Onsimdang Smart Content Privacy Policy

Onsimdang AI Company Co., Ltd. (hereinafter "Company") processes personal information only within the scope necessary to provide the Onsimdang Smart Content service and is committed to protecting user privacy.

1. Purpose of Processing Personal Information

• Member registration, authentication, and account management
• Store registration and user permission control
• Content management, storage, processing, and requested publishing operations
• Connecting external social media accounts and executing publishing actions requested by the user
• Troubleshooting, system security, and customer support

2. Information processed and purposes

• Accounts: name, email, member ID, password authentication, sessions and optional phone number for registration, sign-in and permissions.
• Stores and content: store, product, member, invitation and role information; entered/generated text; original/edited photos, videos, thumbnails, derivatives and work/publishing states for management and processing.
• Service records: IP address, User-Agent, paths, timestamps, response status, work/security/email delivery records and inquiries for operation, troubleshooting, security and support.
• Optional social connections: account/channel/page IDs, OAuth access/refresh tokens, scopes and expiry. Requested publishing sends the necessary media, captions and status to that platform. We do not receive social-account passwords.
• Subscriptions: Google Play purchase tokens, product/base plan, status, expiry, renewal, acknowledgement and account-linked identifiers for server verification, restoration and entitlements. We do not directly collect card numbers, CVCs or bank details.
• Android: the Billing SDK can send app/SDK, device/OS, network, API performance/error diagnostics and a BillingClient instance identifier to Google. The host browser can receive app URLs and app purchase history. The identified automatic diagnostics and instance-identifier transfers are included as collection and sharing in Google Play disclosures for technical performance and error analysis. These are distinct from advertising IDs or the device's entire browsing history.

Data comes from entries/uploads, OAuth approval, subscription/restore requests and service/SDK records. OpenAI content generation is currently disabled. No advertising SDK or advertising ID collection is used. Cookies/browser storage support authentication and may be managed in browser settings.

3. Collection Methods

• Direct input by members during service use
• Direct upload of photos and videos by members
• Transmission via official OAuth when a user authorizes external platform connections

4. Retention and content cleanup

Account/store/content data remains while needed for service use and requested processing. Content uses user-controlled trash. The configured threshold is 14 days, but permanent purge is paused, so automatic permanent deletion after 14 days is not promised. Earlier 20-day/20-item or 30-day/20-item package rules are not a universal personal-data retention period.

Nginx uses 14 retained rotations; journald has a 14-day setting. Work/deletion progress, DB audit, inquiries, email-delivery records and manual encrypted audit/recovery backups do not have a uniform enforced automatic deletion deadline. Account deletion does not erase all these records/backups simultaneously. Proposed new 30/90/14-day rules are not described as already implemented. Recovery copies use a proposed 14-day retention and resolved support inquiries a proposed 90-day retention, connected to daily expiry and approval-queue processing at 04:20 Korea time. New copies use verified generation completion; existing transition copies with unverified creation dates use this policy-registration time. After 90 days from actual inquiry resolution, approved individual messages are removed from the Gmail inbox into Trash, where the provider can retain them for up to another 30 days. Unresolved/reopened inquiries and legal holds are excluded. Shared encryption keys are retained until dependent copies and replicas are retired. Deletion-replay records remain while relevant recovery copies are recoverable. Real-data erasure is currently blocked pending separate approval; these proposals are not already-enforced automatic complete-erasure guarantees. The 30-day internal-audit proposal covers verified SmartContent scope, without blanket deletion of shared account records.

5. Third-Party Integrations

When a user requests external channel connection or direct publishing, only the necessary data required to execute the action is transmitted to the respective platform:

• Google / YouTube: YouTube account integration and video publishing
• Meta / Instagram: Instagram account integration and media publishing
• TikTok: integration and publishing preparation; verified live publishing is not promised.

5.1. External and international processing

The developer server's confirmed storage region is Korea. Configured primary locations below are distinct from providers' broader documented processing; they do not trace each individual API request.

On-behalf service processing and providers' independent processing are distinguished. Social connections/publishing and subscriptions are optional. Contact us to withdraw permissions or object to transfers; refusing essential authentication/storage can prevent the relevant service. Verified live TikTok publishing and automated Naver API posting are not promised as current features.

6. Information Destruction

Data is deleted within the verified ownership and storage scope, subject to the retention, retry, backup and provider-record limits described above and below. Account withdrawal does not guarantee simultaneous erasure of every backup or provider record.

7. User Rights

Users may request access, correction, deletion, or suspension of processing of their personal data at any time. Connected platform authorizations may also be revoked directly within the application settings.

7.1. Account and data deletion requests

No app required: sign in on the website, open account management and select account deletion, or email support with your registered email, store name and deletion request. Do not send passwords or purchase tokens.

The server verifies identity and ownership. An owner's withdrawal can affect their stores/content and members exclusively associated with that organization; read the application's confirmation. Other-store data and protected accounts are not arbitrarily deleted. New work is restricted, stages are recorded and failures retried. Scoped Storage, original/edited/video-work files, related store/content DB and social credentials are processed, with Auth last. Immediate complete erasure or a three-business-day deadline is not guaranteed.

Progress/completion records, logs, recovery backups and provider-held records can remain separately. Withdrawal does not automatically cancel Play subscriptions, erase Google payment records or delete published social posts. Manage these with the relevant provider. SmartContent uses YouTube API Services; YouTube Terms and Google Privacy Policy apply. You can also revoke access through Google permissions.

Records that may remain separately: Nginx retains 14 log rotations and journald has a 14-day setting. Work/deletion progress, DB audit and email-delivery records do not have one uniform enforced automatic-erasure deadline. Recovery copies use a 14-day expiry assessment from verified generation completion (policy registration for existing transition copies with an unverified creation time); support inquiries use 90 days from actual resolution. Expiry and approval queues are connected, but real erasure is blocked pending separate approval, so these thresholds do not guarantee automatic complete deletion. Unresolved/reopened inquiries, legal holds and deletion-replay records required for recoverable backups are excluded. Messages moved to Gmail Trash may remain for up to another 30 days; providers apply their own log/backup deletion procedures and exceptions.

8. Contact & Privacy Inquiries