01Inquiries Regarding Personal Information
The WAPE Privacy Officer handles inquiries, grievance processing, and requests for the exercise of rights such as access, correction, deletion, and suspension of processing regarding personal information. Contact: privacy@wapeb.com.
We process personal information within the necessary scope based on lawful grounds, such as user consent, service provision/fulfillment, or legal obligations.
02Purpose and Items of Personal Information Processing
We process the following information during member registration, login, and service use for all services provided free of charge. You may decline to consent to the collection and use of mandatory information, but features requiring an account may be restricted. For visitors who are not logged in, access information and in-device settings may be processed for service provision and security purposes.
| Category | Processed Items | Purpose of Use |
|---|---|---|
| Member Management | Email, password hash, email verification/password reset records, nickname, and profile icon. Names, mobile numbers, and country codes provided by existing members during previous registrations are used for managing existing accounts; when signing up with a new email, names, mobile numbers, and country codes are not collected. When signing up or logging in via Google, Google account names may be collected according to the Google login items below. | Member registration, email verification, account identification, login, member information management, and service notifications. |
| Google Login (Optional) | Google account unique identifier, email, email verification status, Google account name (if provided), connection time, and temporary authentication request identifier. | Google login, registration and linking of existing accounts, and display of names in My Information. Google account names are not verified real-name information and are not automatically applied to public chat nicknames. Names and linking information are deleted upon account withdrawal, and temporary authentication requests are deleted within a maximum of 24 hours and 15 minutes. |
| Service Usage | Account/login identification information, access IP and converted identifier, access/login time, screens used, error/connection status, and watchlists and personal settings. | Maintaining login status, account protection, prevention of fraudulent use, personalization features, and service stability management. |
| Consent and Usage Permissions | Consent status/time/document version, service usage rights, and change history. | Confirmation of consent, management of usage permissions, and responding to inquiries. |
| Paper trading | Nickname, profile icon, mock orders/executions/holdings, virtual assets/profit and loss, league participation/rankings, and experience points/levels/titles and related records. | Provision of mock investment, aggregation of assets/returns/rankings, awarding of titles, error correction, and prevention of fraudulent use. |
| Stock search | Stock codes selected in search results, selection time, and cookie-based pseudonymous visitor identification values. A maximum of 10 recent search items are stored in the browser. | Display of recent searches, aggregation of popular stocks and co-searched items, and prevention of duplicate counting and fraudulent use. We do not store full search terms being entered in popular search aggregations, and only the aggregated results per stock are displayed on public screens. |
| Customer Inquiries | Inquirer's email address and account identification information (if applicable), inquiry category, subject, content, responses, and information provided directly by the user in the inquiry. | Email and 1:1 inquiries, grievance handling, and responses to the exercise of rights. |
03Personal Information Processing for Free Services and Optional Features
All WAPE services are free and will not be converted into paid services. We do not charge usage fees or subscription fees, and we do not provide payment method registration or automatic billing. We do not collect payment information for service use.
We do not provide features to link securities accounts or view holdings, quantities, or valuation information from actual brokerage accounts. We do not request or collect authentication information or connection passwords for such purposes. Mock trading is a virtual transaction not connected to actual brokerage accounts, and Google Login is an optional feature for member authentication.
AI analysis uses market data, news/disclosures, and information on the stocks being analyzed. The name, mobile number, email, and password entered during registration are not used as AI analysis data. Receipt of promotional information is distinguished from mandatory sign-up consent and, if necessary, separate consent is obtained.
04Retention Period and Destruction of Personal Information
Personal information is destroyed without delay once the purpose of processing is achieved or the member withdraws. Information subject to retention obligations under the law is stored separately for the required period. Electronic information is deleted in a manner that makes recovery difficult, and backups are deleted according to retention and replacement procedures.
Inquiry content is retained for response verification and follow-up processing, and information is deleted once processing is complete and retention is no longer required. The following periods apply to items subject to legal retention, such as records of consumer complaints or disputes.
| Information | Retention Criteria |
|---|---|
| Member information, personal settings, registration consent, and mock investment records. | Deleted upon member withdrawal. Statutory retention periods apply where applicable. |
| Login information | Valid for up to 30 days after issuance depending on the session type. 24 hours if 'Keep me logged in' is selected. Discarded upon logout or account deletion. |
| Operational visit logs | Up to 31 days |
| Subscription restrictions and email verification identification information. | Hash values of emails, access IPs, verification codes, and request tokens, along with their transmission and attempt logs, are deleted within a maximum of 24 hours and 15 minutes. Verification codes are valid for 10 minutes, and the time of verification completion is retained until account deletion. Password reset links can be used only once within 30 minutes, and the hash values of emails, access IPs, and tokens, account identifiers, fingerprints of password hashes, and transmission and usage logs are deleted within a maximum of 24 hours and 15 minutes. |
| Selection history for popular search aggregation | Aggregated based on records from the last 24 hours, and records older than 48 hours are deleted every hour. Visit identification cookies are retained for up to 30 days after issuance. |
| Recent search and non-member experience records stored in the browser | This history is deleted when you delete individual or all recent searches, reset your experience, or clear site data from your browser. |
| Records of consumer complaints and dispute resolution. | 3 years · Records as required by the E-Commerce Act |
05Outsourcing of personal information processing
To provide stable services, the operator entrusts part of its personal information processing tasks to external specialized companies. Entrusted tasks are limited to the scope necessary for service operation, and we manage and supervise the entrustee to ensure personal information is not used for purposes other than those entrusted.
The operator manages necessary matters such as access control, protective measures, and storage/destruction for the safe processing of personal information. Inquiries regarding the outsourcing of personal information processing tasks can be directed to the WAPE Privacy Officer (privacy@wapeb.com).
06Domestic storage and overseas processing of personal information
The primary storage location for member information is Seoul, South Korea. However, domestic storage does not mean that all personal information is processed domestically. Connection information and personal information included in requests may be processed abroad during the provision of web services, security, and external connection processes.
Cross-border transfers require a legal basis. The operator will disclose or individually notify users of statutory matters, including the items transferred, country, timing and method, recipient and contact information, purpose, retention period, and how to opt out, and will obtain separate consent if required. This paragraph alone does not constitute consent for cross-border transfers.
Please send inquiries and opt-out requests regarding overseas transfers to our dedicated privacy email at privacy@wapeb.com. Refusing processing necessary for service provision may limit the use of those features; specific impacts will be explained based on your request.
07Disclosure, provision to third parties, and transfer of personal information 3.
When participating in mock trading, your nickname, profile icon, ranking, level/experience points, representative title, total mock assets, profit, return rate, and the time of aggregation may be displayed on the public weekly leaderboard. The leaderboard can be viewed by non-logged-in visitors as well. Real names, mobile numbers, emails, held stocks, and detailed order history are not displayed on the public leaderboard. Please do not include information you do not wish to disclose, such as contact details, in your nickname.
The operator does not sell member personal information. In cases where provision to a 3rd party is required beyond the aforementioned disclosure and outsourcing, we will process it within the necessary scope based on user consent or legal grounds. We will provide information regarding the recipient, purpose, items, and retention period in accordance with applicable laws.
When transferring personal information due to business transfer or merger, we will notify you in advance of the transfer, the name, address, and contact information of the new personal information processor, and how users who do not wish to have their information transferred can take action. The recipient must also use the information within the scope of the original purpose.
08Operation and refusal of automatic collection devices such as cookies
We use cookies and browser storage to maintain logins, aggregate visits and popular searches, and manage personal settings. Screen layout, themes, display currency, notification settings, some notification history, recent search lists, and non-member experience records such as mock investments, quizzes, and titles may be stored on your device. Recent searches can be deleted from the search screen, and non-member experience records can be deleted using the experience reset function.
You can delete or block cookies and stored information in your browser's privacy or site data settings. Blocking them may limit your ability to stay logged in and save personal settings. Please log out after using public devices.
09Rights of data subjects and personal information protection measures
Users may request access to, correction of, deletion of, or suspension of the processing of their personal information, and may withdraw their consent. Please make requests via our dedicated privacy email at privacy@wapeb.com or through My Page under 1:1 Inquiry. Email inquiries can be made without logging in, while writing inquiries and checking responses under 1:1 on My Page requires a login. Requests may also be made through a legal representative, and we may request the minimum information necessary to verify the identity of the user or the representative. If a request is restricted by law, we will inform you of the reason and subsequent procedures.
The operator protects personal information through password protection, encrypted communication, access control, and management of personnel handling personal information. Access to personal information is limited to the scope necessary for business purposes.
We do not provide membership registration for children under 14 years of age. If we confirm such a case, we will take necessary protective measures, such as account processing and deletion of personal information. AI market analysis is not a feature that evaluates an individual member's credit or qualifications.
10Department responsible for personal information processing
Inquiries regarding personal information protection, grievance handling, and requests for the exercise of rights such as access, correction, deletion, or suspension of processing are accepted by the department below. Requests will be processed in accordance with the deadlines and procedures of relevant laws, and we may request the minimum information necessary to verify your identity or that of your authorized representative.
Email inquiries can be made without logging in. You can also submit inquiries via 1:1 in My Page. Please do not include unnecessary sensitive information such as passwords, verification codes, or full card numbers when making inquiries.
| Category | Content |
|---|---|
| Department | WAPE Privacy Officer |
| Dedicated email | privacy@wapeb.com |
| Responsibilities | Inquiries regarding personal information, grievance handling, and receipt of data subject rights exercises |
11Remedies for infringement of rights
If you require external consultation or damage relief regarding the operator's personal information processing results, you may check the Personal Information Portal for guidance on exercising data subject rights, reporting personal information infringements, or the dispute mediation procedures of the Personal Information Dispute Mediation Committee. Procedures by external agencies are conducted according to their respective submission requirements.
12Changes to the Privacy Policy
The initial effective date is 2026/9/9, and the last revision date is 2026/10/26. This revision removes the previous notice regarding securities account linking, which is no longer provided, and includes guidance on browser storage, aggregation items, and retention standards for stock searches. We will provide advance notice of significant changes and their effective dates, and obtain separate consent if necessary. Simply revising the document does not alter the consent records of existing members.