Privacy Policy

OneStep (the "Company" or "we") collects the following personal information to provide the Service.

Required: email address and password, and the name (or display name) and profile image provided when a social login is used.

Collected automatically: IP address used for access, login times, Service usage history, course progress, file download records and payment records.

Optional: date of birth.

We use cookies to maintain login sessions. Cookies can be refused in the browser settings, but features that require login will then be unavailable.

We use personal information to identify members and verify their identity, to manage access to courses and display progress, to process payments and check purchase history, to check whether a refund is available, to respond to payment disputes (chargebacks), to prevent fraudulent use and unauthorized distribution and investigate violations of the Terms of Service, to respond to inquiries, and to produce statistics for improving the Service.

When an account is deleted, we delete the personal information without delay. However, records that must be kept under law are an exception, and information is kept until the end of any investigation or inquiry in progress and, where a claim or debt such as a payment dispute remains, until it is settled.

Records of contracts and terminations, and records of payment and the supply of goods (including file download records), are kept for 5 years under the Korean Act on the Consumer Protection in Electronic Commerce and other applicable laws.

Records of consumer complaints and dispute handling are kept for 3 years.

The email address of a deleted account is kept only in a form from which it cannot be restored, and is used to check re-registration by the same person and to prevent fraudulent use.

We do not provide personal information to third parties except with the member’s consent or where the law provides a basis for it. If a payment dispute arises, we may submit the payment and usage records needed to respond to it to the card issuer through the payment processor.

To operate the Service, we entrust processing to the following processors.

Stripe, Inc. (United States) — payment processing and storage of payment information. The Company does not itself store payment information such as card numbers.

Cloudflare, Inc. (United States) — content delivery, storage of videos and files, and security.

Google LLC (United States) — sending and receiving verification code and notification emails, and handling customer inquiries, through the Gmail API.

The three processors above operate in the United States, so personal information is processed in the United States.

Information processed: email address, payment-related information and Service usage records. It is transferred over the internet at the time the Service is used.

For users residing in the United Kingdom or the European Economic Area (EEA), transfers are made under the transfer safeguards provided by each processor, and the information is kept until the purpose is achieved or the contract with the processor ends.

Users may at any time request access to, correction or deletion of, or suspension of the processing of, the personal information held about them.

To exercise these rights, please contact [email protected]. We handle requests within the period set by applicable laws, and may limit or refuse a request where the law permits.

When the retention period has passed or the purpose of processing has been achieved, we delete the information concerned without delay.

Electronic records are deleted by a method that makes them unrecoverable, and printed materials are shredded or incinerated.

Personal information is transmitted over encrypted connections, and access rights are granted only to those who need them for their work.

We keep records of administrators’ access to personal information.

Personal information protection is the responsibility of Customer Support. Please send inquiries, complaints or requests for redress concerning the processing of personal information to [email protected].