Privacy Policy | Moneywood

Article 1 (General Provisions)

This Privacy Policy ("Policy") sets out how the Moneywood service (the "Service") collects, uses, and discloses personal information. The Service values users' personal information and makes best efforts to protect it in accordance with applicable privacy laws, including the Personal Information Protection Act.

Article 2 (Definition of Personal Information)

Personal information means information relating to a living individual that can identify that individual by itself (such as name or resident registration number), or information that can be easily combined with other information to identify the individual.

Article 3 (Personal Information Collected)

The Service collects the following personal information: 1. Required information: email address (for login and service delivery) 2. Optional information: name, nickname (may be collected with user consent) 3. Automatically collected information: access logs, IP address, device information, browser type, and usage patterns 4. Payment-related information: Payment processing is handled by Lemon Squeezy (Lemon Squeezy, LLC). The Service does not directly collect or store credit card numbers or payment credentials. Lemon Squeezy may collect billing information (name, email, payment method) as necessary to process transactions. Please refer to Lemon Squeezy's Privacy Policy for details. The Service collects only the minimum information necessary to provide the Service.

Article 4 (Collection and Use of Personal Information)

The Service collects and uses personal information for the following purposes: 1. Service provision: user identification, login, subscription and delivery of email reports 2. Service improvement: usage analytics, service enhancement, and new feature development 3. Security: prevention of abuse, dispute resolution, and customer support 4. Legal compliance: fulfillment of legal obligations and protection of rights and interests Personal information is not used beyond the stated purposes and is not provided to third parties without user consent, except where required by law.

Article 5 (Retention and Use Period)

Personal information is retained until the collection purpose is achieved or the retention period expires, and is then promptly destroyed. Record retention periods: 1. Account registration information: until withdrawal or account deletion 2. Access logs: 3 months from collection (as required by communications law) 3. Payment/transaction records: 5 years from transaction date (as required by commercial and e-commerce laws) 4. Consumer complaints or dispute records: 3 years after dispute resolution Where laws require longer retention, information is retained for the legally required period.

Article 6 (Provision to Third Parties)

The Service does not provide users' personal information to third parties except in the following cases: 1. Where the user has given prior consent 2. Where required by law, or requested by investigative authorities for investigative purposes 3. Where necessary for service provision and the recipient/purpose has been disclosed 4. Where urgent to protect rights, property, or safety of users or third parties and obtaining prior consent is impracticable The Service shares the following information with third-party service providers: - Lemon Squeezy (Lemon Squeezy, LLC): user email address and transaction data, for the purpose of subscription billing and payment processing - Email delivery service providers: user email address, for the purpose of delivering newsletter and service communications

Article 7 (User Rights and How to Exercise Them)

Users may exercise the following rights regarding their personal information at any time: 1. Right to request access 2. Right to request correction of errors 3. Right to request deletion 4. Right to request suspension of processing 5. Right to withdraw consent Users may exercise these rights by contacting the Privacy Officer via email or through the Service settings page. The Service will take action without undue delay upon such request.

Article 8 (Technical and Administrative Protection Measures)

The Service takes the following technical and administrative measures to prevent loss, theft, leakage, alteration, or damage of personal information: 1. Encryption: user passwords are stored in encrypted form, and sensitive data is transmitted using encryption 2. Access control: only authorized personnel can access personal information, and access logs are regularly reviewed 3. Security software: security tools are installed and regularly updated to prevent hacking and malware 4. Regular inspections: regular security checks are performed to identify and remediate vulnerabilities 5. Physical security: physical access to data storage facilities is controlled and restricted

Article 9 (Privacy Officer Information)

The Service designates a Privacy Officer to handle complaints related to personal information processing. Contact information: - Email: biz.always.summer@gmail.com - Phone: +82-10-8969-1994 Users may contact the Privacy Officer for all privacy-related inquiries, complaints, and requests for relief. The Service will verify identity and respond without undue delay.