Privacy Policy
This is an English reference translation. The Korean version of this Privacy Policy prevails in the event of any discrepancy.
Korea Positioning Technology Co., Ltd. (the "Company") establishes the following Privacy Policy to protect users' personal information and to safeguard their related rights and interests in accordance with the Personal Information Protection Act.
1. Personal Information Collected and Methods of Collection
| Category | Items | Collection method |
|---|---|---|
| Photo containing a face | One photo uploaded by the user | Uploaded directly by the user at the time of payment |
| Order information | Order number, selected theme, payment details | Generated during use of the Service |
| Email address for notifications | Entered directly by the user at payment | |
| For refund requests | Email address, refund reason | Entered directly by the user |
| Service usage data (analytics) | Access IP, device identifiers via cookies/similar technologies, page and event usage records, browser and device information | Collected automatically during use of the Service |
The Company does not require any separate membership registration and provides the Service anonymously through a unique link. Service usage data (analytics) is collected and used in anonymous, aggregate form that does not identify the user; face photos and the contents of emails are not transmitted to analytics tools.
2. Purpose of Collection and Use
- Face photo: used only for the purpose of creating an AI keepsake video.
- Order information: performing the transaction, such as payment processing, video delivery, and refunds.
- Email: sending the finished video link, refund notices, and results of refund-request handling.
- Service usage data: analyzing service usage statistics, diagnosing errors, and improving quality and performance (anonymous statistics).
3. Handling of Face Photos
Photos containing a face are used only for creating the AI keepsake video (compositing the person into the video), and are not processed for identity verification, identification, or personal identification through facial recognition. The Company processes them, under the "consent to collection and use of personal information," solely for the video-creation purpose, and destroys them in accordance with the criteria in Section 6 once the purpose is achieved. If you do not wish to provide a photo, use of the video-creation service will be limited.
4. Overseas Transfer of Personal Information
To provide the Service, the Company entrusts the processing and storage of personal information to overseas operators as set out below, to the extent necessary to conclude and perform the contract. In accordance with Article 28-8 of the Personal Information Protection Act, this is disclosed in this Policy, and the user may refuse the overseas transfer by choosing not to use the video-creation service.
| Category | Face photo | Email address | Service usage data (analytics) |
|---|---|---|---|
| Transferred items | Uploaded face photo | Email address entered at payment | Access IP, device identifiers, page/event usage records (excluding face photo and email) |
| Destination country · recipient | Interastral Peace Limited (PiAPI, Hong Kong) · support@piapi.ai | Resend, Inc. (USA, email delivery agent) · resend.com | PostHog, Inc. (USA) · posthog.com · Vercel, Inc. (USA) · vercel.com |
| Time · method of transfer | Transmitted over the network at the time of video creation | Transmitted over the network when sending completion/refund notices | Transmitted over the network at the time of service use (page visits/events) |
| Purpose · retention period | Video creation / retained and destroyed in accordance with the relevant operator's (PiAPI) privacy policy | Email delivery / retained and destroyed in accordance with the relevant operator's (Resend) privacy policy | Service usage analytics / retained and destroyed in accordance with each operator's (PostHog·Vercel) privacy policy |
5. Entrustment of Processing
| Processor | Entrusted task |
|---|---|
| TossPayments Co., Ltd. | Payment processing |
| Supabase, Inc. (US company / data storage region: Seoul, South Korea) | Database and file (photo) storage and hosting |
| Interastral Peace Limited (PiAPI, Hong Kong) | Video rendering |
| Resend, Inc. (overseas) | Email delivery |
| PostHog, Inc. (USA) | Service usage analytics |
| Vercel, Inc. (USA) | Service hosting and web traffic/performance analytics |
6. Retention/Use Period and Destruction
The original photo, the finished video, and the "view video" link are all automatically destroyed 30 days after the payment date. Transaction and payment records that must be retained under applicable law are retained for the relevant period and then destroyed.
7. Rights of the Data Subject
Users may request to access, correct, delete, or suspend the processing of their personal information, and may withdraw their consent. Requests are received at the contact below.
8. Security Measures
The Company takes measures necessary to ensure security, such as encrypted transmission of personal information, control over access privileges, and access restriction through unique, unguessable links.
9. Personal Information Protection Officer
Korea Positioning Technology Co., Ltd. · Email support@zzalkak.me · Phone 042-710-6266