개인정보처리방침

MEGAalliance.org Privacy Policy
Effective Date: October 23, 2025 Version: v1.0

This Privacy Policy (“Policy”) explains how MEGAalliance.org (“Website”) collects, uses, stores, transfers, and protects your personal information. The Website respects applicable international privacy standards, including GDPR / UK GDPR, CCPA / CPRA, and the Personal Information Protection Act of the Republic of Korea (PIPA).

Required: Name, Email, Nationality
Optional: Support Message (may contain political opinions or other special/sensitive information)
Automatically Collected (Minimum): Technical logs such as IP address, User-Agent, and access time, used solely for security and duplicate submission prevention.
Collection Method: Input forms within the website (including email verification).

Notice to Minors:
This service is intended for general adult users. Do not submit information if you are under: 13 (U.S./U.K.), 16 (EU/EEA), 14 (Republic of Korea), 12 (Brazil), or the higher minimum age required by your jurisdiction. Information from minors will be deleted promptly upon discovery.

1. Categories and Methods of Data Collection

To aggregate petition participation and submit petitions to relevant authorities (e.g., U.S. government agencies or international organizations)

To prevent duplicate submissions and ensure security (via email verification and minimal technical logs)

To conduct statistical and analytical processing (using anonymized or aggregated data)

(Optional) To publicly display support messages only with the user’s explicit consent (default: private)

2. Purpose of Processing Personal Information

Standard Retention: Retained for up to one (1) year after the campaign ends, then deleted or anonymized.
Exceptions: Limited retention of hashed suppression lists or request records for rights management, dispute resolution, or prevention of re-collection.

3. Retention and Deletion

We do not sell or share personal data.
We may engage data processors (e.g., hosting or email delivery providers) under proper Data Processing Agreements (DPAs).
Only anonymized, aggregated statistics will be published in reports or on the website.
(Optional) Support messages are displayed only with the user’s explicit consent and may be later hidden or deleted upon request.

4. Third-Party Disclosure (Including Sale/Sharing)

1. Categories and Methods of Data Collection

5. User Rights and How to Exercise Them

Under GDPR / UK GDPR:
Right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (at any time). Responses are generally provided within 1 month (extendable with notice).

Under CCPA / CPRA (California):
Right to know, delete, correct, limit use of sensitive information (if applicable), and opt-out (if sale/sharing exists). Responses are generally provided within 45 days (extendable with notice).

How to Exercise:
How to Exercise: Submit a request via the [Consent Withdrawal / Deletion Request] button on the footer, and complete the required identity verification sent to your email, or by sending an email to info@megaalliance.org (identity verification required). Authorized representatives may be asked to provide proof of authorization.

Storage Location: Tokyo, Japan (AWS Tokyo Region)

Transfer Notice (Global):
- Recipient: Amazon Web Services, Inc. (Tokyo Region)
- Country / Method: Japan / Online transfer (continuous)
- Data Transferred: Name, Email, Nationality, (optional)

- Support Message, and minimal technical logs
- Purpose / Retention: Hosting, storage, and backup / up to 1 year after campaign end

Right to Object: You may refuse cross-border transfer, but non-consent may limit your ability to participate in the campaign.

EU/EEA and UK Users: Transfers are based on the data subject's explicit consent to participate in this campaign, as there are no adequacy decisions or other appropriate safeguards in place for this organization.

Korean Residents: Consent for overseas transfer is obtained together with consent for data collection and use.

6. Data Storage Location and Cross-Border Transfer

Encryption of data is applied during transmission (HTTPS/TLS). Email addresses are stored using hashing (pseudonymization). Other required fields (Name, Nationality) are stored in plaintext (unencrypted) to fulfill the campaign’s purpose, and their access is strictly controlled.

Access control and periodic security audits

Email verification and anti-bot measures to prevent duplicate submissions

In case of a personal data breach, users will be notified within the legally required period and appropriate remedial actions will be taken.

7. Security Measures and Management

When this Policy is updated, notice will be provided on the Website.
Material changes will be announced at least 7 days (30 days for major changes) before taking effect.
The Effective Date and Version will be updated accordingly.

8. Notification and Policy Updates

For privacy-related inquiries, data access/deletion requests, or complaints:

📧 info@megaalliance.org

Legal Controller Notice: The data controller for this campaign is the MEGA Alliance Operating Team. Liability for any legal disputes regarding personal data rests with the Operating Team's Representative (an individual), as this is an unregistered entity.

Privacy Policy Notice 

9. Contact Information

1. Categories and Methods of Data Collection

2. Purpose of Processing Personal Information

To aggregate petition participation and submit petitions to relevant authorities (e.g., U.S. government agencies or international organizations)
To prevent duplicate submissions and ensure security (via email verification and minimal technical logs)
To conduct statistical and analytical processing (using anonymized or aggregated data)
(Optional) To publicly display support messages only with the user’s explicit consent (default: private)

Annex Notice (Summary)

California Notice at Collection:
At the time of collection, the Website discloses categories (identifiers, technical logs, user-generated content), purposes, retention periods, and sale/sharing status (none).

Age Notice:
Personal data of minors will not be collected or used without verified parental consent, and will be deleted immediately upon discovery.

3. Retention and Deletion

4. Third-Party Disclosure (Including Sale/Sharing)

5. User Rights and How to Exercise Them

Under GDPR / UK GDPR:
Right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (at any time). Responses are generally provided within 1 month (extendable with notice).

Under CCPA / CPRA (California):
Right to know, delete, correct, limit use of sensitive information (if applicable), and opt-out (if sale/sharing exists). Responses are generally provided within 45 days (extendable with notice).

How to Exercise:
Submit a request via the [Consent Withdrawal] button on the footer, and complete the required identity verification sent to your email.
(identity verification required). Authorized representatives may be asked to provide proof of authorization.

6. Data Storage Location and Cross-Border Transfer

- Storage Location: Tokyo, Japan (AWS Tokyo Region)
- Transfer Notice (Global):
- Recipient: Amazon Web Services, Inc. (Tokyo Region)
- Country / Method: Japan / Online transfer (continuous)
- Data Transferred: Name, Email, Nationality, (optional) Support Message, and minimal technical logs
- Purpose / Retention: Hosting, storage, and backup / up to 1 year after campaign end
- Right to Object: You may refuse cross-border transfer, but non-consent may limit your ability to participate in the campaign.
- EU/EEA and UK Users: Transfers are based on the data subject's explicit consent to participate in this campaign,
as there are no adequacy decisions or other appropriate safeguards in place for this organization.

- Korean Residents: Consent for overseas transfer is obtained together with consent for data collection and use.

7. Security Measures and Management

Encryption of data is applied during transmission (HTTPS/TLS). Email addresses are stored using hashing (pseudonymization).
Other required fields (Name, Nationality) are stored in plaintext (unencrypted) to fulfill the campaign’s purpose, and their access is strictly controlled.
Access control and periodic security audits
Email verification and anti-bot measures to prevent duplicate submissions
In case of a personal data breach, users will be notified within the legally required period and appropriate remedial actions will be taken.

8. Notification and Policy Updates

9. Contact Information

For privacy-related inquiries, data access/deletion requests, or complaints:
📧 info@megaalliance.org

Legal Controller Notice: The data controller for this campaign is the MEGA Alliance Operating Team. Liability for any legal disputes regarding personal data rests with the Operating Team's Representative (an individual), as this is an unregistered entity.

Privacy Policy Notice 

MEGA Alliance is a non-political global citizens’ movement

supporting freedom of speech, freedom of religion, and fair elections.
All signatures are shared with relevant leaders and institutions for the purpose of

defending democracy, not as political endorsements.

The names, images, and statements of public figures appearing on this website are

quoted for informational purposes only

and do not imply any official endorsement or affiliation.

Furthermore, all election-related content does not assert any claim as fact

but serves to communicate publicly raised allegations and ongoing public discourse.

Withdraw Consent

MEGA Alliance is a global citizens’ movement for freedom of speech, freedom of religion,

and fair elections. It is a non-political effort to defend liberty, and all signatures

will be shared with leaders and institutions that uphold democracy — not as political support.

Withdraw Consent

MEGA Alliance is a global citizens’ movement

for freedom of speech, freedom of religion, and fair elections.
It is a non-political effort to defend liberty, and all signatures

will be shared with leaders and institutions that uphold

democracy — not as political support.