Legal

Privacy Policy

Effective: January 1, 2026 · Last updated: March 24, 2026

Jigulab Research Institute ("Company", "we", "us") is committed to protecting your personal information in accordance with applicable privacy laws, including South Korea's Personal Information Protection Act (PIPA). This Privacy Policy explains what data we collect, how we use it, and your rights.

Article 1 (Data We Collect)

Category	Data Collected	Purpose	Retention
Account (Required)	Email address, encrypted password	Authentication, account management, service notices	Until account deletion
Referral Verification (Required)	Exchange name, exchange UID	Free-tier eligibility verification and maintenance	Until account deletion
Service Usage (Auto-collected)	Access logs, IP address, browser and device info, OS, screen resolution, click/navigation patterns, session duration	Security, error response, usage analytics, UX improvement	1 year
Marketing (Optional)	Email address, consent timestamp	Feature updates, events, newsletter	Until consent withdrawal
Surveys (Optional)	Satisfaction ratings, feature preferences, open feedback	Service improvement, feature planning	3 years from collection

Collection methods: Direct input during registration and use; automatic collection during service usage; optional provision via email or surveys.

Optional data items are not required — declining to provide them will not affect access to core service features.

Article 2 (How We Use Your Data)

[Required] Account registration, identity verification, and account management
[Required] Service provision (granting scanner access)
[Required] Referral verification and free-tier eligibility management
[Required] Service notices, Terms updates, and account security alerts
[Required] Fraud prevention and security incident response
[Optional] Sending feature updates, events, and newsletters (with separate consent)
[Optional] Usage pattern analytics and UX improvement
[Optional] New feature planning and development based on user needs
[Optional] Service quality reporting using anonymized/aggregated data

Article 3 (Sharing Your Data)

We do not share your personal data with third parties except in the following circumstances:

With your explicit prior consent
When required by law or by a lawful request from a competent authority
To the minimum extent necessary to provide the Service

During the referral verification process, your exchange UID may be transmitted to partner exchanges (Bybit, Binance, OKX, etc.) based on data you directly provide. If partner exchanges change or are added, this Policy will be updated accordingly.

Aggregated or anonymized data that cannot identify individuals may be used for service quality improvement.

Article 4 (Data Processing Subcontractors)

Subcontractor	Scope of Processing
Supabase Inc.	User authentication, data storage and management

We ensure that all subcontracting agreements include provisions for data protection compliance and secure data management.

Article 5 (Data Retention)

Personal data is deleted upon account deletion, subject to the following legal retention requirements:
- Electronic commerce records (contracts, payments, delivery): 5 years (Korean e-commerce law)
- Consumer complaint and dispute records: 3 years (Korean e-commerce law)
- Access logs (IP addresses, etc.): 3 months (Korean communications privacy law)
- Abuse prevention records: 1 year
Email addresses for marketing purposes are retained until consent is withdrawn, or for a maximum of 1 year after account deletion if no withdrawal request is received.
Anonymized statistical and analytical data (from which individuals cannot be identified) may be retained indefinitely.

Article 6 (Data Deletion)

When the retention period expires or the processing purpose is fulfilled, we delete data immediately. Electronic files are deleted in an irrecoverable manner; physical documents are shredded or incinerated.

Article 7 (Your Rights)

You may exercise the following rights at any time:

Right of access to your personal data
Right to correction of inaccurate data
Right to deletion
Right to restrict processing
Right to withdraw marketing consent

To exercise these rights, email jigulab.official@gmail.com and we will respond without undue delay.

Article 8 (Security Measures)

Passwords are stored using one-way encryption (bcrypt).
Personal data is protected in transit via SSL/TLS encryption.
Access to personal data is restricted to the minimum necessary personnel.
Data access is controlled through Supabase Row Level Security (RLS).

Article 9 (Cookies)

We use session cookies to maintain your login state. You may disable cookies in your browser settings, but doing so may prevent access to features that require authentication.

Article 10 (Data Protection Officer)

Role	Details
Data Protection Officer	Jongtак Kim (김종탁)
Organization	Jigulab Research Institute (지구정복연구소)
Email	jigulab.official@gmail.com

For any inquiries, complaints, or requests related to personal data, please contact the officer above.

Article 11 (Remedies)

If you believe your privacy rights have been violated, you may seek assistance from the following authorities:

Personal Information Protection Commission (Korea): www.pipc.go.kr / +82-2-2100-2499
KISA Privacy Violation Report Center: privacy.kisa.or.kr / 118 (Korea)

Company: Jigulab Research Institute (지구정복연구소) · Representative: Jongtак Kim (김종탁)
Business Registration: 148-08-03528 · Daegu, Republic of Korea
Contact: jigulab.official@gmail.com