Privacy Policy
OneClip AI (the "Company") complies with the Personal Information Protection Act of Korea and other applicable law and processes personal data of ClipSquare users as follows.
1. Data we collect and how
- Sign-up and authentication: email address, sign-in identifier.
- Payment: payment method type and approval records. Payments are processed by payment providers; the Company never stores full card numbers.
- Connected accounts: access tokens and account identifiers of the social platforms you link, used only to publish.
- Generated automatically while you use the Service: access logs, usage records, device and browser information.
2. Why we use it
- Providing the Service (video generation, publishing to connected accounts, collecting performance data).
- Account management and identification, billing and settlement.
- Improving the Service, developing new features, answering enquiries.
- Meeting legal obligations and preventing abuse.
3. Retention
When you delete your account or disconnect a platform, the related personal data and access tokens are destroyed without delay, except where law requires retention:
- Records on contracts and withdrawal: 5 years (Korean E-Commerce Act)
- Records on payment and supply: 5 years (Korean E-Commerce Act)
- Records on consumer complaints and disputes: 3 years (Korean E-Commerce Act)
- Access logs: 3 months (Korean Protection of Communications Secrets Act)
4. Processors and international transfers
To provide the Service the Company entrusts processing to the providers below, some of which are located outside Korea. By using the Service you agree to these transfers.
| Recipient | Country | Data | Purpose |
|---|---|---|---|
| OpenAI, L.L.C. | United States | Script, image and voice generation inputs | Generating video elements |
| Replicate, Inc. | United States | Image generation inputs | Generating background images |
| Meta Platforms, Inc. | United States | Connected-account tokens, published content | Publishing to Instagram and Threads |
| Google LLC | United States | Connected-account tokens, published content | Uploading to YouTube |
| TikTok Pte. Ltd. | Singapore / United States | Connected-account tokens, published content | Publishing to TikTok |
| PayPal Pte. Ltd. | Singapore | Email, billing details, order records | International payments and receipts |
| Toss Payments Co., Ltd. | Republic of Korea | Payment approval records | Domestic card payments |
| Cloudflare, Inc. | United States and others | Access traffic | Security and content delivery |
Transfers happen over the network at the moment you use the Service; each provider processes data under its own privacy policy.
5. Destruction
When the retention period ends or the purpose is fulfilled, electronic files are deleted irrecoverably and printed material is shredded or incinerated.
6. Your rights
You may at any time request access to, correction or deletion of your personal data, or suspension of its processing, and you may disconnect any linked account. Send requests to the data protection officer below.
7. Security measures
- Connected-account access tokens are stored with envelope encryption (AES-256-GCM) and isolated per tenant.
- Access control and encryption in transit (HTTPS) are applied.
8. Data protection officer
Name: Sangkyoo Lee · Email: [email protected] · Phone: +82-10-3367-5551
Users in Korea may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118).