Privacy Policy

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes and will not use it for any other purpose. If the purpose of use is modified, the Company will implement necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

• Membership registration, user identification, record retention for dispute resolution, prevention of unauthorized use, and membership withdrawal.
• Imposition of usage restrictions on Members who violate laws and the Terms of Service, and prevention and sanctioning of acts that disrupt the smooth operation of the service, including fraudulent activities.
• Member protection and service operation, including handling customer inquiries.
• Provision and improvement of services, and development of new services.
• Purchase and payment of fees resulting from the provision of Paid Services, delivery of goods and services, or invoicing, and fee collection.
• Analysis of service usage and access frequency, and statistics on service usage.
• Provision of customized services and placement of advertisements based on service analysis and statistics.
• Introduction of new information and delivery of notifications such as amendments to the Terms of Service.
• Case collection and analysis for the advancement of video conversion services and service improvement.
• Utilization for new services, marketing, and advertising.
• Sending newsletters and guide to new services (products).

Article 2 (Items of Personal Information Collected and Collection Method)

1. Items Collected
   • Application for free trial, membership registration, and management for identity verification procedures:
     • Required Items: Name, organization size, occupation, account information, email address.
     • Optional Items: YouTube, TikTok, and Instagram channel information.
   • Provision of services and billing:
     • Transaction Information: In the case of individuals, date of birth (limited to recurring payments), credit card information (credit card number, expiration date, first two digits of the password), information for tax invoice issuance (name, contact information, email address, and business registration number for businesses).
   • Corporate Information: The Company collects corporate information of Members as follows, which may include personal information:
     • Required Items: Domain information, company (organization) name, representative's name, business registration number, corporate registration number, unique identification number.
   • Automatically Generated Data: IP address, cookies, date and time of visit, service usage records, and bad usage records may be automatically generated and collected in the course of service use.
2. Collection Method
   • Website, written forms, telephone, customer consultation, email, membership registration, and the "My Info" page.
   • Receipt from partner companies (limited to cases where the information subject has consented): Google, Kakao, LINE (LY Corporation).

Article 3 (Retention and Use Period of Personal Information)

1. The Company processes and retains personal information within the period of retention and use prescribed by laws or agreed upon by the user at the time of collection.
2. In principle, the personal information processed by the Company will be destroyed without delay upon a Member's request for withdrawal or deletion. However, even after the termination of service use due to a Member's request for withdrawal or termination, the Company shall retain the Member's information for six (6) months from the date of termination of the service agreement to prevent service confusion, recurrence of fraudulent use by bad members, prevention of re-registration, and dispute resolution.
3. The Company stores and manages personal information corresponding to any of the following clauses separately from other personal information for the period specified in each clause:
   • Where an investigation or inquiry due to a violation of relevant laws is under progress: Until the conclusion of the relevant investigation or inquiry.
   • Where claims or debts remain under the service agreement: Until the relevant claims or debts are settled.
   • Records regarding transactions, such as displays, advertisements, contract contents, and execution, under the Act on the Consumer Protection in Electronic Commerce:
     • Records on displays and advertisements: 6 months.
     • Records on contracts or withdrawal of subscriptions: 5 years.
     • Records on payment and supply of goods, etc.: 5 years.
     • Records on customer complaints or dispute handling: 3 years.
   • Website visit records under the Protection of Communications Secrets Act: 3 months.

Article 4 (Provision of Personal Information to Third Parties)

The Company processes users' personal information only within the scope specified in Article 1, unless consent is obtained from users. The Company may provide personal information to third parties only in the following cases:

1. Where prior consent has been obtained from the user.
2. Where it is necessary for fee settlement arising from service provision.
3. Where it is provided in a form that cannot identify a specific individual for statistical compilation, academic research, or market research.
4. Where there are special provisions in law or it is inevitable to comply with legal obligations.

Article 5 (Delegation of Personal Information Processing)

The Company entrusts the processing of personal information as follows to ensure smooth service provision, and supervises the secure handling of personal information related to the delegated tasks.

Article 6 (Rights and Obligations of Users)

1. Rights of Users
   • Users may view or modify their registered personal information at any time. If they do not agree with the Company's processing of personal information, they may refuse or withdraw consent, or request termination of membership (withdrawal). However, in such cases, use of part or all of the service may be restricted.
   • Users can access their information at any time upon request to view or modify it. Alternatively, if you contact the Privacy Officer in writing, by phone, or by email, measures will be taken without delay.
   • If a user requests the correction of an error in their personal information, the relevant personal information will not be used or provided until the correction is completed. Furthermore, if incorrect personal information has already been provided to a third party, the result of the correction will be notified to the third party without delay so that the correction can be made.
   • The exercise of rights may be conducted through a representative, such as the legal guardian of the information subject or a person who has been delegated authority. In this case, a power of attorney in accordance with Form 11 of the Enforcement Regulations of the Personal Information Protection Act must be submitted.
2. Obligations of Users
   • Please enter your personal information accurately and keep it up to date to prevent unforeseen incidents. The user is solely responsible for incidents arising from inaccurate information entered by the user. If you steal other people's information or enter false information, your membership status may be revoked.
   • Users have an obligation to protect themselves and not infringe upon the information of others. Please be careful not to leak your personal information, including your password, and take care not to damage the personal information and posts of others.
   • The Company assumes no liability whatsoever for damages incurred by users due to their failure to comply with the obligations in each of the preceding clauses.
   • Failure to fulfill these responsibilities and damaging the information and dignity of others may result in punishment under the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.

Article 7 (Destruction Procedure and Method of Personal Information)

The Company destroys personal information without delay when it becomes unnecessary, such as the expiration of the retention period or the achievement of the processing purpose. The destruction procedure and method are as follows:

1. Destruction Procedure: Information entered by users for membership registration, etc., is transferred to a separate database after the purpose is achieved, stored for a certain period according to internal policies and other information protection reasons under relevant laws (refer to the retention and use period), and then destroyed.
2. Destruction Method: Deleted using technical methods that render the records un-reproducible.

Article 8 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

1. Use of Cookies: The Company uses cookies to provide personalized services. Cookies are small pieces of information transmitted by a website to your computer's internet browser and stored on your computer's hard disk. Cookies identify your computer but do not identify you personally.
2. Purpose of Using Cookies:
   • To provide differentiated information according to individual areas of interest.
   • To analyze the access frequency or stay duration of members and non-members to understand users' tastes and interests, and utilize them for target marketing.
   • To analyze detailed information on clicked items and footprints of interested browsed information to provide customized services upon the next access.
   • To guide the usage period when using Paid Services.
   • To utilize as a metric for service reorganization by analyzing members' habits.
3. Installation, Operation, and Refusal of Cookies: Users have the right to choose regarding cookies. Although it may vary slightly depending on the type of web browser, most web browsers allow users to determine whether to accept cookies or delete all existing cookies through configuration settings and service deactivation. However, if you refuse to store cookies, there may be restrictions on using some customized services.
4. How to Configure Cookies:
   • Internet Explorer: Tools Menu > Internet Options > Privacy Tab > Settings.
   • Chrome: Settings Menu > Show Advanced Settings > Privacy-Content Settings > Cookies.
   • Firefox: Options Menu > Privacy > History-Custom Settings > Cookies.
   • Safari: Preferences Menu > Privacy Tab > Cookies and Website Data.

Article 9 (Protective Measures for Personal Information)

The Company undertakes the following efforts to protect users' precious personal information:

1. Administrative Measures: The Company establishes and implements an internal management plan for the secure handling of personal information. The Company restricts access to users' personal information to a minimum number of personnel.
2. Technical Measures: In processing users' personal information, the Company devises technical measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged. The Company protects and monitors its systems through a threat detection system to prepare against external intrusions such as hacking.

Article 10 (Privacy Officer)

The Company takes overall responsibility for tasks regarding personal information processing and designates a Privacy Officer and a dedicated department as follows to handle customer complaints and remedy damages related to personal information processing.

• Department in Charge of Personal Information Management & Protection
  • Name: Wonmo Jung
  • Position: CEO
  • Email: wonmo.jung@fikad.boo
  • Phone: 070-8983-4616

The Company prioritizes the protection of users' personal information and does its best to ensure that members' personal information is not damaged, infringed upon, or leaked. If you report any civil complaints related to personal information protection arising while using the service to the Privacy Officer or the person in charge, we will respond promptly.

If you need to report or receive consultation regarding other personal information infringements, please contact the following organizations:

• Personal Information Infringement Report Center (privacy.kisa.or.kr / Dial 118 without area code)
• Supreme Prosecutors' Office Cybercrime Investigation Division (spo.go.kr / Dial 1301 without area code)
• National Police Agency Cyber Bureau (cyberbureau.police.go.kr / Dial 182 without area code)

Article 11 (Exceptions to the Application of the Privacy Policy)

The Company may provide links to websites or materials of other companies to users through its website. In this case, the Company has no control over external sites and materials, and the Company's Privacy Policy does not apply to their collection of personal information. Accordingly, the Company assumes no responsibility and shall not indemnify for any personal information infringement or damage occurring outside the Company's website due to moving to a page of another site by clicking a link included by the Company.

Addenda

(Effective as of May 29, 2025)

Privacy Guidance on the Use of Video Content: The Company may utilize video content created by users for company assets, such as advertising materials, banners, and landing pages. In this process, the user's personal information will not be used for purposes other than the original purpose of the video content.

Collection of Customer Information for Data Utilization and AI Training: Fika Clip may collect and utilize customer data for the purpose of service provision and quality improvement. The information collected is as follows, and the collected information may be used for service quality improvement and artificial intelligence (AI) training:

• Channel information (channel name, channel logo, channel category, channel playlists, etc.)
• Statistical information related to the channel, such as subscriber counts and video views.

Fika Clip strictly manages customer data and does not use it without authorization outside the specified purposes.

(Effective as of June 17, 2025)

Addition to Article 5 (Delegation of Personal Information Processing):

• Ayrshare: Upload scheduling, channel analysis, video upload, and video comment management (Until membership withdrawal).

(Effective as of November 28, 2025)

Addition to Article 1:

• Added "Sending newsletters and guide to new services (products)."

(Effective as of June 18, 2026)

Processing of Personal Information for AI Voice (TTS) and Voice Cloning Features

Voice Information Collected: To provide the Voice Cloning and AI Voice features, the Company may collect or generate the following information:

• Voice data uploaded or recorded by the Member (voice samples, recording files);
• Voice cloning models generated by learning from voice data (voice feature information, etc.);
• Voice conversion usage records (input text, generation history, etc.).

Separate Consent for Sensitive (Biometric) Information: A voice cloning model generated by learning from the Member's own voice may constitute biometric identification information under the Personal Information Protection Act. The Company processes such voice information separately from general personal information and obtains separate consent from the Member for the collection and use of voice (biometric) information prior to use of the Voice Cloning feature. If the Member refuses consent, use of the Voice Cloning feature may be restricted, but other use of the Service will not be affected.

Purpose of Processing: The collected voice information is used solely for the purposes of providing the AI Voice (TTS) and Voice Cloning features, improving voice quality, and preventing fraudulent use.

Notice Regarding AI Training: Voice data provided by a Member is used only for the purpose of generating that Member's own voice cloning model and providing the feature, and is not used for any other purpose, such as training the Company's general-purpose artificial intelligence (AI) models, without the Member's separate consent.

Retention and Use Period: Voice data and voice cloning models are destroyed without delay when the Member discontinues use of the feature, requests deletion, or withdraws membership. However, where retention is required by relevant laws, such information is stored separately for the relevant period.

(Effective as of July 3, 2026)

Processing of Personal Information Related to the Use of YouTube API Services

Notice of YouTube API Services Use: Fika Clip uses YouTube API Services to provide a feature that uploads videos created by the Member directly to the Member's YouTube channel (the "YouTube Upload Feature"). Use of the YouTube Upload Feature is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).

Information Collected and Used: To provide the YouTube Upload Feature, within the scope authorized by the Member through Google account authentication (OAuth), the Company may collect and process Google/YouTube authentication tokens (access and refresh tokens), YouTube channel identification information (channel ID, channel name, etc.), and upload information entered by the Member (video title, description, tags, category, privacy status, thumbnail, etc.). The Company does not collect or store the Member's YouTube or Google login credentials (such as passwords).

Purpose of Processing: The collected information is used solely for the purpose of providing the YouTube Upload Feature, such as uploading videos to the Member's YouTube channel and checking upload status.

Retention and Destruction: Connection information such as authentication tokens is retained for the period necessary to provide the YouTube Upload Feature and is destroyed without delay when the Member disconnects the channel integration or withdraws membership.

Revocation of Access: The Member may revoke the access granted to Fika Clip at any time through the channel disconnection feature within the Service or via the Google account security settings page (https://myaccount.google.com/permissions).

Third-Party (Google/YouTube) Processing: To the extent that data uploaded by the Member is processed by YouTube, the Google Privacy Policy (https://policies.google.com/privacy) applies.

(Effective as of July 8, 2026)

Processing of Personal Information Related to the Social Platform Upload Integration Service (Post for Me)

Addition of an Entrusted Party (Article 5): To provide features that upload videos to social platforms linked by the Member, such as the YouTube Upload Feature, the Company adds Post for Me (operated by Day Moon Development LLC) as an entrusted party for personal information processing. The entrusted work consists of connecting social platform accounts (such as YouTube) and managing authentication tokens, processing video uploads, and checking upload status, and the entrustment period lasts until membership withdrawal or disconnection of the integration.

Information Processed Under the Entrustment: Social platform authentication tokens (access and refresh tokens), linked account (channel) identification information (channel ID, channel name, etc.), video files to be uploaded, and upload information entered by the Member (title, description, tags, category, privacy status, scheduled time, thumbnail, etc.).

Notice on Overseas Processing: Post for Me is an overseas service provider, and the above information may be processed and stored on servers located outside the Republic of Korea in the course of the entrusted processing.

Retention and Use Period: Information processed under the entrustment is managed so that it is destroyed without delay once the purpose of the entrustment, such as upload processing, has been achieved. Connection information such as authentication tokens is destroyed without delay when the Member disconnects the channel integration or withdraws membership.

Compliance with the Google API Services User Data Policy: Fika Clip's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

(Effective as of August 21, 2026)

Processing of Personal Information Related to LINE Social Login

Addition of Collection Source and Items (Article 2): The Company provides a LINE social login feature for convenient membership registration and sign-in. When a Member signs up or logs in with a LINE account, the Company receives and collects, within the scope consented to by the Member, the LINE account identifier (User ID), profile information (display name, profile image), and email address from LY Corporation (LINE). The Company does not collect or store the Member's LINE login credentials (such as passwords).

Addition of an Entrusted Party (Article 5): To provide the LINE social login feature, the Company adds LY Corporation (LINE) as a partner for personal information processing. The relevant work consists of account registration and authentication (LINE social login), and the period lasts until membership withdrawal or disconnection of the integration.

Notice on Overseas Processing: LY Corporation is an overseas service provider located in Japan, and the relevant information may be processed and stored on servers located outside the Republic of Korea in the course of LINE login authentication. The processing of personal information relating to LINE accounts is subject to the LY Corporation Privacy Policy (https://line.me/en/terms/policy/).

Retention and Use Period: Connection information collected through LINE login is destroyed without delay when the Member disconnects the integration or withdraws membership. However, where retention is required by relevant laws, such information is stored separately for the relevant period.

(Effective as of September 9, 2026)

Processing and Cross-Border Transfer of Personal Information Related to the Social Platform Upload Integration Service (PostPeer)

Addition of an Entrusted Party (Article 5): To provide features that upload and schedule videos to the social platforms linked by the Member (such as YouTube, TikTok, and Instagram), the Company adds PostPeer (postpeer.dev) as an entrusted party for personal information processing. The entrusted work consists of connecting social platform accounts and managing authentication tokens, processing video uploads and scheduled publishing, and checking upload status, and the entrustment period lasts until membership withdrawal or disconnection of the integration.

Information Processed Under the Entrustment: Social platform authentication tokens (access and refresh tokens), linked account (channel) identification information (account ID, channel name, profile image, etc.), video files and thumbnails to be uploaded, upload information entered by the Member (title, description, tags, category, privacy status, scheduled time, etc.), and upload processing results (post URL, status, etc.).

Notice on Cross-Border Transfer: PostPeer is an overseas service provider located in Israel. The above information is transmitted over the network to PostPeer at the time the Member connects a channel or requests an upload (or scheduled publishing), and may be processed and stored on servers located outside the Republic of Korea (including the cloud infrastructure used by PostPeer). Inquiries regarding PostPeer's handling of personal information may be made through the contact details in PostPeer's Privacy Policy (https://www.postpeer.dev/privacy). The Member may decline this transfer by not using the Social Upload Features; in that case, use of those features may be restricted, but other use of the Service will not be affected.

Retention and Use Period: Information processed under the entrustment is managed so that it is destroyed without delay once the purpose of the entrustment, such as upload processing, has been achieved. Connection information such as authentication tokens is destroyed without delay when the Member disconnects the channel integration or withdraws membership.

Revocation of Access: The Member may revoke the granted access at any time through the channel disconnection feature within the Service or via the connected-apps or security settings of each social platform account (e.g., Google: https://myaccount.google.com/permissions).

Compliance with Platform Policies: The use and transfer of information received from Google APIs by Fika Clip and the Integration Service adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. The developer policies and privacy policies of each platform, such as TikTok and Instagram (Meta), also apply to data processed through those platforms.