PRIVACY

Privacy policy

Last updated · 3 September 2026

KORA is a brand operated by Satoshi Labs Co., Ltd. This policy explains what personal information we collect through this website, why we collect it, how long we keep it, and what you can ask us to do with it. It is written to meet the Personal Information Protection Act of the Republic of Korea (PIPA).

1. Who is responsible

Satoshi Labs Co., Ltd. (주식회사 사토시랩), of 547 Yangcheon-ro, Gangseo-gu, Seoul, is the personal information controller for everything described here. We decide why and how your information is processed, and we are accountable for it.

2. What we collect

We only collect what you type into one of the two forms on this site, plus the minimum our servers record to stay online and secure. We do not buy personal information, and we do not collect it from third parties.

Brand enquiry: Company, your name, email address, phone or KakaoTalk ID (optional), industry, target markets, campaign objective, budget band, timing, whether product and a shooting location can be provided, and any notes you add.
Creator application: Name, email address, nationality, where you are currently based, the languages you create in, your categories, your channel links and the follower counts you state, your usual rate (optional), and any notes you add.
Recorded automatically: Your IP address, browser user agent and the time of the request, held in server logs. We use these only to keep the site available and to stop automated abuse of the forms.
Consent record: The date and time you ticked the consent box, stored alongside your submission. PIPA requires us to be able to show when consent was given.

3. Why we collect it, and on what basis

We process this information on the basis of the consent you give when you submit a form (PIPA Article 15(1)(1)). You do not have to give it. If you choose not to, we simply cannot prepare a proposal or consider you for campaign work — there is no other consequence.

To answer your enquiry and prepare a proposal, a creator shortlist, a schedule and a quotation.
To assess whether a creator is a fit for campaigns we are running, and to contact them when one is.
To keep a record of the enquiry so that a later conversation does not start from nothing.
To keep the site available and to prevent automated abuse of the forms.

4. What we do not do

We do not sell personal information. We do not share it with anyone for their own marketing. We do not use it to build advertising profiles, and we do not run advertising or analytics trackers on this site.

5. How long we keep it

We destroy personal information without delay once the purpose it was collected for has been achieved, or once you withdraw consent — whichever comes first. Where no earlier event applies, the periods below are our defaults.

Brand enquiries: Three years from our last contact with you, after which the record is deleted.
Creator applications: Two years from our last contact with you, or immediately on request. Creators who join the network are covered by their own agreement rather than by this period.
Server logs: Ninety days.
Consent records: For as long as the record they relate to is held, and no longer.

6. Who else handles it

We use a small number of service providers to run this site. Each one only receives what it needs, may only process it on our instructions, and may not use it for anything of its own.

Vercel Inc. (United States): Hosting and delivery of this website. Receives server log data.
Neon Inc. (United States): The database. Holds form submissions and, where a creator has an account, their profile, the channel links they have given us and the record of the agreement they accepted.
Resend (United States): Delivers the notification email that tells our team a form has been submitted. Receives the contents of that submission.

7. Information processed outside Korea

The three providers above are incorporated in the United States, so your information is processed outside the Republic of Korea. It is transferred over an encrypted connection at the moment you submit a form, and is held for the periods set out in section 5 for the purposes set out in section 3. If you would rather your information was not transferred abroad, please contact us before submitting a form and we will take your enquiry another way; you can also withdraw consent at any time under section 8.

8. Your rights

Under PIPA you may ask us at any time to do any of the following, and we will respond within ten days of receiving your request.

Tell you what information about you we hold, and let you see it.
Correct anything that is wrong or out of date.
Delete it.
Stop processing it while a dispute about it is resolved.
Withdraw your consent, which has the same effect as asking us to delete it.

9. How to exercise them

Contact us using the details in section 12. We may ask you for enough information to be confident you are who you say you are, so that we do not disclose someone else's details to the wrong person. Exercising any of these rights costs nothing and we will not treat you differently for it.

10. How we protect it

We keep the number of people who can see personal information as small as the work allows, and we design our systems so that access is the exception rather than the default.

All traffic to and from this site is encrypted in transit.
Database access is restricted at row level, so an account can only reach its own records.
Administrative access is limited to the people who need it to do their job, and is reviewed.
Consent is recorded with a timestamp so that its scope can always be established.

11. Cookies

This site sets one cookie, and only after you choose a language: it remembers which of the two languages you are reading so that you are not sent back to the other one on your next visit. It contains nothing but the language code, it is not shared with anyone, and clearing it has no effect other than the site guessing your language again. There are no advertising or analytics cookies on this site.

12. Who to contact

Daniel Choi (최명훈), Chief Executive Officer, is responsible for personal information at Satoshi Labs Co., Ltd. and handles requests and complaints under this policy.

Person responsible: Daniel Choi (최명훈), Chief Executive Officer
Telephone: +82 10-2473-1186
Post: Masters Value 1001, 547 Yangcheon-ro, Gangseo-gu, Seoul, Republic of Korea

13. If we get it wrong

Please tell us first — we would rather fix it ourselves. If you are not satisfied with how we have handled your information or your request, you can take it to any of the following, none of which charge a fee.

Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
Privacy Infringement Report Centre (KISA): 118 · privacy.kisa.or.kr
Supreme Prosecutors' Office, Cyber Investigation Division: 1301 · www.spo.go.kr
National Police Agency, Cyber Bureau: 182 · ecrm.cyber.go.kr

14. Changes to this policy

If we change anything material — what we collect, why, how long we keep it, or who else handles it — we will post the revised policy here at least seven days before it takes effect, and we will say what changed. The date at the top of this page is always the date of the version you are reading.