ORVYTPrivacy Policy
ORVYT Co., Ltd. (“ORVYT”, “we”) complies with the Personal Information Protection Act of Korea and related laws. This policy explains how we handle personal information on our website and on our internal staff work system (together, the “Services”).
1. Information we process and why
Website
Our website does not collect personal information from visitors. It has no sign-up, no forms and no analytics tools. If you email us, we use your name, email address and message only to reply and to discuss business with you.
Staff work system
Only staff and accounting partners registered in advance by ORVYT can use the work system.
| Information | Purpose |
|---|---|
| Google account email address and name | Sign-in, identity check, access roles |
| Start date, role | Monthly work targets, menus and permissions |
| Work records (uploaded audio, track details, task logs, review results) | Work management, performance, distribution and rights management |
| Clock-in/clock-out times and IP address | Attendance records |
| Sign-in session data and change history | Security and correcting mistaken changes |
2. Retention
- Email inquiries: kept for up to one year after the inquiry is closed, then deleted, unless the law requires longer retention for a resulting transaction.
- Work system: kept during employment or contract. Access is disabled when it ends. Employment, payroll and tax records are kept for the periods required by Korean law, then destroyed.
- Music owned by ORVYT and its rights data (including creator and performer records) are kept for as long as the rights exist, for rights management and royalty settlement.
3. Use of Google user data
The work system's Google sign-in requests only the openid, email and profile scopes. We use the email address and name only to sign users in and identify them. We do not access any other Google account data (such as Gmail, Drive or Contacts),
and we do not use this data for advertising or sell or share it with others. ORVYT's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Disclosure to third parties
We do not provide personal information to third parties, except where required by law or requested by authorities through legal procedures.
5. Service providers and international transfer
| Recipient | Purpose | Country · method |
|---|---|---|
| Google LLC | Sign-in authentication for the work system | USA and others · transmitted over the network at sign-in |
| Cloudflare, Inc. | Encrypted connection to the work system | USA and others · transmitted over the network when connecting |
Work system data and audio files are stored on storage devices managed by ORVYT in Korea. Employment and payroll data may be shared with our contracted accounting firm to the extent needed for accounting and tax work.
6. Destruction
When the retention period ends or the purpose is fulfilled, we destroy personal information without delay. Electronic files are deleted so they cannot be recovered; paper documents are shredded or incinerated.
7. Your rights
You may request access to, correction, deletion or suspension of processing of your personal information at any time by emailing the Privacy Officer below. Deletion may be limited where the law requires us to keep the information.
8. Security measures
- Access control: only registered accounts can sign in; role-based permissions; users can edit only their own records
- Encryption: all external connections use HTTPS; sign-in tokens are not stored in plain form
- Logs and backups: change history is kept and data is backed up daily
- Physical security: storage devices are kept in an access-controlled office
9. Cookies
The website uses no cookies. The work system uses a single cookie to keep you signed in (up to 30 days). If you block cookies, you cannot sign in to the work system.
10. Privacy Officer
| Privacy Officer | Heo Geon, CEO |
|---|---|
| Contact | orvytmusic@gmail.com |
11. Changes
If we change this policy, we will post a notice on this page at least 7 days before the change takes effect.