Privacy Policy
Munteok · Policy version 1 · Effective: 12 October 2026
1. Who we are
Korea Concierge, Jikgugak and Beforehand are services of Munteok. Munteok is operated by Youngji Kim, an individual in Seoul, Korea. Munteok decides how the personal information described here is used.
- Privacy contact: privacy@munteok.com
- Order support: support@munteok.com
- Privacy officer: Youngji Kim, operator of Munteok. Contact by email at privacy@munteok.com.
This policy covers:
- Korea Concierge: the website concierge.youngji.kim and its tools for AI assistants (MCP).
- Jikgugak: Korean product picks and checkout offered through Korea Concierge.
- Beforehand: the Chrome extension. Section 9 describes it in full.
- munteok.com: this website.
2. What we collect and why
| Service | Information | Purpose |
|---|---|---|
| Price checks (Beforehand, AI assistants, website) | Product name, brand, delivery country. For AI assistants: what the assistant sends to our tools. | Find the product in Korea and quote a delivered price. |
| Korean product orders | Name, email, the quote (product, link, amounts, currency, exchange rate), delivery country, payment method and payment reference. After payment: shipping address and phone number (from Stripe or PayPal), our Korean purchase record (cost, retailer, retailer order number, receipt), tracking number, payment issues. | Make the sale, buy the item in Korea, ship it, handle refunds and disputes. |
| Service requests (settling-in, housing, education) | Email, name if given, service area, request details, quote, payment status, delivery records. | Quote and deliver the service. |
| Waitlist | Email and a short description of your situation. | Tell you when the service opens. |
| Business sourcing requests | Name, email, company, destination, items, timeline, notes, payment and refund records. | Quote and run the sourcing request. |
| Demand records | Normalized product name, category, delivery country, result type, channel label, browser family. For our own chat service only, a session reference. No IP address. | Analyse product demand. |
| Abuse limits | A keyed hash of your IP address and a request count per 10 minutes. | Limit abuse. |
| Tool telemetry | Tool name, success, duration, error code. No tool input and no personal information. | Keep the service running. |
| Apartment prices page (concierge.youngji.kim) | The map coordinates of the place you pick in the address search. | Find the district and show its prices. Not stored. |
| Website analytics | Cookies and device and visit information. | Measure website use. Not used for AI assistant tool calls or the extension. |
| Secondhand orders (existing website orders only) | Name, email, listing link and notes, quote, payment status, proof and tracking records. | Complete existing resale orders. |
We do not collect card numbers. We do not knowingly collect information from children under 14; our services are not directed to them.
3. How long we keep it
| Records | Where | Period and how it ends |
|---|---|---|
| Contract and cancellation records of orders (Korean product orders, secondhand orders, business sourcing requests, and service requests that become a contract) | Our database | 5 years from the order, as the Act on Consumer Protection in Electronic Commerce requires (Enforcement Decree, Article 6(1)(ii)). |
| Payment and delivery records of those orders | Our database | 5 years from the order (same Decree, Article 6(1)(iii)). |
| Complaint and dispute records | Our database | 3 years (same Decree, Article 6(1)(iv)). |
| Service requests that do not become a contract | Our database | Kept until you ask us to delete them. There is no automatic deletion. |
| Waitlist entries | Our database | Kept until you ask us to remove you. There is no automatic deletion. |
| Demand records | Our database | No automatic deletion. They contain no contact details or IP address. |
| Tool telemetry | Our database | No automatic deletion. It contains no personal information. |
| Abuse-limit counters | Our database | Deleted within 24 hours by an hourly cleanup. |
When a period ends or the purpose is met, we delete the information without delay. Database rows are deleted; files are deleted so they cannot be restored. If a law requires us to keep records longer, we keep only those records, stored separately, for that period.
4. Sharing with third parties
We do not sell personal information. We do not give it to third parties for their own purposes, except:
- When a law or a lawful order requires it.
5. Service providers (outsourcing)
We use these providers to run the services. They process information only for the task below.
| Provider | Task |
|---|---|
| Supabase Pte. Ltd. | Database (Seoul region) |
| Vercel Inc. | Hosting the website, API and AI assistant endpoint |
| Stripe, LLC | Card payments; collects shipping address and phone at card checkout |
| PayPal Pte. Ltd. | PayPal payments; returns the shipping address on your PayPal account |
| Plus Five Five, Inc. (Resend) | Order and service emails |
| Google LLC (Google Analytics) | Website analytics on concierge.youngji.kim and munteok.com, only after you allow it in the cookie banner |
| Google LLC (Google Maps Platform) | Map and address search on the apartment prices page of concierge.youngji.kim, only after you click Load map. Your browser then loads Google Maps directly; our server sends Google the coordinates of the place you pick. |
Order alerts to our operator contain only operational details, such as the order number, amount and product link. They contain no personal information.
6. Transfers outside Korea
Some providers above store or process information outside Korea. All transfers happen over the internet, at the time shown in the table. Each row states its legal basis:
- Contract: needed to make and perform your contract (Personal Information Protection Act, Article 28-8(1)(iii)). Stripe, PayPal, Resend, Supabase and Vercel.
- Consent: your separate consent (Personal Information Protection Act, Article 28-8(1)(i)). Google Analytics and Google Maps. We ask for each one separately from any other consent, and nothing is sent to Google before you give it.
| Recipient (contact) | Country | Items | When | Purpose | Retention | Basis |
|---|---|---|---|---|---|---|
| Stripe, LLC (354 Oyster Point Blvd, South San Francisco, CA 94080, USA; privacy@stripe.com) | United States; India | Name, email, shipping address, phone, quote details, payment details | At card checkout | Card payment, fraud prevention | As Stripe's privacy policy sets out | Contract |
| PayPal Pte. Ltd. (5 Temasek Boulevard #09-01, Suntec Tower Five, Singapore 038985; Korea agent PayPal Korea Services LLC, skrprivacy@paypal.com) | Singapore; United States and other countries | Order ID, amount, item description; PayPal account data you provide to PayPal | At PayPal checkout | PayPal payment | Account relationship plus 10 years, as PayPal's privacy statement sets out | Contract |
| Plus Five Five, Inc. (Resend) (2261 Market Street #5039, San Francisco, CA 94114, USA; privacy@resend.com) | United States | Name, email, order details, tracking number | When an email is sent | Order and service emails | Deleted within 90 days after our account ends | Contract |
| Supabase Pte. Ltd. (65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513; privacy@supabase.com) | Database in Korea; support and account data in the United States and Singapore | All stored records | Stored continuously | Database | Until we delete it | Contract |
| Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA; privacy@vercel.com) | United States and other countries | All information sent to our websites and API, in transit | On every request and website visit | Hosting | While the request is processed; request logs for Vercel's log retention for our plan | Contract |
| Google LLC, Google Analytics (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google privacy contact form: support.google.com/policies/contact/general_privacy_form) | United States | IP address, cookie identifiers, device and browser information, pages visited | On each page you open on munteok.com or concierge.youngji.kim, after you choose Allow in the cookie banner | Website analytics | Event-level data 2 months; user-level data 14 months | Consent |
| Google LLC, Google Maps Platform (address and contact above) | United States | From your browser: IP address, browser and device information, and the text you type into the address search. From our server: the coordinates of the place you pick. | On the apartment prices page of concierge.youngji.kim, when you click Load map and when you then search | Showing the map, address search, and finding the district | As Google's privacy policy sets out | Consent |
Providers that receive no information about you are not listed in Sections 5 and 6.
How to refuse.
- Google Analytics: choose Decline in the cookie banner. To withdraw consent you gave earlier, open Cookie settings at the bottom of the page and choose Decline. Every part of the website works if you decline.
- Google Maps: do not click Load map on the apartment prices page. The map is not loaded and nothing is sent to Google Maps.
- Contract transfers: do not place an order or request, and do not use the tools that send information. We cannot complete an order without the payment, email, hosting and database providers.
7. Your rights
You can ask to see, correct, delete or stop the processing of your personal information. You can also withdraw consent. Email privacy@munteok.com from the address you used. We reply within 10 days of receiving your request. If we refuse in whole or in part, we tell you why and how to object. Records we must keep by law are kept for the legal period. A legal representative or someone you authorise can make a request for you.
For Beforehand, Section 9 explains what you control on your device.
If you need help or want to report a violation, you can also contact:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
8. Cookies and analytics
munteok.com and concierge.youngji.kim use Google Analytics, only with your consent. On your first visit, a cookie banner explains what is sent to Google and asks you to choose Allow or Decline. Neither is selected for you. Google Analytics is not loaded and sets no cookies until you choose Allow. Until you choose, the banner appears on each visit. Your choice is stored in your browser.
To change your choice, open Cookie settings at the bottom of the page. If you choose Decline after allowing, we stop Google Analytics and try to delete its cookies (_ga). You can also delete cookies in your browser settings. Every part of the website works if you decline. Section 6 lists what Google receives and how long it keeps it.
AI assistant tool calls and the Beforehand extension do not use analytics.
The apartment prices page on concierge.youngji.kim loads Google Maps only after you click Load map. Google then receives your IP address and browser information, and the text you type into the address search. If you do not click Load map, the map is not loaded.
9. Beforehand (Chrome extension)
Publisher: Munteok. Sold by Munteok, operated by Youngji Kim (Seoul, Korea). Contact: privacy@munteok.com. Policy version 5 · Effective: 2026-10-12 · Changes since the 2026-10-05 text: publisher line, order record, operator alerts without personal information, and less detail about internal processing. What the extension reads or sends is unchanged.
What it does
beforehand shows the Korea delivered price, or Korean alternatives, for the product on the supported shopping page you are viewing. Korea Concierge is operated by Munteok, the developer of this extension. Quotes are free; a service fee is included if you choose to buy. The seller is Munteok. Import duty and tax are estimated and paid on delivery.
What is sent and when
Before any request, you choose whether to turn on auto-check or use manual checks. Only when auto-check is on, or you click Check Korea price, the product name, brand and delivery country go to Korea Concierge's partner API at https://concierge.youngji.kim/api/commerce/v1. The extension contacts no other server directly. A repeated check may use an on-device cached result. Automatic requests are limited to 200 per local day.
If you choose Buy from Korea, a new tab opens an extension page showing the selected quote and seller Munteok. Your email and name are entered on that extension page and sent to Korea Concierge to create an order when you click Continue to payment, together with the payment method you chose (card or PayPal). They are not stored by the extension or included in its log. Quote tokens are kept in Chrome's in-memory session storage, readable only by the extension itself, and are sent only to Korea Concierge to start checkout; they are never sent to the shop page or written to disk, and they disappear when the browser closes. If a quote has expired, buying re-checks the same product name, brand and delivery country with Korea Concierge. If the item now costs a different amount, the checkout page shows the old and new price and continues only after you confirm; if the item is gone, check again from the shop. To pay, the checkout tab opens https://checkout.stripe.com (card) or https://www.paypal.com (PayPal). beforehand never sees your card details. If the item is out of stock in Korea, Munteok refunds your full payment through the same provider. Buying is optional.
What never leaves your device
Your browsing history, the shopping page address, the price on the page and other tabs are never sent. Your identity is not sent during a product check; email and name are sent only when you choose to buy. beforehand does not have permission to read browsing history. The card's local price comes from the shop page; savings are computed on your device using that price and the Korea total, only when their currencies match. Korea amounts come from Korea Concierge. Page price and currency are never sent for this comparison. No advertising or analytics SDK is included, and no remote code runs.
Korea Concierge processing and retention
Payment is processed by Stripe when you pay by card, which receives your email and name with the order, or by PayPal when you choose PayPal. Korea Concierge keeps an order record with your email, name, the quote and the payment reference, plus the shipping address and phone number that Stripe or PayPal returns after you pay. After the item is bought in Korea, the record also holds the Korean purchase details and the shipping tracking number. Order alerts to the operator contain only operational details, such as the order number, amount and product link, and no personal information. The extension does not contact Stripe or PayPal directly.
Korea Concierge keeps a demand record containing a normalized product name, category, delivery country, result type, channel label and browser family. It does not keep your IP address with that record. To limit abuse, requests are counted per 10 minutes under a keyed hash of the IP address; these counters are deleted within 24 hours. Demand records support product demand analysis by the operator. This policy does not promise a deletion period for those records or for order records. Contact Munteok about data already received. Other processors apply their own retention policies.
What is stored on your device
Chrome local and session extension storage are used, not Chrome sync. Content scripts cannot access either storage area:
- Consent version, auto-check settings, disabled shops and delivery country: until you delete them or uninstall.
- Product result cache: valid for 24 hours, at most 200 entries, without quote tokens or expiry fields. Expired entries are ignored and pruned when writing the cache.
- Displayed quotes in session storage: at most 200, with product name, brand, country and each choice's title, link, currency, total, pay-now total with its KRW cost lines and exchange rate, and estimated duty, plus their quote tokens. They last for the browser session or until removed; removing consent invalidates access.
- A daily automatic-check counter and date.
- Local log: up to 500 records, kept for 30 days and pruned when read or updated. Records contain product name and brand, shop host, delivery country, time, result type or checkout-opened status. They contain no page address, quote token, buyer email or buyer name.
Exported JSON logs remain wherever you save them until you delete the file.
Your controls
The toolbar popup lets you turn auto-check off for the current shop or everywhere and choose a delivery country. When auto-check is off globally, you can still request a manual check. A disabled shop is not checked, including manually. Settings lets you change individual shops, export or delete the local log, or Turn off and delete my data. The last action removes consent, settings, cache, counters and log, and opens the welcome page again. Uninstalling removes extension storage. These actions cannot recall a request already sent or remove records a processor already holds.
Supported shop origins (HTTPS, including subdomains):
- United States: amazon.com, walmart.com, ebay.com, target.com, sephora.com, ulta.com.
- United Kingdom: amazon.co.uk, ebay.co.uk, argos.co.uk, boots.com, lookfantastic.com, next.co.uk.
- Japan: amazon.co.jp, rakuten.co.jp, shopping.yahoo.co.jp, zozo.jp, cosme.com.
- Taiwan: momoshop.com.tw, pchome.com.tw.
- Hong Kong: hktvmall.com, watsons.com.hk, sasa.com.hk.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Contact and changes
For questions or deletion requests, contact privacy@munteok.com. For order questions, contact support@munteok.com. If what the extension reads or sends changes, we update this policy and the disclosure version and ask for consent again. Updating from version 4 keeps your settings and local log and asks for version 5 consent; no check runs until you agree. Updating from older versions removes retired credentials and local logs first.
10. Security
- Data in transit is encrypted (HTTPS).
- The database is accessed only from our servers with a server-side key. Row-level security is on for every table.
- Payment card data never reaches us; Stripe and PayPal handle it.
- IP addresses are stored only as keyed hashes, deleted within 24 hours.
- Tool telemetry and demand records do not include contact details.
- Only the operator has access to order records.
11. Changes
This version takes effect on 12 October 2026. We post changes on this page with a new version number and effective date. If a change affects what Beforehand reads or sends, the extension asks for consent again (Section 9). If a change adds a new overseas recipient or changes what we send them, we update Section 6 before the change takes effect.