PeachBond Privacy Policy

1. Information We Collect

At sign-up (all users)

• Email address
• Account type (Supplier / Buyer / Admin)
• If using Google sign-in: email and profile information provided by Google

When registering a Supplier/Buyer profile

• Company name, country/region, contact name, contact email, contact phone, website, LinkedIn
• (Supplier) Brand, product categories, MOQ, production capacity, certifications, business registration number, business address (including factory addresses)
• (Buyer) Company type, founded year, distribution channels, brands carried, buyer intent data (target product categories, target price, etc.)

When sending an Inquiry

• The message content you write (company introduction, purpose, requested product, memos) and any reply content are stored and delivered to the other party by email.

During supplier verification review

• Business registration certificate copy (the registration number is automatically extracted using AI-based OCR)
• Certification documents (GMP, FDA, ISO, etc.)

For billing

• The Company does not directly collect or store full card numbers or other raw payment credentials. Paid plan sign-up is only available through the Android app, where payment is processed directly by Google Play — see Section 4.

Automatically collected during use

• Access logs, cookies, usage history
• Country inferred from IP address (for automatic language setting)

2. Purpose of Collection and Use

• Account creation, management, and identity verification
• Providing Buyer search, recommendations, saving, and inquiry relay
• Supplier verification review and access management
• Billing and plan management (Free/Pro/Business)
• Service improvement, fraud prevention, and customer support

3. Retention Period

Account and profile information: when you request account deletion, use of your account is suspended immediately, and your personal data is deleted after a 30-day recovery grace period.

Records the Company must retain under the Act on Consumer Protection in Electronic Commerce are kept separately from your general account data, only for the period required below, and are destroyed once that period ends:

Unclaimed Supplier/Buyer profiles researched and entered by the Company are updated or removed upon the relevant company's claim request or deletion request.

4. Third-Party Processors

We do not sell or share personal data with third parties except for the following service providers necessary to operate the Service:

5. International Data Transfers

Because our infrastructure providers (Supabase, Vercel) operate outside Korea, personal data is transferred outside of the user's home country to enable the Service to function.

Supabase, Google, Vercel

• Recipients: Supabase Inc., Google LLC, Vercel Inc.
• Destination country: United States
• Items transferred: email, profile information, usage records, and other information listed in Section 1 of this Policy
• Timing and method: transmitted in real time over the network during use of the Service
• Purpose of use by recipients: server hosting, database operations, authentication
• Retention: for as long as necessary to provide the Service, per Section 3 above

Anthropic, Resend

• Recipients: Anthropic, PBC, Resend, Inc.
• Destination country: United States
• Items transferred: business registration/certificate documents and the registration number extracted from them (Anthropic); Inquiry message content and the recipient's email address (Resend)
• Timing and method: transmitted in real time over the network when the related feature (document verification, sending an Inquiry) is used
• Purpose of use by recipients: AI-based OCR extraction of registration numbers and homepage-based category classification (Anthropic); sending and receiving Inquiry emails (Resend)
• Retention: for as long as necessary to provide the Service, per Section 3 above

6. Your Rights

You may access, correct, delete, or request restriction of processing of your personal data at any time via My Profile, or by contacting us using the details below.

7. Cookies

The Service uses cookies and localStorage to remember language preference (EN/KO) and similar settings. You may disable cookies in your browser, though some features may not function properly.

8. Children's Privacy

This Service is a B2B (business-to-business) platform and is not directed at, nor knowingly collects data from, individuals under the age of 14 (or applicable minimum age in your jurisdiction, e.g., 13 under COPPA in the US).

9. Contact

• Company: UNFOLD LAB (언폴드랩)
• Representative: Jaewoo Jung
• Business Registration No.: 136-11-23540
• Address: 46, Apgujeong-ro 2-gil, Gangnam-gu, Seoul, Republic of Korea (214-S46)
• Data Protection Contact Email: support@peachbond.com
• Phone: 02-518-2022

10. Changes to This Policy

This Policy is effective as of 2026-08-21 and may be updated to reflect changes in law or the Service. We will notify users of material changes via in-service notice.