metaTok Privacy Policy

1. Before start,

metaTok Co., Ltd. (hereinafter referred to as the 'Company') is a wallet application that can be used to send and receive communication and cryptographic security tokens (hereinafter referred to as 'virtual currency') provided by the company (hereinafter referred to as 'metaTok') and In providing all services (collectively, 'company services') related to metaTok, such as products, applications, services, and websites, information about individuals (hereinafter referred to as 'personal information') is collected.

This personal information processing policy (hereinafter referred to as ‘this policy’) explains what personal information the company collects, how it uses and provides it, and how customers can manage their personal information.

2. Scope of this policy

This policy applies to all personal information collected in connection with the company's services, regardless of country or region.

2.1. Target Services and Service Providers

This policy applies to all personal information we collect in connection with our services.

The company may apply additional provisions (collectively, 'individual policies') to individual privacy policies, terms of use, or this policy for specific services. The individual policy describes what personal information the company collects, how to use and provide it for that specific service, and other policies that apply to that specific service. On the other hand, if there is a contradiction between the individual policy and the contents of this policy, the individual policy takes precedence.

In the application of this policy, the company becomes the personal information handling manager.

2.2. Target country and region

The company handles personal information only within the scope of this policy, as long as it is permitted by laws and regulations applicable to the country or region in which the company operates (including these laws and regulations, hereinafter referred to as 'applicable law').

3. Personal information we collect

The company processes the following personal information.

Information provided by the company from customers, such as phone number registered when creating an account, and profile information set when using the service
Information on the customer's service usage status, such as the content of text, images, and videos submitted by the customer, and access logs
Information collected from a third party other than the company, such as the identifier of the external SNS account collected by the company when creating a metaTok account using an external SNS account other than the company
Customer-related information uploaded by other customers, such as a customer's own face photo image posted by a customer's friend
Information collected from outside, such as information collected through metaTok plugins such as ‘Likes’ installed in third-party applications other than the company
Public information including personal information such as online news published on the Internet

The company collects the following types of personal information in providing company services. Among this information, if the information cannot be provided for various information such as phone numbers that are essential for registration in providing company services, all or part of the company services may not be available.

3.1. Personal information we collect from customers

3.1.1. Information we collect when creating an account

When a customer starts using company services, we may ask you to provide your contact information in order to create a metaTok account (hereinafter referred to as an 'account').

For example:
To create an account, registration of a phone number is required.

When creating a customer's account, the company assigns an internal identification code (hereinafter referred to as 'internal identifier') to each customer account.

3.1.2. Information necessary for contact and transaction

When a customer wishes to use a specific service, such as a purchase, inquiry, or application, according to the nature of the transaction, the customer requests, collects and preserves necessary information for contact and transaction.

For example:
In order to contact the company regarding the request or question received from the customer, the company may request the customer's contact information such as phone number or e-mail address, the details of the grievance, etc. There is.
When a customer participates in a survey or campaign, we may request information such as name, address, phone number, e-mail address, gender, date of birth, etc. necessary for customer identification, lottery or product delivery.
When a customer has purchased a product or service, we need to be provided with information about payment. On the other hand, the company does not have a credit card number or security code because credit card payments are made by the payment agency.

3.1.4. Information about your profile, friendships, etc.

We collect information about the profile set by the customer when the customer uses the company service, and the customer's friendship.

Profile information
Profile information includes information such as icon image, display name, status message, search ID (hereinafter referred to as 'metaTok ID'), birthday, etc. that customers set and disclose as a profile to build relationships with other customers . Profile information (excluding those that customers have set as private) is made public and can be viewed by other customers or third parties such as business operators who operate official accounts. In addition, the metaTok ID is an identification name set in the account by the customer's friend to make it easier to find the customer in the company service, and the customer's friend can find the customer by searching for the metaTok ID. Search by metaTok ID can be excluded from search by setting.

Address book
The company provides a function that allows customers to automatically add other customers as friends on the company service by uploading information about their friends to the address book on the terminal. Only when the customer activates this function, the company accesses only the phone number registered in the address book on the customer's terminal.
Meanwhile, the company uses the phone number in the address book only for automatic addition of friends, presentation of friend candidates, and prevention of unauthorized use.

3.2. Personal information collected when using the service

3.2.1. Service usage status

The company automatically collects when and how customers used the company service. The information you collect includes the date of execution of each application provided by the company, the time of use of each service, the search results used within the application, additional services purchased, and the use of various functions such as viewed and tapped content or advertisements.

Submissions or responses to submissions
When sending a customer's contribution to another customer, the content submitted by the customer is transmitted via the company's server.
For example, structured content such as emoticons, stamps, and location information submitted by customers and unstructured content such as text, images, videos, and voices are all transmitted via the company server. At this time, external information about how the customer interacts with the other party, such as the content submission partner, data format, and posting date and time, is also recorded on the server. URL information that other customers tap/click on the service is also recorded on the server.

In addition, when sending responses or replies to other customers' posts, the company collects and uses how customers respond to other customers' posts. This includes the type, date, and action the customer has taken on the transmission of another customer, such as whether the customer has viewed the text, image, or video of the message received by the customer and has 'liked' another customer's posting on the metaTok feed. time is included.

In principle, the company does not use the content of non-public postings, such as messages exchanged between customers, for any purpose other than sending the submission. However, in a specific country or region (*1), for individual services, the company provides, maintains, develops and improves services, prevents illegal use, and provides optimized contents including advertisements according to the customer's additional consent, etc. Some of them are available.

3.2.2. Location information

In some cases, when customers share location information with friends or when the company provides optimized search results to customers, the location information of the user's terminal may be collected. If the customer does not allow the transmission of location information in the terminal settings, location information is not transmitted.

In addition, in some countries or regions (*2), when providing customized content or advertisements for each customer, such as weather forecasts and local news near the customer's current location, comprehensive location information may be separately requested. In this case, the customer can refuse to provide location information at any time in the metaTok settings.

On the other hand, the company may estimate the approximate location of the customer from network information such as IP address even if the customer does not permit the transmission of location information.

3.2.3. Application, browser, terminal and network information

The company shall provide information about the terminal, browser, and application used by the customer (advertisement identifier to identify the terminal/browser, cookie ID or device type, OS, language/time zone setting, browser type, application version, etc.) and network information (Telecom operator name, IP address, etc.) are collected.
In addition, the company may associate the advertising identifiers it collects with internal identifiers.

3.3. Personal Information Collected from Third Parties

The company may collect personal information from third parties including group companies (referring to subsidiaries or related companies of the company).

For example, in the following cases, the company collects personal information from third parties.

3.3.1. Personal information collected by group companies

Group companies may collect personal information about customers according to the company's rules and policies. For the personal information processing policy applied to each service provided by the group companies, please check each service.

3.3.2. Personal Information Collected from Partners

The company may collect personal information from business partners. In the case of personal information collection, the company may collect it from affiliates operating its own service, and may collect it from affiliates operating services affiliated with the company service, such as official accounts and metaTok logins. For example, if an account is created using an external SNS account, the identifier of the external SNS account is collected.

3.4. Personal information uploaded by other customers

When a customer uses the company service, the company may collect the information by uploading personal information such as photos taken by a third party other than the customer.

3.4. Personal information collected directly from services provided by third parties

The company may collect login records from plugins on third-party websites or applications that have plugin functions such as 'sent from metaTok' or 'Like' installed, and by linking customer login history and URL information with metaTok account, customers In some cases, we may collect URL information of websites where plug-ins are installed that you visit while logged in to metaTok on your browser. The information collected in this way is used for the purpose of understanding how the company's services are being used, maintaining/improving them, security, and preventing unauthorized/improper use/abuse. On the other hand, when you log out of metaTok, this information is used only for security and to prevent unauthorized, illegal, and abuse in a form that does not identify individuals.

In addition, in some countries or regions, when affiliates use company services, the company may collect the following personal information.

Information such as visit history (including date and time of visit, URL, etc.) of the website visited by the customer's browser.
For example, if the company's affiliated company introduces the company's tracking service to display advertisements on the company service only to customers who have visited a specific page of the website operated by the company, the company will use the website visit history of the affiliated company. We collect and use that information for optimal advertising delivery on our services. In addition, the company uses cookies for optimal advertisement transmission, and may associate a customer's visit history with an advertisement identifier or internal identifier. Customers can delete cookies from their browsers at any time. (*3)

The history of service use in the web application where the company's affiliates are service providers.
For example, if an affiliated company introduces the company's access analysis service to check the usage status of web application services or to improve the service, the company collects customer usage histories from the affiliate's services and collects the statistical usage status to this affiliate.

As described above, if the company directly collects personal information from a service operated by a third party as the affiliate uses the company's services, the company requires the affiliate to take legal and appropriate measures.

3.5. Collection from public information

The company collects public information such as online news posted on the Internet for use in search services, etc.

If the collected public information includes personal information, this information may be used for registration in search engine indexes and display of search results.

4. Purpose of use of personal information

The company uses personal information for the following purposes.
Provision and maintenance of company services
Development and improvement of company services and contents
Prevention of illegal use such as unauthorized access; and/or
Provide optimized content to customers

The company uses personal information to provide services to customers, to help research and development to provide reliable and better service, or to provide more relevant services to customers, including advertisements. The specific uses of personal information are as follows.

4.1. Provision and maintenance of services

The company uses necessary information to provide services requested by customers, respond to inquiries, and apply for campaigns.

For example, in the following cases, the company uses personal information to provide and maintain services.

When logging in to metaTok or taking over an account when changing a terminal, verify that it is the customer by comparing it with the registration information;
Posting a message or conveying the 'read' status of the submitted message;
The history of the message viewed by one terminal is also checked by another terminal.;
In order to establish and manage relationships between customers, we set up and disclose profiles, use registered information to search for other customers, or allow us to search for them.;
Charges are processed when purchasing products or using paid services;
Investigate and respond to the customer's use of the company's services, etc. in order to answer inquiries from customers to customer support;
Sends products obtained by customers in the campaign to a designated shipping address.;
Important notices regarding company services such as revision of the agreement, suspension of service plan, and function change.

4.2. Development and improvement of services and contents

The company uses personal information for the development and improvement of company services in order to provide better services, products and contents to customers in the future.

For example, in the following cases, the company uses personal information for the development and improvement of services and contents.

Improve the service by creating statistics or models on service use;
Know how often each tab in the application is being used, and improve the screen design; or
Conduct surveys about company services that are currently being offered or are being considered in the future.

4.3. Security and Prevention of Misuse

The company maintains an environment where the service can be used at any time, and the company promotes security using personal information or countermeasures against illegal use so that customers can use the service with confidence every day.

For example, in the following cases, the company uses personal information for security and prevention of illegal use.

Check for illegal use such as violations of the Terms of Use, illegal acts, and illegal access; or
In the event of fraudulent use or the possibility of fraudulent use, etc., fact-checking or personal contact shall be made.

4.4. Provide optimized content to customers

The company uses personal information to provide recommended content including advertisements to each customer.

For example, in the following cases, the company uses personal information to provide optimized content to customers.

If there is another customer who is adding the same official account as a friend to the official account the customer is adding as a friend, introduce another official account that the customer is adding as a friend; or
Measure the effectiveness of the sent advertisement.

In addition, in some countries or regions (*3), personal information is used for the purpose of transmitting recommended content such as advertisements optimized to customers. This includes examples such as:

Transmits information highly relevant to the customer's current location about facilities, attractions, coupons, etc. provided through official accounts;
Introduces information about events and discount coupons that are being held near the customer's current location or frequently visited places;
Display advertisements related to the websites of affiliates visited by customers;
Estimate the attributes such as gender, age group, interest and interest of customers from service use histories such as official accounts added by friends, stamps purchased, frequently used company services, recently submitted content to metaTok feed, and recently used search terms, and Send advertisements from companies or third parties that may be of interest to people; or
Company or third party advertisements are transmitted using personal information such as birthday, phone number, and email registered by the customer (including the case of transmitting advertisements of company services on services operated by third parties).

On the other hand, in principle, the company seeks consent from customers when handling customers' personal information. However, if recognized by applicable law, personal information of customers may be handled based on one of the following legal grounds.

(1) When handling is necessary for the performance of the contract to which the customer is a party, or when handling is necessary to proceed with the procedure according to the customer's request before the conclusion of the contract;
(2)
When handling is necessary in order to comply with the legal obligations to be followed by the company (when following an information disclosure order from a government agency, etc.);
(3)
When handling is necessary to protect the important interests of customers or other individuals;
(4)
When it is necessary to investigate, prevent, or take measures against illegal acts or suspected acts;
(5)
If handling is necessary for the legitimate interests pursued by the company or a third party to the extent that it does not infringe on the rights, interests, and freedoms of customers regarding privacy (operation or system improvement by the company, prevention of fraud, security maintenance, marketing, research, etc.)
(6)
For purposes relating to the public interest or the creation of archives of historical documents, or for purposes relating to research or statistics with appropriate safeguards in place
For example, if the company handles customer personal information for the purpose of providing and maintaining services, developing and improving services, and preventing security and unauthorized use, the handling of such personal information is legally called the legitimate interest in (5) above. You can follow the rationale.

5. Provision of personal information

The company does not provide, disclose or share personal information to third parties except when consent is obtained from the customer or as permitted by applicable law.
The company may transfer personal information to a third country that does not have the same data protection laws as the customer's country or region of residence when consent is obtained from the customer or when permitted by applicable law.

In principle, the company does not provide personal information to third parties unless consent is obtained from customers or permitted by applicable laws.
However, the company may provide personal information to third parties in the following cases.
The company's personal information provider includes third parties, such as consignees, subsidiaries, and related companies, located in countries or regions other than the customer's country of residence.

5.1. Disclosure by yourself

Profile information registered by customers is treated as public information. For more information, please refer to 3.1. Profile Information.

In addition, actions such as messages posted by customers, posts on metaTok feeds or bulletin boards, and ‘likes’ and comments on other customers’ posts can also be viewed by third parties depending on the disclosure settings or destination.

Due to the nature of digital data, such information is likely to be copied, preserved or disseminated by the recipient and accessed by the recipient of an unintended third party. When setting up a profile or posting on company services, please pay attention to the content and scope of disclosure.

5.2. Business consignment

The company may entrust some tasks necessary to provide company services (eg, infrastructure construction and operation, payment, delivery, customer support, etc.) to a third party. In this regard, all or part of personal information may be deposited with the relevant business entity.
This business consignee only accesses the minimum amount of personal information necessary to perform business on behalf of the company, and does not use personal information beyond the scope of the entrusted business.
The company complies with applicable laws and regulations, thoroughly examines suitability as a business commissioner, and creates a system in which personal information is appropriately managed, such as stipulating confidentiality obligations and data protection in contracts.

5.3. Business succession

In the event of inter-company transactions related to the company business subject to this policy, such as purchase, merger, or change of business entity, personal information may be transferred to the business successor accordingly to the scope recognized by the applicable law.

5.4. Provision of services or advertisements in partnership with other operators

When a customer uses the company's affiliate service, the company sometimes provides information to identify customers (including device information or attribute information such as advertising identifiers and language settings) to the affiliate.
For example,

When you add an official account as a friend, when you try to chat with an official account, when you enter a group or chat room that the official account is participating in. The minimum required information is transmitted. In some business-exclusive services or functions, customers may be requested to provide additional personal information such as e-mail address or phone number. In these cases, the customer will request additional permission to provide additional personal information to this operator before using the service or feature.

If an affiliate company installs ancillary company services such as the metaTok login function, internal identifiers, profile information, e-mail address or phone number may be shared with the service provider when the customer uses the service. In this case, the company asks the customer for permission to provide personal information.

In some countries or regions (*5), internal identifiers and part of device information (advertisement identifier, language setting, etc.) attributes for affiliates that transmit, measure, and analyze advertisements in order to transmit advertisements that are more relevant to customers It may be provided and disclosed only to Information that can be used to contact you or identify yourself, such as your name, address, or phone number, will not be provided unless the customer expresses his/her intention.

In addition, the handling of personal information by partner companies follows the rules and policies set by each company.

5.5. Compliance and cooperation with public authorities

The company may disclose personal information to third parties such as police or law enforcement agencies or courts under the applicable law, such as when a request is made in accordance with legal procedures such as a notice of suicide or a notice of bombing is imminent.

6. Safety management of personal information

The company is taking strict technical and organizational security measures for the management of collected personal information.

In principle, the company retains most of the customer's information unless the customer applies for account deletion. If there is an application for account deletion from a customer, the customer information is deleted after retaining it for a certain period of time in accordance with applicable laws and internal regulations.

6.1. Security measures

In order to respect and protect privacy and confidentiality of personal information and to prevent unauthorized access to personal information, the company is taking technical and organizational strict security measures for the management of collected personal information. These measures include safety management measures in accordance with industry standards to prevent unauthorized access to personal information, disclosure, illegal use, forgery, falsification, and destruction.
For example, the following measures are being taken.

Provides message encryption function
Strict access control based on need to know
24/7 security monitoring
External authentication to objectively evaluate security measures
Research and development of new security technologies

In addition, we will never provide a third party with a means to access personal information illegally.
However, no electronic transmission or data storage method is perfect, and it cannot guarantee complete safety against intrusion while stored on the transmission path and company system.
Customer cooperation and understanding are essential to protect privacy and confidentiality of personal information. Please do not share your password with others, or use the same password used by other services.

6.2. Personal information storage place

In providing company services, the company may store the customer's personal information outside the country or region where the customer resides. In this case, the company will take measures to ensure that the customer's personal information is transferred in accordance with the relevant laws.

6.3. Personal information retention period

The company collects and retains personal information to provide services according to customer requests, to achieve the purpose of use described in this policy, or to comply with applicable laws.
In principle, the company retains most of the customer's personal information unless the customer requests deletion of the account. If the account is deleted, the company retains the customer's personal information for a certain period of time for the following purposes, and then appropriately handles the customer's personal information in accordance with applicable laws and internal regulations.

Inquiry response;
Dispute Resolution and Fee Collection;
Detect and deter illegal use and abuse of company services; or
Compliance with applicable laws.

Other companies set the personal information retention period according to the following criteria.

Text, image, video, voice, etc. transmitted in chat rooms between customers are highly privacy information, and transmission of messages (retransmission in case of communication failure or messages from multiple devices) motive, etc.) will not be used for any other purpose. The company retains the above information for the minimum required period, but the information is automatically deleted from the company server after that.
The shipping address information collected for product shipments collected in the campaign will be deleted after delivery is completed and after a certain period of time to resolve disputes. Information collected for the above limited purpose will be promptly deleted after a reasonable period has elapsed when the purpose is achieved.
If the customer has explicitly expressed his/her intention to preserve it, the company may preserve personal information for a long time by respecting the customer's will. For example, such as the Keep function of metaTok, the company provides its customers with the ability to explicitly preserve or delete information.
If there is a retention period specified in the applicable laws, etc., the company preserves personal information in accordance with it.

In addition, the company may retain personal information in a form that cannot identify individuals after the retention period set in accordance with applicable laws and company regulations.

7. Customer's Choices About Personal Information

Customers have rights with respect to personal information of customers handled by the company, such as the right to access their personal information or the right to rectify their personal information, as far as the applicable law allows for the company.

The company is making efforts to provide a function that allows customers to edit their profile and set and manage personal information collection, use, and sharing on the company service.

The customer has the right to access, the right to request correction, the right to request deletion, the right to restrict the handling, the right to withdraw consent, the right to data portability, the right to data You have the right to ascertain the existence of processing and the right to request a review of automatic decisions based on data processing.
Customers also have the right to object to the handling of their personal information by the Company in some cases, to the extent permitted by applicable law.
The company provides functions related to setting and managing personal information such as profile editing, collection, use, and sharing settings, the scope of posting, opt-out of advertisements, and account deletion so that customers can manage their personal information on the application as a company service. We are working hard to provide it. Please check regularly for outdated or inaccurate information and update it appropriately.

Specifically, the following functions are provided.

Confirm/change public profile information and set metaTok ID
Confirmation or change of phone number or e-mail address, deletion of e-mail address, and unlinking of Facebook account
Whether to allow other customers to contact customers using their metaTok ID
Whether to make it possible to reach customers in metaTok to other customers who already have the customer's phone number
Whether to automatically add contacts using the address book in the device
Whether to allow third parties to view customer-related personal information held by friends

After verifying the identity of the customer, we will reply to the customer's request within a reasonable period and in accordance with applicable laws. If a customer wants to send a request in writing, please refer to the sending destination information below.
However, as far as the applicable law permits, the company may not be able to respond to the customer's request in the following cases.

If there is a risk of harming life, body, property, or other rights and interests by disclosing
When there is a risk of causing a significant impediment to the proper conduct of company business by disclosing
If the disclosure is against the law
If you cannot verify that the disclosure request is what you requested
If it is recognized that the company refuses to respond to a request under other applicable laws

If the customer no longer wishes to use the company service, or if the company withdraws consent to the handling of personal information necessary to provide the company service, the customer can choose to delete the entire account. However, withdrawal of consent does not affect the legality of handling by the company in accordance with the consent prior to withdrawal.

On the other hand, there may be cases where the company receives fees according to the procedures separately set by the company, except for cases not recognized by applicable laws.

8. Related to the use of third-party modules, cookies, etc.

The company may use cookies and SDKs provided by third parties for the purposes described in this policy.

8.1. 3rd party module

The company may install modules such as software development kits (SDKs) provided by third parties in company services for the following purposes.

To analyze the usage status of company services
In order to transmit advertisements on behalf of the company or to measure its effectiveness

The privacy policy of the third party applies to the personal information handled by the third party through the module provided by the third party.

8.2. Cookie and other analysis tools

A cookie is a small text file that is stored on your computer when you visit a website. This text file preserves information that site operators can read when they visit the website again at a later date.
The company may use cookies or similar web tracking technologies (web beacons, pixels, etc.) for the following purposes.

To remember the login status and use it for visitor authentication, session maintenance, and security measures
In order to improve convenience by memorizing settings such as language, date of last visit, etc.
In order to provide better service by understanding the number of visits and usage patterns, etc.
In order to send more interesting advertisements (*3)
To measure the effectiveness of advertising

You can control whether cookies are accepted or not by using your browser settings or other tools. However, if a customer disables cookies or restricts the ability to set cookies, all or some functions of the website may not be accessible, and as a result, the overall convenience of the customer may be limited.

8.3. Information about the use of Google Analytics

In order to improve company services, the company uses Google's Google Analytics to measure company services such as websites. For data collection, Google may set cookies or read existing cookies. At that time, information such as the URL and IP address of the page accessed by the customer is automatically sent to Google. The company may use this information to understand the usage status or to use the company service. For data handling by Google in Google Analytics, please check the Google Analytics Terms of Service and Google's Privacy Policy.

8.4. Information about using the True Depth API provided by Apple

The company may use Apple's TrueDepth camera function for the purpose of improving the quality of the camera or video call provided by the company service, such as effects, and collect additional information obtained from the camera. However, this information is only used for real-time processing for this purpose. This information is never sent or stored on the server or shared with third parties.

9. Other important information

This policy is subject to change. The most up-to-date privacy policy is always posted on the site you are viewing, so please check the contents of the latest privacy policy applicable to customers.
In case of significant changes, we will notify customers of the revision in an easy-to-understand way.

9.1. child privacy

Company services are intended for general customers. If a child customer uses the company service to provide personal information, please proceed with the consent of the guardian. The customer represents and warrants that he/she has the necessary rights and ability to use the company service, or if the customer is a child, he/she is providing the company service with the consent of the parent(s). Some company services voluntarily enforce age restrictions so that users cannot use them if they cannot confirm that they are over a certain age.

Meanwhile, our company recognizes the need for higher privacy protection for personal information collected from US and European children (under 13 years old in the United States, under 16 years old in Europe) in the service, and intentionally collects personal information from children. There is no collection.

If you believe that we are collecting personal information from children, please contact us using this inquiry form or the address below. If it is determined that we are collecting personal information from children in error, we will invalidate the relevant account and take reasonable steps to promptly delete such personal information from our records.

9.2. Changes to the privacy policy

This policy may be changed from time to time, and the most up-to-date privacy policy is always posted on the site you are viewing. In the case of important changes, we will notify customers of the amendments in an easy-to-understand way through notices within the service, etc. Please thoroughly check the contents of the latest personal information processing policy.

If the customer does not agree to the changes and no longer wishes to use our services, the customer may close their account. Your continued use of our Services after any changes have been notified or published on the Services constitutes acceptance of the changes and acceptance of this revised Policy. In addition, if required by applicable law, consent is requested from the customer.

Enacted on January 7, 2022