Privacy Policy

Account data: email, name, profile image, account identifiers, and session information provided through Google OAuth may be processed.

Subscription and payment data: payment method registration results, card company, masked card number, payment status, amount, receipt URL, payment identifiers, and next billing date may be processed.

Analytics data: page URL, path, referrer, UTM parameters, channel, browser, OS, device type, bot status, visitorId, sessionId, pageview, heartbeat, custom event, and revenue event for websites registered by customers may be processed.

Tracking script collection: the Pigeon HTML script installed by the customer sends pageviews, session heartbeats, browser user-agent, referrer, UTM values, visitorId, and sessionId to Pigeon servers.

Custom event collection: when the customer calls `window.Pigeon.track(name, properties)`, the event name, event path, and customer-defined properties are collected.

API and payment integration collection: Toss Payments approval or test billing flows may store payment amount, order name, payment status, payment identifiers, website attribution, and visitor attribution through server APIs.

Crawling notice: Pigeon does not arbitrarily crawl customer websites to collect personal data. Pigeon collects analytics data only within the scope sent by the installed script or customer-integrated APIs/payment events.

Pigeon V1 does not store raw IP addresses.

Country, region, city, latitude, and longitude first use location headers provided by Cloudflare, CloudFront, Vercel, or a trusted reverse proxy configured by the customer.

When location headers are absent, the server may temporarily perform a GeoIP lookup from forwarded client IP headers during request processing. Raw IP addresses are not stored in the database; only derived location fields may be stored.

If both location headers and GeoIP lookup are unavailable, country may be shown as Unknown.

The Pigeon script may store an anonymous visitorId in localStorage and a sessionId in sessionStorage to distinguish returning visitors in the same browser.

These identifiers are anonymous identifiers for website analytics and payment attribution. A new identifier may be created when a user clears browser data or uses another browser or device.

Collected data is used for account authentication, service delivery, website analytics, user journey analytics, revenue attribution analytics, recurring billing and usage calculation, support, security, and incident response.

Pigeon does not use personal data beyond these purposes unless required by law or separately consented to by the member.

Account, subscription, payment, and analytics data are retained for the period necessary to provide the service and satisfy legal retention obligations.

When withdrawal or deletion is requested, data is deleted or anonymized without delay except for information required for legal retention, settlement, or dispute response.

Privacy and service inquiries can be sent to sellgumx.naver@gmail.com.

Data controller: 넥스트네버랜드, representative 김우람.