Privacy Policy

1. General provisions

Jiguryong Company (hereinafter “Company”) ClipSprayWhile operating (clipspray.ai, hereinafter “Service”), “personal information We comply with relevant laws such as the Protection Act and keep users’ personal information safe. To protect our customers, we establish and disclose this policy.

2. Personal information items collected and collection methods

• Sign up (Discord/Google login): email address, Social account identifier/profile information
• Use of services: Uploaded broadcast video file/replay (VOD) link, generated results (short form edited version, subtitles, report), report Request details for adding shorts (number of shorts to add, additional prompt, request time)
• Broadcast channel information: From the replay link that requested production Channel name, channel profile image, and platform viewed at each time. The company is We don't store your information in your account and only record it in your reports. files only We do not collect information if it is uploaded.
• Connect and upload your YouTube channel: of the linked YouTube channel ID, name, handle, thumbnail, approved OAuth authority scope, encrypted access token·refresh token and expiration time, title·description·for children Availability·YouTube video ID·URL·processing status and error history
• payment: Subscription plan, payment history, voucher usage history (Values used for tasks such as creating reports and adding shorts, and remaining passes). Payments are processed through a payment agency — domestic payments are Nice Payments Co., Ltd., Polar Software Inc. for overseas payments. is in charge.
• Domestic card regular payment registration: Card number, expiration date, First 2 digits of card password, 6 digits of date of birth (business registration number for business). This is an item required by the payment agency to verify the card company’s identity. The company does not store this information, but encrypts it and sends it to the payment agency immediately. I deliver. What remains on the company's server is the payment key issued by the payment agency and the name of the card company, Just the masked card number (last 4 digits) and expiration date.
• Customer Inquiry: Inquiry type/content and contact information for response (Email or Discord ID)
• automatic collection: Access log, IP address, browser/device Information, cookies/similar identifiers, service usage records, inflow route information (UTM parameters, ad click identifier, referrer)
• Service screen usage records (session recording): Service improvement In order to do this, user actions such as screen movement, clicking, and scrolling are displayed in a reproducible form. Record it. Text and input values displayed on the screen are masked at the time of recording. Once processed, the content itself is not stored. More details and denial Please refer to Article 9 for instructions.
• Referrer (invite a friend): Recommendation code and recommendation relationship

3. Purpose of use of personal information

• Member identification/authentication and account management
• Service provision (video analysis, creation and delivery of results, notification of completion of results)
• Upload edits explicitly selected by members to their linked YouTube channel and inform them of the upload results.
• Settlement of paid service fees and management of payment and credit usage history (including report generation and addition of shorts)
• Responding to customer inquiries
• Analysis of usage behavior and creation of statistics to improve services
• Advertising performance measurement and funnel analysis
• Prevent fraudulent use and block receipt of duplicate benefits

The process of producing results, such as selecting the editing point of the service and creating subtitles and titles, involves a creation process. AI is used. This process involves the uploaded video, the voice and chat within it, and the members. Processes additional prompts entered when adding shorts, and provides legal information for users. We do not make automated decisions that affect effectiveness, rights or obligations.

4. Retention and use period of personal information

When you request account deletion, we delete your personal information after the grace period below. However, the records listed below are retained for the specified periods in accordance with applicable laws.

• Records of contracts or subscription cancellations: 5 years (Electronic Commerce Act)
• Records of payment and supply of goods, etc.: 5 years (Electronic Commerce Act)
• Records of consumer complaints or dispute resolution: 3 years (Electronic Commerce Act)
• Service access record: 3 months (Communication Secrets Protection Act)
• Email address to prevent fraudulent registration and receipt of duplicate benefits: 30 days after withdrawal (completed destruction) (internal policy)
• The payment key and card information (card company name, masked card number, expiration date) issued by the payment agency are destroyed without delay when the subscription ends, and are also destroyed upon membership withdrawal. The payment history itself is subject to the statutory retention period above.
• YouTube channel metadata is refreshed daily. Connections not refreshed for 29 days and publication history older than 29 days are deleted. Section 7-2 describes deletion upon disconnection, account deletion or authorization revocation. Videos already uploaded to YouTube are not deleted.

After you request account deletion, your account is locked for a grace period of 7 days. You can restore your account by signing in again during this period. After the grace period, we delete your personal information, including uploaded videos and generated results, except for the records retained as listed above.

Regardless of account deletion, reports and results created on the free plan become unavailable 30 days after creation. Reports created during a paid subscription are retained while the subscription remains active. For details, see our Subscription Policy.

5. Provision of personal information to third parties

In principle, the company does not provide users' personal information to third parties. However, if an investigative agency, etc. requests it in accordance with legal procedures based on the law, Exceptions are made.

6. Entrustment of personal information processing

In order to provide services, the company entrusts the processing of personal information as follows. There is. The scope of entrustment is limited to the minimum necessary to provide services, and The period is until the end of the consignment contract or withdrawal of membership.

7. Overseas transfer of personal information

Among the above trustees, excluding Nice Payments Co., Ltd. and Naver Co., Ltd. Since the company is located overseas, personal information is transferred overseas during the performance of consignment work. It will be transferred. For domestic card payments, Nice Payments Co., Ltd. Because it is processed, it is not subject to overseas transfer. The previous history is as follows:

Users may refuse to transfer their personal information overseas. However, before the above Necessary to perform core functions of the service such as member authentication, file storage, and payment. Therefore, if you refuse, use of the service may be restricted or membership registration may be difficult. There is. The intention to refuse contact@clipspray.aiPlease let us know. Transfer for analysis/advertising purposes (PostHog, Google Ads/Google Tag) Manager, Naver Analytics) does not restrict the use of the service and does not restrict the use of the service. Individuals may opt out in this way.

Article 7-2. Use YouTube API Services

ClipSpray uses YouTube API Services to upload edited clips explicitly selected by members to their own YouTube channels. The youtube.readonly scope retrieves and displays the channel ID, name, handle and thumbnail URL. The youtube.upload scope is used only when a member confirms the destination channel, title, description, made-for-kids setting and visibility (Private, Unlisted or Public) and requests an upload. We do not publish videos without an explicit user request.

OAuth access and refresh tokens are encrypted using AES-256-GCM and stored in restricted storage. YouTube API data is used only to provide these features and handle security and errors, not for advertising targeting, sale, disclosure to third parties or AI model training.

We refresh channel metadata and check authorization daily, including for members who do not visit ClipSpray. An hourly scheduled job processes due accounts. Connections whose channel data was last refreshed 29 days ago are deleted together with their tokens, channel metadata and publication history. Publication history is deleted after 29 days. When a refresh token is confirmed revoked, the associated stored data is deleted. Temporary network failures are retried; stale API data is scheduled for deletion before it exceeds 30 days.

When you disconnect YouTube in Settings or request account deletion, we request revocation at Google and promptly delete the stored channel information, tokens and publication history. Data deletion requests are processed within seven calendar days. Deleting ClipSpray data does not delete videos already uploaded to YouTube; you must manage or delete those videos in YouTube Studio.

In addition to ClipSpray's data deletion procedure, you can revoke ClipSpray's access to your data via the Google security settings page. Our scheduled authorization checks also detect revocation there and delete the associated data. Google Privacy Policy

8. Procedures and methods for destroying personal information

Personal information whose retention period has expired or whose processing purpose has been achieved will be processed without delay. I destroy it. Deleted accounts are automatically activated every day after the grace period. Destruction operations are processed in the order below.

• Delete uploaded videos, images, and resulting files stored in the storage (Cloudflare R2) on an account basis.
• Request Google to dispose of the YouTube OAuth token and delete the saved YouTube channel information, token, and upload history.
• Delete data belonging to your account, including reports, clips, and upload history, from the database.
• By deleting identifying information such as email, leaving only the statutory storage items specified in Article 4, the account record is converted to a form in which the individual is no longer identifiable.

Information in the form of electronic files is deleted using technical methods that cannot be recovered. If you have printouts, shred them or incinerate them.

9. Operation of cookies and usage analysis tools

The Service uses cookies for essential functions, such as keeping you logged in. We use the tools below together to help us improve and measure the performance of our ads.

• PostHog: Function usage flow analysis and screen usage records (Session recording). Text and input values are masked on the recorded screen, Authentication information such as passwords is not recorded.
• Google Tag Manager · Google Ads: Advertisement influx and Measurement of subscription/payment conversion
• Naver Analytics: Visit statistics analysis

Users may refuse to save cookies or track tracking through their browser settings. Do Not Track function and customized advertising settings provided by advertising providers You can block collection for analysis and advertising purposes through the page. session If you wish to stop collecting for analysis purposes, including recording: contact@clipspray.aiPlease request . Some features, such as logging in, if you block essential cookies Use may be restricted.

10. Rights, obligations and exercise methods of users and legal representatives

You may request access to, correction or deletion of, or restrictions on processing your personal information at any time. You may also withdraw consent to its collection, use, and disclosure. Send your request to contact@clipspray.ai; we will notify you of the outcome within the period required by applicable law. You can request account deletion directly in the service settings.

We verify that requests for access, correction, or deletion come from the data subject or an authorized representative. Children under 14 may not use the service.

11. Measures to ensure the safety of personal information

The company is taking the following measures to ensure safe processing of personal information.

• Administrative measures: Minimizing the number of personal information handlers, managing access rights for handlers and regular inspections
• Technical measures: Separation of data by user through database row-level access control (RLS), separate authority control for administrator functions
• Encryption of transmission section: HTTPS (TLS) applied to all service sections
• Protection when storing: Card number, card password, and date of birth are not stored (Encrypted immediately upon input and delivered to the payment agency and not left on the company server); Only payment key, masking card number, and expiration date are stored; Adoption of a social login method that does not use a password
• Protection of external service rights: Encrypts YouTube OAuth access token and refresh token with AES-256-GCM and blocks direct viewing by general users and administrators
• Storage of access records and prevention of forgery and alteration
• Apply text and input masking to screen recordings of usage analysis tools

12. Personal information protection officer

Personal information protection officer: Hyeokjin Yoo · Contact us: contact@clipspray.ai

Inquiries, complaints, and damage relief related to the processing of personal information should be submitted to the contact information above. Please. The company will respond and process without delay.

13. Method of redress for infringement of rights and interests

Users may file a dispute with the organizations below to receive relief from personal information infringement. You can apply for resolution or consultation.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)
• National Police Agency Cyber Investigation Bureau: 182 (ecrm.police.go.kr)

Personal Information Protection Act Article 35 (View), Article 36 (Correction/Deletion), and Article 37 (Suspension of Processing) If your rights or interests have been infringed upon by the company's disposition or omission in response to the request. In this case, an administrative appeal may be requested in accordance with the Administrative Appeals Act.

14. Notification obligation

If the contents of this policy are added, deleted, or modified, service will be provided at least 7 days prior to revision. Notification will be made through notices, etc.