Draft — pending legal review

Privacy Policy

Last updated: September 17, 2026

This document is a working draft describing how VisaSync Korea ("VisaSync Korea," "we," "us") actually handles data in the current product. It is provided for transparency to early users and is not yet a final, attorney-reviewed policy — it should be reviewed against Korea's Personal Information Protection Act (PIPA) and, for visitors outside Korea, any applicable local data-protection law (e.g. GDPR) before public launch.

1. What we collect

Depending on which form you submit, we collect:

• Contact details: full name, email address, phone number.
• Context you provide: target district, visa status, income/budget ranges, business or investment details, and free-text descriptions of your situation.
• For Contract Review and Workplace Dispute submissions: your employer's name, employment dates, the amount in dispute (if any), a description of your case, and any documents you upload (e.g. contracts, payslips, correspondence — PDF, PNG, or JPEG).
• For partners (Nomusas / professionals): your login email and, once you claim a lead, an auditable log of that action.

We do not knowingly collect payment card details directly — card payments (for partner credit purchases) are handled by Stripe; see §5.

2. How we use your information

• To route your inquiry to a verified partner professional (realtor, attorney, tax advisor, Nomusa, etc.) who has unlocked it.
• To generate short-lived, secure download links for uploaded documents, issued only to the partner who has claimed the associated case.
• To operate the platform: authentication, fraud/abuse prevention, and service communications.
• To maintain compliance records for the Certified Public Labor Attorney (공인노무사) referral flow, including a timestamped consent record.

We do not sell your personal information. We do not use your case details to train third-party AI models.

3. Who can see your information

Before a partner "claims" (pays credits to unlock) your inquiry, your name, email, and phone number are masked in the partner dashboard, and case-specific details (employer name, uploaded documents, dispute description) are withheld entirely. Only after a partner claims your case do they receive your full contact details and a secure, time-limited link to any documents you uploaded. Uploaded files are stored in a private location and are never publicly accessible — every download is authenticated and logged.

4. Where your data is stored

Application data and uploaded files are hosted by Supabase, our database/storage/authentication provider. Depending on your Supabase project region, data may be processed and stored outside your home country. By using the platform you consent to this international transfer for the purpose of providing the service.

5. Third-party processors

• Supabase — database, file storage, and authentication.
• Stripe — payment processing for partner credit purchases. Stripe receives payment details directly; VisaSync Korea does not store full card numbers.
• Resend — transactional email delivery.

Each provider processes data under its own privacy terms and applicable data-processing agreements.

6. Cookies and local storage

We use your browser's local storage to remember your language preference (English/Korean). We do not currently use tracking or advertising cookies. If analytics or marketing pixels are added later, this policy will be updated first.

7. Data retention

We retain inquiry data for as long as reasonably necessary to provide the referral service and to meet compliance and bookkeeping obligations. You may request deletion at any time (§8).

8. Your rights

You may request access to, correction of, or deletion of your personal information, or ask us not to route a specific inquiry further, by emailing privacy@visasynckorea.com. We will respond within a reasonable time.

9. Contact

Questions about this policy: privacy@visasynckorea.com. [Company legal name and Korean business registration number to be added once incorporation is complete.]