privacy policy - Mekong Korea

Mekong Korea Privacy Policy Effective Date: July 31, 2026 Version: 2026-07-31-r1 Mekong Korea (hereinafter referred to as the “Company”) complies with relevant laws and regulations, including the Personal Information Protection Act, and discloses the following Privacy Policy to safely process members’ personal information. 1. Data Processor and Contact Information Data Processor: Mekong Korea Representative and Data Protection Officer: 조경원 Business Registration Number: 823-13-02793 Business Address: 광주광역시 광산구 월전로 10-57 Customer Service Phone: 070-8064-1259 Personal Information & Grievance Inquiries: mekongkorea.help@gmail.com Mail Order Business Report Number: 제2026-광주광산-0643호 Location-Based Service Business Report Number: 제1345호 2. Personal Information Collected and Collection Methods The Company may collect and use the following information during membership registration, service usage, customer inquiries, paid point processing, and security processes. A. Membership Registration and Account Management - Required: Email address, nickname, encrypted password, country/language of registration, Member identification number (MK number) - When selecting SNS Easy Sign-up/Login: Provider name, provider member identifier, email address, email verification status, profile name/nickname/image URL, and profile response information within the scope permitted by the relevant provider. The Company does not request or store SNS account passwords, friend/contact lists, or SNS posts. B. Service Usage Process - Posts, comments, photos/videos, profile input information, transaction/recruitment/job search/room information, messages, report details, blocking/notification settings - Connection date and time, IP address, cookies, session information, browser/device information, service usage history, and security/error records C. Region/Location Function - Selected Region - Only if the member has agreed to GPS storage after separate confirmation: 1 exact latitude/longitude, accuracy, time of collection, time of consent, and consent version D. Point Top-up and Cash Receipt - Top-up application number, date and time of application/confirmation/payment, top-up amount/points, depositor name, MK number, deposit confirmation status, processor memo - If a cash receipt is requested: Mobile phone number for personal income tax deduction or business registration number for business expense verification, date and time of issuance, and approval number E. Customer Inquiries and Business Verification - Inquirer's name, email, contact method, inquiry details, and attached images - Business registration number, company name, and verification result when using business verification functions such as Jobs 3. Purpose of Processing Personal Information The Company processes personal information for the purposes of member identification, registration, login, SNS account linking, email verification, provision of services by country and language, provision of posting and messaging functions, processing of customer inquiries and reports, provision of regional and statistical functions, point top-up and cash receipt processing, prevention of fraudulent use, security and fault response, fulfillment of legal obligations, and service improvement. 4. Retention and Usage Period 1. Member information and service settings are retained until membership withdrawal. Upon withdrawal, account identification information such as email and nickname is anonymized, and information subject to legal retention obligations is stored separately for the applicable statutory period. 2. Content created by members, such as posts, comments, and messages, may be retained until the member deletes them or the purpose of service operation ends. To maintain the continuity of the bulletin board after withdrawal, if posts remain, they are separated from member identification information. 3. Precise GPS coordinates are deleted either by the member directly or upon membership withdrawal. If a member does not consent to GPS storage, only location information may be stored without precise coordinates. 4. Point top-up requests prior to deposit confirmation may be deleted after 24 hours have passed since the request. Transaction records related to deposit confirmation, point disbursement, and cash receipts are retained for the period stipulated by relevant laws. 5. Information regarding customer inquiries, dispute resolution, and responses to fraudulent use is retained until processing is completed or until the legal retention period expires. 6. Social media account linkage information is retained for as long as necessary for account linkage and login security, and is deleted or separated in accordance with relevant standards upon membership withdrawal or the termination of the processing purpose. 5. Provision of Personal Information to Third Parties In principle, the Company does not sell or provide members' personal information to third parties. However, the Company may provide such information in accordance with relevant laws and regulations if there is separate consent from the member, a basis in relevant laws and regulations, if it is necessary for the protection of the interests of life, body, or property, or if there is a lawful request such as for an investigation or trial. 6. Outsourcing of Personal Information Processing and Overseas Processing The Company uses the services of the following operators to the minimum extent necessary for service operation. Services that may be processed overseas may be handled via encrypted Internet APIs or SDKs at the time when each function is used or when security or error analysis is required, and external operators may process information for the duration of the relevant business performance and in accordance with their own personal information processing standards. A. Domestic Processing Outsourcing - Cafe24: South Korea / Server hosting and data storage B. Details of Services Processed Internationally - Cloudflare, Inc. / United States / privacyquestions@cloudflare.com / Automated Attack Prevention & Turntile / IP address, browser/device information, turntile value, and one-time verification token / Processed via encrypted HTTPS when submitting protected forms, such as login and sign-up. The one-time verification token is valid for up to 5 minutes after issuance, and the Company does not store the token separately. Other security signals are subject to Cloudflare's privacy standards. Refusing a turntile may restrict the submission of the relevant protected form. - Google LLC / United States / Google Privacy Inquiry Form (https://support.google.com/policies/contact/general_privacy_form) / Content safety reviews based on Google Login, Maps, Translate, and Gemini / Social media account linking information, online identification information, Maps search/location information, translation, or text/images subject to safety review / Processed via encrypted HTTPS API when using the relevant features or conducting content safety reviews. The processing and retention standards for Google Maps and Translate features are subject to the applicable Google Terms of Service and Privacy Policy. The Gemini API transmits only the minimum amount of text and images necessary for safety review, and processing standards may vary depending on whether the service is classified as paid or free by Google. If classified as a free service, inputs and responses may be used to improve Google products or reviewed; therefore, you must not enter sensitive or private personal information in posts or messages. You may choose not to use Google Sign-in, Maps, or Translate features, or sign up via email, but post safety reviews may still be processed for the safety of the service. - OneSignal, Inc. / USA / privacy@onesignal.com / Sending push notifications / Push subscription identifiers, service member identifiers, device and browser information, notification subject and body, and link address / If the member has allowed push notifications on their browser or device, processing is done via an encrypted HTTPS API or SDK. Notification messages sent via API are typically retained for about 30 days after delivery, and subscriber information may be deleted until deletion depending on the OneSignal plan, or after 18 months of inactivity on the free plan. Members can revoke notification permissions in their browser or device settings; in this case, they will not receive push notifications but will continue to use other features of the service. - Functional Software, Inc. (Sentry): USA / Error analysis and security response / Device/browser information, connection path, and error information / Handling of errors C. SNS Easy Sign-up/Login If a member directly selects SNS Easy Sign-up/Login, provider member identification values, email addresses, profile names, nicknames, images, and profile response information may be transmitted to the Company from Google (USA), Kakao (South Korea), Naver (South Korea), LINE (Japan), or Facebook/Meta (USA) within the scope permitted by the member. Such information is used solely for the purposes of login, account linking, and account security. SNS account passwords are not transmitted to or stored by the Company, and members who do not wish to log in via SNS may choose email sign-up. The retention period for overseas processing services varies by service and rate plan, so the Company does not uniformly set it at a “maximum of 3 years.” The Company does not sell member information to external business operators or provide it for advertising purposes, and detailed personal information processing standards and contact information for each operator can be found in the respective operator’s official Privacy Policy. 7. Destruction of Personal Information Personal information whose retention period has expired or whose processing purpose has been achieved is deleted or destroyed without delay. Electronic files are deleted using methods that make recovery difficult, and paper documents are shredded or incinerated. Information that must be preserved under the law is stored separately from other personal information. 8. Rights of Data Subjects and Method of Exercise Members may request access to, correction/deletion of, suspension of processing of, and withdrawal of consent regarding their personal information. Account information and GPS stored information can be directly modified or deleted using functions within the service. Other requests will be processed if sent to mekongkorea.help@gmail.com, including the minimum information necessary for identity verification. In the event of legal restrictions, the reasons will be provided. 9. Cookies and Connection Information The Company may use cookies, sessions, and connection records to maintain login status, set country, language, and region, for security, to prevent errors, and to provide service convenience. Members may refuse or delete cookie storage in their browser settings, but the use of some functions, such as logging in, may be restricted. 10. Measures to Ensure Safety The Company implements management of personal information access rights, password encryption, protection of transmission channels, management of access logs, security updates, and administrative and technical measures necessary for operations. 11. Children's Personal Information The Company does not allow membership registration for individuals under the age of 14. If it is confirmed that a person is under the age of 14 or has registered with false age information, the account may be restricted or processed in accordance with relevant laws and procedures. 12. Changes to the Policy This Policy may be amended if laws, service functions, processing items, or retention periods change. Significant changes will be notified prior to implementation through service announcements or methods accessible to members. 13. Location-Based Service Terms of Use Mekong Korea may process personal location information to provide GPS-based location features selected and used by members. The following is part of this Privacy Policy and also applies as the Location-Based Service Terms of Use. A. Service Provider and Service Details The location-based service provider and the person responsible for managing personal location information is Mekong Korea 조경원. The location-based service business registration number is 제1345호, and the contact number is mekongkorea.help@gmail.com (Phone: 070-8064-1259). The Company uses personal location information to determine the member's region based on the current location and to provide regional member statistics and content usage analysis. The Company does not provide real-time tracking or movement path tracking functions based on the precise current location. B. Items Collected and Consent Method One record of accurate latitude and longitude is stored only if the member allows location permissions on their device or browser and separately confirms whether to store accurate GPS coordinates. In this case, the country code, location accuracy, time of collection, time of consent, and consent version may be stored together. Even if you do not consent to the storage of accurate GPS, you can set only the region using your current location; in this case, accurate latitude and longitude are not stored. C. Data Confirming Use and Provision and Retention Period Accurate GPS coordinates and the aforementioned consent and collection records are deleted directly by the member from the service screen or immediately upon membership withdrawal. The Company does not use personal location information beyond the scope of the purposes specified above, nor does it provide it to third parties. In cases where there is a legal obligation to retain data, the information is retained only within the scope defined by such obligation. D. Member Rights and How to Exercise Them Members may refuse location permissions or revoke them through their device or browser settings at any time. Members may directly delete the stored accurate GPS data from the service's location settings screen; however, the location settings selected by the member may remain even after deletion. Requests for viewing, correcting, deleting, or suspending use regarding the processing of location information may be made via mekongkorea.help@gmail.com. E. Changes This Privacy Policy will be amended in the event of changes to the content of location-based services, collection and usage standards, or relevant laws and regulations, and significant changes will be notified prior to implementation.