Echo Vision Lab
111-42-04359
Echo Vision Lab (“Operator”) describes the personal information processed through DSUB.IO and related APIs in this Policy.
The following information is processed according to the features used.
Category | Information |
Account and profile | Email address, member identifier, nickname, registration and connection status, preferred language; optional biography, website, social links and profile image |
Authentication and API token | Authentication, session, social-account linking, passkey and email verification records; token identifiers, verification information, creation, renewal and use records; IP address and browser information |
Cookies and analytics | Cookie choices, consent and withdrawal records, IP address and browser information; with analytics consent, cookie identifiers, access environment, visits and usage information |
Content and files | Posts, comments, files and personal information entered in them; authorship, credits and collaboration relationships |
Media processing | Upload, resume, cancellation, conversion, playback and download status and processing records |
Collaboration and sharing | Visibility and download settings, shared links and access information, creation, modification and deletion history |
Newsletters and email | Email address, preferred language, subscription status, delivery, bounce and opt-out records |
Withdrawal and recovery | Withdrawal and recovery requests and processing times, identity verification and inquiry records |
Forms and administrative records | Form answers; member identifier when logged in; submission time, IP address, browser, country, language and time zone; permission, administrative activity and security records; documents, instructions, results, connection and authentication information for administrator external tools |
Personal information included by users in Content or files is also processed. Unnecessary sensitive information or resident registration numbers should not be entered.
Information is collected directly from users, from their chosen login providers, and from records generated during use of the Service.
Information is used to the extent needed for the following purposes.
Processing follows the grounds and necessary scope established by the Personal Information Protection Act and other applicable laws for each purpose.
Analytics consent does not affect ordinary use of the website.
Cookies needed for login, security, sessions and remembering cookie choices are used.
Type | Purpose | Use condition |
Essential cookies | Login, security, sessions and remembering cookie choices | Used to the extent necessary for the Service |
Analytics cookies | Google Analytics visit and usage analysis | Used after separate consent |
The browser's cookie-choice value is retained for up to one year.
Google Analytics is used only after consent to analytics cookies. Withdrawing consent in cookie settings stops subsequent analytics and clears the relevant analytics cookies.
Personal information is deleted when its purpose is fulfilled or its retention period ends. Records subject to statutory retention must be managed for the applicable period and restricted purpose.
Information | Retention period or processing rule |
Account and profile | Retained during membership. Recovery is supported for 30 days after deletion is confirmed, followed by account deletion procedures. Incomplete registrations become eligible for cleanup after seven days |
Content and authorship relationships | Retained according to Content storage, publication and collaborative use. Author identifiers, nicknames and collaborative Content or credit relationships may remain after withdrawal. Personal information deletion requests can be sent to the contact address |
Former members' email addresses | Two years from account deletion processing. Used for identifying former members, related inquiries, incident record cross-checks and cooperation with lawful investigative requests; not used for sale, advertising or marketing |
Incomplete uploads | Eligible for cleanup after seven days without recent activity |
Temporary processing files | Removed through deletion procedures when file processing and error-handling purposes are fulfilled |
Operational and performance records | Operational logs: 30, 90 or 93 days according to type. Performance traces: 14 days. Statutory retention requirements for personal information system access records are described below |
Browser cookie choice | Up to one year; separate from member consent history |
Newsletter subscription | Retained during subscription. After unsubscribing, information needed to stop delivery and honor opt-outs is processed |
Personal API token | Retained while in use. Regeneration or deletion invalidates the previous token |
Access records for personal information processing systems must be retained and managed for at least one year, or at least two years where statutory conditions apply, such as processing legally defined unique identification information or sensitive information, or processing personal information on 50,000 or more people (Article 8 of the Standards for Measures to Ensure the Safety of Personal Information). When records arise from product sales or similar activities, display and advertising records are retained for six months, contracts and withdrawal and payment and supply records for five years, and consumer complaints and disputes for three years (Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce). Tax books and supporting documents are retained for five years from the day after the statutory tax filing deadline, or seven years for offshore transactions, subject to statutory exceptions (Article 85-3 of the Framework Act on National Taxes). Commercial books and important business documents subject to the Commercial Act are retained for ten years, and vouchers and similar documents for five years; the period for commercial books starts when they are closed (Article 33 of the Commercial Act). Buyer information needed as transaction evidence is retained with the relevant record. Where several obligations apply, each must be satisfied. Electronic records, files and paper documents are destroyed by methods that prevent recovery.
Personal information is not sold. External services are used to the extent needed to provide features.
Before providing material to an investigative agency, the Operator checks the agency's authority, legal basis and scope and provides only necessary material.
OpenDiscogs uses Discogs' public data dumps. Requests to correct or delete personal information in names, credits, biographies or links, or to identify its source, can be sent to privacy@dsub.io.
External maps, embeds and administrative clients may receive requests, Content and authorized responses needed for the respective feature or connection. Retention by other administrative clients follows their providers' policies and contracts.
Before introducing product sales, the Operator will disclose information collected and external processors needed for ordering, payment, delivery, cancellation and refunds.
The Operator's own servers and backups are in the Republic of Korea. Requests, authentication and analytics information, or Content selected by administrators, may be processed abroad when external services are used.
Users may choose or withdraw social account connections and analytics consent. Translation, AI editing and MCP are used by administrators with the required permissions and are separate from general member features.
Users may exercise the following rights under applicable law.
Users can manage their profile, authentication connections, sessions, API token and subscriptions in account settings, or contact privacy@dsub.io.
If a request is restricted by law, the reasons and appeal method will be explained. Users will be informed how to request action from providers holding their information.
Identity or representative authority may be verified when handling a request. Responses are provided within the period required by law.
Authentication and permission checks, access restrictions and transport protection are applied, and security and administrative activity records are kept.
Public profiles, Content and credits are visible to other users and may be saved externally. Private material, form responses and files are provided according to access permissions. Users should check Content and access settings before publishing or sharing, and obtain the required authorization to upload another person's personal information.
Where consent is required to process the personal information of a child under 14, consent and verification of the legal representative are required.
Inquiries about children's information and a legal representative's exercise of rights may be sent to privacy@dsub.io.
This Policy may be amended to reflect changes in features, processing purposes, retention periods, external services or law.
Changes and their effective date will be disclosed on the Privacy Policy page. Material changes will be announced using legally required methods.
Business registration number: 111-42-04359 · Last updated: 2026-10-10