Privacy Policy

MC AI Labs ("Company") establishes this privacy policy under Korean Personal Information Protection Act Article 30 to protect the rights and freedoms of data subjects.

1. Data collected

• Required: Email address
• Auto-collected: IP address (access log), User-Agent (hashed), referrer (source attribution)
• Feedback form: Email (optional), title, content, category

2. Purpose

• Send monthly ETF analysis and weekly macro emails
• Respond to feedback and improve service
• Anonymous traffic analytics

3. Retention period

• Subscribers: Immediately deleted upon unsubscribe. Unsubscribe
• Feedback: Kept 1 year after response, then deleted
• Access logs: 3 months (per Korean Telecommunications Privacy Act)

4. Third-party sharing

The Company does not share personal information with third parties, except as legally required.

5. Subprocessors

• Supabase Inc. (USA) — database hosting
• Vercel Inc. (USA) — web hosting · CDN
• Resend Inc. (USA) — email delivery (subscribers only)

All subprocessors are GDPR · CCPA compliant with standard DPAs.

6. Your rights

Data subjects may at any time:

• Request access
• Request correction or deletion
• Request processing suspension
• Unsubscribe (effective immediately)

How: email the contact below → action within 7 business days.

7. Privacy officer

8. Security measures

• HTTPS encryption (TLS 1.3)
• Supabase Row-Level Security (RLS)
• No plaintext storage of credentials
• 2FA on admin accounts

9. Policy updates

Material changes will be announced on this page at least 7 days in advance. Major changes will also be emailed.