개인정보처리방침

Introduction

TetherBase (the "Company," "we," or "us") publishes this Privacy Policy to explain how we protect the personal information of people who use TetherBase (the "Service") and how we handle related requests promptly, in accordance with applicable law.

1. Information We Collect

We collect and process the following personal information from Service users. We do not knowingly process personal information of children under 16.

1. (a) At signup (required): email address, password.
2. (b) When a Member links an exchange UID (required): exchange name, the UID, and the futures trading history for that UID (timestamps, volume).
3. (c) When a Guest uses the payback service (required): exchange name, the UID, and the futures trading history for that UID (timestamps, volume).
4. (d) Generated automatically during use: IP address, browser type, language, usage records (visit dates and times, payback or commission accrual and requests, withdrawal records), device information (device model, OS name and version), and cookies.
5. (e) In surveys or feedback sent by email or other channels: the items above that are needed, plus any separate items required for that survey or feedback.

2. Retention

When a user deletes their account or loses eligibility, we delete and destroy collected information without delay, even without a separate request, except that we retain information for the periods below:

1. (a) Until an investigation or inquiry into a legal violation concludes, where one is in progress.
2. (b) Until outstanding claims or obligations arising from use of the Service are settled.
3. (c) The email address, for the life of the Service, to prevent re-registration with the same email.
4. (d) Payback or commission accrual, request, and withdrawal records for 5 years from the deletion request, with UIDs and other identifiers masked.
5. (e) As required to comply with legal obligations: where a law specifies a retention period, we keep and use the information as that law requires.

3. How We Use Information

1. (a) Registration and account management: confirming intent to register, maintaining and managing membership, preventing misuse, and sending notices.
2. (b) Fraud and loss prevention: detecting, preventing, and reducing fraud or abuse of the Service and protecting users from account compromise or loss of funds.
3. (c) Providing the Service.
4. (d) Service communications: informing users about Service updates, security issues, and other transactional information.
5. (e) Customer support: resolving problems or disputes when users contact us.
6. (f) Network and information security: improving security, monitoring and verifying identity and access, combating spam, malware, and other security risks, and complying with applicable security laws.
7. (g) Service improvement and development: customizing and improving content and layout and developing additional services.
8. (h) Marketing and advertising: sending marketing communications (for example email or text messages) about Company or partner activities, delivering targeted marketing, and offering promotions.

4. Sharing with Third Parties

We share personal information with third parties only with the user's consent or where specifically permitted by applicable privacy or other law.

5. Use Reasonably Related to the Original Purpose

Within a scope reasonably related to the original purpose of collection, we may use or share personal information without additional consent after considering:

1. (a) Whether the additional purpose is related in nature or tendency to the original purpose.
2. (b) Whether the additional use or sharing is foreseeable in light of the circumstances of collection and processing practices, including the relationship between the Company and the user, the state of technology, and established practice.
3. (c) Whether the user's interests are unfairly harmed, considering the additional purpose and whether any harm is unreasonable.
4. (d) Whether safeguards such as pseudonymization or encryption have been applied in proportion to the risk.

6. Cookies

We use cookies to store and retrieve usage information in order to provide personalized services. A cookie is a small piece of information the server sends to your browser, which may be stored on your device.

1. (a) Purpose: analyzing visit frequency and duration, understanding usage patterns, verifying secure connections, and measuring audience size to manage security, improve the Service, develop new services, and deliver personalized services and advertising.
2. (b) Control: you can accept or refuse cookies in your browser settings. Refusing cookies may make some parts of the Service unavailable.

7. Destruction of Information

1. (a) We destroy personal information without delay once it is no longer needed, such as when the retention period expires or the purpose is achieved.
2. (b) Procedure: information that has become subject to destruction is identified and destroyed with the approval of our privacy officer. Method: electronic records are destroyed using technical means that prevent recovery; paper records are shredded or incinerated.

8. Security Measures

We take the following measures to keep personal information secure:

1. (a) Administrative: an internal management plan and regular staff training.
2. (b) Technical: defenses against hacking, encryption of personal information, access control for processing systems, and retention and tamper-protection of access logs.
3. (c) Physical: access control for server rooms and record storage.
4. (d) Other: honoring requests to withdraw consent, delete, access, or correct information users have provided.

9. Your Rights

1. (a) You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information.
2. (b) These rights may be exercised through a legal representative or an authorized agent, in which case a power of attorney confirming the authorization must be provided.
3. (c) Requests may be sent by email to the privacy team listed in Section 10, and we will act on them without delay. Some rights may be limited under applicable law.
4. (d) A request to suspend processing, or withdrawal of consent to collection and use, may mean we can no longer provide the Service to you and may require terminating your Service Agreement.

10. Privacy Contact

You may send any privacy-related inquiries, complaints, or requests for redress arising from use of the Service to:

1. Department: Security Team
2. Contact: support@tetherbase.io

11. Additional Terms for EU Residents

This section applies only if you reside in the European Union and prevails over any inconsistent provision elsewhere in this Policy.

1. (a) Your personal information may be transferred outside the EU. In that case we take all reasonable precautions to apply the appropriate safeguards required by the GDPR, for example by putting in place suitable contracts so that recipients protect and handle your information in accordance with applicable privacy law.
2. (b) Under the GDPR you may: access your personal information, correct inaccuracies, and object to processing where applicable; request deletion of data collected with your consent that is no longer needed for its purpose; request restriction of processing where the data is no longer needed for its purpose; receive your personal information in a structured, commonly used, machine-readable format; and withdraw consent at any time, without detriment, to the extent processing is based solely on consent.

12. Changes to This Policy

We may revise this Privacy Policy to reflect changes in law or in the Service. We will post changes at least 7 days before they take effect, and the revised Policy takes effect on the stated date. For material changes to your rights, such as changes to the categories of information collected or the purposes of use, we will give at least 30 days' notice.