1. Scope and controller
This policy applies to the www.dedimoa.com website and every service provided through it. The controller of your personal data is the operator of the Service, Sichuan Tianfu New Area Chengdu Wan'an Kongdaolingjing Information Technology Services Studio. The operator is a sole proprietorship registered in mainland China (the People's Republic of China), with its registered address at No. 636 Wanfusi Road, Tianfu New Area, Chengdu, Sichuan 610213, China.
DediMoa processes personal data on the basis of performing the contract with you, complying with legal obligations, and its legitimate interest in keeping accounts and infrastructure secure. Where processing is based on your consent, you can withdraw that consent (see the “Your rights” chapter).
The games you connect to and play through the Service are not covered by this policy. In-game accounts, chat and in-game behavioral data are handled by the game's developer under the developer's own privacy policy, and DediMoa takes no part in that processing.
This policy is written in English, and the English version is authoritative. Versions in other languages are translations provided to help you understand this policy; where a translation differs from the English version, the English version prevails.
2. What we collect
DediMoa collects only the information the Service actually needs, and nothing unrelated to it. The list below is everything it collects.
Account information: your email address, your password stored as an irreversible hash, and the language and time zone you use the Service in. Your password is never stored in its original form, and no one, including DediMoa's operator, can recover it from the database.
If you sign in with a Google account or link a Google account to your DediMoa account: the account identifier Google assigned to you, the email address Google reports, and whether Google has verified that email address. When you sign in by pressing the Google sign-in button, the only information DediMoa asks Google for is your email address, and no other information about your Google account reaches DediMoa at all. When you sign in through the sign-in prompt that Google displays (One Tap), the signed token Google passes to DediMoa also contains your name and profile picture, and because Google offers no way to ask for them to be left out, these two items do reach DediMoa's servers. DediMoa's software takes only the account identifier, the email address and the verification status from that token, and discards your name and profile picture together with the token. These two items are never written to the database and are not used for any purpose.
If you sign in with a Discord account or link a Discord account to your DediMoa account: the account identifier Discord assigned to you, the email address on that account if it has one, and whether Discord has verified that address. Discord only hands out the email address to apps that also ask for your basic profile, so the reply Discord sends DediMoa also contains your username, display name, avatar and banner, language setting, and a few account details such as whether two-factor authentication is on and which Nitro plan you have. DediMoa's software takes only the account identifier, the email address and the verification status from that reply; everything else is discarded as soon as it arrives, never written to the database, and not used for any purpose.
If you turn on managing your servers from Discord or connect a server to a Discord channel: when you turned it on; the Discord account identifier of each friend you allow to start and restart a server, with the username Discord showed for them at the time; and, for each server you connect to a channel, the channel webhook's identifier and token, the webhook's name, the identifiers of that channel and its Discord server, the notifications and notification language you chose, whether to show player names and send the join code, and the identifier of the status message posted in the channel. Each time you or a friend sends a command from Discord, the request Discord sends DediMoa contains the sender's profile (account identifier, username, display name, avatar and similar) and the identifiers of the Discord server and channel the command was typed in; DediMoa takes only the account identifier, the Discord language setting, the command itself, and, when you give a friend permission, that friend's username, and discards the rest. To post notices about players joining and leaving, DediMoa compares the list of players online (in-game names and game account identifiers) from one minute to the next; that list is kept for at most an hour and used for nothing else.
Sign-in and security logs: the IP address and browser User-Agent recorded each time you sign in. They are used only for checking account security and for the referral program's self-referral check described in the “How we use personal data” chapter.
Transaction information: what you ordered, the amount, the payment method, and the transaction reference returned by the payment provider. Payment details such as your card number and CVC are collected and processed directly by the payment provider, and DediMoa neither sees nor stores them.
Service operation information: the running state of the instance you bought, the server address and server password, and your game saves (including saves you uploaded through import) together with their automatic backups. The contents of your saves are yours, and DediMoa keeps them only as far as needed to run and restore the Service.
Information you send us: what you write when you open a ticket under “Support” in the Console, what you send when you contact us by email, and any other material you send in the course of those conversations. Please do not send sensitive personal information that is unrelated to the problem.
Where you came from: if you arrive through another website or through a link carrying campaign parameters such as utm_source, utm_medium or utm_campaign, that link, those parameters and the first page you landed on. If you opened the site directly, for example by typing the address, nothing is recorded. When you sign up, the first such visit is recorded, and when you place an order, the most recent one. When you sign up, the country your connection appears to come from, as reported by the network provider DediMoa uses, is also recorded. This information is used for one purpose only, measuring which channels bring in users and orders, and is never used for profiling or advertising.
Referral program: if you join the referral program, DediMoa records the referral code it issues to you and when you joined, the IP address of the network you were on when you opened the referral page (only the first 64 bits of an IPv6 address), and your reward balance history (rewards credited from referred users' orders, amounts deducted for refunds, coupon exchanges and payout requests). The payout method and account details you send by email when requesting a payout are recorded as well. If you sign up through someone else's referral link, DediMoa records the referral code on that link, the referrer who owns the code, and the reward rate and earning period that apply to that referral.
What we do not collect: DediMoa does not ask for, use or store your real name, government identification numbers such as a resident registration number, phone number, biometric data such as your face or fingerprints, location data, contacts (address book) or in-game chat. The exceptions are the name and profile picture in the Google sign-in token and the Discord profile details described above, which each provider sends regardless of DediMoa's wishes and which DediMoa discards.
3. How we use personal data
Providing the Service: creating your account from your email address, sending the verification codes needed for sign-up and sign-in, sending the server address and password when your server starts running, and sending expiry and renewal notices.
Processing transactions: creating orders, starting payments, reconciling payment results, and handling refunds and accounting.
Keeping things secure: detecting unusual sign-ins, preventing credential stuffing and bulk sign-ups, and investigating account security incidents.
Handling requests: answering tickets under “Support” and inquiry emails, diagnosing problems you report, and restoring saves when you ask.
Meeting legal obligations: providing information where the law requires it or an authority lawfully demands it.
Running the referral program: recording who referred whom, crediting referrers' reward balances based on referred users' orders, and handling coupon exchanges and payouts. For a payout, we confirm by email to your account address how you would like to be paid, then pay you through Payoneer. To prevent referrers from referring themselves, when you sign up through a referral link we compare the IP address you sign up from with the IP addresses the referrer has signed in from and those from which the referrer opened the referral page in the last 90 days; a sign-up from the same network does not count as a referral.
Running Discord commands and notifications: if you turn it on, answering the commands you and the friends you allow send from Discord, and posting the notifications you chose to the channel you connected.
DediMoa does not use your personal data for advertising, profiling or automated decision-making, and never sells it to anyone.
4. Processors and disclosure to third parties
DediMoa does not share or sell your personal data. However, the Service cannot be provided without a small number of processors, and by the nature of their work they necessarily handle part of your personal data. All of them are listed below, each with what it does for DediMoa and what it receives. DediMoa has a contract with each processor setting out the purpose and duration of processing, and requires them to meet their protection obligations. Separately, if you signed up through someone else's referral link, that referrer can see the totals described in the last paragraph of this chapter.
Paddle (Paddle.com Market Limited in the United Kingdom, and its affiliates in the United States and Canada): DediMoa's payment provider and the merchant of record for your purchase. To take payment and issue refunds, we pass it the order amount and an order reference. Your card details go to Paddle directly without passing through DediMoa, and Paddle also processes your information under its own privacy policy.
Google Cloud (Google LLC, United States, and its affiliates, operating the infrastructure in Tokyo, Japan on which DediMoa's own systems run): hosts the server that runs this website, DediMoa's application and their logs. Because everything the Service does passes through processes on that server, the information described above is handled there, along with the credentials DediMoa's systems use to manage your game instance. Under its contract, this provider handles that information only to provide infrastructure to DediMoa, and does not use it for its own purposes.
Supabase (Supabase, Inc., United States, operating the database on infrastructure in Tokyo, Japan): DediMoa's managed database provider, and the processor that holds the largest part of your personal data. Your email address and password hash, sign-in IP addresses and User-Agents, language and time zone, where you came from, referral program records, order and payment records, the contents of tickets under “Support”, the account identifier and email address Google or Discord reports if you sign in with either, and, if you turn on managing your servers from Discord, the settings and records described in the “What we collect” chapter are all stored in the database it runs for DediMoa. Under its contract, this provider handles that information only to operate that database, and does not use it for its own purposes.
Providers of game servers and backup storage (two server hosting providers, one established in mainland China and the other in the United States): provide the servers on which your game instance runs and the storage that holds its backups, and have no other role. DediMoa uses these providers to create and run your game instance in the region you chose when ordering, and to keep game saves, their backups and runtime data in the places set out in the “Where it is kept and for how long” chapter. Your email address, order records and other account information are not passed to these providers; that information stays in the database described above.
Resend (Resend, Inc., United States): DediMoa's email delivery provider. To send verification codes, server launch notices and expiry notices, we pass it your email address and the content of the message.
Payoneer (Payoneer Inc., United States): the payment service used to pay out referral rewards, involved only if you join the referral program and request a payout. To pay you, we pass it the payee name and bank account details you provided, and the payout amount. Payoneer also processes this information under its own privacy policy.
Google Sign-In (Google LLC, United States): a sign-in method used only if you choose it, and not a processor that handles personal data on DediMoa's instructions. When you authenticate directly with Google, Google tells DediMoa your Google account identifier, your email address and whether that address is verified; in other words, information flows from Google to DediMoa, not the other way. DediMoa does not send your account information to Google. What Google receives, it receives directly from your browser when Google's sign-in script runs on pages where you are not signed in, namely your IP address, your browser's User-Agent and the page you are viewing; details are in the “Cookies and browser storage” chapter. Google's processing of this information and of your use of its sign-in service is governed by Google's privacy policy.
Discord Sign-In (Discord Inc., United States): a sign-in method used only if you choose it, and likewise not a processor that handles personal data on DediMoa's instructions. When you authenticate on Discord's own site, Discord tells DediMoa your Discord account identifier, your email address and whether that address is verified; in other words, information flows from Discord to DediMoa, not the other way. DediMoa does not send your account information to Discord, and DediMoa's pages load nothing from Discord; you reach Discord's site only when you choose to sign in with it. Discord's processing of your use of its sign-in service is governed by Discord's privacy policy.
Discord (Discord Inc., United States): the platform that command replies and channel notifications go through, if you turn on managing your servers from Discord or connect a channel. To answer your commands and post the notifications you chose, DediMoa sends Discord the content of each reply and notification: your server's game, region and status, the number of players online, whether an update is due, when it expires, the announcements you send, and, unless you turn off Show player names, the in-game names of players joining and leaving; if you turn on Send the join code too, the join code as well. Replies that only you can see may also contain your server's address, password and join code. Friends you allow can see that server's status in Discord. DediMoa never sends Discord your email address, your order records or players' game account identifiers. Discord processes this, and everything else that happens in Discord, under its own privacy policy.
Legal requests: where the law requires it, an authority lawfully demands it, or it is necessary to protect the rights of DediMoa or others, we may disclose relevant information. Before responding to such a request, we check that it is legitimate.
Merger, split or dissolution: if DediMoa merges, splits or is dissolved, we will tell you in advance who will receive the information and how to contact them, and require the recipient to continue to abide by this policy. If there is no recipient, your personal data will be deleted or anonymized.
The person who referred you: if you signed up through a referral link, the referrer who shared that link can see totals on their referral page: how many people signed up through that link, how many of them have paid, and the amounts credited to the referrer's balance from those people's orders (including pending amounts and amounts deducted for refunds). Your email address, your account and the details of individual orders are never shown to the referrer. However, since people usually refer someone they know and these totals may cover only one or two people, the referrer may be able to infer whether you have paid and how much.
5. Where it is kept and for how long
Where it is kept: account, order and ticket data under “Support” sits on infrastructure in Tokyo, Japan. Your game instance and its saves are in the region you chose when ordering; the regions you can choose are Seoul, Tokyo, Taipei (servers located in Tokyo, Japan), Hong Kong, Singapore and Sydney (Australia) in Asia–Pacific; Silicon Valley, Los Angeles, Chicago and New York in the United States; and London (United Kingdom), Frankfurt (Germany), Amsterdam (Netherlands), Stockholm (Sweden), Oslo (Norway) and Zurich (Switzerland) in Europe. Backups are kept in the same city as the instance or in Singapore.
Who can access it, and from where: DediMoa's operator is established in mainland China and operates the Service from there. The operator's staff therefore access all of the infrastructure above remotely from mainland China for operation, maintenance and support, regardless of which country a server is actually in. One of the providers of game servers and backup storage is also established in mainland China, and its staff may access the infrastructure it operates from there; the other is established in the United States. The server DediMoa's own systems run on and the database holding your account, order and ticket data are operated by providers established in the United States, on infrastructure in Japan. Your personal data may therefore be accessed from mainland China, where the authorities may, in circumstances defined by law, require access to data held by DediMoa or by providers established there.
Why: these transfers are necessary to perform the contract you entered into with DediMoa. There is no way to provide this Service with the servers running game worlds and the system that manages them located in the same country as every player. DediMoa limits transfers to what the Service actually needs, and processors are contractually bound to protect the data they hold. Country-specific matters are set out in the “Information for users in Korea” and “Information for other countries” chapters.
Account information is kept while your account exists. When you close your account, it is deleted or anonymized within 30 days, except where the law requires records to be kept.
Records of where you came from and referral program records are kept with your account and follow the rule above. However, network addresses recorded when you open the referral page are kept for only 90 days, and the where-you-came-from record captured with an order is kept with that order's record. Payout records (including the payout method and account details you sent by email) are transaction records and are kept for the same period as transaction records below.
Sign-in logs (IP addresses and User-Agents) stop being used for service purposes once the session expires or ends, and are kept after that only for security checks and for the referral program's same-network check described in the “How we use personal data” chapter.
The account identifier and email address of an external account (Google, Discord) are kept while the account is linked and deleted as soon as you unlink it. Unlinking Discord also deletes the record that you turned on Discord control. Discord control records are kept while you use the feature: disconnecting a channel deletes that channel's webhook details at once, and taking back a friend's permission deletes that friend's account identifier and username at once.
Transaction records are kept for as long as tax and accounting law requires, normally several years from the transaction date.
Game saves and backups follow the “Renewal, expiry and data retention” chapter of the Terms of Service: they stay on the instance for 7 days after expiry, backups in backup storage are kept for 30 days from the expiry date, and they are permanently deleted after that.
7. How we protect personal data
The whole site is served over HTTPS, and passwords are stored using a standard salted hashing algorithm that works only one way, so they cannot be reversed.
Internal access follows the principle of least privilege. The operator's management functions and the user-facing site use completely separate authentication systems, and important operations leave an audit record.
Even so, nothing on the internet is completely secure. Keep your password safe, and do not use the same password on multiple sites.
If a personal data breach occurs, DediMoa will start its response procedure immediately, tell affected users what happened and what they can do, and notify the relevant authority where the law requires.
8. Your rights
You have the following rights over your own personal data. Some can be checked directly in the Console, and the others can be exercised by making a request to the contact details at the end of this policy.
Access and copies: in the Console you can see your account information, order history and the servers you are using. If you need a copy of the data DediMoa holds, please ask, and we will provide one.
Correction: you can change your password yourself. If any other information is wrong, let us know and we will correct it.
Deletion: you can request deletion where the data is no longer needed for the purpose for which it was collected, where you have closed your account, or where DediMoa has processed it unlawfully. Where a legal obligation prevents deletion, we stop all processing other than storage and the security measures storage requires.
Portability: you can ask to receive the account and order data you provided in a commonly used, machine-readable format. You can also receive a copy of your game saves on request.
Closing your account: you can ask to close your account at any time. Closing it ends all services, and your account data is handled under this policy and the Terms of Service and cannot be recovered afterwards.
Objection and withdrawal of consent: you can object to processing based on DediMoa's legitimate interests, and withdraw consent to a particular processing activity. Withdrawal does not affect processing already carried out on the basis of that consent, but after withdrawal we may be unable to provide the related service.
How to exercise them: open a ticket under “Support” in the Console or send an email to support@dedimoa.com. To protect your account, we may first ask you to verify your identity. We reply within 30 days, or within any shorter period set by the law of the place where you live. Requests from users in the Republic of Korea to access, correct, delete or suspend the processing of personal data are answered within 10 days.
9. Information for users in Korea
Because of the nature of the Service, the personal data of users in the Republic of Korea is transferred outside Korea. DediMoa carries out these transfers as outsourced processing and storage necessary to perform the contract with you, by disclosing the following in this policy.
| Recipient | Country of establishment / place of processing | Items transferred | Purpose of transfer |
|---|---|---|---|
| Paddle (Paddle.com Market Limited and its affiliates in the United States and Canada) | United Kingdom, United States, Canada | Order amount, order reference | Taking payments and issuing refunds |
| Google Cloud (Google LLC and its affiliates) | United States / Japan (Tokyo) | Every item under “All items transferred” below (all of the Service's processing passes through this server) | Hosting the server that DediMoa's systems and their logs run on |
| Supabase (Supabase, Inc.) | United States / Japan (Tokyo) | Email address, sign-in IP addresses and User-Agents, language and time zone settings, where you came from, referral program records, order and payment records, the contents of tickets under “Support”, the account identifier and email address Google or Discord reports if you sign in with either, and the settings and records if you turn on managing your servers from Discord | Operating the managed database |
| Providers of game servers and backup storage | Mainland China, United States / Japan, Korea, Singapore, Hong Kong, Australia, the United States, Germany, the United Kingdom, the Netherlands, Sweden, Norway and Switzerland | The instance and save data belonging to your order | Running and backing up game instances |
| Resend (Resend, Inc.) | United States / United States | Email address, message content | Sending email to you |
| Payoneer (Payoneer Inc.) | United States / United States | Payee name, bank account details and payout amount, if you request a payout | Paying referral rewards |
| Discord (Discord Inc.) | United States / United States | Command replies and channel notifications, if you turn on managing your servers from Discord or connect a channel: server status, the number of players online, announcements you send, the address and password in replies only you can see, players' in-game names unless you turn off Show player names, and the join code if you turn on Send the join code too | Answering commands and posting channel notifications |
All items transferred: email address, sign-in IP addresses and User-Agents, language and time zone settings, where you came from, referral program records, the payee name, bank account details and payout amount if you request a payout, the account identifier and email address Google or Discord reports if you sign in with either, order and payment records, the contents of tickets under “Support”, the instance and save data belonging to your order, and, if you turn on managing your servers from Discord, its settings and records and the command replies and channel notifications sent to Discord.
- Timing and method of transfer: continuously while you use the Service, over encrypted network connections. Transfers to Payoneer take place when a payout you requested is made, and to Discord each time it answers a command or posts a notification.
- Retention and use period: the same as the retention periods this policy sets for the information concerned.
- How to refuse the transfer, and the effect of refusing: you can refuse by not using the Service or by closing your account. Because the transfer cannot be separated from the Service, if you refuse we cannot provide the Service.
- Recipients' contact details: available on request through the contact details in the “Contact and privacy officer” chapter.
Google Sign-In (Google LLC, United States) is listed here for completeness, but it is not a party to which DediMoa transfers personal data. If you choose to sign in with Google, Google provides DediMoa with your Google account identifier and email address, which DediMoa uses only to verify your identity. DediMoa transfers no personal data to Google. What Google's sign-in script collects directly from your browser (your IP address, User-Agent and the page you are viewing) is described in the “Cookies and browser storage” chapter. Discord Sign-In (Discord Inc., United States) is likewise not a recipient: if you choose to sign in with Discord, Discord only provides DediMoa with your Discord account identifier and email address, and DediMoa transfers no personal data to Discord for signing in. What is sent to Discord when you turn on Discord control is listed in the table above.
Complaints about the processing of personal data can be made to the Personal Information Protection Commission of the Republic of Korea.
10. Information for other countries
The rights above are given equally to all users. This chapter adds what the law of particular countries requires to be disclosed to users there, and the authorities to which complaints can be made.
Japan: the Service is operated from outside Japan and is subject to Japan's Act on the Protection of Personal Information. The operator's name and address are in the “Contact and privacy officer” chapter. Personal data is provided to third parties located outside Japan as described above, namely Paddle (United Kingdom, United States, Canada), Google Cloud (United States, operating the infrastructure in Japan on which DediMoa's own systems run), Supabase (United States, operating in Japan the database that holds your account, order and ticket data), the providers of game servers and backup storage (one established in mainland China and one in the United States, operating the infrastructure in Japan, Korea, Singapore, Hong Kong, Australia, the United States, Germany, the United Kingdom, the Netherlands, Sweden, Norway and Switzerland on which your instance runs and its backups are kept), Resend (United States), Payoneer (United States, only if you request a payout in the referral program) and Discord (Discord Inc., United States, only if you turn on managing your servers from Discord or connect a channel: the replies and notifications described in the “Processors and disclosure to third parties” chapter). The personal data protection regimes of these countries differ from Japan's, and DediMoa requires each of them by contract to take measures equivalent to those the Act requires of DediMoa, except Discord, which, as the platform you chose, handles what is sent through it under its own terms. Google Sign-In (Google LLC, United States) and Discord Sign-In (Discord Inc., United States) are also listed here, but signing in is not such a provision: if you sign in with either, personal data moves from that provider to DediMoa and DediMoa provides no personal data to it, so it is not a provision of personal data to a third party in a foreign country. What Google's sign-in script collects directly from your browser is described in the “Cookies and browser storage” chapter. You may contact the Personal Information Protection Commission of Japan.
Taiwan: under Taiwan's Personal Data Protection Act, you can ask to inquire about and review the data DediMoa holds about you, obtain a copy, have it corrected or supplemented, have its collection, processing or use stopped, and have it deleted. Exercising these rights costs nothing beyond any fee the law allows, and refusing to provide data has no consequence other than that the related service may not be available. International transfers are as described above, and you may contact the Personal Data Protection Commission of Taiwan.
European Economic Area (including Norway), United Kingdom and Switzerland: the EU General Data Protection Regulation (GDPR) applies to the processing of personal data of users in the European Economic Area, the UK GDPR to users in the United Kingdom, and the Swiss Federal Act on Data Protection (FADP) to users in Switzerland. DediMoa relies on the following legal bases:
- Performance of a contract: accounts, orders and payments, running game instances and keeping their backups, support, and, if you join or turn them on, the referral program and Discord commands and notifications
- Legitimate interests: keeping accounts and infrastructure secure, recording where you came from, and recording who referred you and checking that referrals are genuine
- Compliance with legal obligations: tax and accounting records, and responding to lawful requests
- Consent: where DediMoa asks for your consent
Your personal data is transferred outside the European Economic Area, the United Kingdom and Switzerland to countries that may not protect it to the same standard as the law where you live: to mainland China, where the operator is established and from where it accesses the data, and to Japan, the United States and the other countries named in the “Processors and disclosure to third parties” and “Where it is kept and for how long” chapters, where processors and their infrastructure are located. You have the right to access your personal data and obtain a copy, to have it corrected or erased, to restrict its processing, to data portability, to object to processing based on DediMoa's legitimate interests, and to withdraw your consent at any time; the “Your rights” chapter explains how to exercise them. You may also complain to the data protection supervisory authority in the country where you live or work, or where you believe the infringement took place: in the United Kingdom, the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
Other countries: use the rights in the “Your rights” chapter above. Where the law of the place where you live gives you more rights than this policy, that law applies, and you may complain to the data protection authority where you live.
11. Children's personal data
The Service is intended for people who can enter into a contract. If you are under 18, read this policy together with a parent or legal guardian and obtain their consent before using or paying for the Service.
DediMoa does not knowingly collect personal data from children who have not reached the age at which they can consent for themselves in the country where they live. In the Republic of Korea that age is 14 (in full years of age), and the personal data of a younger child can be processed only with the consent of their legal guardian.
If we learn that a child's personal data has been collected without the necessary consent, we will delete it as soon as possible. Parents or legal guardians who discover such a case can let us know at support@dedimoa.com.
12. Changes to this policy
DediMoa may update this policy when its business or the law changes. The updated policy is published on this page, and the version number and dates at the top (the date this policy first took effect and the date it was last updated) are updated with it.
Where the purposes of processing, the way data is processed or the kinds of information collected change materially, we will notify you separately in the Console or by email before the change takes effect, and ask for your consent again where needed.
13. Contact and privacy officer
If you have questions, comments or complaints about this policy, or wish to exercise your rights, send an email to support@dedimoa.com or open a ticket under “Support” in the Console. We will look into it and reply as soon as we can.
The controller's details are as follows:
- Controller: Sichuan Tianfu New Area Chengdu Wan'an Kongdaolingjing Information Technology Services Studio
- Registered address: No. 636 Wanfusi Road, Tianfu New Area, Chengdu, Sichuan 610213, China
- Email: support@dedimoa.com
Inquiries about personal data and complaints about how it is processed are also received at the address and email above. DediMoa is a one-person business, so it has no separate privacy officer or department; the operator, as the business owner, takes on that role personally and answers these requests directly. Accordingly, the personal information protection officer under the Personal Information Protection Act of the Republic of Korea is also the operator personally, who can be reached at the address and email above.
If you believe DediMoa's processing has infringed your rights and the matter cannot be resolved between the parties, you may complain to the supervisory authority of the country concerned (the Personal Information Protection Commission of the Republic of Korea, the Personal Information Protection Commission of Japan, or the Personal Data Protection Commission of Taiwan) or, elsewhere, to the data protection authority where you live. You may also bring proceedings before a court with jurisdiction.