MuseBlossom Inc. (the "Company") establishes and publishes this Privacy Policy in accordance with the Personal Information Protection Act to protect users’ personal information and promptly address related concerns.
Article 1 (Personal Information Collected)
The Company collects the following personal information to provide its services.
Required Information
| When Collected | Information |
|---|---|
| Registration | Email address, name, password (encrypted) |
| Service Use | IP address, browser information, access date and time, service usage records |
Optional Information
None
Automatically Collected Information
- Cookies
- Access logs
- Device information
Information Not Collected
Uploaded music files are deleted from the server immediately after AI analysis is completed. The Company does not store or reuse original music files.
Article 2 (Purposes of Collection and Use)
| Purpose | Details |
|---|---|
| Account Management | User identification, registration and withdrawal, prevention of misuse |
| Service Provision | Providing AI music detection results |
| Service Improvement | Usage statistics, service quality improvement, use of anonymized analysis results |
| Customer Support | Responding to inquiries and delivering notices |
Article 3 (Retention and Use Period)
| Information | Retention Period | Basis |
|---|---|---|
| Account information | Until account withdrawal | User consent |
| Access logs | 3 months | Protection of Communications Secrets Act |
| Analysis usage records | 1 year (anonymized) | Service improvement |
| Retention after withdrawal | Deleted within 30 days after withdrawal | Prevention of abusive re-registration |
Article 4 (Sharing with Third Parties)
We generally do not share personal information with third parties. If you accept marketing cookies, we share the following information. Disclosures required by applicable law are handled under that law.
| Recipient | Purpose | Information | Retention |
|---|---|---|---|
| Meta Platforms, Inc. | Measuring ad performance and showing personalized ads | Cookie identifiers, event records such as page visits and sign-ups, device and browser information | As set out in Meta’s Privacy Policy |
Article 5 (Service Providers / Processors)
We use the following service providers to run MusicScanner.
| Service provider | Processing activity |
|---|---|
| PostHog Inc. | Product usage analytics |
| Google LLC | Website traffic analytics (Google Analytics) |
| Microsoft Corporation | Website usage analytics (Microsoft Clarity) |
| Amazon Web Services, Inc. | Servers and data storage for running the service |
| NAVER Cloud Corp. | Replying to email inquiries and sending service emails (NAVER WORKS) |
Our contracts with these providers limit their use of information to the services they provide, and require security measures, restrictions on sub-processing, supervision, and accountability for damages. We update this policy without delay if a provider or its tasks change.
Article 6 (User Rights and How to Exercise Them)
Users may exercise the following rights.
- Request access to personal information: Review personal information held by the Company
- Request correction or deletion: Correct or delete inaccurate information
- Request suspension of processing: Request that processing of personal information be stopped
- Withdraw membership: Withdraw through account settings or by email
Requests may be sent to contact@museblossom.com. The Company will respond without undue delay, within a maximum of 10 days.
Article 7 (Destruction of Personal Information)
- Personal information is destroyed without undue delay when its retention period expires or its processing purpose is fulfilled.
- Electronic files are deleted using methods that prevent recovery.
- Physical records are shredded or incinerated.
Article 8 (International Transfers)
We transfer personal information outside the Republic of Korea as described below.
8-1. Transfers that apply regardless of your cookie choice
| Item | Details |
|---|---|
| Recipient (contact) | PostHog Inc. (privacy@posthog.com) |
| Country | Germany (European Union) |
| When and how | Sent over the network as you use the service |
| Information | Usage records (pages visited, referral source, clicks), device and browser information, and a member ID (for members’ service activity only) |
| Purpose | Usage analytics and product improvement |
| Retention | 1 year from collection. Information linked to a member ID is deleted without delay when the member deletes their account. |
| Legal basis | Article 28-8(1)(5) of Korea’s Personal Information Protection Act (recognition of the EU as providing an equivalent level of protection) |
8-2. Transfers only if you accept analytics or marketing cookies (Country: United States)
| Recipient (contact) | Information | Purpose | Retention |
|---|---|---|---|
| Google LLC (https://support.google.com/policies) | Cookie identifiers, page and usage records, device and browser information, approximate location | Traffic analytics | 14 months from collection |
| Microsoft Corporation (https://aka.ms/privacy) | Cookie identifiers, page movement, click and scroll records, device and browser information | Usage analytics and design improvements | Session recordings kept for 30 days (some samples up to 9 months) |
| Meta Platforms, Inc. (https://www.facebook.com/privacy/policy) | Cookie identifiers, event records such as visits and sign-ups, device and browser information | Ad measurement and personalized ads | As set out in Meta’s Privacy Policy |
- When and how: sent over the network as you use the service, after you give the relevant cookie consent.
- Legal basis: your consent, given by switching on the relevant option in Cookie Settings. For users in the EEA, UK and Switzerland, transfers may rely on recipient safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (provider status requires confirmation).
- How to refuse: turn off analytics or marketing cookies in Cookie Settings to stop the corresponding transfers. Refusing does not limit use of the service.
Article 9 (Cookies and Similar Technologies)
9-1. What cookies are
Cookies are small text files that a website stores in your browser. We use them to run the service and understand how it is used.
9-2. Types of cookies
| Type | Description |
|---|---|
| Essential cookies | Keep you signed in, protect the service, remember your language and cookie choice. Always on. |
| Analytics cookies | Google Analytics, Microsoft Clarity and PostHog use cookies to connect return visits and how you move through the service. Used only with your consent. |
| Marketing cookies | Meta Pixel and ad tags measure ad performance and support related marketing. Used only with your consent. |
9-3. Cookieless visit statistics
We count page visits and clicks with PostHog without storing cookies. It stores nothing on your device and does not retain your IP address, so it cannot identify you. It applies regardless of your cookie choice. For visitors from the EU, EEA, UK or Switzerland, we do not count visits before a cookie choice is made. Members’ service activity (sign-up, completed analyses, notification sign-ups) is counted with a member ID. We do not send email addresses or names.
9-4. Personalized advertising
We do not knowingly collect this information from children under 14 for personalized advertising, and do not collect sensitive information.
| Item | Details |
|---|---|
| Information | Website visits, events such as sign-ups, ad clicks |
| How collected | Automatically when you visit, if you accept marketing cookies |
| Purpose | Measuring ad performance and showing ads that match your interests |
| Retention | As set out in Meta’s Privacy Policy |
| Collected by | Meta Platforms, Inc. |
9-5. How to refuse
- Use Cookie Settings at the bottom of the site to turn analytics and marketing cookies on or off at any time.
- You can also block cookies in your browser (Chrome: Settings > Privacy and security > Third-party cookies / Safari: Settings > Privacy > Prevent cross-site tracking / Edge: Settings > Cookies and site permissions).
- Blocking essential cookies may stop some features, such as sign-in, from working. Refusing analytics or marketing cookies does not limit use of the service.
9-6. Users in the EEA, UK and Switzerland
Legal bases: consent for analytics and marketing cookies; our legitimate interest in understanding how the service is used for cookieless statistics and members’ activity counts; performance of our contract with you for running your account. You may access, correct, delete, restrict or object to processing, request data portability, withdraw consent at any time, and complain to your local data protection authority. Contact: contact@museblossom.com (Privacy Officer).
Article 10 (Measures to Protect Personal Information)
The Company takes the following measures to protect personal information.
- Encryption of personal information and TLS/HTTPS for transmission
- Restriction and management of access permissions
- Retention of personal information access records
- Immediate deletion of uploaded files after analysis and no server-side retention
Article 11 (Privacy Officer)
| Item | Details |
|---|---|
| Name | Jo Eun-seon |
| Position | CEO |
| contact@museblossom.com |
Article 12 (Remedies for Privacy Violations)
For reports or consultations concerning personal information infringements, please contact the following organizations.
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
- Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
- Supreme Prosecutors’ Office Cyber Investigation Division: spo.go.kr / 1301
- National Police Agency Cyber Bureau: ecrm.police.go.kr / 182
Article 13 (Changes to This Policy)
If this Privacy Policy changes, the Company will post a notice on the service at least 7 days before the effective date.