Privacy Policy

Last Updated: October 5, 2026

1. Introduction

MacroPulse ("we", "us", or "our") operates the MacroPulse website, application, API, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Services.

This Privacy Policy is published in accordance with the Personal Information Protection Act of the Republic of Korea (개인정보 보호법, "PIPA"), the European Union General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act ("CCPA"), where applicable to our operations.

By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you must not use the Services.

2. Information We Collect

2.1 Account Information. When you register, we collect:

If you register via Google Single Sign-On, we also receive from Google:

2.2 Usage and Activity Data. When you interact with the Services, we log:

2.3 Email Communication Data. We retain records of emails sent to and from you:

2.4 Payment Information. For paid subscriptions (once payment is available), we store:

We do NOT collect, store, or process credit card numbers, CVVs, bank account information, or resident registration numbers. All payment instrument data is handled and stored directly by the PG, which is registered with the Financial Services Commission. We never receive or store your card information. Real-name verification is performed by the PG at the time of payment.

Billing key (auto-billing token) processing. For recurring billing, the PG issues and stores a billing key (an auto-billing token) when you register a payment method. The billing key is issued and retained by the PG, not by us; the PG uses it to request charges from the card network for each monthly renewal. We store only subscription identifiers and payment records — never the billing key value itself. Billing keys are deleted at the PG upon cancellation (payment method terminated).

2.5 Economic and Market Data. The Services collect, process, and display publicly available economic and financial data from third-party sources (Federal Reserve, Bank of Korea, ECB, and others). This data is not personal information and is not linked to your identity.

3. How We Use Your Information

We use your personal information for the following purposes:

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data under the following legal bases:

5. Cookies and Local Storage

5.1 Authentication Cookies. The Services use two first-party, HttpOnly cookies to maintain your login session:

Both cookies are marked HttpOnly (not readable by JavaScript), Secure (HTTPS only in production), and SameSite=Lax (CSRF protection). Neither cookie contains your password.

5.2 No Server-Side Session State. The application is stateless — no session data or user profile is stored in server-side memory. Authentication is handled entirely via the JWT cookies described above. Closing your browser tab clears the refresh token (unless "Remember me" was selected); the access token expires automatically after 2 hours.

5.3 No Tracking Cookies. We do not use Google Analytics, advertising cookies, tracking pixels, or third-party tracking scripts. The only cookies we set are the two authentication cookies described above.

6. Personal Information Processing Entrustment (위탁)

We entrust the following personal information processing to third-party providers (disclosed per PIPA Article 30):

We do not sell, rent, or share your personal information with any other third parties for marketing or advertising purposes.

6-2. Provision of Personal Information to Third Parties

We do not generally provide your personal information to third parties. However, for payment processing, your payer identifier, email, and payment amount are provided to the payment consignees (Korea PortOne Corp., Toss Payments) and to the payment gateways integrated through PortOne (KG Inicis). The consignees and PGs independently process payment data under their own privacy policies (PortOne: privacy.portone.io). Separate consent is obtained at the time of payment.

7. Data Security

We implement the following security measures to protect your personal information:

Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention and Destruction

8.1 Retention Period.

8.2 Destruction Procedures. When the retention period expires or the processing purpose is achieved, we destroy personal information as follows:

Where a law requires separate retention obligations, we retain the relevant data for the period required by that law and use it only within that scope.

9. Your Privacy Rights

9.1 Under PIPA (Korea). You have the right to:

9.2 Under GDPR (EU). You have the right to:

9.3 Under CCPA (California). You have the right to:

9.4 Exercising Your Rights. To exercise any of these rights, contact us at support@app.jobenable.com. We will respond to your request within 30 days. If we refuse to act on your request, we will inform you of the reasons and your right to lodge a complaint with the relevant supervisory authority.

10. Children's Privacy

The Services are not directed to children under the age of 13 (under COPPA, US) or 16 (under GDPR, EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child, please contact us at support@app.jobenable.com and we will promptly delete such information.

11. International Data Transfers

Our primary server is located in the Republic of Korea to process your personal information. However, some processing activities are performed through service providers outside of Korea:

For users in the Republic of Korea, separate consent for cross-border transfer is obtained at registration under PIPA Article 28. For users in the European Union, we rely on Standard Contractual Clauses or other lawful transfer mechanisms as appropriate.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, sending a notification to your registered email address. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Services after any change constitutes acceptance of the updated policy.

13. Contact Us and Privacy Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Privacy Protection Officer (개인정보보호책임자)

We are committed to resolving any privacy-related concerns promptly and transparently. For reports or consultations regarding personal information infringement, you may contact the following authorities: