Privacy Policy
Effective date · October 11, 2026
Previous document
This page preserves this version of the document. See the current document for the terms that apply now.
This policy explains what information Petit Stay processes, why, on what legal basis and for how long. It also explains who processes information on our behalf and how you can exercise your rights. If this translation differs from the Korean original, the Korean original prevails.
Information we process: purposes, legal bases and retention
Petit Stay processes only the minimum information needed for the service. The information we process is shown in the table below.
| Category | Items processed | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Email sign-up | Name, email address, password (one-way encrypted value), phone number (optional), member type (parent or sitter), account identifier, sign-in and terms agreement records | Sign-up, sign-in, account management, providing the services you request | Entering into and performing a contract (Article 15(1)(4) of the Personal Information Protection Act) | Until you close your account |
| Google sign-in | Account identifier, email address and whether it is confirmed, name, profile image URL (openid, email, profile scopes) | Sign-in, creating and linking accounts | Entering into and performing a contract | Until you close your account or unlink it |
| Kakao sign-in | Member number (account identifier), nickname, Kakao Account email (required consent item) | Sign-in, creating and linking accounts | Entering into and performing a contract | Until you close your account or unlink it |
| Sitter profile | Introduction, existing profile photo (if any), languages, hourly rate, available times, confirmation of being age 19 or older | Creating and managing profiles, showing profiles whose publication you consented to | Entering into and performing a contract; publication is based on your consent | Until you close your account (taken down right away if you withdraw publication) |
| Child details | The name the child goes by, age, notes needed for care | Preparing for and providing care that the sitter has accepted | Performing a contract; consent of the legal representative where required by law | Until care ends and related inquiries have been handled |
| Emergency contact | Name, phone number, relationship | Urgent contact during care | Performing a contract | Until care ends and related inquiries have been handled |
| Requests and care records | Date and time, accommodation and room details, messages, updates and handoff notes, care records, star ratings and reviews | Handling requests, identifying the parties, responding to inquiries and disputes | Performing a contract; legal retention obligations | Until the purpose is fulfilled (records retained by law: for that period) |
| Updates sign-up | Email address and, if you wish, name or nickname, visit timing, country or city, children's age ranges and number, preferred language, concerns or message | Sending updates about our preparations | Consent (optional) | As described in ‘Retention periods and deletion procedures’ below |
| Inquiries | Contact details, inquiry contents, handling records | Replying, handling rights requests, responding to disputes | Performing a contract or legal obligations | Until handling is complete (records retained by law: for that period) |
| Access logs | IP address, access date and time, browser information | Providing the site and security | Performing a contract (providing the service) | As described in ‘Cookies and access logs’ below |
We do not currently collect payment information such as card numbers. If we introduce payments, we will first explain the items needed and the legal basis.
Please do not send your resident registration number, copies of ID documents or health information that is not strictly necessary.
Until request intake opens, the live site does not collect new child details or emergency contacts through the request form.
Social-link information is separate from your Petit Stay account information. Disconnecting a social account does not delete every name or email used for your account, or all existing consent, inquiry and service records. The purposes, retention periods and deletion procedures stated here continue to govern remaining information; disconnection does not create a new basis for retaining it.
Children's personal information
Children under age 14 cannot sign up as members, and children do not enter information themselves.
The only child information we handle is the minimum a parent member enters when making a request (the name the child goes by, age and notes needed for care). We do not collect children's photos or resident registration numbers.
Child information can be seen only by the sitter the parent chose, only after that sitter accepts the request, and only to the extent needed for that care.
Where the law requires consent to process a child's information, we obtain consent from the legal representative and confirm that consent. The current live screens do not state or assume that this confirmation has been completed.
Sharing, processors and overseas transfers
To sitters: When the sitter a parent chose accepts the request, that sitter can see the child details and emergency contact needed for care. Before we start accepting requests, we will explain again the items shared, the purpose, the retention period and the legal basis.
To parents: We show the introduction, existing profile photo (if any), languages, hourly rate and available times of sitters who have consented to publication and completed the publication process.
Otherwise, we do not provide personal information to anyone else without a legal basis or your consent.
To operate accounts and the website, we entrust processing to the companies below, and information is transferred overseas as a result. The legal basis is Article 28-8(1)(3) of the Personal Information Protection Act (entrusting processing and storage needed to enter into and perform a contract).
| Recipient (contact) | Work entrusted | Destination country | Items transferred | Timing and method of transfer | Retention and use period |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.io) | Member authentication, database operation | Japan (Tokyo region); the contracting entity is in Singapore | Account and authentication information, service information you save, processing records | Transmitted over encrypted networks when you use the service | Until the retention periods in the table above; deleted under the contract when the entrustment ends |
| Vercel Inc. (privacy@vercel.com) | Providing the website, server processing, access logs | United States (Washington, D.C. area); public pages are delivered over a worldwide network | Account identification and authentication information and entered content included in requests, IP address, access date and time, browser information | Transmitted over encrypted networks when you use the site | For as long as needed to provide the service; operational and security records follow the contractual deletion procedure |
| Plus Five Five, Inc. (Resend, privacy@resend.com) | Sending member authentication and password reset emails | United States | Recipient email address, email subject and body (including authentication links), send time and result | Transmitted over an encrypted SMTP connection when an email is sent | Under its published default policy, emails and sending records for 30 days; remaining data deleted within 90 days after account termination |
Care request and operator notification emails are currently turned off. Before turning them on, we will first announce any additional transfers.
If you do not want your information transferred overseas, you can ask at hello@petit-stay.com to stop processing or to close your account. However, if transfers essential to providing accounts and the website stop, sign-in and saving features will be hard to use. If transfers to Resend stop, email authentication and password resets will not be possible.
Google LLC and Kakao Corp. provide the sign-in methods that users choose. Petit Stay does not entrust processing to them.
Retention periods and deletion procedures
We keep personal information only for as long as needed to fulfill the purpose of processing. When it is no longer needed because of account closure, withdrawal of consent or fulfillment of the purpose, we destroy it without delay.
Updates sign-up information is kept until the earliest of: 12 months after submission, completion of your request for deletion or withdrawal of consent, or 3 months after we send the official service launch notice. This period is Petit Stay's own operating standard, not a statutory period.
Records that other laws require us to keep (for example, records of transactions and of handling consumer complaints) are kept separately, with the applicable law and period identified, solely for that purpose, and then destroyed.
Deletion procedure: We identify the information to be destroyed and destroy it after review by the privacy officer.
Deletion method: Electronic files are erased in a way that cannot be recovered, and paper documents are shredded or incinerated. We do not describe information as deleted from servers and backups just because it is hidden on screen.
Your rights and how to exercise them
You can ask to access, correct or delete your personal information, or to stop processing it. For information processed based on consent, you can withdraw your consent.
How to exercise your rights: You can edit information that can be changed on your account screen yourself. Send account closure and other requests through the support screen in your account or to hello@petit-stay.com. You can also make a request through an agent; in that case, documents showing the authorization are required.
After confirming that the requester is you or a lawful agent, we handle the request within the period set by law and tell you the result. If we cannot fully comply because of a legal retention obligation or a similar reason, we tell you why.
The legal representative of a child under age 14 can exercise rights on the child's behalf. Being a parent alone is not treated as proof that legal representative authority or consent has already been confirmed.
If withdrawal of consent or a request to stop processing means we cannot process essential information, use of related features may be limited.
You can still obtain help with inquiries and rights requests if you have not accepted revised terms or your member features are restricted. If you cannot sign in, contact hello@petit-stay.com. Accepting revised terms is not a condition for submitting a rights request.
Cookies and access logs
Cookies support sign-in, language selection and returning to a page after authentication. We do not use tracking cookies or tools for advertising or analytics.
- Authentication cookies manage sign-in state and authentication-flow information. Signing out ends sessions within the selected scope; it is different from disconnecting a social account or closing your account.
- Social sign-in return cookie (ps_oauth_return): remembers the return page and expires within 15 minutes.
- Email-confirmation return cookie (ps_contact_return): supports returning after email confirmation and expires within 30 minutes.
- Language cookie (locale): remembers your chosen language for one year.
Browser storage may hold return-page and verification information for sign-in or reauthentication, and the search page’s scroll position. The server checks sign-in state and permissions separately.
When you choose to save search conditions, their dates, times and language stay on this device and are not shown to another account. You can delete them on screen; signing out also removes them. When using the request feature, the device may store a draft schedule, sitter and request identifiers, and attempt status. Schedule drafts can be restored only within 24 hours of saving; this restoration limit does not mean every copy in browser storage is immediately erased. Child information and unsent care-room conversation text are not included in this schedule draft.
You can delete or block cookies and browser storage in browser settings. Blocking them may prevent functions that need them, such as staying signed in or restoring saved conditions. Clearing browser cookies and storage does not replace deletion of personal information from servers and backups.
Access logs: hosting services may automatically record access times, IP addresses and browser information to provide and secure the site.
Web fonts are served directly from this site; visits are not sent to an external font service.
Security measures
Petit Stay takes the following measures to protect personal information.
- Administrative: We limit the people who handle personal information to those who truly need it for their work, and give them access only to the extent needed.
- Technical: All communication is encrypted (HTTPS), and passwords are stored with one-way encryption. Database access is limited by role and what is needed for the task. Information shared between childcare parties is limited to the permitted stages and items.
- Monitoring: We review access rights and processing records. If a problem is found, we take the necessary steps and give notice as required by law.
These measures do not mean that every risk is eliminated. If you notice anything unusual, please tell us right away.
Privacy officer and remedies for privacy violations
Privacy officer: 김재현
Position: Representative
Email: hello@petit-stay.com
Phone: 070-8985-9477
Send privacy questions, complaints and rights requests to the contacts above or through the member support screen.
For privacy violations, you can also seek advice from or report to the agencies below.
- Personal Information Infringement Report Center (privacy.kisa.or.kr, 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972)
- Supreme Prosecutors' Office (spo.go.kr, 1301)
- Korean National Police Agency (ecrm.police.go.kr, 182)
Changes to this policy
When we change this policy, we announce the main changes and effective date on the site beginning 7 days before the effective date. Important changes, such as expanding the information processed or the parties receiving information or entrusted with processing, are announced beginning 30 days before the effective date. Changes requiring separate notice or consent by law apply after those procedures have been completed.
These advance notice periods are Petit Stay's policy-change standards. They do not mean that the same statutory notice period applies uniformly to all changes. If additional procedures are necessary under previous notices or applicable laws, we also complete them.
The amended policy applies in accordance with its actual effective date and necessary notice and consent procedures. Information collected in the past and personal information remaining from ended service relationships are also processed after checking the processing basis at the time and whether any changes were lawful. Merely publishing a new policy or changing its effective date does not create consent or a processing basis that did not exist in the past.
Previous versions of this policy are available on request.