Privacy
This page explains what personal data KWI collects when you read our site, sign in or subscribe, why, how long we keep it, who handles it for us, how we protect it and how you can use your rights. It follows the headings Korea’s Personal Information Protection Act asks a privacy policy to cover.
1. Who is responsible
Korea Wind Intelligence (“KWI”). Privacy officer and the contact for access, correction and deletion requests: KWI Operations Team, insights@koreawindintel.com.
2. What we collect, why and how long we keep it
| Data | Why | Kept |
|---|---|---|
| Email address, and your name when you subscribe | Sign in, account, subscription | While your account exists |
| Sign-in session on projects.koreawindintel.com | Keep you signed in | 14 days |
| Subscription and purchase record on our server: your email address, plan, status, billing period dates, amounts, and Polar subscription and order IDs | Give you access, support, accounting, payment disputes | As long as the law requires us to keep payment records |
| Download record: time, file, and a one-way hash of your email | Enforce the daily limit and handle payment disputes | 180 days |
| Newsletter subscription and delivery data | Send the newsletters you chose | Until you unsubscribe |
| Web server logs: IP address, browser type, page requested, time | Security and fixing faults | 14 days |
| Backup copies of the records above | Recover from a failure | 14 daily copies on our server, and an off-server copy kept up to 30 days. Older copies are deleted automatically |
| Site usage statistics | Understand how the site is used | Aggregated, without cookies |
We do not see or store your card details, and we do not collect government ID numbers. Payment is handled by Polar Software, Inc. and its payment processor. The service is not directed to children under 14, and we do not knowingly collect their data.
3. How we destroy data
Electronic records are deleted from our databases and file storage when the retention period ends or when you ask us to delete them. Backups roll off on the schedule above, so a deletion reaches every copy within 30 days. We keep no paper records. Records the law requires us to keep, such as payment records, are kept for that period only and then deleted.
4. Who processes data for us
| Provider | Task |
|---|---|
| Ghost | Membership, sign-in and newsletters |
| Polar Software, Inc. and Stripe | Payments, invoices and taxes. Polar is the merchant of record, so it also handles your payment data under its own buyer terms |
| Google Cloud | Hosting of our servers, in the Seoul region |
| Plausible | Site usage statistics |
| Telegram | Alerts to the operator about payments and system faults. Email addresses in alerts are partly masked |
We do not sell personal data. We do not give it to other third parties, except where the law requires.
5. Where data is processed
Some providers process data outside South Korea. Our own servers run in Seoul.
6. Your rights and how to use them
You can ask to see, correct or delete your data, to have us stop processing it, or to withdraw consent, by writing to insights@koreawindintel.com. We reply within 10 days, and we may need to confirm that the request comes from the owner of the email address. Deleting your account does not remove records we must keep by law, such as payment records. Data held by Polar and Stripe is also governed by their own policies, and you can ask them directly. If you decline to give us an email address you cannot sign in or subscribe.
7. How we protect data
- Only the operator of KWI has access to our servers and records. The web server’s administration port is reachable only through a Google-authenticated tunnel, not from the open internet.
- The site is served over HTTPS. Sign-in sessions use random identifiers that are stored on the server and expire after 14 days.
- Payment notifications from Polar are accepted only when their signature is valid. Access lists we publish to the web server are digitally signed and use a one-way hash of your email address instead of the address.
- Card data never reaches our servers.
- Stored data on Google Cloud is encrypted at rest by Google by default. Our backups are checked for integrity, and we monitor the servers and get alerts when something fails.
8. Cookies
Signing in on koreawindintel.com and on projects.koreawindintel.com uses cookies that are needed for the service to work. We do not use advertising cookies. You can refuse or delete cookies in your browser settings, but then you cannot stay signed in.
9. If you think your rights were infringed
You can write to us first. You can also contact these bodies: the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Korea Internet & Security Agency Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Supreme Prosecutors’ Office (spo.go.kr, 1301), and the National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).
10. Changes
The date at the top shows the latest version. If a change affects how we use your data, we will tell you before it takes effect.