Information We Collect

Personal Information You Provide

We collect information you voluntarily share with us when using our platform. This includes data you provide during account registration, service enrollment, or when contacting our support team.

• Contact details including name, email address, phone number, and mailing address
• Account credentials such as username and encrypted password
• Financial information needed for budgeting tools (income ranges, expense categories, financial goals)
• Communication preferences and correspondence with our team
• Payment information when purchasing premium features (processed through secure third-party providers)

Automatically Collected Information

Our platform automatically gathers certain technical data to improve functionality and user experience. This information helps us understand how people interact with our services.

• Device information (browser type, operating system, screen resolution)
• Usage patterns (pages visited, features accessed, time spent on platform)
• IP address and approximate geographic location
• Cookies and similar tracking technologies to maintain session information

How We Use Your Information

We process your personal data for specific purposes that support our service delivery and business operations. Each use serves a legitimate interest or fulfills our contractual obligations to you.

Legal Basis for Processing (South Korea Context)

Under South Korean privacy law, particularly the Personal Information Protection Act (PIPA), we process your information based on the following legal grounds:

• Consent: You've given explicit permission for specific data processing activities
• Contract Performance: Processing is necessary to deliver services you've subscribed to
• Legal Obligation: We're required to retain certain records for tax and regulatory compliance
• Legitimate Interest: Processing improves our services while respecting your privacy rights

We designate a Chief Privacy Officer responsible for ensuring compliance with PIPA requirements. Their contact information is available at the end of this policy.

Information Sharing and Third Parties

We share your information only in limited circumstances with carefully vetted partners. Each third party is bound by confidentiality obligations and can only use your data for specified purposes.

Service Providers

We work with companies that help us operate our platform. These providers have access only to information necessary for their specific functions:

• Cloud hosting services that store encrypted platform data
• Payment processors handling subscription transactions (they maintain their own security certifications)
• Email service providers for sending account notifications and support responses
• Analytics tools that provide aggregated usage statistics without identifying individual users

Legal Requirements

We may disclose your information when legally required to do so, such as responding to valid court orders, complying with tax regulations, or cooperating with law enforcement investigations. We carefully review each request to ensure it meets legal standards before sharing any data.

Business Transfers

If WisePoint Transfer is acquired by or merged with another company, your information may be transferred as part of that transaction. You'll receive notice of any ownership change and can choose whether to continue using the service under new management.

Data Security Measures

We implement multiple layers of security to protect your information from unauthorized access, alteration, or disclosure. While no system is completely invulnerable, we maintain industry-standard protections.

• Encryption: All data transmissions use TLS 1.3 protocol, and sensitive information is encrypted at rest using AES-256 standards
• Access Controls: Employee access to personal data is limited based on job function and requires authentication
• Regular Audits: We conduct security assessments and vulnerability testing throughout the year
• Secure Infrastructure: Our hosting providers maintain certifications for physical and digital security standards
• Incident Response: We have procedures to detect, investigate, and respond to potential data breaches

You play an important role in security too. Use a strong, unique password for your account and avoid sharing login credentials with others. Contact us immediately if you suspect unauthorized access to your account.

Your Privacy Rights

South Korean privacy law grants you significant control over your personal information. You can exercise these rights by contacting our privacy team.

Access and Portability

You have the right to request a copy of the personal information we hold about you. We'll provide this data in a structured, commonly used format within 10 business days of your verified request. There's no charge for your first request each year.

Correction and Updates

If any personal information we hold is inaccurate or incomplete, you can request corrections. You can also update most account information directly through your profile settings.

Deletion Requests

You may request deletion of your personal information, subject to certain legal exceptions. We must retain some records for tax purposes or to resolve disputes. When we delete your data, it's removed from active systems within 30 days and from backup systems within 90 days.

Processing Restrictions

You can ask us to suspend processing of your information in specific situations, such as while we verify data accuracy or assess whether we have legitimate grounds for processing.

Objection Rights

You may object to processing based on legitimate interests. We'll stop processing unless we can demonstrate compelling grounds that override your privacy interests.

Consent Withdrawal

Where processing is based on your consent, you can withdraw that consent at any time. This doesn't affect the lawfulness of processing that occurred before withdrawal.

Data Retention Periods

We keep your information only as long as necessary for the purposes described in this policy or as required by law. Retention periods vary based on data type and legal requirements.

When retention periods expire, we securely delete or anonymize your information. Anonymized data (which cannot identify you) may be retained indefinitely for research and platform improvement.

International Data Transfers

Our primary servers are located in South Korea. Some service providers we use may process data in other countries. When we transfer personal information internationally, we ensure appropriate safeguards are in place.

We use standard contractual clauses approved by relevant data protection authorities and verify that recipient countries provide adequate protection for personal information. You can request more details about specific transfers by contacting our privacy team.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide functionality and improve your experience. You can control cookie preferences through your browser settings.

Types of Cookies We Use

• Essential Cookies: Required for login authentication and basic platform functions. Cannot be disabled.
• Functional Cookies: Remember your preferences and settings across sessions. Optional.
• Analytics Cookies: Help us understand how visitors use our platform. Optional and anonymized.
• Performance Cookies: Collect information about page load times and technical performance. Optional.

Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect platform functionality. Our cookie banner appears on your first visit, allowing you to customize your preferences.

Children's Privacy

WisePoint Transfer's services are not intended for individuals under 14 years of age. We do not knowingly collect personal information from children. If we learn that we've inadvertently gathered data from a child, we'll delete it promptly.

Parents or guardians who believe their child has provided us with personal information should contact us immediately at support@wisepointtransfer.com.

Changes to This Policy

We may update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our platform at least 30 days before the changes take effect.

Continuing to use our services after policy updates indicates your acceptance of the revised terms. The "Effective Date" at the top of this document shows when the current version was last modified.