Privacy Policy
Effective date: November 5, 2026
Unmyeong Theatre (운명극장) ("we" or "us") sets out this Privacy Policy as follows to protect your personal information in accordance with Korea's Personal Information Protection Act and to handle related complaints promptly. This Privacy Policy applies no matter which country you are in. This is a translation of the Korean original provided for your convenience. If the Korean original and this translation differ, the Korean original prevails.
1. Personal information we process, purposes, and retention periods
| Category | Items | Purpose | Retention period |
|---|---|---|---|
| Members | Login identifier, display name, last login method used, email address (when you sign in with email verification, or when Google, Apple, or Kakao provides a verified email address) | Managing members, confirming that orders and films belong to you, linking login methods that use the same email address, sending login verification codes | Until you delete your account |
| Order details | Family name and given name, gender (female, male, or nonbinary, and the basis for the Saju calculation), date of birth, time of birth, place of birth, language and background city of the film | Making the film (calculating Saju, writing the script and the ending card) | Until 30 days after completion (deleted immediately on refund or cancellation) |
| Face photos | 3 to 8 photos of yourself | Making the person in the film resemble you | Until right after the reference images for the film are made |
| Romance film | Gender of the partner role in the video | Making the film | Until 30 days after completion |
| Compatibility film | The second person's order details and face photos listed above | Making the film | Same as above |
| Films and production materials | Finished film, ending card, script, voice, scene images and videos | Delivering the film, free remakes | Until 30 days after completion |
| Payment | Order number, product, amount, payment method, date and time of approval and cancellation (card numbers and similar details are processed by the payment service provider) | Payment, refunds, fulfilling legal obligations | 5 years (Korean E-Commerce Act) |
| Consent records | Items agreed to, version of the wording, time of consent | Proving consent | Consent given when ordering: same period as the order records; consent given when signing up: until you delete your account |
| Traffic source | Marks attached to the ad link (utm values) and whether you came from a Meta ad | Measuring the effectiveness of ads | 1 year |
| Film usage records | Times when the finished film was opened, played, downloaded, saved, or shared, the IP address used to connect, and browser information | Confirming that the film was delivered (handling refunds and disputes), improving the service | 1 year from recording (kept even after account deletion) |
| Inquiries | Email address or KakaoTalk account, content of the inquiry | Responding to inquiries, handling disputes | 3 years (Korean E-Commerce Act) |
(1)We do not receive other information that login providers could share, such as phone numbers or profile photos. We receive email addresses only in the cases stated in the table above.
(2)The records we keep under the law and their retention periods are as follows: records of contracts or withdrawal of orders, 5 years; records of payment and supply of goods, 5 years; records of consumer complaints or dispute handling, 3 years; records of labeling and advertising, 6 months (Article 6 of the Enforcement Decree of the Korean Act on the Consumer Protection in Electronic Commerce).
2. Potentially sensitive information and face photos
(1)The "gender of the partner role in the video" in the romance film and the choice of nonbinary could be regarded as information about sex life or similar matters, so we ask for consent to them separately from other consents. We use this information only to make the film.
(2)We use face photos only to make the person in the film resemble you, and we do not use them to recognize a specific individual or to verify your identity. We delete the original photos right after making the reference images for the film.
3. Provision to third parties
(1)We do not provide users' personal information to third parties. The only exception is when an investigative agency or another authority requests it in accordance with the law.
(2)If you pay with an overseas payment method, Dodo Payments, as the Merchant of Record, receives payment information such as your card details and email address directly from you. We pass only the order number to Dodo Payments, and we receive only the payment number, status, and payment method, which we keep in our payment records. We do not store email addresses that Dodo Payments sends us in the return URL or in webhooks.
4. Outsourcing of processing
| Processor | Work entrusted |
|---|---|
| Toss Payments Co., Ltd. | Processing payments and refunds |
| Vercel Inc. | Running the website, storing files (Seoul region) |
| Supabase Pte. Ltd. | Running the database (Seoul region) |
| OpenAI, L.L.C. | Writing scripts, describing faces, making scene images |
| ElevenLabs Inc. | Making narration voices |
| Features & Labels, Inc. (fal) | Making reference images, making scene videos |
| Zoho Corporation | Running the customer support email, sending login verification code emails (ZeptoMail) |
5. Transfers outside Korea
(1)To make films and operate the service, we transfer personal information outside Korea as follows. The transfer is based on the consent we obtain when you order and on the performance of our contract with you (Article 28-8(1) of the Personal Information Protection Act).
| Recipient (contact) | Country | Items | Purpose | Timing and method | Recipient's retention period | Our retention period |
|---|---|---|---|---|---|---|
| OpenAI, L.L.C. (privacy@openai.com) | United States | Family name and given name, gender, Saju information calculated from the date, time, and place of birth, face photos, script | Writing scripts, describing faces, making scene images | Sent over an encrypted network during production | Up to 30 days after processing (abuse-monitoring records) | Period in section 1 of this policy (photos: until right after the reference images are made) |
| ElevenLabs Inc. (privacy@elevenlabs.io) | United States | Script (including the name we call you by) | Making narration voices | Same as above | We delete the generation record right after the voice is made | Period in section 1 of this policy |
| Features & Labels, Inc. (fal, support@fal.ai) | United States | Face photos, image instructions, scene images, video instructions | Making reference images, making scene videos | Same as above | Request content is not stored, and images and videos it makes are deleted automatically after 24 hours | Period in section 1 of this policy (photos: until right after the reference images are made) |
| Vercel Inc. (privacy@vercel.com) | United States (stored in Seoul) | Member information, order details, photos, films | Running the website and storing files | Sent over the network when you use the service | Deleted together with the data when we delete it | Period in section 1 of this policy |
| Supabase Pte. Ltd. (privacy@supabase.com) | Singapore (stored in Seoul) | Member information, order and payment records, traffic source, film usage records | Running the database | Same as above | Deleted together with the data when we delete it (backups keep it for up to 7 days after deletion) | Period in section 1 of this policy |
| Zoho Corporation (Zoho Mail, privacy@zohocorp.com) | United States | Email address, content of inquiries | Responding to customer inquiries | Sent over an encrypted network when emails are exchanged | Until we delete it | 3 years |
| Zoho Corporation (ZeptoMail, privacy@zohocorp.com) | United States | Email address, login verification codes | Sending login verification code emails | Sent over an encrypted network when verification codes are sent | Sending records and email content: up to 60 days | Verification codes: 5 minutes, as hashes; request records: up to 2 days, as hashes |
(2)You can refuse the transfer outside Korea. To refuse, simply do not order, or delete your account; in that case, we cannot make a film for you.
6. The second person in the compatibility film
(1)For the compatibility film, the ordering member enters the information and photos of a second person. Before the order, we check with the member that they have obtained the second person's consent.
(2)The second person may request access to or deletion of their information by email at help@unmyeongtheatre.com.
7. Minors and children
We do not accept members under 19 years of age, and we do not allow photos of children under 14 to be entered.
8. Destruction procedure and method
(1)A cleanup job that runs every day automatically deletes personal information whose retention period has ended. Electronic files and database records are deleted in a way that cannot be restored.
(2)Payment records that we are required by law to keep are stored separately from other information and deleted when the retention period ends. Film usage records are kept for 1 year from when they were recorded, even after account deletion, to handle refunds and disputes, and are then deleted.
9. Your rights and how to exercise them
(1)You may at any time request access to, correction or deletion of, or suspension of the processing of your personal information, and you may withdraw your consent. If you make a request by email at help@unmyeongtheatre.com, we will take action within 10 days and let you know the result.
(2)You can delete your account at any time in "My Films". A legal representative or a person you have authorized may also exercise these rights with a letter of authorization.
10. Security measures
- Order details are encrypted on the server before they are stored (AES-256-GCM).
- Photos and films are kept in storage without public addresses and, after we confirm that you are the owner, are shown through addresses that are valid only for a short time.
- All communication takes place over encrypted connections (HTTPS).
- We keep the people who can access personal information, and their permissions, to a minimum, and our operation logs record only order numbers.
11. Cookies and other automatic collection tools
(1)We use cookies to keep you signed in, to remember the display language you chose (1 year), to show the login method you used most recently (1 year), and to remember how you arrived from an ad (30 days). We create the ad source cookie only when you arrive through an ad link, and we do not create it when you connect from the European Economic Area, the United Kingdom, or Switzerland. We do not use visitor analytics tools or advertising cookies from other companies.
(2)You can refuse cookies in your browser settings. However, if you refuse cookies, you cannot sign in. Refusing the ad source cookie does not affect your use of the service.
(3)To prevent abuse of login verification code requests, we convert the email address for which a verification code was requested and the IP address used to connect into values from which the original data cannot be restored (hashes), keep them for up to 2 days, and do not use them for any other purpose. We also convert verification codes into hashes and keep them for only 5 minutes.
12. AI training
We do not use the information you enter, your photos, or your films for AI training.
13. Chief privacy officer
Chief privacy officer: KIM DONGHYUN (Representative), email help@unmyeongtheatre.com, phone +82-70-8098-4101
14. Remedies for infringement of rights
If you need counseling or relief regarding an infringement of your personal information, you can contact the following organizations.
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
15. Changes to this Privacy Policy
If we change this Privacy Policy, we announce the change on the website at least 7 days before it takes effect. However, if the change is unfavorable to users or concerns important matters (such as the items and purposes of processing, retention periods, or transfers outside Korea), we announce it at least 30 days before it takes effect and also notify members separately by email or by a notice in "My Films".