PRISM Live Studio

Items of personal information to be collected

When signing up for membership using a social media login, we collect your nickname, social media ID, email address, and profile image from the chosen social media platform. When signing up for membership through NAVER Cloud B2B Service, we collect your nickname, member identifier(randomly allocated internal identifier), and profile image. Also, email address (ID), nickname, and password will be collected when signing up with email address.

When you use and make payments for PRISM Plus(subscription service), we collect payment details (including subscription information, payment date and time, and receipt information) as well as payment status. Additionally, we collect your email address for the purpose of providing you with service usage guidance and required notice related to our service including information of your payments and subscriptions.

In the course of handling events and customer inquiry, email address and event prize shipment information may be additionally collected. In the course of using services, IP addresses, device information (language, country, etc.), service use records, records of poor use, terminal information, etc. may be automatically generated and collected.

In the process of streaming your video, your facial and physical features as well as your voice may be temporarily processed. However, such data is not stored in our system.

Personal Information collection methods

The company collects personal information to provide services in the following manner:

Directly collected from the user during the course of subscription and use of PRISM Live Studio
Provided from the affiliated partners
Collected through the created information-gathering tools

Purposes of collecting and using personal information

The company uses the collected information for the following purposes:

To help users seamlessly access services
To identify users and prevent illegal use of services
To create statistical data about service use
For surveys and analysis required to improve services
For a lottery and prize shipment of campaigns and events
To identify users and respond to an inquiry when a user submits one
To notify depending on needs, including important notices, etc.
To deliver advertising information such as events
To process payments, collect fees, verify transactions, and provide notifications related to payments and the use of recurring subscription services.
To comply with data retention obligations and other legal requirements under applicable laws and regulations.

Sharing and supply of personal information

In principle, the company does not provide any external party with the personal information of the user without prior written consent. However, exceptions are as below.

If the user agrees in advance
If under the provisions of the law and regulations

Consignment of handling personal information

The company has consigned the personal information for the service supplied as below.
Trustee company and consigned details

(1) Infrastructure operation for service supply and prevention of illegal use of services: NAVER Cloud Corp., NIT Service Corp.
(2) Data backup (storage): NAVER Cloud Corp.
(3) Customer service, service operation: InComms Corp., Green Web Service Corp., CommPartners Corp.
Period of retention and use of personal information: Until withdrawing from the membership or the termination of consignment contract

The trustee NAVER CLOUD stores the following personal information overseas.

To ensure uninterrupted service even during a disaster, the company backs up (stores) data at home and abroad.
The personal information necessary to provide the PRISM Live Studio service is securely stored overseas. If you do not want your personal information to be stored overseas, you can opt out by cancelling your membership. However, you will not be able to
continue using the service.

Trustee: NAVER CLOUD Co., Ltd.
Location: Singapore (#24-01, Vision Exchange, 2 Venture Drive, Singapore 608526).
Consignment date and method: Remotely transferred to location via private network on July 13, 2020.
Information management contact: dl_ncloud_privacy@navercorp.com
Entrusted personal information: Minimum user data required for recovery.
Entrusted tasks: Overseas data backup (storage) to protect user data from disasters.
Retention and use of personal information: Until the cancellation of membership or termination of the consignment contract.

User rights and how to exercise them

PRISM Live Studio is available to users aged 14 and older(in the case of PRISM Plus(subscription service), users aged 19 and older). Users can look up and modify their registered personal information, and request account deletion at any time.
Users may request the suspension of the processing of personal information at any time. However, the request to suspend processing may be denied due to the provisions of the law.
Users may withdraw their consent to the collection and use of their personal information at any time by cancelling their memberships.
If the user asks for correction of an error in their personal information, the relevant personal information will not be used or provided until the correction is completed. In addition, if this incorrect personal information was already provided to a third party, we will notify the result of correction to the third party without delay and have it corrected.
The company has terminated or deleted personal information upon the request of the users or legal representatives as specified in the “Period of retention and use of personal information”, and also processed not to browse or use for other purposes.

Matters regarding installation/operation and rejection of automatic devices collecting personal information

The purpose of the use of cookies
They are used to identify the visit and use types and the volume of users of the services and websites that the users have used, and to provide optimized information to the users.

The installation/operation and rejection of cookies
The users have the option to set cookies. The users may allow or deny the storage of cookies from the option menu which is available in the browser and OS. However, if they refuse to save cookies, some services requiring login may not be accessible.

Period of retention and use of personal information

In principle, the company will destroy the personal information of users without delay, when purposes of collecting and using personal information have been achieved. However, if there is a need to store it pursuant to the relevant laws and regulations or the company’s internal policy as follows, it may be kept for a certain period of time even after the purpose of collection and use is achieved.

In cases where retention is required under applicable laws and regulations

Laws	Retained information	Retention period
ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	Records related to cancellation of contracts or subscriptions, etc.	5 years
	Records related to payment for and supply of goods, etc.	5 years
	Records related to resolution of consumer complaints or disputes	3 years
PROTECTION OF COMMUNICATIONS SECRETS ACT	Login records	3 months
INCOME TAX ACT	Records related to withholding of taxes and public charges	5 years

In cases where retention is required according to the company’s internal policies
To prevent fraudulent subscriptions and illegal use, we retain one-way encrypted IDs for 6 months.

Safeguards for personal information

The company takes the following security measures to ensure the safe management of users' personal information:

Establishment and implementation of internal personal information management plans
Formation and operation of a dedicated organization for personal information management
Regular privacy protection training for personnel handling personal information
Access control to personal information
Management of access rights to personal information processing systems
Encryption of personal information during storage and transmission
Retention of access logs and measures to prevent forgery and tampering
Installation and operation of security programs to prevent malware
Physical security measures for the safe storage of personal information
Safety measures to prepare for disasters and emergencies
Management of printed and copied materials containing personal information
Secure disposal of personal information

Destruction procedures and methods of personal information

The company’s destruction procedures and methods of personal information are as below:

Destruction procedures
After the purpose of use is achieved, the information that the user entered for the service use shall be destroyed in accordance with internal policy and the relevant laws and regulations after being stored for a certain period of time. The relevant personal information shall not be used for purposes other than the storage purpose, except in cases according to the law.

Destruction method
Personal information printed on paper shall be destroyed in a shredder, and personal information stored as an electronic file type shall be deleted by using technical methods that will disable the reproduction of the records.

Contact related to privacy operation

If you have any questions/complaints/consultations regarding the privacy policy, please contact the privacy department 'Data Protection & Privacy' (Contact).

Additional policies

By connecting any account to PRISM Live Studio you agree to privacy policies of the corresponding media or social network platform.
PRISM Live Studio uses the YouTube API Services.

YouTube : Terms of Service , Google Privacy Policy , YouTube API Services

A user can revoke a permission for accessing for Google account in the following page.

Google account permission page

Coverage

With regard to the collection of personal information by other business operators from the link page in the services etc., this can’t be covered by the privacy policy.

Revision of the privacy policy

If there is any addition, deletion or modification to the current contents of the privacy policy, users will be notified through the “Bulletin board” beginning seven days prior to the revision. However, if there is a significant modification to the user’s rights such as collecting and use, and the supply of personal information to a third party etc., users will be notified at least thirty (30) days before it goes into effect.

[Appendix for U.S. Residents]

NAVER Corporation (“we”, “our” or “us”) [ NAVER 1784, 95 Jeongjail-ro, Bundang-gu,Seongnam-si, Gyeonggi Province, Republic of Korea] respects your concerns about privacy and personal information.
In this Appendix for U.S. Residents, we explain how we collect, use, and disclose your personal information on PRISM LIVE STUDIO (“Service”), the rights that you have on your personal information, and how you can exercise your rights.
The definition of the terms that are used in this Appendix follow the applicable U.S data privacy laws.

1. How We Collect Personal Information

The table below describes categories of personal information that we collect and the sources of each category.

Category	Examples	Source
Identifiers	Name, IP address, email address, cookie string data, pseudonymous data (e.g. hashed emails), operating system, device type, mobile device's identifier, and other unique identifier that may be assigned to any device by third parties and cross-referenced to recognize a device.	Direct from consumers Operating systems and platforms Social network (Google, Apple, Twitch, Facebook, Line) B2B service Partner (for NAVER Cloud B2B product user only)
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Direct interactions with consumers
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information	Direct from consumers Social network (Google, Apple, Twitch, Facebook, Line) B2B service Partner (for NAVER Cloud B2B product user only)
Internet or other similar network activities		Direct interactions with consumers

2. How We Use and Disclose Your Personal Information

The table below describes business or commercial purposes for each category of personal information that we collect, and categories of third parties with whom we may disclose your personal information.

Category	Business and Commercial Purpose	Recipient
Identifiers	To create, maintain, and secure your account To facilitate, operate, enhance, and provide our Service To process payments To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses To help maintain the safety, security, and integrity of our digital properties, including our Service, databases and other technology assets, and business To conduct surveys about our Service To provide you with information and notice about Service To send you marketing and promotion information To send you a gift when you take part in any events on our Service To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations To create aggregated, statistical data to develop our Service and enhance user experience	Service Provider
Commercial information (products or services purchased)	To process payments To facilitate, operate, enhance, and provide our Service To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses To provide you with information and notice about Service To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations	Service Provider
Sensory data (Image, video, voice)	To provide, support, personalize, and develop our Service, and to enhance user experience	Third party video platforms(Google(Youtube), Twitch, Facebook, NAVER Shopping Live, Chzzk, NAVER TV, BAND, SOOP, custom channel(s) that you added) Service Provider
Internet or other similar network activities	To facilitate, operate, enhance, and provide our Service To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses To create aggregated, statistical data to develop our Service and enhance user experience	Service Provider

3. How Long We Use and Retain Your Personal Information

We will retain your personal information, in a form which permits us to identify you, for no longer than is necessary for the purpose that we specify in the “2. How We Use and Disclose Your Personal Information” section of this Privacy Policy. We may retain and use your personal information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements and rights

4. We Do Not Sell or Share Your Personal Information

We do not sell or share your personal information with third parties for cross-context behavioral advertising, and we also do not use your personal information for targeted advertising.
The definition of “sell”, “share”, “cross-context behavioral advertising”, and “targeted advertising” follows what is stipulated in the applicable U.S privacy laws including California Consumer Privacy Act(“CCPA”), amended by California Privacy Rights Act(“CPRA”).
Under California Consumer Privacy Act(“CCPA”), amended by California Privacy Rights Act(“CPRA”), and the other U.S state privacy laws, “sell,” “selling,” “sale,” or “sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's personal information by the business to a third party for monetary or other valuable consideration.

We do not sell your personal information for monetary or other valuable consideration.
Under the CCPA, “share,” “shared,” or “sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.
“Cross-context behavioral advertising” means the targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly- branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the consumer intentionally interacts. Under the other U.S state privacy laws, "targeted advertising" means displaying advertisements to a consumer where the advertisement is selected based on personal information obtained from that consumer's activities over time and across nonaffiliated websites or online applications to predict such consumer's preferences or interests.

We do not share your personal information for cross-context behavioral advertising, and do not use your personal information for targeted advertising.
We also do not knowingly allow any third parties to put a tracking tool on our Service to collect your online activities over time.

5. Your Rights

You have some or all of the following rights under the applicable U.S data privacy laws:

Right to know. You have the right to know what categories and specific pieces of personal information we collect about you. We provide the following information in this Privacy Policy, but you may also get the information by contacting us using the information provided in the "8. Contact Us" section.
- Categories of personal information that we collect
- Sources from which we collect your personal information
- Business or commercial purposes for collecting and using your personal information
- Retention period of your personal information, and
- Categories of third parties to which we disclose your personal information
In addition, you can also request a copy of specific pieces of your personal information that we’ve collected by contacting us using the information provided in the "8. Contact Us" section. Upon your verified request, we will provide the information in a portable and readily usable format(to the extent technically feasible).

If you reside in Minnesota, you can also request a list of third parties to which we have disclosed your personal information by contacting us using the information in the "8. Contact Us" section. As we do not maintain the information in a format specific to each user, the list of third parties to whom we have disclosed any users' personal data may be provided instead as allowed by the Minnesota’s privacy law.

Right to correct. You have the right to correct inaccurate personal information we maintain. You may correct the inaccuracies on your personal information that you provided to us as follows at any time yourself.

If you would like to request to correct your personal information, please contact us using the information provided in the "8. Contact Us" section. Upon your verified request, we’ll correct your personal information and will direct our service providers to do the same.

Right to delete. You have the right to request deletion of your data, unless an exception applies. Examples of exceptions include when we need to keep data to provide you the agreed Service in accordance with Terms of Service, meet legal obligations, detect fraud, investigate reports of abuse or other Terms of Service violations, or fix security issues.

If you have a more detailed privacy inquiry or request about deleting your personal information, please contact us using the information provided in the "8. Contact Us" section. Upon your verified request, we’ll delete your personal information (unless an exception applies) and will direct our service providers to do the same.

Right to optout of sale or sharing. If we sell or share your personal information, you will have the right to request us not to sell or share your personal information. However, as specified in 3. We Do Not Sell or Share Your Personal Information in this Privacy Policy, we do not sell or share your personal information, so we do not offer an ability to opt-out of sale and sharing your personal information.

Right to optout of targeted advertising. If we use your personal information for targeted advertising purpose, you will have the right to opt out of targeted advertising under certain state privacy laws in the U.S., such as Colorado, Virginia, Connecticut, Montana, Florida, Iowa, Texas, Delaware, Indiana, Tennessee, and etc. However, as specified in 3. We Do Not Sell or Share Your Personal Information in this Privacy Policy, we do not use your personal information for targeted advertising, so we do not offer an ability to opt-out of targeted advertising.

Right to review and optout of profiling. If we use your personal information for profiling, utilizing automated decision-making in furtherance of decisions that produce legal or similarly significant effects, you will have the right to review and opt out of such profiling under certain state privacy laws in the U.S., such as Colorado, Virginia, Connecticut, Montana, Florida, Iowa, Texas, Delaware, Indiana, Tennessee, Utah, and etc.
However, we do not engage in profiling that produces legal or similarly significant effects to you, so we do not offer an ability to opt-out of profiling.
For your information, we may collect your behavioral data for analysis and statistical purpose to improve the Service, responding to your inquiries, security, or trouble shooting.

Right to limit use or disclosure of sensitive personal information (“SPI”). You have the right to limit the use and disclosure of your SPI if we collect and use your SPI beyond what is reasonable and proportionate to provide the requested goods or services. However, we do not collect SPI, so we do not offer an ability to limit the use and disclosure of SPI.

Right to nondiscrimination If you exercise any of your privacy rights under the applicable U.S privacy laws, we will not discriminate against you.

Responding to Requests
Once you have submitted your request, we will respond within the time frame permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Verification of your identity
To protect your privacy, we will ask you to verify your identity before we give you access to, correct, or delete your personal information. We may ask you to login to your account or to let us know your name, email address, phone number, and other information so that we can reasonably confirm your identity. To protect your personal information and privacy, we may not process your request until we can reasonably confirm your identity.

Authorized agent
Your authorized agents may act on your behalf by requesting to know, correct, delete. To protect your information, we may require the authorized agent to provide proof that you gave the agent written permission to exercise your rights.

Appealing request
You may appeal our decision to your request regarding your personal information. To do so, please contact us using the information provided in the "8. Contact Us" section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.
If your appeal is unsuccessful , depending upon the state where you live, you may have the right to raise a concern or lodge a complaint with your state attorney general.

6. Children’s Personal Information

We do not knowingly collect or solicit personal information from anyone under the age of 13. If we learn that we have collected personal information from anyone under the age of 13, we will promptly delete the information. If you believe that your child under age 13 may have provided us with their personal information, please contact us using the information in the "8. Contact Us" section.

7. Update to Our Privacy Policy

This Privacy Policy will be updated every 12 months to reflect changes in our data processing practices, or changes in the applicable laws. We will post a prior notice for any material changes that can affect data subjects on our Service.

8. Contact Us

If you have any privacy concerns or questions, please contact us as follows:

Emailing us at prismlive@naver.com

Privacy Policy announced on June 04, 2025

Privacy Policy enforced on July 28, 2025

See previous version of Privacy Policy (February 28, 2024 ~ July 27, 2025)