▶︎ 한국어 버전 바로가기
Socra AI Inc. Privacy Policy(English)
Socra AI Inc. (hereafter referred to as the "Company") highly values the protection of personal information of data subjects through the services provided via its websites and applications, such as the brand service "Vest Way". The Company is fully committed to safeguarding personal information in adherence to all relevant laws.
This privacy policy outlines how the personal information provided by data subjects is collected, used, and the measures the Company takes to protect such information.
Purpose of collection and the use of personal information
| Service |
Purpose of Use |
Collection Items |
Retention and Use Period |
| Membership registration |
To verify and confirm the identity of users per member services, prevent fraudulent use by misbehaving members, check for duplicate sign-ups, confirm membership intention, verify age, maintain and manage member status, verify consent from legal guardians for members under 14 years old |
Mobile phone number, email address, email and member ID of Apple, Kakao, Naver, Google (only for registered by social media members), connection information (CI), duplication check information (DI), password, country/region |
Until 7 days after membership withdrawal. However, for reasons such as statutory retention periods or ongoing investigations, data will be retained until the conclusion of such circumstances. |
| Customer Communications (Handling Customer Complaints and Notice Delivery) |
To identify the complainant and confirm complaints, contact and notify for fact confirmation, notify the result of processing, maintain records for dispute resolution, and various notices. |
Name, email address, Apple, Kakao, Naver, Google ID, and member number (only for registered by social media members). |
|
- (For users residing in Korea) Mobile phone number. | Same as above. |
| When Using Application Services | To provide services via mobile devices like smartphones and tablets, offer personalized services, and navigate user environments to address issues (technical or guidance purposes). | Device model name, unique number per device (UDID, IMEI, etc.), OS information, mobile carrier, Google/Apple advertising ID (in case of mobile device usage), service usage/suspension records, access logs, IP information, cookies. | Same as above. |
| Events, Promotions, Marketing, and Advertising | To offer services and display ads based on demographic characteristics, verify service effectiveness, analyze connection frequency, collect service usage statistics, send event and promotional information, deliver newsletters, distribute ‘Challenge’ service support and refunds, and process tax withholdings. | Name, email address.
- (For users residing in Korea) Mobile phone number. | Same as above. |
| When Applying for Challenge Rewards | To distribute service rewards and process tax withholdings, conduct demographic analysis for service development and improvement, compile service usage statistics, offer customized services based on personal information. | Name, gender, date of birth, account information, copies of ID
-(For users residing in Korea)ID or foreigner registration number, copies of ID and bankbook | Same as above. |
Period of preservation and use of personal information
- The Company processes and retains personal information within the duration agreed by the data subject or stipulated by law.
- The Company aims to minimize the use of the user's personal information during the period between membership registration and service provision. Retention periods may extend beyond service usage termination to comply with legal requirements.
- The retention period for personal information collected by the Company is determined by applicable laws and regulations. The Company will only use the collected personal information for the purposes for which it was collected and will not retain it longer than necessary. The retention periods for personal information are as follows.
| Categories |
Retention Periods |
| Contracts or Withdrawal Records (including reward -required info) |
5 years (Relevant Laws: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.) |
| Payment and Goods Supply Records |
5 years (Relevant Laws: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.) |
| Preservation of records on consumer complaints or dispute settlements |
5 years (Relevant Laws: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.) |
| Labeling and Advertising Records |
6 months (Relevant Laws: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.) |
| Preservation of records pertaining to withholding tax on other incomes and receipt issuance, and those submitted for payment details to tax authorities |
5 years (Relevant Laws: tax laws) |
| Preservation of service visit records |
3 months (Relevant Laws: PROTECTION OF COMMUNICATIONS SECRETS ACT) |
Delegation of the processing of personal information
The Company delegates personal information processing to external specialists as follows and oversees them to ensure safe handling respecting the Law:
| Consignee |
Consigned task |
| Apple Appstore, Google Playstore |
Payments (credit card, bank transfers, other methods), refund account verifications. |
| Braze.Inc, NHN TOAST |
Sending informational messages (SMS/MMS), app push notifications, in-app messages, and emails. |
| Hyphen Corporation |
Account verification and identity authentication for prize distribution and tax withholding |
| Amazon Web Service Inc |
Providing IT infrastructures. |
Personal Information Processing Consignment to Overseas Third Parties
| Transferred Items |
Destination Country |
Transfer Date and Method |
Company Name |
Consignment Purpose |
Retention and Use period |
| Behavioral information, including frequency of user visits, duration of stay, usage and exit path, error occurrence information |
United States |
Transmission through the network as needed. |
Google Inc |
Statistical analysis and service improvement. |
Until membership withdrawal or consignment contract |
Matters regarding installation, operation, and rejection of automatic personal information collection devices
The Company uses cookies to offer personalized services by storing and querying user information frequently but provides users the option to refuse installation and usage of cookies.
- Purpose of Cookie Usage: Cookies are utilized to understand and analyze the visit and usage patterns of data subjects on various services and websites, popular search terms, and secure access status, thereby providing optimized information. When a data subject accesses the website, the Company reads the content of cookies in the browser and provides services without requiring additional information entry based on the stored cookies.
- Users can refuse the installation and operation of cookies. If you wish to limit cookie usage, you can do so using the settings below. However, refusing cookies might lead to difficulties in using personalized services.
Exercising user rights and responsibilities
- Data subjects have the right to request access, correction, deletion, or suspension of their personal information at any time.
- The rights specified in paragraph 1 can be exercised by the data subject’s legal representative.
- To view or correct personal information, click on “Change Personal Information”, and for service contract termination, click “Withdraw Membership” after verification. Alternatively, you can contact the Personal Information Protection Officer by mail, phone, or email for prompt action.
- If you request correction of personal information errors, the information will not be used or provided until corrections are completed. Additionally, if incorrect personal information has already been provided to a third party, the correction results will be promptly communicated to ensure updates.
- However, the exercise of rights such as requesting to view, correct, delete, and suspend personal information of users may be restricted in accordance with relevant laws such as the Personal Information Protection Act.
- Upon discovering unauthorized use such as identity theft, the Company will promptly take necessary actions like suspending the service or terminating the membership. If a data subject recognizes unauthorized use of their personal information and requests service suspension or membership termination, the Company will act immediately.
- The Company will verify whether the person requesting access, correction, deletion, or suspension is the data subject or a legitimate representative.
- If there is any unexpected activity or inaccurate information or if you have reason to believe that your information is no longer secure, or if you have any questions about our security, please contact us by e-mail at [email protected]
Destruction of personal information
Collected personal information will be destroyed without delay once the purpose of use is achieved or upon expiration of the retention period. If required by other laws, personal information will be transferred to a separate database or store it in a different storage location.
- Destruction Procedures : Personal information of data subjects will be stored for a certain period based on internal policies and legal requirements before being destroyed.
- Destruction Methods : The personal information stored in electronic files is destructed by the Company in a way that prevents any reproduction, and the personal information stored in paper documents is destroyed by shredding or incineration.
Measures to safeguard personal information
The Company takes the following precautions to protect personal information.
- Internal Management Plans : Assignment of Personal Information Protection Officers, employee training.
- Access Control : Systematic authorization standards, intrusion prevention systems, and other security measures.
- Record Management: Backup and monitoring of access logs prevent falsification or alteration.
- Encryption: Secure storage and transmission of sensitive information using encryption.
- Antivirus Measures: Installation of software to protect against malware, frequent updates.
- Compliance with Legal Requirements: Implementing all legally mandated security measures.
Technical Management Protection of Personal Information
Data-related inquiries can be directed to the designated Data Protection Officer:
We will notify users of any additions, deletions, or modifications to this privacy policy via email notifications collected during sign-up, providing a minimum of 7 days' notice before changes take effect, extending to 30 days for unfavorable changes to data subjects.
주식회사 소크라에이아이 개인정보처리방침(한국어)
㈜소크라에이아이(이하 ‘회사’)은 웹사이트 및 응용프로그램(앱)을 통해 회사가 제공하는 브랜드 서비스-베스트웨이에서 정보주체의 개인정보 보호를 소중하게 생각하고, 개인정보를 보호하기 위하여 항상 최선을 다해 노력하고 있습니다.
회사는 「개인정보 보호법」을 비롯한 개인정보 보호 관련 법령을 준수합니다.
본 개인정보취급방침은 정보주체가 제공하는 개인정보가 어떠한 용도와 방식으로 이용되고 있으며, 회사가 개인정보 보호를 위하여 어떠한 조치를 취하고 있는지 알립니다.
개인정보의 수집 항목 및 이용 목적
| --- | --- | --- | --- |
- 만14세 미만 아동 학습자(자녀) 개인정보의 수집 및 이용에 대해서는 법정대리인(대표친권자)으로부터 동의를 받습니다.
개인정보의 처리 및 보유기간
- 회사는 법령에 따른 개인정보 처리 및 보유기간 또는 정보주체로부터 개인정보를 수집 시에 동의 받은 개인정보 처리 및 보유기간 내에서 개인정보를 처리 및 보유합니다.
- 관계법령의 규정에 의하여 보관할 필요가 있는 경우 회사는 수집 및 이용 목적 달성 후에도 관계법령에서 정한 일정 기간 동안 정보주체의 개인정보를 보관할 수 있습니다.
| --- | --- |
개인정보처리의 위탁에 관한 사항
회사는 아래와 같이 외부 전문업체에 개인정보처리를 위탁하여 운영하고 있습니다.
회사는 위탁계약 체결 시 「개인정보 보호법」 제26조에 따라 위탁업무 수행목적 외 개인정보 처리금지, 기술적∙관리적 보호조치, 재위탁 제한, 수탁자에 대한 관리․감독, 손해배상 등 책임에 관한 사항을 계약서 등 문서에 명시하고, 수탁자가 개인정보를 안전하게 처리하는지를 감독하고 있습니다.
위탁업무의 내용이나 수탁자가 변경될 경우에는 지체없이 본 개인정보 처리방침을 통하여 공개하도록 하겠습니다.
| --- | --- |
개인정보의 제3자 제공에 관한 사항(국외 이전)
이용자의 개인정보 중 일부는 서비스 향상 또는 통계 분석 등의 목적으로 국외에 위치하고 있는 서버에 저장될 수 있습니다.
| --- | --- | --- | --- | --- | --- |
개인정보의 자동 수집 장치의 설치, 운영 및 그 거부에 관한 사항
회사는 정보주체에게 개별적인 맞춤서비스를 제공하기 위해 이용정보를 저장하고 수시로 불러오는 ‘쿠키(cookie)’를 사용합니다. 쿠키는 앱 또는 웹사이트를 운영하는데 이용되는 서버(http)가 정보주체의 컴퓨터 브라우저에게 보내는 소량의 정보이며 정보주체의 단말 기기에 저장되기도 합니다.
- 쿠키의 사용목적: 정보주체가 방문한 각 서비스와 웹 사이트들에 대한 방문 및 이용형태, 인기 검색어, 보안접속 여부 등을 파악하여 최적화된 정보 제공을 위해 사용됩니다. 정보주체가 웹사이트에 접속을 하면 정보주체의 브라우저에 있는 쿠키의 내용을 읽고, 추가정보를 찾아 접속에 따른 성명 등의 추가 입력없이 서비스를 제공할 수 있습니다.
- 이용자는 쿠키 설치 운영을 거부할 수 있으며, 저장을 원하지 않으시면 아래 쿠키 허용을 제한할 수 있습니다. 단 쿠키 저장을 제한하는 경우 맞춤형 서비스 이용에 어려움이 발생할 수 있습니다.
정보주체 및 법정 대리인의 권리와 그 행사방법
- 정보주체는 언제든지 회사에 대해 개인정보 열람, 정정, 삭제, 처리정지 요구 등의 권리를 행사할 수 있습니다.
- 제1항에 따른 권리 행사는 정보주체의 법정대리인이나 위임을 받은 자 등 대리인을 통하여 하실 수 있습니다. 이 경우 “개인정보 처리 방법에 관한 고시(제2020-7호)” 별지 제11호 서식에 따른 위임장을 제출하셔야 합니다.
- 개인정보를 조회, 수정하기 위해서는 “개인정보변경”을, 서비스 이용계약 해지를 위해서는 “회원탈퇴”를 클릭하여 본인 확인 절차를 거친 후 직접 조회, 수정 또는 탈퇴가 가능합니다. 또는 개인정보보호책임자에게 서면, 전화 또는 이메일로 연락하시면 지체 없이 조치하겠습니다.
- 개인정보의 오류에 대한 정정을 요청하신 경우에는 정정을 완료하기 전까지 당해 개인정보를 이용 또는 제공하지 않습니다. 또한 잘못된 개인정보를 제3자에게 이미 제공한 경우에는 정정 처리결과를 제3자에게 지체 없이 통지하여 정정이 이루어지도록 하겠습니다.