Chính sách bảo mật

MyClinic ("Company") collects the following personal information to provide our services.

Patients (Visitors): Name, email, country, treatment interest, message content

Clinic Administrators: Name, email, phone number, clinic information, payment details

Coordinators (Interpreters): Full name, nationality, languages spoken, certification types, certification/career proof files, bio, business-card shipping address (recipient, address, contact)

Automatically Collected: IP address, browser information, pages visited, access time (via Google Analytics, Vercel Analytics)

We use collected personal information for the following purposes:

• Delivering and responding to medical consultation inquiries

• Operating and managing clinic landing pages

• Analyzing service usage statistics and improving our platform

• Processing subscription payments and billing

• Sending service-related notices and notifications

• Coordinator credential verification and MyCoordy credential issuance, clinic–coordinator interpretation matching (no fee), online resume operation, and physical business-card printing/shipping

• Patient inquiry data: 3 years from the date of submission

• Clinic account information: Until account deletion is requested

• Payment information: 5 years (as required by applicable e-commerce laws)

• Access logs: 3 months (as required by applicable telecommunications laws)

• Coordinator account/profile/credential data: until membership withdrawal (certification/career proof files retained during membership, destroyed upon withdrawal)

• Coordinator business-card shipping address: destroyed within 90 days after the card is shipped

We do not share your personal information with third parties without your consent, except in the following cases:

• When a patient submits an inquiry to a specific clinic, the inquiry details are shared with that clinic.

• When required by law for investigative purposes

Third-party services used for platform operation: Firebase (Google), Vercel, PayPal (payments), Resend (email), Google Analytics, Sentry (error monitoring · stores IP/URL/stack traces in the US region for up to 30 days to detect service outages), Google Drive (business-card order document storage)

• When a coordinator publishes an online resume, information such as nickname, language regions, and verified activity summary becomes public on the internet and may be indexed by search engines (with separate consent at the time of publication).

To provide the service you request (a free treatment estimate), we entrust the processing of personal information to providers located outside the Republic of Korea, limited to what that service requires. The following is disclosed under Article 28-8(1)3 of the Personal Information Protection Act (PIPA).

① Understanding your estimate chat (AI processing) Items transferred = the sentences you type into the estimate chat (which may include health-related mentions) · Recipient = Google LLC (United States; privacy contact: policies.google.com/privacy) · Countries = the United States and other countries where Google operates · Timing and method = sent at the moment you submit a message, via an HTTPS-encrypted API call · Purpose = interpreting your message to extract treatments and length of stay · Retention = discarded immediately after the reply is generated (we do not store the conversation text; only the treatments and dates you confirm are kept)

② Service operating infrastructure Items transferred = account details, inquiry contents, and access logs generated while using the service · Recipients and countries = Google LLC (Firebase, US) · Vercel Inc. (US) · Resend (US) · Functional Software, Inc. (Sentry, US) · PayPal (US) · Timing and method = transmitted and stored through each provider’s encrypted APIs and cloud infrastructure while you use the service · Purpose = data storage, authentication, email delivery, payments, error monitoring · Retention = same as the retention periods in Section 3 (destroyed when the processing agreement ends)

You may refuse these transfers. However, this processing is essential to providing the service, so refusing may limit your use of certain features, including the estimate chat. To refuse, please contact us using the details in Section 7.

For transfers outside Korea we apply the safeguards required by PIPA Article 28-8(4): encryption in transit, access controls, and limiting each provider to the scope entrusted.

You may exercise the following rights at any time:

• Request to view, correct, or delete your personal information

• Request to suspend processing of your personal information

• Request account deletion

To exercise these rights, please contact us using the information below.

MyClinic uses cookies and similar technologies for service improvement and analytics. Cookies are grouped into three categories by purpose.

Essential cookies — always on Login session (Firebase Auth), language preference (NEXT_LOCALE), security / CSRF prevention. Required for core functionality; cannot be disabled.

Analytics cookies — stored only with consent Google Analytics 4 (_ga, _gid) collects anonymized statistics on visits, session duration, and referral source. Stored only when the visitor grants explicit consent under Google Consent Mode v2.

Marketing cookies — stored only with consent Used to measure the performance of Google Ads and Meta (Facebook · Instagram) campaigns and to show relevant content. The Meta pixel (_fbp, _fbc) runs only if you allow marketing cookies; without that consent no conversion data is sent to Meta.

You can change your cookie choices anytime via the "Cookie Settings" link in the footer. Your choice is saved for 12 months in the cc_consent cookie.

• Vercel Analytics uses header-based (cookieless) aggregation and does not require consent.

• Sentry error tracking does not use cookies. It only transmits IP, URL, and stack traces when errors occur. Sensitive fields (patient messages, names, emails) are automatically replaced with [REDACTED] before transmission.

Disabling all cookies via browser settings is possible but may break login, language switching, and page navigation.

Privacy Officer: Youngjong Sihn (CEO)

For privacy-related inquiries, please contact us at:

• Email: help@mediround.co.kr

• Website: https://myclinic.io.kr