Privacy policy

Last Updated: October 17, 2025

Scope: www.layerlab.games, www.layerlab.store, and any domains/subdomains, Shopify store, help desk, newsletters, and marketing channels operated by LayerLab Corp.

1. Overview

LayerLab Corp. (“LayerLab”, “we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our digital asset storefront and related services. We comply with applicable privacy laws, including the laws of the Republic of Korea as our primary legal framework. Where relevant, we also provide additional notices for individuals in the EU/EEA and the UK pursuant to the GDPR (see Appendix 1).

2. Information We Collect

“Personal information” means information relating to an identified or identifiable natural person. We may collect:

Identity Data: name, date of birth, company name, (optional) gender.
Contact Data: email address, phone number, billing/shipping address.
Payment & Billing Data: VAT/tax IDs, billing data, and limited payment details (full payment card data is processed and stored by our payment processors; we do not have direct access to full card details).
Transaction Data: orders, invoices/receipts, refunds, download history, license purchases.
Profile Data: account ID/username, password (hashed), purchase and support history.
Technical & Usage Data: IP address, device/browser info, page views, session statistics, referrers, search queries, approximate geolocation, cookies/SDK data, and site interaction logs.
Interaction Data: survey responses, event/promotions/contest submissions.
Marketing Preferences: newsletter opt-in, channel preferences, personalization settings.
Hiring Data (where applicable): resume/CV, portfolio, interview notes.
Sensitive Information: we do not intentionally collect sensitive categories. If processing is necessary, we will obtain consent and process strictly as permitted by law.

3. How We Collect Personal Information

Directly from you: account creation, purchases, support requests, surveys, promotions.
Automatically: through cookies, SDKs, and analytics tools when you use our website.
From third parties: payment, delivery, marketing, analytics, or support providers.
Public sources: publicly available profiles or posts, within lawful scope.

4. Purposes of Use

We process personal information for the following purposes:

Service Delivery & Account Management: to provide logins, authorize asset downloads, track entitlements.
Orders, Payments & Invoicing: to process transactions, issue invoices/receipts, handle refunds/chargebacks.
Support & Communications: to respond to requests and provide product or license assistance.
Internal Administration: accounting, taxation, audit, legal, and compliance.
Analytics & Improvement: to operate, secure, and improve our website, storefront, and assets.
Marketing & Promotions: to send newsletters and information about products, updates, and events (with opt-out).
Events/Contests: to manage participation, eligibility, and rewards.
Recruitment: to evaluate and contact candidates.
Legal Compliance & Risk Management: anti-fraud, dispute resolution, law enforcement requests.

5. Disclosures to Third Parties (Processors)

We use trusted data processors to operate our store, deliver digital products, provide support, and improve user experience. We share only the minimum necessary data, and require processors to implement appropriate security and, where applicable, international transfer safeguards (e.g., Standard Contractual Clauses – SCCs).

Processor	Purpose	Data Processed	Location (Data Center / HQ)
Shopify Inc.	E-commerce & order management	Contact, orders, payment/shipping meta	Canada, Ireland, USA
SkyPilot	Digital product delivery	Email, order/download info	USA
Credityard	Order financing/payment options	Order details, limited finance info	USA
Google Analytics / Ads	Analytics & advertising	Usage data, anonymized IP, user agent	USA (EU residency option)

The exact toolset may evolve. For the most current list or data rights concerning a processor, contact support@layerlab.io.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your residence. We implement safeguards required by applicable laws, including SCCs or adequacy decisions, to protect your information when transferred internationally. Additional GDPR notices for EU/UK individuals are provided in Appendix 1.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described above, including legal, tax, accounting, or dispute-resolution requirements. We securely delete or anonymize data when retention is no longer required.

8. Your Rights and Choices

Access/Copy: request access to personal information we hold about you (subject to legal limitations).
Rectification/Deletion/Restriction: request correction, deletion, or restriction of processing (subject to legal/contractual limitations).
Marketing Opt-Out: unsubscribe via email footer links or by contacting support@layerlab.io.
Authorized Agents: submit rights requests via authorized representatives with valid documentation.
Regulators: if unresolved, you may lodge a complaint with your local data protection authority.

9. Security

We apply appropriate technical and organizational measures, including least-privilege access, encryption-in-transit for payment flows, system hardening, and routine security reviews. Internet transmission is not fully risk-free; please take care when sharing personal information online.

10. Cookies and Similar Technologies

We use cookies/SDKs to operate core features (login, cart), measure performance, and provide personalization/retargeting. You can block cookies via browser settings; some features may not function properly. For Google Analytics Advertising Features, you can use the Google Analytics Opt-out Browser Add-on and relevant device settings to limit ad tracking.

11. Links to Other Websites

Our site may contain links to third-party websites. We are not responsible for their privacy practices. Review those policies before providing any personal information.

12. Single Sign-On (SSO)

If you connect using SSO (e.g., Shopify), we receive information permitted by your SSO settings (e.g., name, profile, username/ID, language). We use this to provision and manage your account.

13. Children’s Privacy

Our services are not intended for children under 14. If we learn that we collected such data, we will promptly delete it and restrict access.

14. Changes to This Policy

We may amend this Policy at any time by posting an updated version on our website. Continued use after the effective date constitutes acceptance of the revised Policy.

15. Contact – Privacy Officer

LayerLab Corp.

Email: support@layerlab.io

Appendix 1 – Additional Information for EU/EEA & UK Individuals (GDPR)

Legal Bases

Depending on the context, we process personal data under one or more legal bases:

Contract performance (e.g., to deliver purchases, grant download access).
Legal obligation (e.g., tax/accounting, compliance, responding to lawful requests).
Legitimate interests (e.g., service improvement, security, fraud prevention, direct marketing).
Consent (e.g., newsletters/marketing where required). You may withdraw consent at any time; prior processing remains lawful.

Rights

EU/UK individuals have the right to access, rectify, erase, restrict, object (including to processing based on legitimate interests/direct marketing), data portability, and to not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Exercise rights via support@layerlab.io. You may also complain to your local Data Protection Authority (DPA).

International Transfers

When transferring data outside the EU/UK, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) and implement supplementary measures where appropriate.

Retention

We retain data only as long as necessary for the purposes collected and to meet legal obligations and potential disputes.