Legal

Privacy policy

Effective 1 October 2026 · 한국어

1. Who we are

This site is published by Remarble Pte Ltd (Singapore) and Remarble Inc. (Seoul), together “Remarble”, “we” or “us”. Remarble is responsible for the personal data described here. For anything in this policy, contact our privacy officer, Charmin Cho, Chief Executive, at cm.cho@remarble.co.

2. What we collect, and why

Cookies. Signing in sets four strictly necessary cookies and no others (in each name, “__Host-” means only this site can set it): “__Host-rm_session”, which keeps you signed in for up to 30 days from the last time you confirmed your address and is removed when you sign out; “__Host-rm_known”, which remembers the member addresses confirmed on that browser, with how and when each was confirmed, so you can come back with one click instead of a new email. Each address stays in it for up to 30 days from its last confirmation by email or LinkedIn; signing out removes yours, “Forget” (×) in the sign-in window removes any, and “Sign out on every device” makes it useless everywhere. Your profile is not kept in it, and the page itself sees each address only masked (“a•••@example.com”). If you tick “This is a shared computer” when you sign in, your address is not added to it, and “__Host-rm_session” is kept only until you close the browser and stops working, in any case, 12 hours after you sign in; “__Host-rm_pending”, which lasts fifteen minutes after you ask for a sign-in email, so that the code in that email can finish the sign-in on the device that asked; and “__Host-rm_oauth”, which lasts ten minutes during a LinkedIn sign-in to protect it from forgery. Until 31 October 2026 the same cookies may still be found under their earlier names, without “__Host-”; the site moves them to the new names on your next visit. All are signed, cannot be read by scripts on the page, and are not used to track you. We use no analytics, no advertising or tracking cookies and no third-party trackers.

3. Who processes it for us

We do not sell personal data or give it to anyone for their own purposes. We do not disclose it to third parties unless the law requires us to. These service providers process it on our behalf and only on our instructions:

• Google LLC (Google Sheets, Apps Script and Google Workspace): stores the subscriber, member and contact-request lists, and runs the mailbox we reply from.
• Upstash, Inc. (connected through Vercel): stores the comments posted on Insights, a copy of each member’s profile so that signing in on another device is quick, the record of partner-materials downloads, and a note of when a member signed out on every device (under a one-way code, not the address), in the United States.
• Resend, Inc.: delivers the sign-in emails, the email asking a new subscriber to confirm, and the request and new-comment notices sent to our own team (a new-comment notice gives only the author’s name and the piece), from its Tokyo region.
• Vercel Inc.: hosts the site and keeps its server logs.

The brief will be sent through one of these providers. If we add another, it will be listed here before it receives any data.

If you sign in with LinkedIn, LinkedIn Ireland Unlimited Company (or LinkedIn Corporation) confirms your identity to us under its own privacy policy; we receive only your name and verified email, and we post nothing to LinkedIn.

4. Transfers abroad

Vercel serves the site from the United States and its global network, Google stores data in the United States and in its other data centres, Upstash stores comments, member profiles and the record of materials downloads in the United States, and Resend, a United States company, sends sign-in and subscription-confirmation emails and our request and comment notices from Japan. Visiting the site therefore sends your server-log details, and subscribing, signing in, commenting or sending a request sends the details in section 2, outside Korea or Singapore. The transfer happens over an encrypted connection at the moment you visit, subscribe, sign in, comment or send a request, for the purposes and periods described in section 2. Where the law requires it, we rely on the providers’ standard contractual safeguards. If you do not want your details transferred, do not subscribe, sign in, comment or use the request forms (you can write to us instead); you can read everything on this site without doing any of these.

5. Your rights

You can ask to see the personal data we hold about you, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw your consent at any time. Withdrawing consent does not affect anything done before. Write to cm.cho@remarble.co; we will reply within ten days. You can correct your profile yourself by saving it in the sign-in window, which updates our copies. What a browser remembers (the “__Host-rm_known” cookie above) sits on that browser: signing out there, or “Forget” (×) in the sign-in window, removes your address from it, and “Sign out on every device” makes every browser’s copy of it useless at once. You can also complain to your data protection authority: in Korea the Personal Information Protection Commission (privacy.go.kr), in Singapore the Personal Data Protection Commission (pdpc.gov.sg), or in the EU or UK the authority where you live.

6. How we protect it

• Everything between your browser, this site and our service providers travels over encrypted (HTTPS) connections.
• The subscriber and member lists are reached only from our server with a secret key; their location is not exposed in the site.
• There are no passwords to leak: you sign in with a link or code that works once and expires after 15 minutes, or through LinkedIn. Partner materials, partner profiles, the deal ledger and moderation also ask for a recent confirmation of your address by email.
• Your sign-in cookie is signed so it cannot be altered, and scripts on the page cannot read it.
• Access to the lists is restricted to the Remarble staff who send the brief and run the community.
• We collect the minimum needed: an email address for the brief; for membership, only the four profile fields shown.

7. Children

This site is written for institutional investors and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has subscribed, write to us and we will delete the address.

8. Changes to this policy

We will post any change on this page with a new effective date. If a change affects how we use subscribers’ data, we will tell subscribers by email before it takes effect.

← Back to Remarble