Privacy Policy

One Laplace Inc. (hereinafter referred to as the "Company") recognizes the importance of appropriately handling personal information in the clothing rental service "Laplace closet" (hereinafter referred to as the "Service") provided by the Company. The Company complies with the Act on the Protection of Personal Information and other relevant laws and regulations, and establishes this Privacy Policy (hereinafter referred to as the "Policy") as follows.

We collect the following personal information in connection with the Service:

3.1 Information Collected at Registration

• Name
• Email address
• Password (stored encrypted)
• Language preference

3.2 Profile Information

• Nationality
• Phone number
• Gender
• Date of birth
• Height
• Body type
• Clothing sizes (tops, bottoms)
• Style preferences
• Avoided materials/elements

3.3 Information Collected During Service Use

• Trip information (destination, check-in/out dates, trip purpose)
• Delivery hotel information
• Rental item selection history
• Favorite items
• Payment information (payment processing is handled by Stripe, Inc.; we do not directly store credit card numbers)

3.4 Automatically Collected Information

• IP address
• Cookie information
• Device information (browser type, OS, etc.)
• Access logs (access time, pages viewed, etc.)

3.5 Information from External Authentication Services

When registering using a Google account, we may obtain the following information from that service:

• Name
• Email address
• Profile picture
• Authentication identifiers

We use collected personal information for the following purposes:

1. Providing, operating, and maintaining the Service
2. Member registration, authentication, and account management
3. Processing rental reservations, delivery, and return management
4. Suggesting appropriately sized clothing for customers
5. AI-powered coordination suggestions (based on profile, trip information, weather data, etc.)
6. Payment processing and management of compensation fees and buyout payments
7. Sending reservation confirmations, reminders, and return confirmations
8. Responding to inquiries and providing support
9. Analysis for service quality improvement and new feature development
10. Addressing violations of the Terms of Service
11. Compliance with legal requirements
12. Sending announcements and marketing information (only with consent)

We will not provide your personal information to third parties without your consent, except in the following cases:

5.1 When Required by Law

When disclosure is required by law or other legal provisions

5.2 When Necessary for Service Provision

We may provide personal information to the following service providers to the extent necessary for service provision:

5.3 For Protection of Life, Body, or Property

When necessary for the protection of life, body, or property, and when it is difficult to obtain your consent

We implement the following security measures to prevent unauthorized access, loss, destruction, falsification, and leakage of personal information:

• Organizational measures: Appointment of a data protection officer, employee training
• Personnel measures: Confidentiality agreements with employees, access control management
• Physical measures: Access control for server rooms
• Technical measures:
  • Encryption in transit (TLS 1.3)
  • Password hashing (bcrypt)
  • Database encryption at rest
  • Intrusion detection and prevention systems
  • Regular security audits

We retain personal information for the following periods:

After the retention period expires, data will be promptly deleted or destroyed using appropriate methods.

We use cookies and similar technologies in the Service.

8.1 Purposes of Use

• Essential cookies: Required for session management and authentication
• Functional cookies: Storing language and display preferences
• Analytics cookies: Analyzing service usage for improvement

8.2 Cookie Management

You can refuse cookies through your browser settings. However, if you disable essential cookies, some features of the Service may not be available.

Under applicable data protection laws, you have the following rights:

9.1 Right of Access

You can request disclosure of your personal information held by us.

9.2 Right to Rectification

You can request correction, addition, or deletion of your personal information if it is inaccurate.

9.3 Right to Erasure

You can request suspension of use or erasure of your personal information if it was unlawfully obtained or used beyond the stated purposes.

9.4 Right to Restriction of Disclosure

You can request that we stop providing your personal information to third parties.

9.5 How to Exercise Your Rights

To exercise these rights, please contact us using the information below. After identity verification, we will respond within the legally required period. A handling fee of ¥1,000 (tax included) per request will be charged for disclosure requests.

You can delete your account from the settings page in My Page. Account deletion will result in:

• Deletion of member and profile information
• Deletion of trip history and favorites
• Invalidation of login sessions

However, information required to be retained by law (such as transaction records) will be kept for the prescribed period. Also, you cannot delete your account if you have active reservations or ongoing trips; please cancel or complete returns first.

In providing the Service, we use services from companies located in the following countries/regions, and your personal information may be transferred to these locations:

• United States: Stripe, Inc. (payment processing), Supabase, Inc. (database), Google LLC (AI features), Resend, Inc. (email delivery), Vercel, Inc. (website hosting)

The United States does not have a comprehensive federal law for the protection of personal information. However, certain protections are provided through state laws such as the California Consumer Privacy Act (CCPA) and sector-specific federal laws (healthcare, finance, etc.). The above service providers implement industry-standard security measures and contractual personal information protection measures, and we require appropriate management through contracts.

In the event of a breach, loss, or destruction of personal information (hereinafter "Data Breach"), or when there is a risk thereof, we will take the following actions:

• Promptly investigate the facts and take measures to prevent further damage
• Report to the Personal Information Protection Commission in accordance with the Act on the Protection of Personal Information
• Promptly notify the affected individuals
• Develop and implement measures to prevent recurrence

For users residing in the EU/EEA (European Economic Area), the following additional provisions apply in accordance with the EU General Data Protection Regulation (GDPR).

13.1 Legal Basis for Processing

We process personal data based on the following legal grounds:

• Performance of a contract: Processing necessary for the provision of rental services, payment processing, delivery, and other fulfillment of the service agreement
• Legal obligation: Tax and accounting obligations, record-keeping required by law
• Legitimate interests: Service improvement, fraud prevention, security
• Consent: Processing based on consent, such as marketing communications

13.2 Additional Rights

In addition to the rights set forth in Section 9 of this Policy, EU/EEA users have the following rights:

• Right to data portability: The right to receive your personal data in a structured, machine-readable format and to transfer it to another controller
• Right to object: The right to object to processing based on legitimate interests
• Right to lodge a complaint: The right to lodge a complaint with the data protection supervisory authority in your country of residence

To exercise these rights, please contact us using the information provided at the end of this Policy.

The Service is intended for users 18 years of age and older. Persons under 18 are not permitted to use the Service. We do not knowingly collect personal information from individuals under 18.

We may update this Policy as necessary due to changes in laws, service content, or other reasons. The revised Policy will take effect upon posting on the Service. For significant changes, we will notify you through the Service or by email.

For inquiries about personal information handling or to exercise your rights, please contact:

Note: For access requests and similar, we may require submission of identity verification documents (copy of driver's license, passport, etc.).