Privacy Policy

• Registration and authentication: email address and password (stored only as a one-way hash).
• API keys: key hashes (original keys are not stored), key names, plans and status.
• Service usage records: API call counts and timestamps, IP addresses, User-Agent and other request metadata (to prevent abuse and manage quotas).
• Enterprise contracts: contact person’s name, contact details and billing information (collected under a separate agreement).
• Automatically collected information: cookies and similar technologies, and service usage statistics (see section 6).

• Identifying and authenticating members, and providing and operating the Service.
• Issuing and managing API keys, managing quotas and rate limits, and preventing misuse and abuse.
• Responding to inquiries, delivering notices, improving the Service and analyzing usage statistics.
• Complying with legal obligations and handling disputes.

• Member information is destroyed without delay upon account withdrawal. Where applicable laws, including the Act on Consumer Protection in Electronic Commerce, require retention, it is kept for the required period.
• Service usage records, including API call logs, are retained for a period for abuse prevention and statistical purposes, then destroyed.

As a rule, the Company does not disclose users’ personal information to third parties. Disclosure may occur only with the user’s prior consent, as required by law, or in response to a lawful request from an investigative authority.

To provide the Service smoothly, the Company may outsource personal information processing as described below and ensures that it is managed securely in accordance with applicable laws.

• Domestic and overseas cloud infrastructure providers: service hosting and data storage.
• Google LLC: service usage analytics (Google Analytics).

This outsourcing concerns the processing of members’ personal information. It is unrelated to the collection methods, processing methods or sources of the market data provided by the Company.

The Company uses cookies and Google Analytics to analyze service usage. Users may reject cookie storage through their browser settings; doing so may limit certain features.

Users may at any time request access to, correction or deletion of, or suspension of processing of their personal information, as well as account withdrawal (withdrawal of consent). Requests may be made through the contact details below, and the Company will act without delay.

• Passwords and API keys are stored only as one-way hashes (such as SHA-256); originals are not retained.
• The Company minimizes access privileges, applies access controls and encrypts data in transit (HTTPS).

This privacy policy may be revised following changes to laws, policies or the Service. The effective date and changes will be announced within the Service.

This policy takes effect on June 18, 2026.