Legal
Last updated: March 2026
CREATEAM runs team-based learning programs in Seoul, Korea. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website or participate in our programs. Contact: createam.house@gmail.com
We collect the following personal information: • Name and email address: required for account creation and communication • Phone number: optional, used for program coordination • Profile photo: optional • Google account information: when you sign in with Google OAuth • Application details: nationality, occupation, goals • Payment information: processed by PortOne (we do not store card details) • Marketing consent status and timestamp
We use your information to: • Create and manage your account • Communicate program schedules, updates, and feedback • Process payments and issue refunds • Form and coordinate your team • Send marketing updates (only if you consented) • Comply with applicable legal obligations
We process your personal data on the following legal bases: • Contract performance: to deliver the program you signed up for • Legitimate interests: program coordination and safety • Consent: for marketing communications and optional profile data • Legal obligation: where required by Korean law
We retain your personal data for as long as your account is active or as needed to provide services. Application records are kept for up to 3 years for program documentation. You may request deletion of your data at any time by contacting createam.house@gmail.com. Deletion requests are processed within 30 days.
We use the following third-party services which may process your data: • Supabase: database and authentication (supabase.com) • Google OAuth: sign-in authentication (google.com) • PortOne: payment processing (portone.io) • Resend: transactional email delivery (resend.com) Each provider has its own privacy policy. We ensure all providers meet appropriate data protection standards.
You have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your data ("right to be forgotten") • Withdraw marketing consent at any time • Object to or restrict how we process your data • Receive your data in a portable format To exercise any right, email createam.house@gmail.com.
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Data is stored on Supabase infrastructure with row-level security policies. Passwords are never stored. We use Google OAuth and magic link authentication only.
We use session cookies strictly necessary for authentication. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may prevent you from signing in.
Our services are intended for users 18 years of age or older. We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal data, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email before they take effect. Continued use of our services after changes constitutes acceptance of the updated policy.
For privacy-related questions or requests: createam.house@gmail.com CREATEAM, Seoul, Korea
© 2026 CREATEAM. All rights reserved.