Search

SPI Global Privacy Policy

Effective date: December 7, 2026
Seoul Property Insight Corp. ("SPI," "we," "us," or "our") processes the personal information of users of SPI Global (global.seoulpi.io, the "Service") in accordance with the Personal Information Protection Act of the Republic of Korea ("PIPA") and other applicable laws. This Privacy Policy explains what we collect, why we collect it, how long we keep it, and how you can exercise your rights.

At a Glance

Topic
Summary
What we collect
Business email, name, organization, job title, country; Extended Access form responses; usage records such as viewing history and search queries
Why
To provide and secure the Service, respond to your requests, and understand how the Service is used
How long
Until you close your account, unless the law requires us to keep it longer
Third-party provision
None, except with your consent or as required by law
Overseas transfer
Yes, to service providers in the United States and Singapore (see Section 6)
Contact
Angela Kim, CEO (Chief Privacy Officer), contact@seoulpi.co.kr

1. Purposes of Processing

We process personal information only for the following purposes. If a purpose changes, we will take the steps required by PIPA, such as obtaining your separate consent.
•
Registration and sign-in: verifying your business email address, sending one-time sign-in links and codes, and preventing false or duplicate registrations.
•
Providing the Service: managing your access level, daily viewing limits and Extended access.
•
Eligibility and geographic restrictions: checking email domains and network locations to apply the eligibility rules in our Terms of Service.
•
Security and abuse prevention: detecting bots, automated access and scraping, applying rate limits, sending warnings, and reviewing usage records to identify activity that may violate our Terms of Service.
•
Responding to your requests: reviewing Extended Access submissions and inquiries, checking the usage records of your account where needed to respond to an inquiry, and contacting you about your request and SPI's subscription offerings.
•
Analytics and improvement: understanding which content and features are used, what users search for, and where users stop during registration, in order to improve the Service.
•
Newsletter: sending our newsletter if you have opted in.
•
Legal compliance: meeting legal obligations and handling disputes.

2. Personal Information We Process

Category
Items
When collected
Legal basis
Registration (required)
Business email address; full name; organization; job title; country where you are based
At registration
Necessary to perform our contract with you (PIPA Art. 15(1)(4))
Extended Access form
Required: organization type and involvement in Korean real estate; preferred license, number of seats and plan; likelihood of subscribing and acceptable price; preferred billing cycle and payment method; annual budget for market intelligence tools; who makes purchasing decisions; interest and experience in raising capital from, or investing in, Korea and related information needs; interest in reports and events; feedback on SPI; and any text you enter in "Other" fields. Optional: any comments you enter in the final comment field. Your responses are linked to your profile and account email address.
When you submit the form
Necessary to take steps at your request before entering into a contract (PIPA Art. 15(1)(4))
Inquiries
Email address, name and the content of your message
When you email us
Necessary to respond to your request (PIPA Art. 15(1)(4))
Newsletter (optional)
Email address; subscription and consent records
When you opt in during registration or subscribe on our homepage
Your consent (PIPA Art. 15(1)(1))
Usage records (automatically collected)
IP address; access logs (dates, times, pages visited); browser and device information; content viewing history; search queries together with your account, access level and time; interactions with gates, forms and the registration flow; session recordings of how you navigate and interact with pages (such as clicks, scrolling and page movements)
While you use the Service
Necessary to provide and secure the Service (PIPA Art. 15(1)(4)) and our legitimate interests that clearly outweigh your rights (PIPA Art. 15(1)(6))
You may decline to provide the required registration information, but you will not be able to use the Service. Submitting the Extended Access form is up to you. If you do not submit it, you can continue to use the Service with Basic access. Declining the newsletter does not affect your use of the Service.
We do not collect sensitive information (such as health or political views) or unique identification numbers. Your recent searches are stored only in your browser's local storage on your own device.
Please do not include sensitive personal information in the free-text fields of the Extended Access form.

3. Retention and Destruction

3.1 We keep personal information only for as long as needed for the purposes above.
Information
Retention period
Registration information and Extended Access responses
Until you close your account
Content viewing history, search queries and other usage records linked to your account
Up to 2 years from collection, or until you close your account, whichever comes first
Newsletter subscription (including subscribers without an account)
Until you unsubscribe or, if you subscribed through your account, until you close your account
Inquiries
1 year from your last inquiry
Website access logs
3 months (Protection of Communications Secrets Act)
3.2 When the retention period ends or the purpose is achieved, we destroy the information without delay. We select the information to be destroyed and destroy it with the approval of our Chief Privacy Officer. Electronic files are deleted using methods that prevent recovery, and printed materials are shredded or incinerated.
3.3 Where the law requires us to keep information after the purpose is achieved, we move it to a separate database (or, for paper records, a separate locked storage) and use it only for the purpose required by that law. Usage data may be retained after account closure only in a form that can no longer identify you, for statistical purposes.

4. Provision to Third Parties

We do not provide your personal information to third parties, except where you have given your consent or where the law requires or permits it. Examples include a request from an administrative or investigative authority through lawful procedures such as a warrant, and a case where disclosure to a relevant authority is clearly necessary to protect the life, body or property of you or another person in an emergency.

5. Processing by Service Providers

We use the following service providers to operate the Service. We require them by contract to protect personal information and to process it only for the outsourced tasks.
Service provider
Task
Twilio Inc. (SendGrid)
Sending sign-in emails and service emails
The Rocket Science Group LLC (Mailchimp)
Sending the newsletter
Google LLC
Re-sending sign-in emails through Gmail when delivery fails; bot detection (reCAPTCHA)
Slack Technologies, LLC
Internal notifications to SPI staff about Extended Access submissions and inquiries
Google LLC (Google Cloud)
Hosting the Service and storing data
PostHog, Inc.
Recording use of the Service for customer support, abuse detection and usage analytics
Google LLC (Google Analytics), if used
Usage analytics
If a service provider changes, we will update this Privacy Policy.

6. Overseas Transfer of Personal Information

6.1 Some of the service providers above process personal information outside the Republic of Korea. We transfer personal information to them because the transfer is necessary to conclude and perform our contract with you, including providing and securing the Service, responding to your requests and enforcing our Terms of Service, and we disclose the following details in this Privacy Policy (PIPA Art. 28-8(1)(3)).
Recipient (contact)
Country
Items transferred
Timing and method
Purpose
Retention
Twilio Inc. (SendGrid) (privacy@twilio.com)
United States
Email address, name
Over the network whenever an email is sent
Email delivery
Until the purpose is achieved or the contract with the provider ends
United States
Email address; IP address and browser information (reCAPTCHA); if Google Analytics is used, cookie identifiers and records of visits and use of the Service
Over the network when an email is re-sent, a check is performed or, if Google Analytics is used, you use the Service
Email delivery; bot detection; usage analytics (if Google Analytics is used)
Same as above; Google Analytics data is kept for up to 2 years from collection
PostHog, Inc. (privacy@posthog.com)
United States
Cookie identifiers, account identifier, IP address, browser and device information, records of visits and use of the Service, and session recordings
Over the network when you use the Service
Customer support; abuse detection; usage analytics
Up to 2 years from collection
Slack Technologies, LLC (privacy@slack.com)
United States
Name, email address, organization, job title, country, Extended Access responses, inquiry content
Over the network when a submission or inquiry is received
Internal notifications
Same as above
The Rocket Science Group LLC (Mailchimp) (privacy@intuit.com)
United States
Email address and name (name for registered members only)
Over the network when you subscribe and whenever a newsletter is sent
Newsletter delivery
Until you unsubscribe or the contract with the provider ends
Google LLC (Google Cloud) (Data Privacy Office: support.google.com/policies/contact/data_privacy_office)
Singapore
All information described in Section 2
Stored on the provider's servers on an ongoing basis
Hosting and storage
Same as above
6.2 Except for the transfer to Mailchimp, these transfers are necessary to provide the Service, so you can refuse them only by not registering or by closing your account. If you refuse, you will not be able to use the Service. You can refuse the transfer to Mailchimp by not subscribing to the newsletter or by unsubscribing, without any effect on your use of the Service.

7. Cookies and Similar Technologies

7.1 We use cookies and similar technologies to keep you signed in and to protect the Service. We also use PostHog, and may use Google Analytics, which place cookies in your browser, to collect records of visits and use of the Service, including session recordings of how you navigate and interact with pages, in order to respond to your inquiries, detect abuse of the Service, and understand how the Service is used and improve it. This information is kept for up to 2 years from collection. We store your recent searches in your browser's local storage.
7.2 You can block or delete cookies in your browser settings. If you block essential cookies, you may not be able to sign in or use some features. We do not allow third parties to collect behavioral information through the Service for targeted advertising.

8. Security Measures

We take the following measures to protect personal information:
•
Administrative: internal management plans, limiting access to authorized staff, and regular training.
•
Technical: encryption of data in transit, access controls and authentication for systems that process personal information, retention of access records, and security software.
•
Physical: restricting access to facilities and equipment where personal information is stored.

9. Your Rights

9.1 You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time. You may also withdraw any consent you have given.
9.2 The Service does not provide an account settings page. To exercise these rights, email contact@seoulpi.co.kr from your registered email address or contact our Chief Privacy Officer (Section 11). We will verify that the request comes from you or your authorized representative, and we will respond within 10 days. If you act through a representative, the representative must submit a power of attorney.
9.3 You can withdraw your newsletter consent at any time by using the unsubscribe link in each newsletter.
9.4 We may limit or refuse a request where the law permits, and we will tell you the reason.

10. Automated Decisions

10.1 We use automated processing to check whether you are eligible to register (for example, by checking your email domain and network location) and to detect and limit automated access and other abuse of the Service.
10.2 Where the Personal Information Protection Act of the Republic of Korea gives you rights concerning automated decisions, you may exercise those rights by contacting us (Section 11).

11. Chief Privacy Officer

If you have any questions or complaints about how we handle personal information, please contact:
•
Chief Privacy Officer: Angela Kim, CEO
•
Phone: +82-2-779-9820
•
Address: 3F, Seoul Finance Center, 136 Sejong-daero, Jung-gu, Seoul 04520, Republic of Korea
•
Department handling requests: Management Support Team, +82-70-4012-7494

12. Remedies

If you need help with a privacy infringement, you may contact the following organizations in the Republic of Korea:
•
Personal Information Dispute Mediation Committee: www.kopico.go.kr, +82-1833-6972
•
Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr, +82-118
•
Supreme Prosecutors' Office: www.spo.go.kr, +82-1301
•
Korean National Police Agency, Cyber Bureau: ecrm.police.go.kr, +82-182
•
Central Administrative Appeals Commission: www.simpan.go.kr, +82-110

13. Children

The Service is intended for professionals and is not directed to individuals under 18. We do not knowingly collect personal information from children under 14.

14. Applicable Law

SPI is based in the Republic of Korea and processes personal information in accordance with the laws of the Republic of Korea. This Privacy Policy is governed by the laws of the Republic of Korea. If you use the Service from outside the Republic of Korea, your personal information will be processed in the Republic of Korea and in the countries described in Section 6.

15. Links to Other Websites

The Service may contain links to websites operated by third parties. Those websites have their own privacy policies, and we are not responsible for how they handle personal information. Please review their privacy policies before providing any information.

16. Changes to This Privacy Policy

We will post any changes to this Privacy Policy, together with the effective date, at least 7 days before they take effect. If a change materially affects your rights, we will give at least 30 days' notice. Previous versions are available on request.
•
Version 1.0: effective December 7, 2026