Privacy Policy

Effective date: May 21, 2025Peterlabs (the "Company") operates fromband and sets out this Privacy Policy under the Korean Personal Information Protection Act to protect users' personal information and handle related concerns promptly. If the Korean and English versions differ, the Korean version prevails.

1. Why we process personal information

We process personal information for the purposes below. If a purpose changes, we take the necessary steps, such as asking for separate consent.
•Membership: identity checks, sign-in, account security, preventing misuse, and answering inquiries
•The Service: playing and recording music, artist pages, follows and notifications, recommendations, and keeping language and display settings
•Paid services: payments and recurring billing, purchase history, artist payouts, and refunds
•Security and reliability: blocking automated sign-ups and spam, rate limiting, and diagnosing outages

2. Personal information we process

Category
Items
How collected
Sign-up (required)
Email, name, service language
Sign-up form
Google sign-in
Google account email, name, account identifier, sign-in connection tokens
When connecting a Google account
Passkeys (optional)
Passkey identifier and public key, device type
When registering a passkey
Profile (optional)
Profile photo, artist page details (artist name, bio, links, and the like)
Entered by the member
Service use
Listening history (track, time, segments), follows, likes, searches, notification settings, country of access
Generated automatically while using the Service
Access and security
IP address, browser and device information (user agent), sign-in device information, cookies
Collected automatically on access
App notifications
Push token (stored hashed), device platform
When notifications are allowed in the app
Payments
Payment processor customer identifier, payment and subscription history
When paying for a paid service
Artist payouts
Payout account identifier, country, currency, payout amounts
When connecting a payout account (bank details are held directly by Stripe)
Inquiries
Email, inquiry content, replies
When using Contact us

3. How long we keep it

We destroy personal information without delay when a member closes their account or the purpose is fulfilled. The information below is kept for the period shown.
Item
Retention
Basis
Sign-in sessions
7 days
Service operation
Verification codes
10 minutes
Service operation
Notifications
90 days
Service operation
Guest playback cookie
1 year
Service operation
Server logs
30 days
Outage diagnosis and security
Data backups
Up to 35 days
Disaster recovery
Records of contracts, withdrawals, payments, and supply
5 years
Act on Consumer Protection in Electronic Commerce
Records of consumer complaints and disputes
3 years
Act on Consumer Protection in Electronic Commerce
Access records (sign-in records, IP addresses, and the like)
3 months
Protection of Communications Secrets Act

4. How we destroy it

Personal information whose retention period ends or whose purpose is fulfilled is destroyed without delay. Information the law requires us to keep is stored separately from other information and destroyed when its period ends. Electronic files are deleted so they cannot be recovered.

5. Sharing with third parties

We share personal information with third parties only with the user's consent or where the law specifically provides.
Recipient
Items
Purpose
Retention
The artist of a fan membership the user joins
Name, email, join date, membership status
Managing members and providing benefits
Until the membership ends

6. Outsourcing

We outsource processing to the companies below to provide the Service, and our agreements with them require that personal information is managed safely.
Processor
Task
Amazon Web Services, Inc.
Servers, data storage, sending email
Cloudflare, Inc.
Delivering audio and images, blocking automated sign-ups (Turnstile)
Vercel Inc.
Website hosting
Stripe, Inc.
Payments, recurring billing, artist payouts
Apple Inc., Google LLC
In-app purchases, Google sign-in
650 Industries, Inc. (Expo)
Sending app push notifications
Modal Labs, Inc.
Processing artist images

7. Transfers abroad

To provide the Service and perform our contract with you, we transfer personal information abroad as shown below. Transfers happen over encrypted connections when the Service is used, and retention follows section 3. You can refuse the transfer by closing your account, but you then cannot use the Service.
Recipient
Country
Items
Purpose
Contact
Amazon Web Services, Inc.
United States
All items in section 2
Servers, data storage, sending email
aws.amazon.com/privacy
Cloudflare, Inc.
United States
IP address, country of access, device information, listening history
Content delivery, security
cloudflare.com/privacypolicy
Vercel Inc.
United States
IP address, device information
Website hosting
vercel.com/legal/privacy-policy
Stripe, Inc.
United States
Email, name, payment and payout information
Payments and payouts
stripe.com/privacy
Google LLC
United States
Google account details, in-app purchase information
Sign-in, payments
policies.google.com/privacy
Apple Inc.
United States
In-app purchase information
Payments
apple.com/legal/privacy
650 Industries, Inc.
United States
Push token
Sending notifications
expo.dev/privacy
Modal Labs, Inc.
United States
Images uploaded by artists
Image processing
modal.com/legal/privacy-policy

8. Cookies and similar technologies

We use cookies and browser storage to keep you signed in, record guest playback, and remember display settings. You can refuse or delete cookies in your browser settings, but some features, such as signing in, then stop working.

9. Children under 14

We do not accept sign-ups from children under 14. If we learn that we have collected personal information from a child under 14, we destroy it without delay.

10. Your rights and how to use them

You can ask at any time to access, correct, delete, or stop processing your personal information, withdraw consent, or close your account. You can change your name, profile, and notification settings yourself in My info; for anything else, use Contact us in the Help center or email hi@fromband.com. We reply with the result within 10 days of receiving the request. A legal representative or an authorized person may also make a request for you.

11. How we keep it safe

•All connections are encrypted (HTTPS).
•Verification codes and push tokens are stored hashed, and important keys are protected by a key management service (AWS KMS).
•Access to personal information is limited to operators, and administrator sessions are kept short.
•Rate limits and bot protection block automated sign-ups and brute-force attempts.
•Data is backed up and recovery procedures are in place.

12. Privacy officer

The privacy officer below oversees personal information processing and handles related complaints and remedies.
•Name: Yusang Park
•Title: Representative
•Email: hi@fromband.com
•Address: 103-705, 879 Baegyang-daero, Sasang-gu, Busan, Republic of Korea

13. Remedies

For advice or dispute resolution about a privacy infringement, you can contact the following Korean agencies.
•Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
•Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
•Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
•Korean National Police Agency: 182 (ecrm.police.go.kr)

14. Changes to this policy

This Privacy Policy applies from the effective date above. Changes are announced on the Service at least 7 days before they take effect, and changes that significantly affect your rights at least 30 days before.
© frombandPeterlabs (피터랩스) | Representative: Yusang Park (박유상) | Korean business registration no. 107-38-86559 | 103-705, 879 Baegyang-daero, Sasang-gu, Busan, Republic of Korea