# BakeMeet Privacy Policy

Effective date: October 13, 2026.

Onsimdang AI Company Co., Ltd. operates BakeMeet, a global platform for discovering and applying to pastry and bread seminars. Platform use is completely free for organizers and participants for approximately one year after launch and will not automatically become paid. BakeMeet currently provides no subscriptions, in-app purchases, participation commissions or advertising, and does not collect purchase, payment or advertising-tracking data for those purposes. A seminar fee displayed by its organizer is separate from a BakeMeet platform fee. BakeMeet does not collect, settle or refund seminar payments.

## 1. Purposes and data

BakeMeet processes the minimum data needed for accounts, authentication, seminar discovery, applications, selection, cancellation, operational notices, organizer review, security, and disputes. Account data includes a single Unicode name or nickname, country, region, UI language, and timezone; affiliation and occupation are optional. The current login uses an email address and password; the email remains private. Phone/SMS login is not active. Seminar-scoped answers, statuses, cancellation reasons, no-show disputes, and operational records are also processed.

Passwords are stored only as one-way scrypt hashes. Current session and CSRF verification records are used for security. Passwords, OTP values, session tokens, provider tokens, and API keys must not be logged.

Organizer review and seminar operations also use organizer names, types and introductions; seminar titles, descriptions, countries, languages, schedules, venues, displayed fees, capacity, speaker/product descriptions, and uploaded images. Approved public seminar information may appear in discovery, search and detail screens. Drafts and application answers have separate access restrictions. Support inquiries use the reply address and inquiry content. Do not include passwords, authentication codes, session tokens or unnecessary sensitive information in inquiries.

The server and reverse proxy may process IP addresses, User-Agent, request paths, timestamps, response status and necessary error/operation records for security and troubleshooting. Login sessions and CSRF protections support authentication and prevent forged requests; they are not advertising trackers.

BakeMeet serves adults aged 18 and older. Content-policy acceptance stores account ID, policy version and acceptance time. Reports include reporter ID, seminar/user target IDs, reason, description, receipt/review status and time, and administrator-only review notes. Only authorized administrators can see report contents and reporter identity; the reporter sees a receipt and status. Blocking stores both account IDs, a private management handle and creation time. Reports and blocks support safety, not advertising or user ranking.

## 2. Authentication and external processing

The verified live configuration uses BakeMeet's own email/password authentication. Google/Apple login, SMS authentication, external translation and email/push/SMS delivery providers are not configured. An implementation boundary or database field does not mean that an external service is active. Before activating providers or changing processing, we review the actual provider and update the necessary disclosures.

Verified service processing and storage:

| Provider and purpose | Data and processing | Verified location, timing and method |
| --- | --- | --- |
| The Constant Company, LLC / Vultr: application and web API hosting | Account, seminar and application requests; service security, access and operation records | Republic of Korea. Requests are handled over HTTPS when using the service |
| Databricks, Inc. / Neon, LLC: PostgreSQL database | Account, authentication, organizer, seminar, application, selection, cancellation, report, block, policy-acceptance, security and operation records | Singapore, AWS ap-southeast-1. Encrypted server connections for account/application/operation requests |
| Databricks, Inc. / Neon, LLC: private object storage | Seminar, speaker and product images and derived images, with access-controlled delivery | United States, AWS us-east-2. HTTPS during image upload, retrieval and deletion |

These are the configured application-server, database and object-storage regions. International outsourcing/storage supports accounts, authentication, seminar applications, organizer management and optional image publication. The company relies on the necessity of outsourcing/storage to form or perform the service contract and the disclosures in this policy under Article28-8(1)(3)(a) of the Korean Personal Information Protection Act.

The international recipient is Databricks, Inc. / Neon, LLC. The official DPA provides dpa@databricks.com; see also its [privacy notice](https://www.databricks.com/legal/privacynotice). Data, purposes, timing and transmission methods appear in the table; retention/deletion follows section4 and the provider's service/DPA conditions. Contact ceo@onsimdang.com to refuse or restrict processing, subject to identity verification. Essential account/application functions or optional image publication may then be unavailable.

Provider support, diagnostics and subprocessing can occur outside selected storage regions. Neon terms list US-based Grafana Labs. Databricks' official list identifies customer-selected cloud regions and technical/operational support affiliates in the United States, Netherlands, United Kingdom, Australia, France, Germany, Singapore, Japan, India, Canada, Italy, Sweden, Switzerland, Spain, South Korea, New Zealand, Costa Rica, Serbia, Brazil, Saudi Arabia, Denmark, Mexico and Israel. These are the published possible support/operational scope, not a claim that all BakeMeet data was actually sent to every listed country or provider. We review official list/service-condition changes and update necessary company disclosures.

The current Neon terms reference a Databricks MCSA that incorporates its DPA. We do not assert a separately signed amendment. The current DPA provides deletion controls during service use and a30-day deletion/assistance condition after contract termination and written request; this is not a promise to erase every individual account or active recovery copy within30days.

Provider sources: [Neon service terms](https://neon.com/platform-terms), [Databricks MCSA](https://www.databricks.com/legal/mcsa), [current DPA](https://www.databricks.com/legal/dpa), [Databricks subprocessors](https://www.databricks.com/legal/databricks-subprocessors), [Vultr Privacy Policy](https://www.vultr.com/legal/privacy/) and [Vultr subprocessors](https://www.vultr.com/legal/subprocessors/). Refusing essential authentication/database/storage processing may prevent the relevant account, application or upload functions. Contact the company below about processing restrictions or international transfers.

## 3. Information visible to organizers

An organizer can see only the applicant's name or nickname, region, optional affiliation/occupation, answers for that seminar, current status, and a count of no-shows in the preceding year. Phone number, email, detailed address, other seminar activity, and other organizers' data are not disclosed. A block shields the applicant's name, region, optional profile and answers while preserving existing status management and cancellation.

## 4. Retention

The retention policy applied when a seminar ends is snapshotted; the current default is one year. A later change to six or three months does not unexpectedly apply retroactively. After expiry, application answers and reasons, translation cache, media, and detailed operational data may be cleaned. Cleanup is paused for legal holds, disputes, or pending appeals.

Account deletion removes content-policy consent and blocks in both directions, and removes the reporter link and description from reports. Target and review records may remain where needed for safety or lawful retention. Login identities, sessions, OTP/OAuth linking records, push endpoints, interests, application-start subscriptions, contact details, and optional profile fields are deleted or de-identified. A personal organizer's public name, introduction, and link become a de-identified label. Records required for application, selection, cancellation, non-personal-organization operations, and minimum country/locale policy values may remain in de-identified form. Immediate erasure from every backup is not promised where a defined backup cycle or lawful hold applies.

The live server has a 14-rotation Nginx access-log policy and a 14-day systemd journal retention setting. These are not uniform deletion deadlines for all database audit records, recovery copies or provider records. Company-managed recovery copies are kept for no more than 35 days from creation, except documented legal holds or active disputes with a recorded purpose and release condition. Current Neon database recovery history is six hours and there is no automatic snapshot schedule. The manual recovery snapshot created for this release has a 35-day expiry. The maintenance worker now includes expiry checks for the single September10 legacy server JSON copy, after35days and only without a hold or dispute. It has not expired or been deleted. Its expiry is October15,2026 at03:24:02UTC. This rule does not mean daily automatic backups exist or guarantee erasure of every provider internal record within 35 days.

## 5. User rights

Users may request access, correction, deletion and restriction of processing. Without the app, sign in to the [BakeMeet website](https://onsimdang.com/bakemeet/) and use the account-deletion request in Profile. The [public deletion guide](https://onsimdang.com/bakemeet/account-deletion) and contact email below are also available; emailed requests require identity verification. In the Android app, sign in → Account tab → Delete account → current-password reauthentication and explicit confirmation → Request account deletion. A successful request signs you out and confirms scheduled deletion.

Web deletion requests for email accounts require password reauthentication. Accepted requests mark the account as deletion-pending and revoke all login sessions. After the default 24-hour delay, an hourly maintenance job handles deletion/de-identification; successful operation of that job was verified on the live server. This is not a promise that every copy is erased within exactly 24 hours. Legal holds, active disputes or appeals can pause processing.

## 6. Security

BakeMeet uses one-way password hashing, signed sessions, CSRF protection, HTML escaping, parameterized SQL, organizer/participant ownership checks, decoded-image and size validation, randomized storage keys, security headers, and environment-managed secrets. Live HTTPS, Secure session cookies, PostgreSQL/private object-storage configuration and service readiness were verified. Access, logs, backups and recovery procedures remain subject to operational review; no guarantee of zero incidents is made.

## 7. Contact

Operating entity: Onsimdang AI Company Co., Ltd. CEO and privacy inquiries contact: Jaeho Choi. Business registration: 517-81-04196. Privacy and support email: ceo@onsimdang.com. Address: 2F, 3-5, Hwasancheonbyeon 2-gil, Wansan-gu, Jeonju-si, Jeonbuk State, Republic of Korea. Telephone: +82-70-8805-9096. These company/contact details inherit the company's existing public website. Unverified support@onsimdang.com, privacy@onsimdang.com and a 24-hour processing SLA are not established here.

## 8. Changes

We update the public policy and effective date when actual processing, providers or operations change. Paid organizer services, participation-fee intermediation commissions and advertising are future candidates only. They require a separate CEO decision and appropriate prior notice. The passage of the initial free period is not automatic paid conversion or consent to new data collection.