Privacy Policy

1. Overview

Writing PT (the "Company") complies with the Personal Information Protection Act and other applicable Korean law, and processes personal information only to the minimum extent needed to deliver the Service.

This policy explains what the Company collects and why, how long it keeps it, who it entrusts with processing, and what rights you can exercise.

2. Information collected

The Company collects the items below. Required items are those without which the Service cannot be delivered. Optional items may be declined without losing access to the Service.

The Company does not collect sensitive information such as beliefs, political opinions, health or sex life, and does not collect resident registration numbers.

• Required at registration: email address, name or display name, password (stored in hashed form), chosen exam family, target score.
• Required when registering with Kakao: the account identifier supplied by Kakao, email address and profile name.
• Optional: mobile phone number.
• Collected automatically: IP address, access timestamps, usage logs, cookies, and device information such as browser type and operating system.
• Generated through use of the Service: submitted response text, exam metadata such as time taken and word count, scoring results and feedback, and learning history.
• Generated at payment: payment approval records, payment method type and subscription status. Card numbers and similar details are handled by the payment gateway and are not stored by the Company.

3. Purposes of processing

The Company uses personal information only for the purposes below. Any new purpose requires fresh consent.

• Identifying members, managing accounts, maintaining sessions and preventing abuse.
• Delivering mock tests, automated scoring and feedback, and storing and displaying learning records.
• Registering subscriptions, taking recurring payments, showing payment history and processing refunds.
• Operational notices such as announcements and upcoming-charge reminders.
• Personalised study notifications, where you have given optional consent: study alerts and detailed feedback based on analysis of your weaknesses.
• Marketing messages, where you have given optional consent: new features, events and discounts.
• Usage analysis and quality improvement, carried out on material processed so that individuals cannot be identified.

4. Retention periods

When you close your account, the Company deletes your personal information without undue delay. Records that Korean law requires the Company to keep are stored separately from other data for the periods below and then destroyed.

Information retained under a legal obligation is used only for the purpose set out in that law.

• Records of contracts and withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce).
• Records of payment and supply of goods or services: 5 years (Act on Consumer Protection in Electronic Commerce).
• Records of consumer complaints and dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce).
• Records of labelling and advertising: 6 months (Act on Consumer Protection in Electronic Commerce).
• Service access logs: 3 months (Protection of Communications Secrets Act).

5. Disclosure to third parties

The Company does not provide your personal information to third parties.

The only exceptions are where a law specifically requires it, or where an investigative authority makes a request following the procedure prescribed by law. Even then, disclosure is limited to the minimum scope requested.

6. Outsourced processing

The Company entrusts parts of its processing to the providers below in order to deliver the Service. Each contract sets out safeguards in writing, and the Company monitors compliance.

Any change to the scope of outsourced work, or to the providers involved, is published through this policy.

• Anthropic PBC (United States): automated scoring and feedback generation for submitted responses.
• Supabase Inc. (data hosted in Seoul, Republic of Korea): database operation, member authentication and file storage.
• Vercel Inc. (United States): web hosting and content delivery.
• Korea PortOne Inc. (Republic of Korea): payment processing and payment fraud prevention.
• Kakao Corp. (Republic of Korea): Kakao account login, KakaoPay recurring payment and AlimTalk message delivery.

7. Transfers outside Korea

To deliver automated scoring and to operate the Service, the Company transfers personal information abroad as set out below. Only what is needed for the Service is transferred, and recipients do not use it for their own purposes.

You may refuse an overseas transfer. Automated scoring, however, can only be performed by sending your response to an AI processor located abroad, so refusing means that scoring and feedback cannot be provided and the core of the Service becomes unusable. Write to bestreits@gmail.com to refuse, and we will explain the options for your account and any refund.

• Recipient: Anthropic PBC. Country: United States. Items: submitted response text and exam metadata. Purpose: automated scoring and feedback generation. Timing and method: transmitted over an encrypted connection when you submit a response. Retention: for as long as you use the Service.
• Recipient: Vercel Inc. Country: United States. Items: IP address and access logs. Purpose: web hosting and incident response. Timing and method: transmitted over the network when you access the Service. Retention: for as long as you use the Service.

8. Optional consents and what declining means

The Company separates required consent from optional consent. The optional items are as follows.

If you decline the personalised study notification service, the personalised study notification service and detailed feedback are not available to you. Your use of the paid service, including taking mock tests and viewing your scores, is not restricted in any way.

Optional consent can be withdrawn at any time from your account settings page, and processing for that purpose stops from then on.

• Use of personal information for personalised study notifications: your responses, scoring results and learning history are analysed to produce detailed feedback, including sentence-level diagnosis, prescriptions and a model answer, together with study alerts.
• Receiving marketing messages: information about new features, events and discounts sent by email, SMS or AlimTalk.
• Collection of a mobile phone number: used to deliver AlimTalk and SMS messages.

9. Marketing messages

Under Article 50 of the Act on Promotion of Information and Communications Network Utilisation and Information Protection, the Company sends marketing messages only to people who have consented in advance.

Consent to marketing is a separate item from consent to the personalised study notification service. Declining marketing messages places no restriction whatsoever on your use of the paid service.

When the Company does send marketing messages, it observes the following.

• The subject line begins with an advertising label.
• The body states the name and contact details of the sender and how to unsubscribe.
• No marketing message is sent between 21:00 and 08:00 the following morning.
• Once you opt out, sending stops without undue delay and we confirm that it has stopped.
• Consent is reconfirmed every two years from the date it was given.

10. Your rights and how to exercise them

You may exercise the following rights over your personal information at any time.

You can act directly from your account settings page, or write to bestreits@gmail.com. For email requests the Company verifies your identity and responds within 10 days.

A legal representative or an authorised agent may act on your behalf, on production of a document evidencing that authority.

• Request access to your personal information.
• Request correction of anything inaccurate.
• Request deletion, except for records the Company is required by law to retain.
• Request that processing be suspended.
• Withdraw consent. Optional consents can be withdrawn instantly from your account settings page; withdrawing a required consent means closing your account.

11. Destruction of personal information

When a retention period expires or the purpose of processing has been achieved, the Company destroys the information concerned without undue delay.

Electronic files are deleted by a method that makes recovery impossible, and printed material is shredded or incinerated.

Accounts inactive for a year or more have their information moved into separate storage, and we email you before that happens.

12. Cookies and similar technologies

The Company uses cookies to keep you signed in and to remember your preferences, such as language and chosen exam family.

The Company does not use third-party advertising or tracking cookies.

You can refuse cookies in your browser settings. If you block the cookies needed to maintain a session, features that require signing in will not work.

13. Security measures

The Company takes the following measures to keep personal information safe.

• Passwords are stored hashed, in a form that cannot be reversed.
• All traffic is encrypted in transit over HTTPS.
• Access to personal information is limited to as few staff as possible, with managed permissions.
• Row-level security in the database restricts each user to their own data.
• Access logs are retained and protected against tampering.
• Staff who handle personal information receive regular training.

14. Children under 14

The Company does not collect personal information from children under 14, and children under 14 cannot register.

If the Company learns that information about a child under 14 has been collected without guardian consent, it destroys that information without undue delay.

15. Privacy officer

The Company appoints a privacy officer who is responsible for personal information processing and for handling complaints and remedies.

Enquiries, complaints and remedy requests relating to personal information can be sent to the contact below, and the Company responds without undue delay.

• Privacy officer: Hong Dong-gi (Representative Director).
• Email: bestreits@gmail.com
• Phone: +82-31-214-1377

16. Where else to seek help

If you need advice or redress for a personal information breach, you can contact the bodies below.

If a measure taken by the Company in processing personal information has harmed your rights or interests, you may also request an administrative appeal under the Administrative Appeals Act.

• Personal Information Dispute Mediation Committee (privacy.go.kr, 1833-6972)
• Privacy Infringement Report Centre (privacy.kisa.or.kr, 118)
• Supreme Prosecutors Office, Cyber Investigation Division (spo.go.kr, 1301)
• National Police Agency, Cyber Bureau (ecrm.police.go.kr, 182)

17. Changes to this policy

This policy applies from its effective date. Where the law or the Service changes, amendments are announced inside the Service at least 7 days before they take effect.

Changes that materially affect your rights, such as adding a category of collected information or changing a purpose of use, are announced at least 30 days in advance, and fresh consent is obtained where required.