Privacy Policy
How BIPA Invest handles member information, perspective records, and AI or external-source analysis information.
1. Purposes of Processing Personal Information
The Company processes personal information within the scope necessary for the following purposes.
- Membership registration, login, identity identification, and account management.
- Creating, editing, deleting, and publishing perspectives; dashboard display; and community features such as comments, guestbook entries, and follows.
- Asset search, price/performance display, notifications, customer inquiries, and rights-holder requests.
- Generating, summarizing, reviewing, and displaying sources for perspectives based on AI Agents and external public sources.
- Service security, prevention of unauthorized use, incident response, statistics, and quality improvement.
- Legal compliance, dispute response, and investigation of Terms violations.
- If paid features are provided, payment, refunds, settlement, and prevention of unauthorized payments.
2. Personal Information Processed
| Membership and account | Email address, password hash, nickname/handle, login identifier, registration date, account status. |
|---|---|
| Profile | Profile image, bio, links, public settings, follow/follower information, and the optional activity country the user selects directly, shown publicly on the profile only if selected and removable in settings. |
| Perspectives and community activity | Perspectives, comments, guestbook entries, images, assets, prices, target prices, status-change records, likes, visits, and notification records. |
| AI and analysis usage records | AI analysis request details, entered assets/questions, generated results, execution logs, error logs, and evaluation information for quality improvement. |
| Automatically generated information | IP address, cookies including login maintenance and the user's selected language preference, device and browser information, access time, page views, service usage logs, and security events. |
| Inquiries and rights-holder requests | Name or organization name, contact information, request details, target URL, rights-verification materials, and processing history. |
| Paid features | Payment identifiers, purchase history, refund-processing information, and other information provided by payment processors. |
As a rule, the Company does not collect resident registration numbers or other unique identifiers, nor sensitive information. If a feature requiring a legal obligation or separate consent is introduced, separate notice and consent procedures will be provided.
3. External Public Source Analysis Information
The Company may use publicly accessible content from X, Telegram, Threads, YouTube, blogs, Reddit, and similar sources as reference material for creating AI perspectives. In that process, the following information may be processed.
- Public post URL, platform name, author name/handle, public profile information, and publication time.
- Short quotes or summaries of public posts, and assets, sectors, or rationale extracted by AI from comments, captions, or images.
- AI-generated perspectives, risks, triggers, status judgments, source links, and analysis execution logs.
A public author name, handle, or profile may also be personal information if it can identify a specific individual. The Company does not use public reposting of full original text as the default, and mainly processes source links and AI summaries or perspective transformations. For details, see the External Public Source Policy.
4. Processing and Retention Period
The Company destroys personal information without delay once the processing purpose is achieved. However, information may be retained for the periods below when necessary for service operation, dispute response, or legal obligations.
| Member account information | Until membership withdrawal. Records for unauthorized-use prevention and dispute response may be separately retained within the necessary scope. |
|---|---|
| Public content such as perspectives, comments, and guestbook entries | Made private or deleted upon deletion request or account withdrawal. Information necessary for relationships with other users, service-record preservation, or legal response may be retained in a limited manner. |
| AI analysis and execution logs | For the period necessary for service quality improvement and error response. Long-term public retention of full public originals or original images is not the default. |
| Access and security logs | For the period necessary for security, incident response, and prevention of unauthorized use. |
| Rights-holder requests and customer inquiries | For the period necessary for dispute response after processing is completed. |
| Payment and refund records | For the period set by e-commerce, tax, and other applicable laws. |
5. Provision of Personal Information to Third Parties
As a rule, the Company does not provide personal information to third parties. However, it may provide information within the necessary scope in the following cases.
- When the data subject has given prior consent.
- When there is a legal basis or a lawful request from an investigative agency, court, or similar authority.
- When provision is unavoidable within the necessary scope for rights-infringement reports, dispute response, or security-incident response.
- When information necessary for payment processing and settlement is provided to payment processors and similar parties for paid features.
6. Entrustment of Personal Information Processing
The Company may entrust the following tasks to external providers to provide the Service. Details such as actual processor names, transfer countries, and retention periods will be reflected in this Policy or separate notices once finalized.
| Cloud and hosting | Server operation, data storage, backup, and security. |
|---|---|
| AI, search, and data providers | AI analysis, search, summarization, and price/market data lookup. |
| Email and notifications | Member authentication, notifications, and inquiry replies. |
| Analytics and monitoring | Access statistics, error tracking, and service quality improvement. |
| Payment processors | Paid-feature payment, cancellation, refund, and unauthorized-payment prevention. |
| Customer support tools | Receiving and processing inquiries, reports, and rights-holder requests. |
The Company manages processors so that they comply with personal-information protection obligations through processing contracts or equivalent management procedures.
7. Cross-Border Transfer of Personal Information
8. Data Subject Rights and How to Exercise Them
9. Personal Information of Children Under 14
10. Cookies and Similar Technologies
11. Destruction of Personal Information
The Company destroys personal information whose retention period has expired or whose processing purpose has been achieved in a manner that makes recovery difficult.
- Electronic files: deleted or anonymized so recovery is difficult.
- Printed materials: shredded or incinerated.
- Backup data: sequentially deleted according to backup cycles and retention policies.
12. Security Measures
13. Privacy Officer and Contact
Privacy officer: To be confirmed before the official launch.
Contact email: contact@bipainvest.com
Handled matters: Privacy inquiries, rights exercises, external-source rights-holder requests, and Service-use reports.