Privacy Policy

1. Information We Collect

1.1 Personal Information

Data Type	Collection Method	Purpose	Retention Period	Legal Basis
Email Address	Registration/Contact Forms	Account management, communications	Until account deletion + 30 days	Consent/Contract
Phone Number	WhatsApp/Social Media Contact	Customer support, service delivery	Until service termination + 90 days	Consent
Stock Symbols/Codes	Analysis Input Forms	Providing AI analysis services	30 days	Legitimate Interest
IP Address & Location	Automatic (Web Access)	Security, fraud prevention	90 days	Legitimate Interest
Device Information	Browser/App Usage	Service optimization	Session only	Legitimate Interest
Usage Analytics	Cookies/Tracking	Service improvement	24 months	Consent

1.2 Social Media Integration Data

When you contact us through social media platforms, we may collect:

• WhatsApp: Phone number, profile information, message content
• LINE: User ID, display name, message history
• KakaoTalk: Kakao ID, profile data, conversation logs
• Band: Band ID, group participation data, shared content

2. How We Use Your Information

• Service Delivery: Providing AI-powered stock analysis and recommendations
• Communication: Sending analysis reports, market updates, and support responses
• Personalization: Customizing content based on your investment preferences
• Security: Preventing fraud, unauthorized access, and ensuring platform security
• Analytics: Understanding user behavior to improve our services
• Legal Compliance: Meeting regulatory requirements and legal obligations
• Marketing: Sending promotional content (with your explicit consent)

3. Cookie Policy

3.1 Types of Cookies We Use

Cookie Type	Purpose	Duration	Third Party
Essential Cookies	Basic website functionality	Session	No
Performance Cookies	Analytics and performance monitoring	2 years	Google Analytics
Functional Cookies	Remember preferences and settings	1 year	No
Marketing Cookies	Targeted advertising and tracking	2 years	Facebook, Google Ads

4. Data Security & Protection

We implement industry-standard security measures:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Role-based access with multi-factor authentication
• Data Minimization: We collect only necessary information
• Regular Audits: Quarterly security assessments and vulnerability testing
• Staff Training: Regular privacy and security training for all personnel
• Incident Response: 72-hour breach notification procedures

5. Third-Party Services & Data Sharing

5.1 Service Providers

• Cloud Hosting: AWS/Azure for secure data storage
• Analytics: Google Analytics for usage statistics
• Email Services: SendGrid for automated communications
• Payment Processing: Stripe/PayPal for subscription management
• Customer Support: Zendesk for helpdesk services

5.2 Social Media Platform Data Protection

When using social media integration:

• Data shared with WhatsApp is subject to Meta's Privacy Policy
• LINE communications follow LINE Corporation's privacy standards
• KakaoTalk interactions are governed by Kakao Corp's data policies
• Band usage follows Naver Corporation's privacy guidelines

6. Your Rights & Choices

6.1 Under GDPR (EU Users)

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Portability: Transfer data to another service
• Right to Object: Opt-out of certain processing activities
• Right to Restrict: Limit how we process your data

6.2 Under CCPA (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

7. Data Retention

We retain your information only as long as necessary:

• Account Data: Until account deletion + 30 days
• Transaction Records: 7 years (regulatory requirement)
• Marketing Consents: Until withdrawn + 30 days
• Support Communications: 3 years after last contact
• Analytics Data: 24 months in aggregated form

8. International Data Transfers

We may transfer your data internationally with appropriate safeguards:

• EU-US Data Privacy Framework participation
• Standard Contractual Clauses (SCCs) for EU transfers
• Adequacy decisions where applicable
• Binding Corporate Rules for intra-group transfers

9. Children's Privacy

Our services are not intended for users under 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a child, please contact us immediately.

10. Contact Information

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through:

• Email notification to registered users
• Prominent website notice for 30 days
• Push notifications through connected social media