Privacy Policy (Global Version)

Article 1 (Purpose)

NewChat (hereinafter referred to as "Company" or "we") establishes this Privacy Policy (hereinafter referred to as "Policy") to protect the personal information of individuals (hereinafter referred to as "Users" or "you") who use the services provided by the Company (hereinafter referred to as "Services"), in compliance with applicable data protection laws and regulations, and to ensure swift and proper handling of privacy-related concerns.

Article 2 (Principles of Personal Information Processing)

In accordance with applicable privacy laws and this Policy, the Company may collect users' personal information. Collected personal information may be shared with third parties only with your explicit consent, except where required by law or legal obligations.

Article 3 (Disclosure of this Policy)

1. The Company makes this Policy easily accessible to users through our website homepage or connected screens so that users can review this Policy at any time.
2. The Company uses appropriate formatting, including font size and colors, to ensure users can easily review this Policy.

Article 4 (Changes to this Policy)

1. This Policy may be revised in accordance with changes in applicable privacy laws, regulations, or Company service policies.
2. When revising this Policy, the Company will notify users through one or more of the following methods:
   a. Notice through our website homepage or through a separate notification
   b. Direct notification to users via email or similar communication methods
3. Notice will be provided at least 7 days prior to the effective date of Policy changes. For significant changes affecting user rights, notice will be provided at least 30 days in advance.

Article 5 (Information for Account Registration)

The Company collects the following information for user account registration:

1. Required Information: Email address, password, username/nickname, date of birth, and phone number
2. Optional Information: Profile picture

Article 6 (Information for Identity Verification)

The Company collects the following information for identity verification:

1. Required Information: Phone number and email address

Article 7 (Information for Service Provision)

The Company collects the following information to provide our Services:

1. Required Information: User ID, email address, date of birth, and contact information
2. Optional Information: Reported chat history, reported profiles (for safety purposes)

Article 8 (Personal Information Collection Methods)

The Company collects users' personal information through the following methods:

1. Direct input by users on our website or application
2. Information provided through mobile applications and other services we provide
3. Information provided when users respond to communications sent by the Company

Article 9 (Use of Personal Information)

The Company uses personal information for the following purposes:

1. Service announcements and company operations
2. Responding to user inquiries and improving services based on feedback
3. Providing and maintaining our Services
4. Enforcing our terms of service and preventing misuse or fraudulent activities
5. Facilitating connections and relationships between users based on preferences and interests

Article 10 (Retention Period of Personal Information)

1. The Company retains users' personal information for the period necessary to achieve the purposes for which it was collected.
2. Service misuse records may be retained for up to 1 year after account termination to prevent fraudulent registration and use.

Article 11 (Legal Retention Requirements)

The Company may retain personal information as required by applicable laws, including:

1. Consumer Protection Laws: Contract records (5 years), payment records (5 years), complaint records (3 years)
2. Communications Laws: Website log data (3 months)
3. Financial Transaction Laws: Electronic transaction records (5 years)
4. Location Information Laws: Location data records (6 months)

Note: Specific retention periods may vary based on local jurisdiction requirements.

Article 12 (Data Deletion Principles)

The Company will promptly delete personal information when it is no longer needed for the purposes for which it was collected or when the retention period has expired.

Article 13 (Data Deletion Procedures)

1. Information entered for account registration will be transferred to secure storage after the processing purpose is achieved and will be stored for the required period before secure deletion.
2. The Company destroys personal information through approval procedures by the data protection officer.

Article 14 (Data Deletion Methods)

The Company deletes personal information stored in electronic format using secure technical methods that prevent data recovery. Physical documents are destroyed through shredding or incineration.

Article 15 (Marketing Communications)

1. The Company will obtain explicit consent before sending promotional communications via electronic means.
2. Users may opt out of promotional communications at any time, and we will honor such requests promptly.
3. We will not send promotional communications during restricted hours (9 PM to 8 AM) without additional consent.
4. All promotional communications will clearly identify:
   a. Company name and contact information
   b. Clear opt-out instructions
5. We will not engage in deceptive practices regarding promotional communications.

Article 16 (Children's Privacy Protection)

1. Our Services are intended for users aged 19 and above to protect the privacy of minors.
2. If we discover that a user is under the minimum age requirement, we will obtain verifiable parental consent before collecting any personal information.
3. For users under the minimum age, we may collect additional information from parents or legal guardians.

Article 17 (Access and Control of Personal Information)

1. Users and legal guardians may access, modify, or request deletion of their personal information at any time.
2. To exercise these rights, users may contact our data protection officer through the contact methods provided below, and we will respond promptly.

Article 18 (Data Correction)

1. Users may request correction of inaccurate personal information.
2. We will not use or share personal information until corrections are completed. If incorrect information was already shared with third parties, we will notify them of the corrections.

Article 19 (User Responsibilities)

1. Users must keep their personal information accurate and up-to-date. Users are responsible for problems arising from inaccurate information.
2. Using another person's personal information for registration may result in account termination and legal consequences.
3. Users are responsible for maintaining the security of their email addresses, passwords, and account information.

Article 20 (Company's Data Security)

The Company implements appropriate technical and administrative safeguards to protect users' personal information from loss, theft, leakage, alteration, or damage.

Article 21 (Processing of Deleted Information)

Personal information deleted at user or legal guardian request will be processed according to our retention policies and will not be accessible or used for other purposes.

Article 22 (Password Security)

User passwords are stored using one-way encryption. Personal information access and changes can only be made by users who know their passwords.

Article 23 (Security Measures)

1. The Company employs security measures to prevent personal information leakage or damage from hacking, computer viruses, and other network intrusions.
2. We use updated security software to prevent data leakage or damage.
3. We utilize intrusion prevention systems to maintain security.
4. Sensitive personal information is transmitted securely using encrypted communication methods.

Article 24 (Data Processing Minimization)

The Company limits personal information processing staff and provides regular training on legal compliance and internal policies.

Article 25 (Data Breach Notification)

In the event of a personal information breach, the Company will promptly notify affected users and relevant authorities, including:

1. Types of personal information affected
2. Time of the breach occurrence
3. Steps users can take to protect themselves
4. Company response measures
5. Contact information for user support

Article 26 (Alternative Notification Methods)

When direct user notification is not possible, the Company may provide notice through website posting for at least 30 days.

Article 27 (International Data Transfers)

1. The Company will not enter into international agreements that violate applicable data protection laws.
2. Personal information transfers outside your country of residence require user consent, except when disclosure is made according to legal requirements.
3. For international transfers, we will notify users of:
   a. Types of personal information being transferred
   b. Destination country and transfer details
   c. Recipient information and contact details
   d. Purpose and retention period for the transfer
4. We implement appropriate safeguards for international data transfers as required by law.

Article 28 (Cookies and Tracking Technologies)

1. The Company uses cookies and similar technologies to provide personalized services. Cookies are small data files sent to your web browser and stored on your device.
2. Users can control cookie settings through their web browser options to allow all cookies, receive notifications, or block cookies entirely.
3. Blocking cookies may limit access to certain features that require login.

Article 29 (Cookie Management Settings)

You can manage cookie preferences through your web browser settings:

1. Chrome: Settings > Privacy and security > Cookies and other site data
2. Firefox: Settings > Privacy & Security > Cookies and Site Data
3. Safari: Preferences > Privacy > Cookies and website data
4. Edge: Settings > Cookies and site permissions > Cookies and site data

Article 30 (Data Protection Contact Information)

Data Protection Officer:

• Name: Hong Seungjin
• Position: CEO
• Phone: +82-10-8759-9067
• Email: newchatappservice@gmail.com

For privacy-related inquiries or to exercise your rights, please contact us using the above information.

Article 31 (Your Rights and Remedies)

1. You have the right to access, correct, delete, or restrict processing of your personal information.
2. You may file complaints with relevant data protection authorities in your jurisdiction.
3. For users in the European Union, you have additional rights under GDPR including data portability and the right to object to processing.
4. Contact our Data Protection Officer for assistance with exercising your rights.

Article 32 (Jurisdiction-Specific Rights)

For EU Users (GDPR)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

For California Users (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights

For Other Jurisdictions

Rights may vary based on local privacy laws. Contact us for information about your specific rights.

Article 33 (Contact Information)

For questions about this Privacy Policy or our privacy practices, please contact:

NewChat Privacy Team

• Support Email: newchatappservice@gmail.com
• Address: 27, Jeokgeum-ro 4-gil, Danwon-gu, Ansan-si, Gyeonggi-do, Republic of Korea

Supplementary Provisions

Effective Date: This Policy takes effect on August 22, 2025.

Updates: We will notify users of any material changes to this Privacy Policy through our usual communication channels.

This Privacy Policy is available in multiple languages. In case of conflicts between language versions, the English version will prevail.