Privacy Policy

Version v1.0 · Published August 18, 2026 · Effective August 18, 2026

The Service operator ("Company," "we," "us," or "our") operates 'LoudClip' (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our website and SaaS-based services.

1. Information We Collect

We collect minimal and essential personal information required to facilitate account creation, management, and global customer support.

1. Account Information (Mandatory): Email address, nickname, activity ID, display name, and your learning/native language settings.
2. Payment Information (Lite Plan, Standard Plan): Credit card details and payment records may be collected by our payment provider for billing purposes. We do not store your card numbers on our servers.
3. Published Content: The title, description, tags, thumbnail, and publisher attribution of decks and videos you publish (share) to the discovery area, together with the card contents (front, back, source sentence) of decks you publish. Card contents are free text entered directly by you, so they may contain personal information depending on what you enter.
4. Learning data we do not collect: The card contents of decks you have not published, your review history and learning progress state (next review date, difficulty, repetition count, and similar), and your flashcard settings are stored only on your device and are not collected by us (see Section 2).
5. Feature Usage Logs: Feature execution counters, the total number of registered videos, and license activation timestamps. Video file contents are never collected.
6. Plan Limit Administration Data: Device (browser profile) identifiers, the identifiers and counts of videos and flashcard decks held on each device, and the permitted card capacity per deck. This is the minimum information needed to enforce per-plan quantity limits and contains no video file or card contents.
7. Consent Records: The document type, version, timestamp, IP address, and browser information for each agreement you accept.
8. Automatically Collected Information: IP address, cookies, access records, browser type, and operating system information.
9. Account Deletion (Optional): The reason and any details you provide when deleting your account. Processed solely for service improvement and not used for any other purpose.

2. Video and Learning Data Storage Policy

1. Video files: LoudClip never uploads or collects your video or subtitle files to our servers. These files are stored solely in your browser's local storage (OPFS: Origin Private File System), and we have no access to them. A single registered video file must not exceed 500MB.
2. Flashcard decks and learning history: Like video files, the card contents, review history, and learning progress state of your flashcard decks are stored in your browser's local storage (OPFS) and are not stored on our servers. Decks therefore do not synchronise automatically across devices and are deleted along with your browser data if you clear it.
3. Exports (ZIP): You can export videos and subtitles, as well as decks, as ZIP files to back them up or move them to another device. These ZIP files are provided only as downloads to your own device and are not retained on our servers or in cloud storage.
4. Published (shared) content: Only where you publish content to the discovery area or make it public through a share link do we store it on our servers, so that it can be shown to other members. For a deck, its title, description, and card contents are stored in the database; for a video, a learning-material file (ZIP) consisting of subtitles and a thumbnail, together with the public thumbnail image, is stored in Cloudflare R2 object storage. Even then, the video file itself is not uploaded. If you withdraw publication, the copies held on our servers and in R2 are deleted; copies already adopted by other members are governed by Section 4.3.
5. Plan limit administration data: To enforce per-plan quantity limits, we record on our servers only minimal administrative data such as device identifiers and the identifiers and counts of videos and decks held on each device. We do not record card contents or review history.
6. Upon account deletion, all published content and the corresponding files held in R2 are removed.

3. Purpose of Processing and Legal Basis

We process collected information for the following purposes and on the following legal bases. We do not use it for any other purpose, and we will obtain separate consent if the purpose changes.

1. Account creation and management — identifying members, preventing misuse, delivering notices.
   • Legal basis: Contract performance (PIPA Art. 15(1)(4) / GDPR Art. 6(1)(b))
2. Service provision and billing — providing subscriptions, processing payments and refunds, and enforcing per-plan quantity limits.
   • Legal basis: Contract performance (PIPA Art. 15(1)(4) / GDPR Art. 6(1)(b))
3. Fraud prevention and refund eligibility assessment — analysing payment records and refund history.
   • Legal basis: Legitimate interests (PIPA Art. 15(1)(6) / GDPR Art. 6(1)(f)). Our legitimate interests do not override your fundamental rights and freedoms.
4. Community operation and enforcement — displaying published content, taking measures for violations of the Terms of Service and Community Guidelines, and handling appeals.
   • Legal basis: Contract performance / Legitimate interests
5. Evidencing acceptance of terms — identifying which version of the terms you accepted in the event of a dispute.
   • Legal basis: Legal obligation / Legitimate interests
6. Statutory record retention — retention required by the Act on Consumer Protection in Electronic Commerce, the Protection of Communications Secrets Act, and similar laws.
   • Legal basis: Legal obligation (PIPA Art. 15(1)(2) / GDPR Art. 6(1)(c))
7. Customer support — confirming inquiries, contacting you, and notifying you of outcomes.
   • Legal basis: Contract performance / Legitimate interests

4. Data Retention and Destruction

We retain personal data until the purpose of processing is achieved. Upon account deletion, we handle data as follows.

4.1 Destroyed immediately

• Published content (published videos and the card contents of published decks) and the corresponding learning-material files and thumbnail images held in R2
• Login sessions and social login connection records
• Renewal reminder delivery records

4.2 Anonymised (irreversible)

Upon account deletion, we do not physically delete the account record; instead we anonymise the identifying information.

• The email address is replaced with a value that cannot identify an individual.
• The nickname, display name, profile image, and publisher description are deleted.
• The activity ID is deleted.

Why this anonymisation is irreversible: We replace the original email address without retaining it separately, so the original individual cannot be traced back from an anonymised account. We keep no copy of the original email anywhere.

Why the account record is not physically deleted: Payment, refund, and dispute records reference the account. If the account were deleted, we could not identify the party to a refund or chargeback dispute arising after deletion. This measure protects the interests of both users and the Company.

4.3 Surviving data

• Copies of published decks already adopted by other members: So that an adopting member's learning materials are not lost when the original publisher deletes their account, adopted copies survive on that member's own device as that member's own materials (Terms of Service, Article 6(5)). Because those copies reside in that member's local storage, we cannot delete them. For this reason, you must not include personal information in content you publish (Terms of Service, Article 6(6)).
• Account deletion reason: Retained on the anonymised account for service improvement purposes. Because anonymisation severs the link to a specific individual, no separate destruction period applies.

4.4 Statutory retention obligations

Where retention is required by applicable law, we retain the records for the following periods before destruction.

4.5 Retention for dispute preparedness

The following records are retained after account deletion for dispute preparedness and destroyed once the stated period elapses.

5. Third-Party Data Sharing and Processing

1. We do not process personal data beyond the scope stated in Section 3, and we do not sell, rent, or trade it to third parties.
2. We engage the following processors to provide the Service, under contractual data protection agreements (DPA):

6. Cross-Border Data Transfer

We transfer personal data abroad for the processing and storage necessary to provide the Service, and we disclose this in this Policy in accordance with Article 28-8 of the Personal Information Protection Act.

Basis for transfer: Standard Contractual Clauses (SCCs) or equivalent measures securing an adequate level of protection.

For EU/EEA users: For transfers from the EU/EEA to third countries, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, or other adequacy mechanisms recognised under GDPR Chapter V.

7. Automated Processing

1. We automatically process your payment date and prior refund approval history to make an initial assessment of refund eligibility.
2. This is not a solely automated decision. The automated result serves as reference material for our staff, and the final decision on whether to approve a refund is made by a human.
3. You have the right to:
   • Request human review of the automated result;
   • Express your point of view regarding the decision; and
   • Contest the decision by contacting our support team.
4. Under Section 3.4 of the Refund & Cancellation Policy, where you exercise a statutory right, a member of our team will review your case individually, regardless of any automated result.

8. Your Rights and Choices

1. You may exercise your rights of access, rectification, erasure, restriction of processing, and data portability at any time.
2. You can exercise these rights directly through the "Edit Profile" and "Delete Account" features in the Service, or by contacting us at [email protected]. We will respond within 30 days.
3. If you request rectification of an error in your personal data, we will not use or provide that data until the rectification is complete.
4. Limits on erasure: Under Section 4.3, copies of published content already adopted by other members are not subject to erasure requests, because those copies are the adopting member's own materials held on that member's device.

9. Use of Cookies

1. We use cookies to provide an optimal experience. The specifics are set out in the Cookie Policy.
2. Cookies are small text files that a website server sends to your browser.
3. How to refuse cookies: You can allow or refuse all cookies through your browser settings. If you refuse cookies, some features such as staying logged in may not function properly.

10. Children's Privacy

1. The Service is intended for users aged 14 and over, and you must confirm at registration that you are at least 14 years old.
2. We do not knowingly collect personal data from children under 14. If we confirm that a child under 14 has registered, the account will be deleted immediately.
3. In some jurisdictions, including the EU/EEA, a higher age threshold (up to 16) may apply, and that threshold applies to users in those regions.

11. Data Breach Notification

1. In the event of a personal data breach likely to result in a serious risk to your rights and interests, we will notify you without undue delay in accordance with applicable law.
2. For breaches concerning EU/EEA users, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach under GDPR Article 33, and notify affected data subjects directly for high-risk breaches under GDPR Article 34.

12. Data Protection Officer and Complaints

We designate the following person to oversee personal data processing and to handle complaints and remedies:

• Data Protection Officer: The Service operator
• Contact (email): [email protected]

13. Changes to This Policy

We will announce any changes to this Policy at least 7 days before they take effect (at least 30 days for material changes). In the event of any conflict between the Korean and English versions, the Korean version shall prevail. However, this does not deprive consumers of the protections afforded to them by mandatory law.

Previous versions of this Policy remain available via their version-specific permanent links.