Stelllink (hereinafter referred to as "Stelllink" or the "Company"), operated by PagesX, strictly complies with Korea's privacy laws, including the Act on Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act. We also adhere to international standards such as the OECD Guidelines on the Protection of Privacy.

1. Collection of Information
   a. Items Collected

The Company collects the following personal information to provide and improve the Service:
Category Items Collected Collection Method
Account Registration Email address, name, profile picture (via Google/Apple OAuth) OAuth authentication
Service Usage IP address, device information, browser type/version, usage logs, access timestamps Automatically collected during service use
Paid Subscription Payment instrument details (card number, billing address) Entered during payment (processed by PG; not stored by the Company)
Link Tracker IP address, country, device type, browser of link visitors (de-identified / aggregated) Automatically collected when shared links are accessed
b. Methods of Collection

OAuth sign-up via Google or Apple
Automatic collection during service usage
Information entered during payment checkout
Customer support inquiries via email


1. Purpose of Use

The Company uses collected personal information for the following purposes:

Service provision and account management — authenticating users, personalizing the service, managing workspaces and items
Paid subscription processing — managing billing, processing payments and refunds
Link Tracker analytics — providing de-identified, aggregated statistics on link clicks, geographies, and devices
Service improvement and error analysis — diagnosing bugs, analyzing usage patterns, improving features
Customer support — responding to inquiries, resolving complaints
Legal compliance — fulfilling obligations under applicable laws and regulations


1. Third-Party Sharing

The Company does not share or sell personal information to third parties, except in the following cases:
Provider Purpose Information Provided Retention Period
Google OAuth sign-up / sign-in Email, name, profile image Until account deletion or service termination
Apple OAuth sign-up / sign-in Email, name Until account deletion or service termination
Payment Gateway (PG) Subscription payment processing Payment details (directly handled by PG, not stored by the Company) As required by PG's own retention policy

Personal information may also be provided when required by law, regulation, or lawful request from government authorities.
4. Processing Consignment

The Company consigns certain personal information processing tasks to the following entities to ensure smooth service operation. The Company requires these entities to implement appropriate safeguards through contractual provisions in accordance with applicable law.
Consigned Entity Description of Tasks Retention Period
Google (Google Drive API) Cloud file storage and management Duration of user's service use
Payment Gateway (PG) Payment processing (credit card, etc.) As required by relevant laws
Cloud Infrastructure Provider Server hosting and data storage Duration of service operation
5. Retention Period

Personal information is promptly destroyed once its purpose of collection and use has been fulfilled. However, the following information is retained for the specified periods in accordance with internal policies or applicable laws:
a. Retension Under Internal Policy

Fraudulent use records — retained for 6 months to prevent abuse


b. Retention Unser Applicable Laws
Record Type Legal Basis Retention Period
Contract or subscription withdrawal records Act on Consumer Protection in Electronic Commerce 5 years
Payment and supply of goods records Act on Consumer Protection in Electronic Commerce 5 years
Consumer complaint or dispute resolution records Act on Consumer Protection in Electronic Commerce 5 years
Website visit logs Protection of Communications Secrets Act 3 months
6. Your Rights

Users (data subjects), or their legal representatives, may exercise the following rights at any time:

Right to access — request a copy of personal information held by the Company
Right to correction — request correction of inaccurate or incomplete personal information
Right to deletion — request deletion of personal information, subject to legal retention requirements
Right to suspend processing — request suspension of processing of personal information


To exercise any of these rights, please contact us at team@pagesx.com. The Company will process your request without undue delay.

If correction or deletion is requested, the Company will not use or provide the relevant personal information until the correction or deletion is complete. Where personal information has already been provided to a third party, the Company will promptly notify the third party and request appropriate action.
7. Destruction of Data

Personal information is destroyed without delay once its purpose has been fulfilled.
a. Destruction Procedure

Information entered for registration or service use is transferred to a separate database (or separate storage for paper documents) after its purpose has been fulfilled, and is destroyed after being retained for the legally required period.
b. Destruction Method

Electronic files — permanently deleted using technical methods that render recovery impossible
Paper documents — shredded or incinerated


1. Cookies
   a. What Are Cookies?

The Company uses cookies — small text files stored on your device — to provide a personalized and efficient service experience. Cookies do not autonomously collect personally identifying information.
b. how We Use Cookies

Session management — maintaining your login session
Service analytics — understanding usage patterns to improve the service


c. How to Reject Cookies

You may configure your browser settings to accept all cookies, prompt before storing cookies, or reject all cookies. Please note that rejecting cookies may limit your ability to use certain features of the Service that require login.

Chrome: Settings → Privacy and Security → Cookies
Safari: Preferences → Privacy → Cookies
Firefox: Settings → Privacy & Security → Cookies


1. Security Safeguards

To prevent the loss, theft, leakage, alteration, or destruction of users' personal information, Stelllink takes the following technical and administrative measures to ensure its security:
a. Password Encryption

User passwords associated with Stelllink accounts are stored and managed in encrypted form, ensuring that only the user knows their password. Access to and modification of personal information is only possible by the user who knows the password.
b. Measures Against Hacking and Malware

We make every effort to prevent the leakage or damage of users' personal information due to hacking, computer viruses, or other security threats. We regularly back up data to prevent loss, use up-to-date antivirus software to block data leakage or corruption, and apply encryption technologies such as HTTPS/TLS to ensure secure transmission over the network. We also use intrusion prevention systems (IPS) to block unauthorized external access, and we continue to invest in additional system-level security tools to safeguard user data.
c. Limiting and Training Personnel with Access

Access to personal information is limited to specific authorized personnel, each of whom is assigned a unique, regularly updated password. These individuals receive regular training to ensure compliance with Stelllink's privacy policy and best practices for data protection.
d. Operation of a Dedicated Privacy Protection Team

We operate a dedicated internal team responsible for monitoring the implementation of Stelllink's privacy policy and ensuring compliance by relevant staff. If any issues are identified, they are addressed immediately. However, Stelllink shall not be held liable for any damages resulting from user negligence or incidents that occur outside our control or responsibility, despite our compliance with all privacy obligations.
10. Privacy Officer Contact

If you have any questions, complaints, or concerns related to the handling of personal information while using our services, you may contact our designated Personal Information Protection Officer. We will respond promptly and thoroughly to your inquiries.
Role Details
Name Park Sunjong (박선종)
Position CTO, Stelllink Executive Team
Phone 064-711-7488
Email team@pagesx.com

For additional assistance regarding personal data infringement, you may also contact the following institutions:

Personal Information Infringement Report Center — privacy.kisa.or.kr / dial 118
Supreme Prosecutors' Office Cybercrime Investigation Department — www.spo.go.kr / dial 1301
National Police Agency Cyber Security Bureau — www.ctrc.go.kr / dial 182


1. Changes to Policy

Any additions, deletions, or modifications to this Privacy Policy will be announced through the "Notices" section of the website at least 7 days before the effective date. For significant changes affecting users' rights — such as changes to the collection and use of personal information or provision to third parties — notice will be given at least 30 days in advance.

Date of announcement: January 1, 2026
Effective date: January 1, 2026