[Required] Privacy Policy

[Privacy Policy] TetherDrop (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to handle related grievances promptly and smoothly. Article 1 (Purpose of Processing Personal Information) The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following. If the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented. 1. Membership Registration and Identity Verification - Identification of members and verification of eligibility to provide services via email, UID, etc. 2. Provision of Referral-based Rewards and Inquiry of Details - Verification and settlement of the user's transaction reward details through partner exchange UID and API integration. 3. Notice Regarding Use by Minors - This Service is designed for adults, and minors under the age of 19 should refrain from using the Service. - The Company does not operate a formal age verification process. If a minor enters false information or uses the service without authorization, the responsibility lies with the user or their legal guardian. 4. Handling of Complaints and Delivery of Notices - Responding to inquiries, processing complaints, and notifying changes to terms and policies. 5. Service Utilization Analysis and Improvement - Improving service quality and responding to errors through access records, device information, etc. 6. Detection and Prevention of Fraudulent Use - Detection and confirmation of fraudulent activities such as creating multiple accounts or improperly claiming rewards through device identification information, access information, etc., and taking measures accordingly Article 2 (Items of Personal Information Processed) The Company processes the following personal information items: 1. Mandatory Collection Items - Email address, Exchange UID 2. Automatically Generated/Collected Items - IP address, browser type and version, access date and time, device information (including identifiers derived from browser and device characteristics), cookies, etc. 3. Information Collected During Exchange API Integration - Reward details collected via API, transaction reward information based on UID (However, specific asset/transaction details of the user's account are not stored) Article 3 (Processing and Retention Period of Personal Information) The Company processes and retains personal information within the period of retention and use of personal information in accordance with laws or the period agreed upon when collecting from the data subject. - Membership Registration Information: Until membership withdrawal - API Integration Information: Until membership withdrawal - Device identification information for fraud detection: 3 years from the date of collection - When preservation is required by relevant laws, in accordance with such laws (e.g., Article 6 of the Act on Consumer Protection in Electronic Commerce, etc.) Article 4 (Provision of Personal Information to Third Parties) The Company does not provide the personal information of data subjects to third parties, except in the following cases: 1. When separate consent is obtained from the data subject 2. When there are special provisions in the law 3. When an investigative agency requests submission in accordance with the law Article 5 (Entrustment of Personal Information Processing and Cross-border Transfer) ① For the smooth provision of services, the Company entrusts the processing of personal information as follows, and as the trustees are located overseas, personal information is transferred abroad. 1. FingerprintJS, Inc. (United States) - Items transferred: Browser and device characteristic information, IP address - Entrusted work (purpose of use): Device identification and fraud detection - Retention and use period: Until termination of the entrustment contract 2. Google LLC (Google Analytics) (United States) - Items transferred: Service usage records, access information - Entrusted work (purpose of use): Analysis and improvement of service usage - Retention and use period: Event data for 2 months from the date of collection; user data for up to 14 months from the date of last activity 3. Functional Software, Inc. (Sentry) (United States; data stored in the EU) - Items transferred: Access and device information at the time an error occurs - Entrusted work (purpose of use): Error tracking and improvement of service stability - Retention and use period: 30 days from the date of collection ② The transfer takes place over the information and communications network at the time of service use. The Company takes the measures necessary to ensure safety in accordance with relevant laws, and the data subject may refuse the cross-border transfer through the contact in Article 6. However, if you refuse the cross-border transfer, use of all or part of the service may be restricted. Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them) Data subjects may exercise the following rights related to personal information protection at any time: 1. Request to access personal information 2. Request for correction in case of errors, etc. 3. Request for deletion 4. Request for suspension of processing 5. Request for API disconnection and information deletion Rights can be exercised by writing or emailing the Company (support@tetherdrop.io), and the Company will take action without delay. Article 7 (Procedure and Method of Destruction of Personal Information) The Company destroys the personal information without delay when the personal information retention period has expired or the purpose of processing has been achieved. The procedure and method are as follows: 1. Destruction Procedure - Information entered by the user is stored in a separate DB or destroyed immediately after the purpose is achieved, and is deleted after storage for a certain period according to internal policies and relevant laws. 2. Destruction Method - Electronic file format: Permanent deletion using technical methods that cannot be restored. - Printed materials: Shredding or incineration. Article 8 (Measures to Ensure the Safety of Personal Information) The Company takes the following measures to ensure the safety of personal information: - Restriction of access and management of personal information - Encrypted storage of important information such as passwords - Intrusion prevention systems and server access control - Regular security checks and operation of vaccine programs Article 9 (Personal Information Protection Officer) The Company designates a Personal Information Protection Officer to take overall responsibility for personal information processing and to handle inquiries and complaints from data subjects related to personal information processing. - Personal Information Contact Contact : support@tetherdrop.io Article 10 (Operation and Rejection of Cookies) The Company may use cookies for the convenience of the user's service use. Users can refuse or delete cookie storage in their web browser. Article 11 (Amendment of Privacy Policy) Details may change due to changes in relevant laws or internal company policies. In case of changes, a notice will be made through the website. This Privacy Policy shall take effect on July 18, 2026. - The previous version (effective June 17, 2025) is available upon request to the Company.