Privacy Policy

• At registration: Email, password (stored encrypted), display name, profile image (optional)
• Social login: Email, name, and profile image provided by the social provider
• Paid checkout: Payment card details (held by Toss Payments; we receive payment results only), billing address when required
• Automatically during use: IP address, browser/device information, access times, cookies, board usage statistics
• Information you provide: Board titles, card content, comments, and similar data

• Identify members and verify identity
• Provide the Service (board storage, sync, collaboration, AI analysis, public pages)
• Process payments and refunds for paid plans
• Respond to inquiries and send notices
• Improve the Service through aggregated, non-identifying analytics
• Address Terms violations and resolve disputes

• Account deletion: Data is made private immediately, then permanently deleted after a 30-day grace period to prevent accidental loss
• Legal retention requirements:
  • E-commerce records: contracts, payments, and supply records for 5 years; consumer complaints and dispute records for 3 years
  • Communications records: access logs for 3 months where required

We do not sell or share personal information with third parties without your consent, except:

• When required by law (e.g., lawful requests from authorities)
• When you have given prior consent
• When provided in a form that cannot identify individuals for statistics or research

We entrust certain operations to the following providers:

• Vercel Inc.: Hosting and deployment
• Toss Payments: Payment processing
• Resend: Transactional email (verification, password reset)
• OpenAI: AI analysis and summaries (board text sent temporarily; not used for model training)
• Vercel Blob: Image and file storage
• Yahoo Finance / CoinGecko: Market data (no personal data sent)

You may exercise the following rights at any time:

• Access and correct your information (via account settings)
• Request restriction or deletion (account deletion or email to hello@link.me.kr)
• Withdraw consent (delete your account or opt out of marketing)

• Passwords stored using one-way hashing (bcrypt)
• HTTPS (TLS) encryption in transit
• Least-privilege access and regular security reviews
• Backup and monitoring to mitigate unauthorized access

We use cookies to maintain login sessions and save preferences. You may refuse cookies in your browser, but some features may not work correctly.

• Email: privacy@link.me.kr
• General inquiries: hello@link.me.kr

We may revise this policy when laws, policies, or the Service change. Material changes will be announced at least 7 days before they take effect (30 days for significant changes).