Privacy Policy

The Company processes personal information only for the following purposes and asks for consent in advance if a purpose changes.

• Member sign-up and management — identifying you, sign-in, preventing abuse (phone verification in Korea prevents duplicate sign-ups and duplicate verification gifts; the IP address used at sign-up is converted to an irreversible value to prevent repeated sign-up gifts from the same place), and account closure
• Providing the Service — video analysis, generating scripts, captions and voice-overs, editing and rendering, storing and downloading outputs, team workspace invites and collaboration, and uploading to YouTube and Instagram
• Billing — granting and using credits, processing payments and refunds
• Running the partner (referral) program in Korea — issuing referral links and codes, counting referred sign-ups and payments, settling and paying partner earnings and filing withholding tax
• Customer support and service notices — for members who verified a phone number in Korea, we may use that number to let them know about their work in progress (for example, that only rendering is left to finish a video) or to answer inquiries
• Service notifications — we notify you in the site (bell) when a video is finished, when it’s your turn (picking a theme, checking a script), when a job fails, when a subscription payment fails and so on, and also by text message (including KakaoTalk) only if you turn that on (Korea only). If a project you were making is stuck at picking a theme, checking a script or a failed job, we may email you along with the source storage deadline (we look at your last visit so we don’t send it while you’re using the site, and you can unsubscribe)
• Measuring ad performance and personalized ads — we collect website visit and usage records with the Meta (Facebook, Instagram) ad pixel (see 10. Cookies and behavioral information)

Unique identification information (resident registration number, Korea only) — processed only for withholding business income tax and filing payment statements when paying partner earnings (Article 68(3) of the Enforcement Decree of the Framework Act on National Taxes; Articles 127 and 164 of the Income Tax Act). We don’t collect it for any other purpose, and it isn’t needed to sign up.

• Member information — kept until you close your account. After you request deletion, it’s destroyed without delay once the 7-day grace period passes (signing in during that period cancels the request). To check the 30-day re-sign-up restriction for the same email, we keep the email only as an irreversible value (hash) for 30 days after destruction. The converted sign-up IP value is deleted along with the account.
• Phone verification information (Korea only) — the encrypted number, hash and masked number are kept until you close your account. To check the re-sign-up restriction for the same number, only the hash is kept for 30 days after destruction. Verification request records (hash, masked number, IP address) are deleted after 7 days.
• Notifications — site notification records are deleted after 90 days. The phone number for text notifications is deleted immediately when you turn them off or close your account. Records of reminder emails sent are kept until you close your account so we don’t email you twice about the same project.
• Video files — deleted automatically after your plan’s storage period. Project titles and records remain, and once a source is deleted the same source can’t be used again.
• Instagram connection information — deleted immediately when you disconnect. If you remove Shortsmith’s permission in your Instagram settings, we also delete it immediately on receiving Meta’s data deletion request.
• Partner information (Korea only) — when payment details are removed, account information is destroyed without delay; when a partner quits or closes their account, it’s destroyed after paying any remaining earnings (immediately if there are none). If payments were made, withholding records (legal name, resident registration number, payment history) are kept for 5 years from June 1 of the year after payment and then destroyed. When a partner closes their account, the display name and channel URL are deleted. Records of viewing payment details are kept for 2 years.

As required by law, we keep the following records for the periods below.

• Records of contracts or withdrawal of offers, and of payment and supply of goods (including the credit ledger and referral sign-up and earnings settlement records): 5 years — Act on Consumer Protection in Electronic Commerce
• Records of consumer complaints or dispute resolution: 3 years — Act on Consumer Protection in Electronic Commerce
• Records of labeling and advertising: 6 months — Act on Consumer Protection in Electronic Commerce
• Service access records: 3 months — Protection of Communications Secrets Act
• Withholding tax records (partner payments — legal name, resident registration number, payment history): 5 years — Framework Act on National Taxes

• Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay.
• Electronic files are deleted in a way that can’t be recovered. When you close your account, your name and email are replaced with unidentifiable values, and your password, Google account link, phone verification information and sign-in records are deleted.
• Records that must be kept by law are stored separately from other information and destroyed when the period ends.

The Company doesn’t provide your personal information to third parties, except with your consent or where the law specifically requires it (for example, when partner earnings are paid in Korea, the legal name, resident registration number and amount are reported to the tax office for withholding under the Income Tax Act). If a public authority such as an investigative agency requests personal information, we review the legal basis and procedure, provide only the minimum information needed for lawful requests, object to unlawful requests, and keep records of requests and how they were handled.

To run the Service, the Company entrusts the processing of personal information as follows.

To provide the Service’s core features (script and analysis generation, voice-over generation, Google sign-in and YouTube features, Instagram posting, image and video generation in the marketing studio, password reset emails, and payments in US dollars) and to measure ad performance, we transfer personal information outside Korea as follows. Transfers happen over encrypted networks when you use the feature (for the ad pixel, when you use the website).

If you don’t want your information transferred outside Korea, you can choose not to use those features. In that case you can’t use automatic script and voice-over generation, Google sign-in, YouTube and Instagram features, the marketing studio or password reset emails (you can sign up with email instead of Google, and contact support if you forget your password). If you don’t want to pay through PayPal, you can pay in Korean won on the Korean site. You can stop reminder emails with the “unsubscribe” link in the email. You can refuse the ad pixel regardless of whether you use the Service (see 10. Cookies and behavioral information).

• You can ask at any time to access, correct, delete or stop processing your personal information.
• You can change your name and close your account yourself on the account page after signing in. For other requests, contact the privacy officer below and we’ll act within 10 days.
• You can also make requests through a legal representative or an authorized person.

• Passwords are stored with irreversible encryption (bcrypt).
• YouTube and Instagram posting tokens are encrypted with a separate key.
• Partner payment details (legal name, account number, resident registration number) are stored encrypted and shown only masked. Only the administrator in charge of payments can view the originals, and every view is logged.
• All communication is encrypted with HTTPS.
• Data is separated by workspace, and access is limited by role (owner, admin, editor, viewer).
• Sign-in sessions are managed, and changing your password ends all existing sessions.
• Servers allow only the connections they need through a firewall.

We use cookies to keep you signed in. You can refuse cookies in your browser settings, but then you won’t stay signed in. Visit statistics are counted without cookies: we don’t store IP addresses and only convert them to unidentifiable values that change daily to count daily visits (visit records are deleted after 400 days). If you arrive through an influencer’s referral link (Korea only), a cookie (ss_ref) remembers which referral code you came from for 30 days and is removed when you sign up. Referrers only see counts and totals of clicks, sign-ups and payments, plus, for each referred member, the sign-up order, date, route (link or code) and whether they paid — never information that identifies you, such as name or email.

Ad pixel (behavioral information) — to measure ad performance and show personalized ads, we place the ad pixel of Meta Platforms, Inc. (United States) on the website.

• What’s collected — pages viewed on the website, sign-up completed, checkout started, payment completed and payment amount, ad pixel cookie (_fbp), IP address and browser and device information
• How — the pixel collects it automatically when you visit or use the website and sends it to Meta (Meta collects and processes it directly). Name, email and phone number aren’t sent
• Why — measuring ad performance and personalized ads shown on Meta (Facebook, Instagram)
• Retention — the pixel cookie up to 90 days; information Meta receives follows Meta’s retention policy
• How to refuse — blocking (third-party) cookies in your browser or using an ad blocker stops collection. You can turn off personalized ads in Meta’s Ad preferences (facebook.com/adpreferences)
• Questions and remedies — see 12. Privacy officer and 13. Remedies below

The Company doesn’t accept sign-ups from children under 14 and doesn’t collect their personal information.

For questions, complaints or remedies about how we process personal information, contact:

To report or get advice about a privacy violation, you can contact these Korean authorities:

• Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
• Korean National Police Agency: 182 (ecrm.police.go.kr)

This policy applies from October 9, 2026. If it changes, we give notice in the Service 7 days before the change takes effect (30 days for changes that are unfavorable to you or significant). This English version is a translation provided for convenience; if it differs from the Korean version, the Korean version prevails. This version replaces Paddle.com Market Limited (United Kingdom) with PayPal Pte. Ltd. (Singapore), which handles payments in US dollars, in the service providers and transfers outside Korea. The full change history is in the Korean version.