Privacy Policy

Version v1.0 · Published August 18, 2026 · Effective August 18, 2026

The Service operator ("Company," "we," "us," or "our") operates 'LoudClip' (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our website and SaaS-based services.

1. Information We Collect

We collect minimal and essential personal information required to facilitate account creation, management, and global customer support.

1. Account Information (Mandatory): Email address, nickname, activity ID, display name, and your learning/native language settings.
2. Payment Information (Lite Plan, Standard Plan): Credit card details and payment records may be collected by our payment provider for billing purposes. We do not store your card numbers on our servers.
3. Published Content: The title, description, tags, thumbnail, and publisher attribution of decks you publish (share) to the discovery area, together with the card contents (front, back, source sentence) of decks you publish. Card contents are free text entered directly by you, so they may contain personal information depending on what you enter.
4. Private learning data: The card contents of decks you have not published, your review history and learning progress state (next review date, difficulty, repetition count, and similar), and your personal videos' list information and subtitle and thumbnail files (plus own video files on the Lite and Standard Plans). This data is stored on the Company's servers (the database and Cloudflare R2) so that only you can use it (Section 2). Card contents are free text you enter yourself, so they may contain personal information depending on what you enter. An own video file may contain the content of a video you filmed or produced (which may include personal information such as voices or faces); we do not collect YouTube video files.
5. Own video file administration data (Lite and Standard Plans): The hash, size, and upload status of files, used to recognise the same file and to resume uploads, and the time a paid plan ended together with records of notices sent about scheduled deletion of video files.
6. Feature Usage Logs: Feature execution counters, the total number of registered videos, and license activation timestamps. These logs do not include the contents of video files.
7. Plan Limit Administration Data: The identifiers and counts of videos and decks registered to the account, the time an item was last deleted, flashcard study settings (new cards and reviews per day), and the hashes and sizes of personal files (subtitles, thumbnails, and video files). This is the minimum information needed to enforce quantity limits and per-item size limits.
8. Consent Records: The document type, version, timestamp, IP address, and browser information for each agreement you accept.
9. Automatically Collected Information: IP address, cookies, access records, browser type, and operating system information.
10. Account Deletion (Optional): The reason and any details you provide when deleting your account. Processed solely for service improvement and not used for any other purpose.

2. Video and Learning Data Storage Policy

1. Video files: We do not store or collect YouTube video files. The file of an own video you register yourself (Lite and Standard Plans) is stored in the Company's private Cloudflare R2 object storage. That file is provided only to you through short-lived links and is not made public to other members, and we do not view its contents unless there is a reason set out by law or the Terms, such as a notice from a rights holder. A single registered video file must not exceed 500MB.
2. Flashcard decks and learning history: The card contents, review history, and learning progress state of your flashcard decks and your personal video list are stored in the Company's database, and subtitle and thumbnail files are stored in the Company's private Cloudflare R2 object storage; only you can use them, on every device signed in to the same account. If your internet connection drops briefly during study, review results from that period are kept temporarily in your browser (localStorage) and removed once they have been saved to the server after the connection returns.
3. Exports (ZIP): You can export videos and subtitles, as well as decks, as ZIP files to keep them yourself. These ZIP files are provided only as downloads to your device and are not kept on the Company's servers.
4. Deletion and restore: Of the decks and videos you delete, only the last deck and the last video you deleted (one of each) can be restored. When you delete another item, the previously deleted item is permanently deleted. Subtitle, thumbnail, and video files that are no longer used by any item are removed by the Company's periodic clean-up.
5. Retention and deletion of private learning data: Private learning data is retained until you delete your account and is deleted without delay when you do. However, when your paid plan ends, the video files of own videos that exceed your limit are deleted 60 days after the end date (the video entries, subtitles, thumbnails, decks, and learning history remain), and we will notify you by email 30 days and 7 days before the deletion.
6. Published (shared) content: Only where you publish content to the discovery area or make it public through a share link do we store it on our servers, so that it can be shown to other members. For a deck, its basic information (such as title and description) is stored in the database, and a learning-material file (ZIP) consisting of the card contents and subtitles, a preview learning-material file, and the public thumbnail image are stored in Cloudflare R2 object storage. Even then, the video file itself is not uploaded. If you withdraw publication, the copies held on our servers and in R2 are deleted; copies already adopted by other members are governed by Section 4.3.
7. Plan limit administration data: To enforce per-plan quantity limits (per account on every plan) and per-item size limits, the Company records minimal administrative data on its servers, such as item identifiers and counts, the SHA-256 hashes and sizes of personal files, the time an item was last deleted, and flashcard study settings.
8. Upon account deletion, all published content and the corresponding files held in R2 are removed.

3. Purpose of Processing and Legal Basis

We process collected information for the following purposes and on the following legal bases. We do not use it for any other purpose, and we will obtain separate consent if the purpose changes.

1. Account creation and management — identifying members, preventing misuse, delivering notices.
   • Legal basis: Contract performance (PIPA Art. 15(1)(4) / GDPR Art. 6(1)(b))
2. Service provision and billing — providing subscriptions, processing payments and refunds, managing quantity limits, and storing your private learning data and making it available on all your devices.
   • Legal basis: Contract performance (PIPA Art. 15(1)(4) / GDPR Art. 6(1)(b))
3. Fraud prevention and refund eligibility assessment — analysing payment records and refund history.
   • Legal basis: Legitimate interests (PIPA Art. 15(1)(6) / GDPR Art. 6(1)(f)). Our legitimate interests do not override your fundamental rights and freedoms.
4. Community operation and enforcement — displaying published content, taking measures for violations of the Terms of Service and Community Guidelines, and handling appeals.
   • Legal basis: Contract performance / Legitimate interests
5. Evidencing acceptance of terms — identifying which version of the terms you accepted in the event of a dispute.
   • Legal basis: Legal obligation / Legitimate interests
6. Statutory record retention — retention required by the Act on Consumer Protection in Electronic Commerce, the Protection of Communications Secrets Act, and similar laws.
   • Legal basis: Legal obligation (PIPA Art. 15(1)(2) / GDPR Art. 6(1)(c))
7. Customer support — confirming inquiries, contacting you, and notifying you of outcomes.
   • Legal basis: Contract performance / Legitimate interests

4. Data Retention and Destruction

We retain personal data until the purpose of processing is achieved. Upon account deletion, we handle data as follows.

4.1 Destroyed immediately

• Published content (the basic information of published decks) and the corresponding learning-material files (including card contents) and thumbnail images held in R2
• Login sessions and social login connection records
• Renewal reminder delivery records
• Plan limit administration data (Section 1.7) and own video file administration data (Section 1.5)
• Private learning data (database and R2, Section 1 item 4)

4.2 Anonymised (irreversible)

Upon account deletion, we do not physically delete the account record; instead we anonymise the identifying information.

• The email address is replaced with a value that cannot identify an individual.
• The nickname, display name, profile image, and publisher description are deleted.
• The activity ID is deleted.

Why this anonymisation is irreversible: We replace the original email address without retaining it separately, so the original individual cannot be traced back from an anonymised account. We keep no copy of the original email anywhere.

Why the account record is not physically deleted: Payment, refund, and dispute records reference the account. If the account were deleted, we could not identify the party to a refund or chargeback dispute arising after deletion. This measure protects the interests of both users and the Company.

4.3 Surviving data

• Copies of published decks already adopted by other members: So that an adopting member's learning materials are not lost when the original publisher deletes their account, adopted copies survive as that member's own materials (Terms of Service, Article 6(5)). Because those copies are that member's private learning data, they are not deleted at the original publisher's request. For this reason, you must not include personal information in content you publish (Terms of Service, Article 6(6)).
• Account deletion reason: Retained on the anonymised account for service improvement purposes. Because anonymisation severs the link to a specific individual, no separate destruction period applies.

4.4 Statutory retention obligations

Where retention is required by applicable law, we retain the records for the following periods before destruction.

4.5 Retention for dispute preparedness

The following records are retained after account deletion for dispute preparedness and destroyed once the stated period elapses.

5. Third-Party Data Sharing and Processing

1. We do not process personal data beyond the scope stated in Section 3, and we do not sell, rent, or trade it to third parties.
2. We engage the following processors to provide the Service, under contractual data protection agreements (DPA):

6. Cross-Border Data Transfer

We transfer personal data abroad for the processing and storage necessary to provide the Service, and we disclose this in this Policy in accordance with Article 28-8 of the Personal Information Protection Act.

Basis for transfer: Standard Contractual Clauses (SCCs) or equivalent measures securing an adequate level of protection.

For EU/EEA users: For transfers from the EU/EEA to third countries, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, or other adequacy mechanisms recognised under GDPR Chapter V.

7. Automated Processing

1. We automatically process your payment date and prior refund approval history to make an initial assessment of refund eligibility.
2. This is not a solely automated decision. The automated result serves as reference material for our staff, and the final decision on whether to approve a refund is made by a human.
3. You have the right to:
   • Request human review of the automated result;
   • Express your point of view regarding the decision; and
   • Contest the decision by contacting our support team.
4. Under Section 3.4 of the Refund & Cancellation Policy, where you exercise a statutory right, a member of our team will review your case individually, regardless of any automated result.

8. Your Rights and Choices

1. You may exercise your rights of access, rectification, erasure, restriction of processing, and data portability at any time.
2. You can exercise these rights directly through the "Edit Profile" and "Delete Account" features in the Service, or by contacting us at [email protected]. We will respond within 30 days.
3. If you request rectification of an error in your personal data, we will not use or provide that data until the rectification is complete.
4. Limits on erasure: Under Section 4.3, copies of published content already adopted by other members are not subject to erasure requests, because those copies are the adopting member's own materials kept as that member's private learning data.

9. Use of Cookies

1. We use cookies to provide an optimal experience. The specifics are set out in the Cookie Policy.
2. Cookies are small text files that a website server sends to your browser.
3. How to refuse cookies: You can allow or refuse all cookies through your browser settings. If you refuse cookies, some features such as staying logged in may not function properly.

10. Children's Privacy

1. The Service is intended for users aged 14 and over, and you must confirm at registration that you are at least 14 years old.
2. We do not knowingly collect personal data from children under 14. If we confirm that a child under 14 has registered, the account will be deleted immediately.
3. In some jurisdictions, including the EU/EEA, a higher age threshold (up to 16) may apply, and that threshold applies to users in those regions.

11. Data Breach Notification

1. In the event of a personal data breach likely to result in a serious risk to your rights and interests, we will notify you without undue delay in accordance with applicable law.
2. For breaches concerning EU/EEA users, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach under GDPR Article 33, and notify affected data subjects directly for high-risk breaches under GDPR Article 34.

12. Data Protection Officer and Complaints

We designate the following person to oversee personal data processing and to handle complaints and remedies:

• Data Protection Officer: The Service operator
• Contact (email): [email protected]

13. Changes to This Policy

We will announce any changes to this Policy at least 7 days before they take effect (at least 30 days for material changes). In the event of any conflict between the Korean and English versions, the Korean version shall prevail. However, this does not deprive consumers of the protections afforded to them by mandatory law.

Previous versions of this Policy remain available via their version-specific permanent links.