SERN. (hereinafter referred to as the "Company") values the personal information of its customers and is committed to complying with the Personal Information Protection Act. This Privacy Policy outlines matters concerning the processing of personal information collected during the use of the MarkeTracer service (hereinafter referred to as the "Service") and clearly informs customers of their rights and the protective measures in place.

Through this Privacy Policy, the Company explains the purpose of use, retention period, and security measures for the personal information collected, and guides customers on how they can manage their own personal information. The Company will continue to strive for the secure protection of personal information.

This policy will be effective from August 10, 2025, and in the event of any future changes, we will provide prior notice and post the revised policy.

1. Items of Personal Information Collected

• Membership Registration and Login: Users can register for membership through Google Login and Apple Login. During this process, the Company collects the User's anonymized ‘unique user ID, authentication token, and email address (if the user has consented to share it)’.
• Information Collected Automatically: To comply with legal obligations to retain access records and for the basic functioning of the app, the Company collects ‘IP address, mobile device information, visit date and time, and service usage records’.
• Information Set or Generated by the User: The following information is generated or collected during the use of the Service:
  • Personalization information such as favorite ticker lists, watchlists, and notification settings.
  • Community activity records (posts, comments, follow information, etc.).
• When Using Paid Services: Payment method and status, payment history, transaction identifiers, subscription period, refund history, etc.
• Record of Improper Use: To prevent fraudulent use, records of improper use by users who have seriously violated the Terms of Service, along with their registration information (unique user ID, authentication token, email address), are collected and retained for 6 months.

2. Purpose of Collection and Use of Personal Information

• Member Management: To identify individuals for membership services, confirm intent to join, impose restrictions on members who violate the terms, limit registration and the number of registrations, sanction fraudulent use of the service, prevent unauthorized use, confirm intent to withdraw, and handle customer service inquiries.
• Service Provision: To provide customized services, operate community functions, analyze service usage statistics, confirm payments for paid services and maintain subscription status, and manage recurring payments.
• Service Improvement: To analyze service usage records for service improvement.
• Legal Requirements: To use personal information when required by law.

3. Processing and Retention Period of Personal Information

In principle, the personal information of Users and Members is destroyed without delay once the purpose of its collection and use has been achieved. However, the following information will be retained for the period specified for reasons based on the Company's internal policy or relevant laws.

(1) Information Retention Based on Company's Internal Policy

• Record of Improper Use and Prevention of Fraudulent Use
  • Items Retained: ‘Unique user ID, authentication token, email address (if the user has consented to share it)’ collected through membership registration.
  • Reason for Retention: To prevent fraudulent registration and use.
  • Retention Period: Retained in an encrypted state for 6 months after withdrawal.
  • ‘Record of Improper Use’ refers to the record of use restrictions for users whose service use has been restricted or terminated due to fraudulent registration or violation of the Terms of Service.

(2) Information Retention Based on Relevant Laws

• Log Information: Log information related to service use (IP address, access time, etc.) is stored for a minimum of 3 months and then destroyed in accordance with relevant laws.