PEXXY World Privacy Policy
Effective October 18, 2026
TOPPIN Co., Ltd. (“we”) runs PEXXY World (pexxy.world), a website that shows foreigner-friendly events in Korea and lets visitors create an account with an email address. This policy explains what personal information we collect for PEXXY World accounts and how we handle it, under Korea’s Personal Information Protection Act.
PEXXY World accounts are separate from PEXXY app accounts (which need a Korean phone number).
1. What we collect
When you create an account (required): email address, name, country, preferred language.
If you choose (optional): your agreement to receive event emails.
Automatically: sign-in records (time, IP address, browser information), the campaign that brought you to the site (for example, a link from an event booth), and cookies needed to keep you signed in and remember your language.
We do not collect your phone number, passport number, password or card details for a PEXXY World account.
2. Why we use it
To create and manage your account and let you sign in with a one-time email code.
To prevent misuse (for example, limiting repeated code requests) and keep the service secure.
To understand which campaigns bring visitors, in aggregate.
Only if you agree: to email you about new events. You can stop at any time on the My account page.
3. How long we keep it
Until you delete your account. When you delete it, we delete your account information and consent records without delay.
Records used to limit code requests contain only a one-way hash of your email address and IP address (not the address itself) and are deleted after about one day.
If a law requires us to keep certain information longer, we keep only that information for the period the law requires.
4. Sharing with others
We do not give your personal information to third parties.
Event organizers do not receive your account information. If booking becomes available, we will tell you what is shared with the organizer and ask for your agreement before anything is shared.
5. Service providers and overseas transfer
We use the companies below to run PEXXY World. Your information is sent to them over the network when you use the service.
① Supabase, Inc. (United States · support@supabase.com) — stores account data. Items: all account information in Section 1. Storage location: AWS Seoul region (Republic of Korea); it may be accessed from overseas for operation and technical support. Kept until you delete your account or our contract ends.
② Resend, Inc. (United States · support@resend.com) — sends sign-in code emails, and event emails if you agree. Items: email address. Kept until our contract ends (delivery records).
③ Vercel Inc. (United States · privacy@vercel.com) — hosts the website. Items: IP address, browser information and page requests (access logs). Kept according to Vercel’s log retention period.
These providers are needed to run accounts. If you do not want your information transferred to them, you can choose not to create an account; you can still browse events without one.
6. Your rights
On the My account page you can change your name and country, turn event emails on or off, and delete your account at any time.
You can also ask our privacy officer (Section 10) to see, correct, delete or stop processing your information, or to withdraw your consent. We will respond without delay, within 10 days.
7. Children
PEXXY World accounts are for people aged 14 or older. If we learn that a person under 14 has created an account, we delete it.
8. Security
Only staff who need to can access account data. Information is encrypted in transit (HTTPS).
We do not store passwords — you sign in with one-time codes sent to your email.
10. Privacy officer
Privacy officer: Doyoung Jung (CEO) · Email: toppin.developer@gmail.com · Phone: +82-2-433-3222
You can also contact: Personal Information Infringement Report Center (privacy.kisa.or.kr · 118), Personal Information Dispute Mediation Committee (kopico.go.kr · 1833-6972), Supreme Prosecutors’ Office cybercrime unit (spo.go.kr · 1301), Korean National Police Agency cyber bureau (ecrm.police.go.kr · 182).
11. Changes to this policy
We post any change on this page at least 7 days before it takes effect (at least 30 days for a change that matters more to you, such as collecting new items).
This policy takes effect on October 18, 2026.
Operator: TOPPIN Co., Ltd. · B120-2, Global Education Center, Duksung Women’s University, 381 Uicheon-ro, Dobong-gu, Seoul, Republic of Korea · Business registration no. 252-81-03266