personal information relating to the MCN (creator agency) membership e-contract is processed by AZET Entertainment to conclude and perform its own contract, and AZET Entertainment, not the Company, is its controller. The Company processes it on AZET Entertainment's behalf only to the extent that it provides the signing and storage system AZET Entertainment uses.

  • -Controller: AZET Entertainment (Jiseon Lee, Representative, Korean business registration no. 629-45-01136, Room 32, Unit 604, 6F, 54 Convensia-daero 230beon-gil, Yeonsu-gu, Incheon, Republic of Korea, content@azet.io)
  • -Data: name, email, date of birth, country of residence, channel information, signature image, signing record (time, browser, hashed IP), for minors the legal representative's name, email and relationship, term sheets, acceptances and objections for agency-sourced deals and settlement records, and identity-check results and "AZET Verified" badge decisions
  • -Badge decision records are deleted one year after the badge is removed or the agreement ends.
  • -Legal basis and retention: concluding and performing the contract (Korean Personal Information Protection Act art. 15(1)(4)); kept for 10 years after the contract ends. See the personal-data clause of that e-contract for details
  • -The signature image is not analysed for anything other than confirming the signature.
  • -Outsourced processing (Korean Personal Information Protection Act art. 26): processor AZET LLC; task: running the e-contract signing and storage system and sending contract emails / sub-processor: Cloudflare, Inc. (storage, email delivery, contract PDF generation)
  • -Overseas transfer (same Act art. 28-8(1)(3)(a)): recipients AZET LLC (United States, help@azet.io) and Cloudflare, Inc. (United States and countries where Cloudflare operates data centres, privacy@cloudflare.com) / items: the data listed above / when and how: sent over the network when the contract is prepared and signed / purpose: e-contract signing and storage / retention: 10 years after the contract ends / how to refuse and the effect: do not sign, or write to content@azet.io; the e-contract then cannot be concluded or maintained
  • -Requests to access, correct or delete this information may be sent to AZET Entertainment (content@azet.io); requests sent to the Company are forwarded without delay.

9. Processors

The Company entrusts the processing of personal information as follows to provide the service smoothly.

  • -Cloud infrastructure (web hosting, database, file storage, email sending, contract PDF generation): Cloudflare, Inc.
  • -Backup email sending (when Cloudflare sending fails): Resend, Inc.
  • -Error collection: Functional Software, Inc. (Sentry)
  • -Bank-deposit confirmation: PayAction
  • -Processors receive only the minimum information needed for the entrusted purpose and are bound by data-protection obligations in the processing agreement.

10. International transfers

The Company processes and stores personal information outside Korea as follows to provide the service (Korean Personal Information Protection Act art. 28-8(1)(3)(a)). You can refuse the transfer by leaving the service, but you then cannot use it.

  • -Cloudflare, Inc. (United States and countries where Cloudflare data centres are located, privacy@cloudflare.com) — data: member information, usage records, channel information, payment and payout records, e-contract documents / purpose: web hosting, database, file storage, email sending / when and how: sent over the network when you use the service / retention: until you leave or the statutory retention period ends
  • -Resend, Inc. (United States) — data: email address, message body / purpose: backup sending of verification emails / when and how: sent over the network when Cloudflare sending fails / retention: destroyed after sending according to the processor's retention rules
  • -Functional Software, Inc. (Sentry, United States) — data: IP address, browser information and error records when an error occurs / purpose: error analysis / when and how: sent over the network when an error occurs / retention: 90 days
  • -Rights-ledger text and consent records, prepaid-balance history and derivative-upload tracking data are also stored in the Cloudflare, Inc. database and file storage (R2) above.

11. Your rights

You may exercise the following rights over your personal information at any time.

  • -Access: you can see the personal information the Company holds about you.
  • -Correction or deletion: you can ask for inaccurate information to be corrected or unnecessary information to be deleted.
  • -Suspension: you can ask the Company to stop processing your personal information.
  • -Revoking Google/YouTube access: you can revoke access yourself in Google security settings (https://security.google.com/settings/security/permissions).
  • -Disconnecting social media: you can disconnect Instagram, TikTok and others in the service settings.
  • -Leaving: you can leave in the service settings; your personal information is then destroyed, except what the law requires us to keep and rights-ledger records.
  • -Consent records in the rights ledger prove that a licence was formed, so they are not edited; errors are corrected by adding a correction record.
  • -You can exercise these rights in the service settings or by email (help@azet.io); requests are handled within 10 days of receipt.

12. Security measures

The Company takes the following technical, administrative and physical measures to keep personal information safe.

  • -Technical: encrypted transmission (TLS), encryption of stored data, row-level access control, and only hashes of login session tokens are stored
  • -IP addresses in consent records are stored only as hashes, never in plain form, and the rights ledger is append-only.
  • -Administrative: as few staff as possible handle personal information, with regular security training
  • -Social-media tokens: OAuth tokens are stored encrypted, and only the minimum scopes are requested.

13. Cookies

The Company uses cookies for users' convenience.

  • -Why: keeping you logged in, saving your settings, analysing service use
  • -Control: you can allow or block cookies in your browser settings.
  • -Blocking cookies may limit some features.

14. Privacy officer

The privacy officer responsible for personal-information processing is as follows.

  • -Service: Sponmi (operated by AZET LLC)
  • -Email: help@azet.io
  • -Website: https://azet.io
  • -You can contact the officer with any privacy question, complaint or request for redress arising from your use of the service.

15. Changes to this policy

This privacy policy may change with laws, policies or the service, and we will announce changes in advance through service notices or email. This policy is provided in Korean, English and Japanese; if the versions differ, the Korean version prevails.

  • -Effective: 2026-10-12

Privacy enquiries

AZET LLC · help@azet.io

Website: https://azet.io

For other reports or advice about privacy violations in Korea, contact the KISA Privacy Infringement Report Center (privacy.kisa.or.kr, 118).