Privacy Policy

Effective: 17 September 2026 · Last amended: 5 October 2026 (the account deletion and retention section takes effect on 12 October 2026)

1. What we collect

• Account — email, name, password (stored only as an irreversible hash). Phone is optional.
• Business — trade name, business registration number, industry, fiscal year start.
• Automatically — IP address, access time, browser/device, session id, usage and audit logs.
• Google sign-in — email and name only; we never receive your Google password.
• Payment — handled by PortOne. We do not store card numbers, expiry dates or CVC; only a payment id, timestamp, amount and a billing key for recurring charges.

2–3. Purposes and retention

Account management, service delivery, billing, security and support. Data is deleted promptly on account closure, except: 30 days recovery window after a company withdrawal (deleted immediately on request); contract and withdrawal records, payment and supply records — 5 years; consumer complaint records — 3 years; advertising records — 6 months; access logs — 3 months. These periods follow Korean law.

Account deletion (in the app under Sessions → Delete account, or by email — see how to delete your account) erases your name, email, phone, password, two-factor data and Google link immediately, with no recovery window, and ends all sign-ins and memberships. Company books you entered are the company’s accounting records and are not deleted with your account: books and evidence are kept for 5 years from the filing deadline under Korean tax law, and commercial books for 10 years under the Commercial Act, with your name shown as “Deleted user”. The books themselves are destroyed after the retention period following the company owner’s withdrawal request.

4. Disclosure to third parties

We do not disclose personal data to third parties, except with prior consent or where required by law. Where a lawful request is received we review its validity and, unless prohibited, notify the affected User.

5–6. Processors and international transfers

Railway (hosting, US), Cloudflare (delivery, US and others), PortOne (payments, Korea), Resend (email, US), Sentry / Functional Software (error monitoring, US), Anthropic (in-product AI assistance, US). Contact details for their data protection officers are available on request. You may refuse international transfer, although this may limit use of the Service.

7–8. Deletion, and data you enter about others

Data is destroyed irrecoverably within 5 days of its purpose ending; statutory records are stored separately. For personal data of counterparties and employees that you enter, you are the controller — you are responsible for a lawful basis and notice — and the Company processes it only on your instructions.

9. Security measures

Irreversible password hashing; HTTPS with HSTS; row-level security so one company's books cannot be read from another, verified continuously by automated checks; immutable audit logs; two-factor authentication, session limits, lockout and rate limiting; and scrubbing of amounts, names and descriptions before any error is sent to monitoring — done by the shape of the value rather than an allow-list, so new fields are removed by default. Backups are taken and their restorability is tested automatically.

10. Cookies

Only a session cookie, set HttpOnly and Secure. No third-party advertising or tracking cookies.

11–12. Your rights and contact

You may request access, correction, deletion, suspension of processing, and export of your books. Requests are handled within 10 days, made through the in-service contact form or by email at [email protected]. Privacy officer: the name will be published with the operator details; privacy enquiries: [email protected]. To report a privacy infringement you may also contact the Korea Internet & Security Agency (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office cybercrime unit (spo.go.kr, 1301) or the Korean National Police Agency cyber bureau (ecrm.police.go.kr, 182).

13-16. Children, automated decisions, pseudonymised data, marketing

The Service is a bookkeeping tool for businesses and is not directed at children under 14; we do not knowingly collect their data and delete it without delay if we learn of it. We make no solely automated decisions that significantly affect you: account suggestions, transaction classification and rule-based entries are proposals that you must confirm before anything reaches your books. We do not process pseudonymised data. Operational email (verification codes, payment results, filing deadlines, policy changes) is not marketing; marketing email is sent only with prior opt-in consent, marked "(광고)", with an unsubscribe method, and you may withdraw consent at any time.

17. Changes

Changes are posted at least 7 days in advance, or 30 days with email notice where they materially affect your rights.