Privacy Policy

1. Personal information processed

ChartSight processes the minimum personal information needed for account creation, login, alert settings and service operation.

• Account information: email, display name and authentication provider identifiers
• Service settings: alert preferences, signals of interest, time zone and quiet hours
• Operational information: access logs, error logs, security events, device and browser information
• Inquiry information: inquiry title and content, operator replies, and submission and reply times
• Analysis reports: your drafts, images, revisions, public nickname, publication status and likes. When you publish, the body, images and nickname become readable without signing in.
• If payment or paid plan features are introduced, payments may be processed by a separate payment provider.

2. Purposes of use

• Account creation, login, session maintenance and identity verification
• Providing chart, indicator condition and historical statistics analysis, user settings and alerts
• Service stability, security, incident response and quality improvement
• Receiving and reviewing private inquiries and providing replies
• Important notices and information about changes to terms or policies

3. Retention period

Personal information is retained for the period needed to fulfill its purposes and deleted or anonymized without delay when an account is deleted or the purpose ends. Information needed for security logs, dispute handling or legal obligations may be retained longer to the necessary extent.

Deleting an authentication account alone does not automatically delete reports, public nicknames, images or revisions. You can make a report private in My reports. Please use the support board to request review of deletion or anonymization of associated material.

4. Third-party services and processing providers

ChartSight may use the following external infrastructure and authentication providers to provide the service.

• Supabase: authentication, user profiles, alert settings, private inquiries and storage of service data
• Vercel: web app hosting, deployment, logs and performance operations, and anonymous visitor analytics
• OAuth providers such as Google or Kakao: processing your selected social login

External services may process information according to their own security and privacy policies.

5. Cookies and similar technologies

ChartSight may use cookies, local storage or similar technologies to maintain login sessions, protect security, save preferences and analyze service quality. You can restrict cookies in your browser settings, but some features may not work correctly.

The live site uses Vercel Web Analytics, which does not use cookies, for visitor statistics. Anonymous statistics such as visited pages, referral sources, country, device and browser are used to improve the service. URL query parameters and fragments, as well as inquiry detail identifiers, are removed or generalized before transmission. Email addresses, nicknames, inquiry content and personal indicator settings are not sent as separate analytics events.

Report view deduplication uses a separate random chartsight_report_view cookie, set as HttpOnly and SameSite=Lax for up to 30 days. You can delete it in browser settings. The server uses identifier hashes and per-report UTC-day records, not raw IP addresses, emails or browser fingerprints. Repeated views of the same report by the same browser or signed-in account on the same UTC day are limited.

Deduplication records older than seven days are removed gradually, up to 500 per later view-recording request; this is not scheduled deletion. Cumulative view counts are retained. Cookie deletion or different browsers can create repeat counts, so views are not guaranteed to represent unique people. Likes are linked to your signed-in account and can be removed on the report.

6. Your rights

You may request access to, correction or deletion of your personal information, suspension of processing, or withdrawal of consent. Requests can be submitted through your account or the support board in the service.

7. Security

ChartSight applies reasonable technical and administrative safeguards, including access restrictions, authentication flow protection, server-side data access and operational log reviews. However, absolute security cannot be guaranteed for an internet-based service.

8. Children's personal information

ChartSight does not provide the service to children under 14. If we learn that a child's personal information has been processed, we will take necessary measures.

9. Changes to this policy

ChartSight will announce changes to this privacy policy on the website or in the service.