Privacy Policy
- Effective date
- 2026.09.01
- Operator
- ASSETTREE
- Service
- SIGBIRD
This English translation is provided for convenience; the Korean version prevails.
ASSETTREE (the “Company”) operates SIGBIRD (the “Service”) and values the personal information of its users. This Privacy Policy explains what personal information we collect while you use the Service, why we use it, how we store and protect it, and what rights you can exercise. The Company complies with applicable laws, including the Personal Information Protection Act of the Republic of Korea and laws relating to information and communications networks and electronic commerce. When the Service's features or the way we actually process personal information change, we will update this Policy accordingly.
1. Personal Information We Process
1.1 Information you provide directly
| Category | Items collected or processed | When collected |
|---|---|---|
| Sign-up and account | Email address, encrypted password value, nickname, and profile information | At sign-up and when setting up your profile |
| Identity verification | Among name, date of birth, gender, mobile phone number, Korean/foreign national status, and identity verification result values (CI/DI), the items provided by the identity verification agency | During identity verification |
| Project creation | Conversations and prompts you enter, investment ideas and trading rules, exchanges, assets, periods, indicators, entry and exit conditions, and project settings | When creating or editing My Projects |
| AI Benchmarking | URLs you submit (YouTube, TradingView, blogs, etc.), uploaded files, extracted text and trading rules, and AI conversations and results | When using the benchmarking feature |
| Analysis and briefings | Backtest request values and results, project performance, trade records and signal history, watchlist assets, and briefing usage records | When using analysis and briefing features |
| Sharing and subscriptions | Shared project information, descriptions, operating performance, subscription and cancellation records, number of subscribers, and details subject to settlement | When using sharing and subscription features |
| Credits and payments | Payment amount, payment method type, transaction number, approval/cancellation/refund status, and credit accrual, usage and refund history | When paying for and using paid services |
| Partners and settlements | Referral codes and invitation history, settlement amounts, account holder name, bank name and account number, and information required for tax calculation and withholding | When applying as a partner or requesting a settlement |
| Customer support | Inquiry details, contact information for replies such as email and phone number, attachments, and consultation history | When handling inquiries and disputes |
Sensitive authentication information for payment methods, such as full card numbers and card passwords, is processed directly by the payment service provider, and as a rule the Company does not store it. Unique identification information, such as resident registration numbers, is processed only when necessary to fulfill legal obligations and on a separate legal basis, and is not collected during ordinary sign-up.
1.2 Information generated automatically while you use the Service
- IP address, cookies, session identifiers, access dates and times, usage records, and records of fraudulent use
- Browser type, operating system, device information, screen size, language, and approximate location
- Records of activity on the Service, such as page visits, clicks, feature use, and project creation, analysis and signal checks
- Error logs, performance information, and security events
1.3 Information received from external services
- When you use social login, the email address, name or nickname, profile image and authentication token provided by that provider
- Identity verification results provided by the identity verification agency and the information you have consented to
- Payment approval, cancellation and refund status, transaction identifiers, and information needed for settlement, provided by the payment service provider
- When you connect a notification service such as Telegram, your user identifier or chat identifier and delivery status
2. Purposes of Use
- Sign-up, login, identity verification, account management, and prevention of fraudulent sign-ups
- Providing core features such as My Projects, AI Benchmarking, Project Analysis, briefings, and notifications
- Credit top-ups and usage, payments and refunds, subscription management, and checking transaction history
- Operating shared projects, managing subscribers, and processing partner referrals and settlements
- Handling customer inquiries, complaints, disputes, announcements, and service-related notifications
- Analyzing Service usage, improving features, fixing errors, and developing new features
- Detecting and responding to hacking, misuse, violations of the Terms, payment fraud, and security incidents
- Fulfilling legal obligations, tax and accounting processing, and responding to lawful requests from investigative and supervisory authorities
- Providing information on events, benefits and marketing where you have given separate consent
3. Legal Bases for Processing
| Legal basis | Processing it applies to |
|---|---|
| Entering into and performing a contract | Creating accounts and providing project, analysis, briefing, subscription, credit and payment features |
| Your consent | Processing that requires consent, such as optional information, receiving marketing, and optional external integrations |
| Compliance with legal obligations | Retaining transaction records, tax and accounting, identity verification, and responding to lawful requests from relevant authorities |
| Legitimate interests and safe operation of the Service | Security, prevention of misuse, error analysis, statistics, and service quality improvement, processed only to the extent that it does not unduly infringe your rights and interests |
4. Provision of Personal Information to Third Parties
As a rule, the Company processes your personal information only within the scope of the purposes stated in this Policy and does not provide it to third parties without your prior consent. Exceptions apply where permitted by law, such as where a law contains special provisions or where it is necessary to protect a person's life, body or property from imminent danger. In the event of a merger, business transfer, reorganization, or transfer of all or part of our assets, personal information may be transferred in accordance with the procedures set out in applicable laws. Where possible, the Company will notify you in advance and take measures to ensure that the successor processes personal information in accordance with this Policy and applicable laws.
5. Storage and Security Measures
To prevent the loss, theft, leakage, forgery, alteration or damage of personal information, the Company implements technical, administrative and physical measures under Article 29 of the Personal Information Protection Act.
5.1 Technical measures
- One-way encryption of passwords and encryption of personal information in transit
- Access control for personal and important information, separation of privileges, and management of access logs
- Operation of security programs, firewalls, and intrusion detection and blocking systems
- Regular backups, vulnerability checks, and security updates
5.2 Administrative and physical measures
- Minimizing the number of personal information handlers and granting access rights based on roles
- Personal information protection training, security pledges, and an internal management plan
- Imposing contractual protection obligations on outsourced processors and managing and supervising them
- Controlling entry to and access to the locations and systems where personal information is stored
5.3 Responding to personal information breaches
If the Company becomes aware of a personal information breach, it will without delay notify you of the items involved, when and how the breach occurred, the expected damage, the measures you can take, the Company's response measures, and a contact point, and will report the breach to the relevant authorities where required by law.
6. Retention and Use Period
The Company destroys personal information without delay once the purpose of processing has been achieved or you request to delete your membership. However, where information must be retained under relevant laws or where separately agreed with you, it is stored separately for the specified period.
| Information or record | Basis or reason | Retention period |
|---|---|---|
| Member account and profile | Performance of the service contract | Until you delete your membership |
| Projects, conversations, analyses and generated results | Providing Service features | Until you delete your membership or delete them yourself |
| Records of contracts or withdrawal of offers | Article 6(3) of the Act on the Consumer Protection in Electronic Commerce, Etc. and Article 6(1)2 of its Enforcement Decree | 5 years |
| Records of payment and supply of goods and services | Article 6(3) of the same Act and Article 6(1)3 of its Enforcement Decree | 5 years |
| Records of consumer complaints or dispute resolution | Article 6(3) of the same Act and Article 6(1)4 of its Enforcement Decree | 3 years |
| Records of labeling and advertising | Article 6(3) of the same Act and Article 6(1)1 of its Enforcement Decree | 6 months |
| Access logs | Article 15-2(2) of the Protection of Communications Secrets Act and Article 41(2)2 of its Enforcement Decree | 3 months |
| Minimum information to prevent misuse | Legitimate interests of the personal information controller under Article 15(1)6 of the Personal Information Protection Act, and prevention of repeated sign-ups, payment fraud and service abuse | 3 months |
| Backup data | Internal operational need for failure recovery and data integrity | Up to 3 months |
Personal information whose retention period has expired is deleted in a way that cannot be recovered or reproduced. Paper documents are shredded or incinerated, and electronic files are deleted using technical methods that make recovery difficult.
7. Automated Decisions and AI-Based Processing
The Service uses AI and automation technology to organize investment rules based on the conditions you enter or select and to generate results such as projects, backtests, briefings and signals. These results are intended to provide information and support your decision-making; the Company does not execute financial transactions on your behalf or automatically make decisions that have legal effects or similarly significant effects. You can review AI results and select or modify project conditions yourself. Measures that may significantly affect you, such as account restrictions or settlement holds, go through a review by staff to the extent possible, and you may request an explanation or re-review through customer support.
8. Rights of Users and Legal Representatives
You may at any time request access to, correction or deletion of, or suspension of processing of your personal information, or withdraw your consent. You can exercise these rights through the member information screen or customer support, and the Company will process your request within the period prescribed by relevant laws after confirming that you are the data subject or a legitimate representative.
- Access to your personal information and confirmation of how it is processed
- Correction or deletion of inaccurate personal information
- Suspension of processing and withdrawal of optional consent
- Opting out of marketing information
- Membership withdrawal and account deletion
- Requesting an explanation or re-review of automated processing results
Some requests may be restricted, for example where there is a legal obligation to retain the information or where fulfilling the request may infringe the rights and interests of others, and the Company will inform you of the reason.
9. Cookies and Similar Technologies
The Company may use cookies and similar technologies to keep you logged in, for security, to save your settings, and to analyze Service performance. A cookie is a small information file that a website stores in your browser. You can allow or block cookies, and delete existing cookies, in your browser settings. If you block essential cookies, login, security authentication or some Service features may not work properly. If the Company operates personalized advertising using behavioral information, it will separately disclose the items collected, the method, purpose and retention period, the recipients, and how you can control it.
10. AI Input Information and Service Improvement
Prompts, URLs, documents, images and project information you enter are processed to provide the features you request. The Company strives to send AI processors only the minimum information necessary to perform the feature, and you must not enter unnecessary personal information, financial account passwords, API secret keys, or other people's personal information. If the Company intends to use input information and outputs that can identify you to train its own AI models, it will notify you of the purpose and items in advance and obtain any necessary consent. Information from which personal information has been removed, or which has been pseudonymized or anonymized, may be used to compile statistics and improve the Service.
11. Changes to This Privacy Policy
The Company may revise this Policy in accordance with changes to laws, the Service, or the way personal information is processed. When it changes, the effective date and the details of the changes will be posted in the announcements within the Service. Changes that significantly affect your rights will be communicated before they take effect by reasonable means such as email or in-service notifications, and separate consent will be obtained where required by law.
- Announcement date: September 1, 2026
- Effective date: September 1, 2026
12. Chief Privacy Officer and Remedies for Infringement of Rights
12.1 Chief Privacy Officer
| Item | Details |
|---|---|
| Personal information controller | AssetTree (ASSETTREE) |
| Representative and Chief Privacy Officer | Gi-beom Jo |
| Business registration number | 185-15-02735 |
| Address | 4F, Suite 402-669, 1080 Jungang-ro, Ilsandong-gu, Goyang-si, Gyeonggi-do, Republic of Korea (Baekseok-dong, Namjeong Gold Plaza) |
| sigbird.asset@sigbird.io | |
| Phone | 070-4566-1050 |
| Service website | https://sigbird.io |
You may submit inquiries, complaints, requests for remedies and requests to exercise your rights regarding personal information that arise while using the Service to the contact details above. The Company will strive to answer and process received inquiries without delay.
12.2 Organizations for remedies
| Organization | Website | Contact |
|---|---|---|
| Personal Information Infringement Report Center | https://privacy.kisa.or.kr | 118 (no area code) |
| Personal Information Dispute Mediation Committee | https://www.kopico.go.kr | 1833-6972 |
| Supreme Prosecutors' Office | https://www.spo.go.kr | 1301 (no area code) |
| Korean National Police Agency | https://ecrm.police.go.kr | 182 (no area code) |