Privacy Policy

1. Personal Information Collected

The Service collects the minimum necessary information as follows. [Account Registration] • Email/Password: Email address, password (encrypted) • Social login (Google, Kakao): Email address, profile nickname (per respective provider policy) [Investment Education Application] • Name, contact (phone number), investment experience level, investable amount (optional), inquiry (optional) • Purpose: Course guidance and enrollment confirmation contact • Retention: 1 year after application processing is complete [Automatically Collected] • Usage records, access logs, device identifiers (advertising ID), app version Personal information is collected directly by the user or automatically generated during service use.

2. Purpose of Collection and Use

Collected personal information is used solely for the following purposes: • Member identification and service use management • Providing personalized investment information and alerts • Preventing unauthorized use and enhancing security • Statistics and analysis for service improvement • Compliance with legal obligations

3. Retention and Use Period

The Service destroys personal information without delay when a member withdraws or when the collection purpose is achieved. However, information required to be retained by law will be kept for the legally specified period. • Records related to contracts or withdrawal of offers: 5 years (E-Commerce Act) • Login records: 3 months (Protection of Communications Secrets Act)

4. Third-Party Disclosure and Cross-Border Transfer

The Service does not, in principle, share personal information with third parties. Exceptions include: • Cases where the user has given prior consent • Cases required by law or requested by investigative authorities [Cross-Border Transfer] When applying for creator verification, minimal information (email, nickname, self-introduction) is sent for email notifications: • Recipient: Formspree Inc. • Country: United States • Purpose: Email notification delivery • Retention: Immediately deleted after email transmission If you do not consent to the above, creator verification applications may be restricted.

5. Data Processing Delegation

The Service delegates personal information processing to the following entities: • Vercel Inc. (USA) — Service hosting and server operations • Supabase Inc. (USA) — Member authentication and database storage • Upstash Inc. (USA) — Rate limiting • Formspree Inc. (USA) — Creator verification email notifications (email, nickname, self-introduction) All entities are contractually required to comply with data protection requirements.

6. User Rights and How to Exercise Them

Users may exercise the following rights at any time: • Request to access or correct personal information • Request to suspend personal information processing • Request to delete personal information (right to be forgotten) • Account withdrawal and complete deletion Upon account deletion, all posts, comments, and creator verification data will be deleted. Requests may be submitted via email (sunryupatners@gmail.com), and the Service will respond within 10 business days.

7. Technical and Managerial Protection Measures

The Service takes the following measures to protect personal information: • Encrypted password storage • Minimized access rights and access log management • Regular security vulnerability assessments • Internal management plans and implementation

8. Cookies and Similar Technologies

The Service uses localStorage for user convenience and service improvement. Stored information includes portfolio and watchlist settings and is not transmitted to servers.

9. Changes to Privacy Policy

If this policy changes, advance notice will be provided at least 7 days prior through in-app announcements or pop-ups. Additional consent may be requested for significant changes.

10. Privacy Officer

For inquiries, complaints, or remedies related to personal information: • Officer: Investus Operations Team • Email: sunryupatners@gmail.com • Response time: Within 10 business days of receipt

Supplementary Provisions

This policy takes effect as of May 20, 2026.