Privacy Policy

1. Information processed and purpose

You may enter brokerage-account labels, holdings, trades, currency exchanges, dividends, loans, cash-flow entries and reference FX rates to manage your records. Creating an ONSEMO account, or providing your name or email address, is not required. Your own records may nevertheless contain identifying information.

2. Local encryption and on-device OCR

The vault is encrypted in browser IndexedDB using AES-256-GCM with a passphrase-protected encryption key. A four- or six-digit PIN only locks the currently open session and does not replace the passphrase. OCR uses same-origin JavaScript, WASM and recognition models in your browser. Invest does not upload the selected screenshot or recognized text to ONSEMO servers. OCR model files may require an initial download.

3. Technical website requests and public market API

Cloudflare delivers static files and provides network and security services. Processing requests may involve IP addresses, browser or device details, requested paths and timestamps. The /api/market/ Cloudflare Worker and D1 database are designed for public market research data, not financial vaults, personal transactions, screenshots or passphrases. Exact operational log retention and settings require separate confirmation.

4. Storage periods and deletion

The encrypted local vault remains on your device until you delete or replace it, or clear this site's browser data. Clearing site data for invest.onsemo.com can remove the vault and offline files. Exported encrypted JSON backups remain wherever you save them and must be deleted by you. ONSEMO cannot recover a lost vault passphrase or missing backup file.

5. External services and potential international handling

Cloudflare provides hosting, security and the public market-data infrastructure. Network-related technical information may be processed outside Korea on its global network. Its own privacy policy provides additional information. The operator must verify applicable transfer disclosures, retention terms and contracts before public launch. If you manually upload encrypted backups to Google Drive, OneDrive or another service, that is your action under the chosen provider's terms; Invest does not obtain OAuth access.

Cloudflare Privacy Policy ↗

6. Browser storage and cookies

Invest uses IndexedDB for the encrypted vault, Service Worker/Cache Storage for public offline assets, and memory for the session PIN. The reviewed Invest app code contains no Google Analytics or Google OAuth scripts. Cloudflare may independently use technical network metadata and security measures. Restricting site storage may stop the vault from working.

7. Your choices and security limits

You can review, edit and delete investment entries in the app, export encrypted backups and clear your browser's site data. As ONSEMO does not store a readable financial vault, it cannot retrieve, restore or delete your individual financial entries remotely. Device compromise, malicious extensions or exposed passphrases may still cause data loss or disclosure.

8. Operator and privacy inquiries

Service: ONSEMO Invest (invest.onsemo.com). A named responsible operator and functioning private privacy-contact channel have not yet been confirmed and published. These must be completed before public launch; this provisional notice does not claim a finished statutory contact disclosure. Do not post financial statements, account details, passphrases or backups on public issue trackers.

9. Updates

Effective date: 2026-10-22. This notice will be updated when processing methods, external service providers or contact information change.