Privacy Policy

AlphaCut (the "Company") processes personal information for the following purposes:

• Fulfilling contracts for service provision and settling fees arising from service use
• Member management and identity verification
• Retaining records for complaint handling and dispute resolution
• Marketing and advertising activities
• Providing YouTube channel integration (video upload and channel performance analysis)
• Providing Instagram Reels and Stories upload via Instagram account integration
• Providing video upload via TikTok account integration

① The Company processes and retains personal information within the period agreed upon at the time of collection or as required by law.

② The processing and retention period for each category of personal information is as follows:

• Member registration and management: until the service agreement is terminated
• Provision of goods or services: until supply is complete and payment is settled
• Complaint or dispute handling: 3 years
• YouTube integration data: until account deletion or YouTube disconnection
• Instagram integration data: until account deletion or Instagram disconnection
• TikTok integration data: until account deletion or TikTok disconnection

① The Company processes the following personal information:

• Required fields: email, name, login ID, password

② The following personal information may be automatically generated and collected during use of the internet service: IP address, cookies, service usage records, visit records, etc.

③ When using the YouTube integration feature, the following information may be received from or processed via Google (YouTube) with the user's separate consent:

• Google account information: identification information, email address
• YouTube channel permissions: video upload permission, YouTube analytics data access (yt.analytics.readonly)
• Processed information: video files and related metadata (title, description, etc.) provided by the user for upload; YouTube channel analytics data (view count, subscriber count, watch time, etc.)

④ When using the Instagram integration feature, the following information may be received from or processed via Meta (Instagram) with the user's separate consent:

• Instagram account information: user ID, username
• Instagram content publishing permission: permission to upload Reels and Stories (instagram_content_publish)
• Processed information: video files and related metadata (description, etc.) provided by the user for upload

⑤ When using the TikTok integration feature, the following information may be received from or processed via TikTok with the user's separate consent:

• TikTok account information: user ID, profile information
• TikTok content publishing permission: video upload permission (video.publish)
• Processed information: video files and related metadata (title, description, privacy settings, etc.) provided by the user for upload

① The Company processes personal information only within the scope stated in Article 1, and discloses personal information to third parties only with the consent of the data subject or as required by law under Articles 17 and 18 of the Personal Information Protection Act.

② The Company discloses personal information to third parties as follows:

• Payment processing companies: minimum information required for payment processing
• Cloud service providers: data storage for service operation
• Meta Platforms, Inc. (Instagram): account integration information for Reels/Stories upload
• TikTok (ByteDance): account integration information for video upload

① The Company outsources personal information processing tasks as follows for smooth business operations:

• Processor: Google Cloud Platform
• Tasks outsourced: cloud service provision
• Processor: Meta Platforms, Inc.
• Tasks outsourced: content publishing service via Instagram API
• Processor: TikTok Pte. Ltd. (ByteDance)
• Tasks outsourced: content publishing service via TikTok API

② When entering into outsourcing agreements, the Company specifies in writing matters relating to prohibition of processing personal information beyond the outsourced purpose, technical and administrative protection measures, restrictions on re-outsourcing, supervision of the processor, and liability for damages in accordance with Article 26 of the Personal Information Protection Act, and supervises the processor's handling of personal information.

The Company uses information received through Google API services in compliance with the Google API Services User Data Policy (including the Limited Use Policy). Information collected through YouTube integration is used exclusively for the following purposes:

• Uploading videos specified by the user to that user's YouTube channel
• Analyzing and visualizing the user's channel performance (view count, subscribers, etc.)

Information collected in this way will not be used for other purposes or disclosed to third parties without the user's explicit consent, and will never be used for advertising purposes.

The Company uses information received through Meta (Instagram) API services in compliance with the Meta Platform Terms and Developer Policies. Information collected through Instagram integration is used exclusively for the following purposes:

• Uploading videos specified by the user as Reels or Stories to that user's Instagram account

Information collected in this way will not be used for other purposes or disclosed to third parties without the user's explicit consent, and will never be used for advertising purposes.

The Company uses information received through TikTok API services in compliance with TikTok's Developer Terms of Service and Guidelines. Information collected through TikTok integration is used exclusively for the following purposes:

• Uploading videos specified by the user to that user's TikTok account

Information collected in this way will not be used for other purposes or disclosed to third parties without the user's explicit consent, and will never be used for advertising purposes.

The Company uses the following third-party advertising measurement tools (web pixels and analytics SDKs) to measure advertising effectiveness, optimize marketing, and improve the service:

• TikTok Pixel (TikTok Pte. Ltd.) — Ad conversion measurement and ad targeting optimization
• Meta Pixel (Meta Platforms, Inc.) — Conversion measurement and ad targeting optimization for Facebook/Instagram ads
• Google Ads Tag (Google LLC) — Google Ads conversion measurement and remarketing
• privacy.sectionAds.item4

Through these tools, the following information may be automatically collected and transmitted to each operator:

• Device and browser information, IP address, page visit history, behavioral data such as clicks/scrolls, and advertising identifiers
• Information on key conversion events such as sign-up, login, and payment
• Email and user identifiers (external IDs) hashed (SHA-256) to improve ad-matching accuracy. No personal information is transmitted in plain text.

The information collected is used solely for ad delivery, advertising effectiveness analysis, personalized advertising, and service improvement, and is processed in accordance with each operator's privacy policy.

Users can opt out of personalized advertising or disable tracking under each operator's policy:

• TikTok Privacy Policy and Ad Settings
• Meta Privacy Policy and Ad Settings
• Google Privacy Policy and Ad Settings
• privacy.sectionAds.tossPrivacyLink

① Data subjects may exercise the following personal information protection rights against the Company at any time:

• Request for notification of personal information processing status
• Request for correction or deletion if there are errors
• Request to suspend processing

② Rights under paragraph 1 may be exercised in writing, by email, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

The Company takes the following technical, administrative, and physical measures to ensure security as required by Article 29 of the Personal Information Protection Act:

• Minimizing and training staff who handle personal information
• Restricting access to personal information
• Encrypting personal information
• Technical countermeasures against hacking
• Managing access rights to personal information processing systems

① The Company designates a Privacy Officer to take overall responsibility for personal information processing and to handle data subject complaints and remedy damages: