Privacy Policy
At Addlystream, we believe your financial data deserves the same care you put into managing your budget. This privacy policy explains how we collect, use, and protect your personal information when you use our minimalist budgeting platform. We're committed to transparency because trust forms the foundation of good financial habits.
Information We Collect
Personal Information
When you create an account with Addlystream, we collect basic information to personalize your budgeting experience. This includes your name, email address, and any preferences you set for currency and budget categories.
- Email address and account credentials
- Name and preferred display settings
- Currency preferences and regional settings
- Budget categories and spending limits you define
- Transaction data you manually input or import
- Device information and IP address for security purposes
Financial Data
Your financial information remains under your control. We only access transaction data that you choose to share through our platform. Bank connections use read-only access through secure, encrypted channels, and we never store your banking credentials on our servers.
Usage Analytics
We collect anonymized data about how you use our platform to improve the user experience. This includes which features you use most, how often you check your budget, and general navigation patterns. This data cannot be traced back to your individual account.
How We Use Your Information
Your data serves specific purposes that directly benefit your budgeting experience. We use your information to provide personalized budget tracking, send you relevant notifications about spending patterns, and improve our service based on user feedback.
We analyze spending patterns to offer insights about your financial habits, but this analysis happens automatically without human review of your personal data. Our algorithms identify trends that might help you save money or avoid overspending.
Communication from Addlystream focuses on account security, feature updates, and optional budget reminders. You can customize notification preferences or opt out of non-essential communications at any time through your account settings.
Information Sharing and Third Parties
We don't sell your personal or financial data to advertisers, data brokers, or marketing companies. Your budget information stays private and is never shared for commercial purposes.
Limited data sharing occurs only with essential service providers who help us maintain the platform. This includes our cloud hosting provider, email service for account notifications, and payment processor for subscription management. These partners operate under strict data protection agreements.
Legal disclosure of your information would only occur if required by South Korean law, court order, or to protect against fraud or security threats. We would notify you of such requests unless legally prohibited from doing so.
Your Privacy Rights
Under South Korean privacy laws, you have several rights regarding your personal data. We've designed our platform to make exercising these rights straightforward and accessible.
Access Your Data
Request a complete copy of all personal information we have about you. This includes your account details, transaction history, and any notes or categories you've created.
Correct Information
Update or fix any incorrect personal information in your account. Most corrections can be made directly through your account settings.
Delete Your Account
Request complete deletion of your account and all associated data. This process typically completes within 30 days of your request.
Data Portability
Export your budget data in a standard format that you can use with other financial management tools or for your own records.
Limit Processing
Restrict how we use your information while keeping your account active. This might affect some personalization features but preserves your data.
Withdraw Consent
Remove permission for optional data processing like analytics or marketing communications while maintaining core budgeting functionality.
To exercise any of these rights, contact us using the information provided at the end of this policy. We'll respond to your request within 72 hours and complete most actions within 30 days.
Data Security and Protection
Protecting your financial information requires multiple layers of security. We implement industry-standard encryption, regular security audits, and strict access controls to safeguard your data.
Encryption
All data transmissions use TLS 1.3 encryption. Your information is encrypted both in transit and at rest using AES-256 standards.
Access Controls
Employee access to user data is strictly limited and monitored. All access requires multi-factor authentication and is logged for security audits.
Regular Audits
Independent security firms conduct quarterly assessments of our systems. We promptly address any identified vulnerabilities.
Backup Systems
Your data is backed up daily to multiple secure locations. These backups are encrypted and tested regularly for integrity.
Despite our security measures, no system is completely invulnerable. If a data breach affects your account, we'll notify you within 24 hours and provide specific information about what data was involved and what steps we're taking to resolve the issue.
Data Retention and Deletion
We keep your information only as long as necessary to provide our service and comply with legal requirements. Different types of data have different retention periods based on their purpose and legal obligations.
Retention Periods
- Active Account All data retained while your account remains active and in good standing
- 6 Months Transaction history and budget data after account deletion (for dispute resolution)
- 2 Years Account creation logs and security incident records (legal compliance)
- 5 Years Payment records and tax-related information (South Korean financial regulations)
- Immediate Marketing preferences and optional analytics data (deleted upon request)
When data reaches its retention limit, we use secure deletion methods that make recovery impossible. For highly sensitive financial data, we use multi-pass overwriting techniques that exceed government security standards.
International Data Transfers
Addlystream operates primarily within South Korea, but some of our service providers maintain servers in other countries. When your data crosses international borders, we ensure it receives the same level of protection as required by South Korean privacy laws.
We use standard contractual clauses approved by South Korean authorities to govern international data transfers. These contracts require our international partners to maintain equivalent data protection standards and notify us immediately of any security concerns.
You can request that your data remain within South Korea's borders, though this might limit some features like real-time currency conversion or international bank connections. Contact us to discuss these options if data locality is important to you.
Changes to This Policy
We update this privacy policy when we add new features, change our data practices, or need to comply with new legal requirements. Significant changes will be announced through email notification and a prominent notice in your account dashboard.
Minor updates like clarifying existing practices or fixing typographical errors won't trigger notifications, but we'll update the effective date at the top of this policy. We recommend reviewing this policy periodically to stay informed about how we protect your privacy.
If changes significantly affect your rights or how we handle your data, you'll have 30 days to review the updates before they take effect. During this period, you can export your data or delete your account if you disagree with the changes.
Contact Us About Privacy
If you have questions about this privacy policy or want to exercise your privacy rights, we're here to help. Our privacy team typically responds to inquiries within one business day.
729-7 Siksa-dong, Ilsandong-gu
Goyang-si, Gyeonggi-do, South Korea