Privacy Policy

1. Who we are

Greengorae (“we”, “us”) provides automatic heating and air-conditioning control for small businesses. Greengorae is based in the Republic of Korea (representative: Junhyeong Lee; business registration no. 309-38-01724; 12F Post Tower, 89 Mapo-daero, Mapo-gu, Seoul). This policy applies to our Singapore website.

2. Information we collect

• When you visit the site. Our hosting provider automatically processes technical data needed to deliver the page and keep it secure, such as IP address, browser type and the page requested.
• How you use the site. Our own analytics stores a random visitor ID, your visit count and the time of your first visit in your browser’s local storage, and a session ID in its session storage. With these IDs we record the pages you view, the links and buttons you click, the sections you view, how far you scroll, the referring page, campaign parameters in the link (UTM) and your browser’s user agent. We do not record what you type into forms, and these events do not include your name, email address, payment amount or order ID. We use your IP address only briefly to limit abusive requests and do not store it with these events.
• When you sign in with Google. Sign-in is provided through Supabase. We receive your name, email address and Google account identifier from Google. We request only basic profile information. We do not receive your Google password. We also record when your account was created, which sets your 48-hour first sign-in price. While you are signed in, the usage events above are linked to your account ID.
• When you make a purchase. Payments are processed by PayPal. We receive and keep the order details needed to confirm and support your purchase: order ID, plan, amount, currency, payment and refund status, and the payment notifications PayPal sends us about the order. We never receive or store your card or bank details.
• When you contact us. Your email address and the content of your message.

3. How we use information

• To provide sign-in and your account, and to show your own purchase history.
• To apply the 48-hour first sign-in price.
• To understand how visitors use the site and improve it.
• To process, confirm, fulfil and support purchases, including refunds.
• To keep the site secure and prevent fraud and abuse.
• To comply with legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for targeted advertising.

4. Cookies and browser storage

We use strictly necessary cookies to keep you signed in and to protect sign-in and sign-out from cross-site request forgery. Our analytics uses your browser’s local storage and session storage rather than cookies, as described in section 2. On our English and Singapore pages we use the Google Ads tag, which sets cookies to measure whether a visit from a Google ad led to a sign-in or a purchase (conversion measurement). We turn off Google’s ad personalization signals for this tag. You can block these cookies in your browser settings or manage Google ad settings at https://adssettings.google.com. You can clear or block this site’s storage in your browser settings; clearing it resets your visitor ID.

5. Service providers

We share personal information only with providers that process it for us:

• Supabase: authentication and database, including the usage events described in section 2.
• Google: sign-in and Google Ads conversion measurement.
• PayPal: payment processing. PayPal also acts under its own privacy policy for the payment itself.
• Our website hosting provider.

We may also disclose information if the law requires it.

6. International transfers

We are based in the Republic of Korea, and our service providers may process data in other countries, including the United States. When personal information is transferred outside Singapore, we take steps to ensure it receives a comparable level of protection.

7. How long we keep information

• Account information: until you delete your account, or 1 year after your last sign-in.
• Purchase records: as long as tax and accounting laws require, generally up to 5 years.
• Messages you send us: up to 1 year after your request is resolved.

8. Security

We limit access to personal information to people who need it, and we use encryption in transit and access controls with our providers. No method of transmission or storage is completely secure.

9. Children

Greengorae is for businesses. We do not knowingly collect personal information from children (under 13 in the United States; under 18 in Singapore without parental consent). If you believe a child has given us information, contact us and we will delete it.

10. Your choices

You can delete your account, or ask us to access, correct or delete your personal information, including usage events linked to your account, by emailing jeehyeong0128@gmail.com. We will verify your request and respond.

11. Singapore Personal Data Protection Act (PDPA)

We collect, use and disclose personal data only for the purposes described in this policy, with your consent or as permitted by the PDPA.

• Withdrawing consent. You may withdraw consent at any time by emailing us. We will tell you what withdrawal means for your account or purchases.
• Access and correction. You may request access to, or correction of, your personal data. We will respond within 30 days, or tell you when we can.
• Transfers. When we transfer personal data outside Singapore, we ensure it receives protection comparable to the PDPA.
• Data breaches. We will notify the Personal Data Protection Commission and affected individuals when required by the PDPA.
• Data Protection Officer. Junhyeong Lee, jeehyeong0128@gmail.com.

If you are not satisfied with our response, you may contact the Personal Data Protection Commission (www.pdpc.gov.sg).

12. Changes to this policy

If we change this policy, we will update the date above and, for significant changes, notify signed-in users.

13. Contact

Greengorae, 12F Post Tower, 89 Mapo-daero, Mapo-gu, Seoul, Republic of Korea. Email: jeehyeong0128@gmail.com.