Privacy Policy
Effective Date: February 7, 2026
Last Updated: February 7, 2026
1. Introduction
Morak ("Company," "we," "us," or "our") operates the Tekton service (the "Service"), an AI-powered design system engine and marketplace for premium React UI templates. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.
Data Controller:
- Business Name: Morak (모락)
- Representative: Sooyeon Kim (김수연)
- Address: 30, Art Center-daero 97beon-gil, Yeonsu-gu, Incheon, Republic of Korea
- Contact: soo.kate.yeon@gmail.com
By using our Service, you consent to the collection and use of your information in accordance with this Privacy Policy.
2. Personal Information We Collect
2.1 Information You Provide
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Account Information (email, name, password) | Account creation and management | Contract performance |
| Payment Information (processed by Paddle) | Transaction processing | Contract performance |
| Communication Data (support inquiries) | Customer support | Legitimate interest |
2.2 Information Collected Automatically
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Usage Data (pages visited, features used) | Service improvement | Legitimate interest |
| Device Information (browser type, OS, IP address) | Security and analytics | Legitimate interest |
| Cookies and Tracking Technologies | Session management, analytics | Consent |
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send administrative notifications (account, security, updates)
- Respond to customer support requests
- Monitor and analyze usage patterns
- Detect and prevent fraudulent transactions
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 3 years |
| Transaction Records | 5 years (legal requirement) |
| Support Communications | 3 years |
| Usage/Analytics Data | 2 years |
After the retention period, data is securely deleted or anonymized.
5. Your Rights
Under applicable data protection laws (including PIPA and GDPR), you have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Correction | Request correction of inaccurate data |
| Deletion | Request deletion of your personal data |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interest |
| Withdraw Consent | Withdraw consent where processing is consent-based |
To exercise these rights, contact us at soo.kate.yeon@gmail.com. We will respond within 30 days.
6. Cross-Border Data Transfers
Your personal information may be transferred to and processed in countries outside of the Republic of Korea by the following service providers:
| Service Provider | Country | Purpose |
|---|---|---|
| Paddle | United Kingdom/USA | Payment processing |
| Supabase | USA | Database and authentication |
| Vercel | USA | Website hosting |
These transfers are necessary for contract performance. We ensure that appropriate safeguards are in place, including the service providers' compliance with equivalent data protection standards.
7. Cookies and Tracking Technologies
We use the following technologies:
| Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Session management, authentication | Session |
| Analytics Cookies | Usage analysis, service improvement | Up to 2 years |
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL)
- Secure authentication mechanisms
- Access controls and monitoring
- Regular security assessments
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
Our Service is not intended for individuals under the age of 14 (or 16 in the European Union). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
10. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification (for registered users)
Your continued use of the Service after the changes take effect constitutes acceptance of the revised policy.
12. Contact Us
For privacy-related inquiries or to exercise your data rights:
Morak (모락)
Representative: Sooyeon Kim (김수연)
Address: 30, Art Center-daero 97beon-gil, Yeonsu-gu, Incheon, Republic of Korea
Email: soo.kate.yeon@gmail.com
This Privacy Policy is provided in both English and Korean. In case of discrepancy, the Korean version shall prevail for users in the Republic of Korea.