Privacy Policy
Last updated on August 19, 2026
Cokee Corp. ("we") operates the Tintio service at tintio.io. This policy sets out the personal information we collect, the purposes for which we process it, how long we retain it, and the rights you can exercise.
1. What we collect
| Where it comes from | What we collect |
|---|---|
| Account and sessions | Your email address, name, time zone, and chosen interface language, together with the IP address and browser information we use to keep the account secure. |
| Signing up | To confirm the address belongs to you, your email address, a hashed confirmation code, and your IP address; and, if you answer the onboarding questions, those answers. |
| Waitlist | Your email address, the consent choices you made, and the IP address the request came from. |
| Getting in touch | Your email address, what you wrote, anything you added such as a company name or team size, and the IP address the request came from. |
| Connected channels | If you connect an X, LinkedIn, or Threads account, that account's name and its access token. Tokens are stored encrypted. |
| Billing | The payment itself is handled by our payment provider, and we neither receive nor store your full card number. To show you your payment history we store the first four and last four digits, the cardholder name, and the approval details. |
| Service usage records | Behavioural usage data such as referral path, screens used, and clicks. Form inputs and personally identifying information are masked and therefore excluded. |
2. Cookies
- 2.1We use one cookie to remember your interface language.
- 2.2If you have an account, we use a session cookie to keep you signed in.
- 2.3After you sign in we use an analytics cookie to improve the service, and you can turn it off in your account settings.
- 2.4We do not use advertising cookies.
- 2.5You can refuse cookies in your browser settings, but we then cannot keep you signed in.
3. Why we collect it
- 3.1We process personal information to run the waitlist and understand who is interested, to create and protect your account, to confirm the address you signed up with, to publish scheduled posts to the channels you connect, to bill you, to answer what you write to us, and, where you have agreed to it, to send you news about the product.
- 3.2We process service usage records to diagnose errors, improve usability, and raise product quality.
4. Who else processes your data
- 4.1We entrust the following companies with parts of our processing in order to run the service.
| Processor | What we entrust to them |
|---|---|
| Cloudflare | Handling traffic to the site and storing our backups |
| Oracle Cloud | Running our servers and database |
| Resend | Sending our email |
| OpenRouter | Generating AI drafts |
| PostHog | Storing and analysing service usage records |
- 4.2We do not use your content to train AI models, and we require the same of the companies we entrust with processing.
- 4.3We do not use cookies for analytics before you sign in.
- 4.4If you connect a channel, the contents of a scheduled post are sent to X, LinkedIn, or Threads when it publishes.
- 4.5We also send X a token refresh request about once a day per connection so that the connection does not lapse.
- 4.6That refresh request is sent automatically, without any action on your part.
5. Sharing with third parties
- 5.1We do not sell your personal information or provide it to third parties.
- 5.2Where you have connected a channel and asked for a post to be published, the contents of that post and the details of that account are sent to X, LinkedIn, or Threads.
- 5.3That happens at your request, and it stops once you disconnect.
- 5.4The companies listed under "Who else processes your data" carry out processing on our behalf; they are not separate third parties receiving your personal information.
6. Disclosure required by law
- 6.1We may disclose personal information where the law provides a basis for it, or where a law enforcement authority requests it through the procedure and in the manner the law prescribes.
- 6.2We do not comply with requests outside that.
- 6.3Where we do disclose personal information, we notify you of the fact unless the law prohibits us from doing so.
7. Where your data is stored
- 7.1Our servers and database are located in the United States.
- 7.2Your information is processed there even if you use the service from outside Korea.
| Recipient | Country | What is transferred | When and how | Purpose and retention period |
|---|---|---|---|---|
| Cloudflare | United States | Connection details and the stored data contained in backups | While you use the site, over encrypted connections | As long as handling traffic and storing backups requires |
| Oracle Cloud | United States | What the service stores, including your account and payment records | While you use the service, over encrypted connections | As long as running our servers and database requires |
| Resend | United States | Your email address and the contents of the message we send | When we send you email, over encrypted connections | As long as sending our email requires |
| PostHog | United States | Service usage records | While you use the service, over encrypted connections | As long as storing and analysing those records requires |
| X · LinkedIn · Threads (where you connect a channel) | United States | The contents of the post and the details of the connected account | When a scheduled post publishes and when we refresh the connection, over encrypted connections | For publication to that platform, for the period their own policy provides |
- 7.3If you do not wish your information to be transferred abroad, please tell us at the contact address below.
- 7.4Because our servers are in the United States, however, refusing the transfer may restrict your use of the service.
8. How long we keep it
- 8.1Waitlist email addresses are retained until the service opens.
- 8.2Where you have agreed to receive product news, we retain your address until you unsubscribe.
- 8.3Account information is retained while the account is active and is destroyed when you delete the account.
- 8.4Signup confirmation and waitlist records are retained so that we can process the request and prevent repeated sends to the same address; these include the IP address the request came from.
- 8.5What you write to us is retained so that we can answer it and keep a record of how it was handled.
- 8.6Access tokens for connected channels are deleted when you disconnect.
- 8.7The following information is retained for the period prescribed by law.
| Information retained | Legal basis | Retention period |
|---|---|---|
| Records of contracts and withdrawal of subscription | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records of payment and the supply of goods or services | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records of consumer complaints and dispute resolution | Act on Consumer Protection in Electronic Commerce | 3 years |
| Records of labelling and advertising | Act on Consumer Protection in Electronic Commerce | 6 months |
| Access logs, access IP addresses, and usage records | Protection of Communications Secrets Act | 3 months |
- 8.8Apart from the statutory retention set out above, we delete the personal information we hold if you ask us to.
9. Destruction
- 9.1We destroy personal information without delay once its retention period has passed or the purpose of processing has been achieved.
- 9.2Our destruction procedure is as follows. We identify the personal information for which grounds for destruction have arisen and destroy it after confirmation by our data protection officer.
- 9.3Our destruction method is as follows. Personal information stored as electronic files is deleted by a technical means that makes it unrecoverable.
- 9.4We do not hold personal information in printed form, so we keep no separate procedure for destroying documents.
- 9.5When you delete your account, the personal information held under it is destroyed, and the records of what was done retain only that it was done, not who did it.
- 9.6Destroyed information may remain for a period in our database backups, and those backups are held outside Korea as described above.
10. How we protect it
- 10.1Passwords are stored in a form that cannot be reversed, and access tokens for connected channels are stored encrypted.
- 10.2All traffic between your browser and our servers is encrypted.
- 10.3Access to personal information is limited to the minimum number of people whose work requires it, and we record it whenever an operator opens a workspace.
11. Children under 14
- 11.1Children under 14 may not sign up for the service.
- 11.2We do not collect personal information from children under 14, and where we confirm that we have, we destroy it without delay and delete the account.
- 11.3If you believe your child's information has been collected, please tell us at the contact address below.
12. Your rights and how to exercise them
- 12.1You may at any time request access to, correction of, or deletion of your personal information, or ask us to suspend processing it.
- 12.2You can do this yourself inside the service once you sign in, or contact us at the address below and we will handle it.
- 12.3You may disconnect a connected channel at any time, and once disconnected we no longer publish through it.
- 12.4A legal representative or an authorised agent may make the request on your behalf, in which case we require a document confirming that authority.
- 12.5If you are in a place with statutory data subject rights, such as the European Economic Area or the United Kingdom, those rights apply and you may also lodge a complaint with your local supervisory authority.
13. Data protection officer
- 13.1We have designated a data protection officer to oversee our processing of personal information and to handle your enquiries and complaints.
- 13.2The data protection officer is YeonTaek Choi, reachable at [email protected].
- 13.3Please use that address for any question about how your personal information is processed.
14. How to seek remedy for infringement
- 14.1To obtain remedy for infringement of your personal information, you may apply to the following Korean bodies for dispute resolution or advice.
| Body | Telephone |
|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 |
| Privacy Infringement Report Centre (KISA) | 118 |
| Supreme Prosecutors' Office, Cybercrime Investigation Division | 1301 |
| Korean National Police Agency, Cyber Investigation Bureau | 182 |
- 14.2Those bodies are separate from us. For enquiries or complaints about our own processing, please use the contact details under "Data protection officer" above.
15. Changes to this policy
- 15.1Where we change this policy, we post the change and its effective date on this page at least 7 days before it takes effect.
- 15.2Changes that are to your disadvantage are posted 30 days in advance, and we also notify account holders by email.
- 15.3This policy takes effect on August 19, 2026.
Contact
Cokee Corp.
16 Wonheung 2-ro, Deogyang-gu, Goyang-si, Gyeonggi-do, Republic of Korea