Privacy Policy — Korea Payments MCP

Last updated: 2026-07-08

Summary: this service is stateless and stores nothing. There is no database. No account system. No cookies. No analytics scripts.

What the service processes

Korea Payments MCP is a stateless translation layer between AI agents and the Korean payment gateway Toss Payments. When a tool is called, the request parameters — order amounts, order names, and your bring-your-own Toss Payments secret key sent as an HTTP header — are used in memory only to authenticate and forward a request to Toss Payments, and are discarded when the response is returned.

What is stored

• Nothing at the application layer. No orders, no credentials, no user records are written anywhere. A payment link is Toss Payments' own checkout URL, returned as-is — the server keeps no copy.
• Standard infrastructure logs. The service runs on Vercel, which keeps short-lived HTTP request logs (IP address, path, status) for operations, per Vercel's privacy policy. Credential headers are never logged by the application.

Where money and personal data actually flow

Funds always flow buyer → Toss Payments → merchant, directly. Buyer payment details (card numbers, bank info, wallet logins) are handled on Toss Payments' own hosted checkout pages and never pass through this service. Data submitted to Toss Payments is governed by Toss Payments' privacy policy.

Third parties

The only third parties that receive data are the payment gateway (Toss Payments) and our hosting provider (Vercel). No data is sold or shared with anyone else.

Your choices

Because nothing is stored, there is nothing to delete or export. Stop sending requests and no trace of your usage remains at the application layer.

Contact

Questions: reports@wishpool.app · Source code (MIT, auditable): github.com/junter1989k-ai/korea-payments-mcp