Privacy Policy
Effective: April 15, 2026
This is a translation for reference. Only the Korean version has legal effect.
1. Personal information collected
| Item | Purpose | Retention |
|---|---|---|
| Email, password (hashed) | Member identification, login | Deleted upon withdrawal |
| Nickname, profile image | Display in service | Deleted upon withdrawal |
| Phone (KR/VN) | Identity verification, scam DB lookup | Deleted upon withdrawal |
| CCCD number (hashed) | Vietnamese identity verification | Hash only; original not stored |
| Location (district) | Nearby listings | Deleted on edit/withdrawal |
| Chat content | Trade mediation, dispute evidence | Auto-deleted after 3 years |
2. Processing principles
- Passwords are stored as bcrypt hashes; originals are never kept
- CCCD numbers are stored only as SHA-256 hashes
- All traffic is encrypted with HTTPS (TLS 1.3)
- Sensitive data (tokens, etc.) is stored in encrypted storage
3. Third-party disclosure
We do not provide personal information to third parties without consent. Exceptions:
- Requests under law (investigative agencies, etc.)
- Service-providing entrustment (cloud hosting, translation API)
4. Processing entrustment
| Processor | Scope |
|---|---|
| Google Cloud | Translation API, Maps API |
| Cloudflare | Image storage (R2) |
| Anthropic | AI listing analysis, CS chatbot |
| Firebase | Push notifications |
5. User rights
- Access: check your information on My Page
- Update: edit information from your profile
- Delete: all personal info is deleted upon account withdrawal
- Object: contact corecodemanager@gmail.com
6. Cookies
We use cookies to improve your experience. You can block cookies in your browser settings, but some services may not work properly.
7. Privacy officer
Email: corecodemanager@gmail.com
Please contact the email above for any privacy-related questions or complaints.
This privacy policy takes effect from April 15, 2026.