Privacy Policy
Effective date: July 6, 2026
variable Jar (the "Service") protects users' personal data in accordance with applicable privacy laws, including the Personal Information Protection Act of Korea, and publishes this policy to explain how personal data is handled.
1. Data We Collect
| Category | Items | How collected |
|---|---|---|
| Sign-up (Google OAuth) | Email, name, profile image | Google account connection |
| Sign-up (magic link) | Email input | |
| Service usage | Figma Variables data, project information, translation data | In the course of using the Service |
| Payment | Payment details (card number and similar) | Processed by Paddle as Merchant of Record — the Company does not store card details |
| Launch notifications (waitlist) | Waitlist form input | |
| Automatic | IP address, browser information, access timestamps | Generated automatically during use |
2. Purposes of Collection and Use
- Providing the Service — member authentication, Figma Variables sync, translation workflow, team collaboration
- Member management — identity verification, preventing fraudulent use
- Service improvement — usage statistics, error diagnosis
- Billing — paid plan subscription processing
- Launch notifications — beta/official launch announcements to waitlist subscribers
3. Retention Periods
- Member information — until account deletion; destroyed immediately upon deletion.
- Service usage data — deleted by CASCADE upon account deletion.
- Waitlist emails — destroyed within 6 months after the launch notification is sent.
- Payment records — retained for 5 years under Korean e-commerce law.
- Access logs — retained for 3 months under Korean communications privacy law.
4. Provision to Third Parties
The Service does not provide personal data to third parties, except when:
- the user has given prior consent; or
- required by law or requested by investigative authorities.
5. Processors
| Processor | Delegated work |
|---|---|
| Supabase Inc. | Database hosting, authentication |
| Cloudflare Inc. | Website hosting, CDN |
| Paddle.com Market Ltd. | Payment processing (Merchant of Record) |
| Google LLC | OAuth authentication |
6. AI Translation and Data Handling
- When you request AI translation, the text to be translated is sent to our translation processing providers solely to produce the translation result.
- We recommend not including personal data in text submitted for translation.
7. Your Rights
Users may exercise the following rights at any time:
- request access to their personal data;
- request correction of errors;
- request deletion;
- request suspension of processing.
Requests can be sent by email to the privacy officer below and will be handled without delay.
8. Destruction of Personal Data
Personal data is destroyed without delay once the retention period expires or the purpose of processing is achieved. Electronic files are deleted irrecoverably; printed materials are shredded or incinerated.
Upon an account deletion request, member information and all associated data (collections, variables, projects) are deleted immediately by CASCADE.
9. Privacy Officer
- Officer: Wonkyu Kim
- Email: support@variablejar.com
10. Changes to This Policy
This policy applies from its effective date. Changes are announced through notices within the Service. This English version is the governing text; translations are provided for reference only.