Privacy Policy

MegaWave (hereinafter "Company") values the personal information of users and complies with applicable laws and regulations.

Article 1 (Information Collected and Methods of Collection)

1. Information Collected

The Company collects the following personal information to provide its services.

[Required Information]

• Email sign-up: email address, password
• Social login: user identifier provided by the social login provider, email address, provider information
• Customer inquiries and complaint handling: email address, inquiry content

[Automatically Collected Information]

• Device type, OS information, app version, access logs, service usage history, access IP, information collected via cookies or similar technologies, push tokens (if applicable), error logs (if applicable)

2. Methods of Collection

• Directly entered by the user during app sign-up or service use
• Provided through social login services
• Automatically generated and collected during service use

Article 2 (Purposes of Collecting and Using Personal Information)

The Company uses the collected personal information for the following purposes.

1. Verification of intent to sign up, user identification and authentication, and maintenance of membership status
2. Provision of services, content delivery, and prevention of unauthorized use
3. Delivery of service-related notices and information, complaint handling
4. Service quality improvement, development of new services, and statistical analysis
5. Response to violations of laws and Company policies

Article 3 (Retention and Use Period of Personal Information)

1. The Company destroys personal information without delay once the purpose of collection and use has been achieved.
2. However, if there is a legal obligation to retain the information, it will be stored for the period required by applicable law.

Article 4 (Provision of Personal Information to Third Parties)

1. The Company does not, in principle, provide users' personal information to third parties.
2. Exceptions apply in the following cases:
   1. When the user has given prior consent
   2. When required by special provisions of law or when compliance with legal obligations is unavoidable

Article 5 (Outsourcing of Personal Information Processing)

1. The Company may outsource the processing of personal information to external specialists to facilitate smooth service provision.
2. Currently, the Company does not outsource the processing of personal information.

Article 6 (Destruction of Personal Information)

1. The Company destroys personal information without delay when the retention period has elapsed or the processing purpose has been achieved.
2. Information in electronic file format is destroyed using technical methods to prevent recovery or restoration.

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Users, as data subjects, may exercise the following rights.

1. Request to access personal information
2. Request to correct errors in personal information
3. Request to delete personal information
4. Request to suspend processing of personal information

Article 8 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information.

1. Minimization of personnel handling personal information
2. Access permission management
3. Application of security measures
4. Log management and prevention of forgery or alteration

Article 9 (Privacy Officer)

The Company operates the following communication channel to handle user complaints and remedy damages related to personal information processing.

Article 10 (Changes to the Privacy Policy)

This Privacy Policy is effective from the date of enforcement. In the event of additions, deletions, or corrections due to changes in laws or policies, users will be notified at least 7 days before the effective date of the changes. However, in the case of changes unfavorable to users, notice will be given at least 30 days in advance.