[POSTREAM] Privacy Policy

※ Voithru Co., Ltd. (the “Company”) complies with the Personal Information Protection Act and all other applicable privacy regulations in the Republic of Korea.

1. Purpose of Collecting and Using Personal Information

1. The “Company” comply with the Personal Information Protection Act and process personal information only within the purposes set out below.

2. The personal information the “Company” collect is used for the following purposes:
   • Service membership and account management : verifying sign‑up intent, identifying and authenticating accounts, blocking malicious users, and responding to customer inquiries
   • Service provision : executing video upload/posting workflows, connecting to external platform APIs, and sending status notifications
   • Payment and refund processing : subscription billing for paid plans, withdrawal processing, and refunds
   • System operation and security : analyzing logs, preventing fraudulent use, and monitoring errors
   • Marketing and statistics (optional consent) : announcing new features and analyzing usage statistics

2. Categories and Methods of Collection

1. The “Company” collect personal information as follows:
   • Required information : profile data (Google·TikTok·Instagram ID and channel/account name), email address, encrypted password, video metadata (file name, resolution, duration, size), IP address, cookies, service usage records, payment information (for paid plans: card information (encrypted by Tosspayments), billing address)
   • Optional information : name, date of birth, gender, mobile phone number, and—with your marketing consent—usage statistics and event participation history

2. The “Company” collects personal information by the following methods:
   • Collection methods : web/app sign‑up, account linking, customer‑support inquiries, automated tools, and marketing events

3. Retention and Use Period of Personal Information

1. The “Company” destroy personal information without delay once the purpose of collection is achieved or the statutory retention period expires.

2. In accordance with minimum statutory retention periods, we keep the following information:

   Category	Retention Period	Legal Basis (Korean)
   Records of contracts or withdrawal of subscriptions	5 years	「전자상거래 등에서의 소비자보호에 관한 법률」
   Records of payments and supply of goods	5 years	「전자상거래 등에서의 소비자보호에 관한 법률」
   Records of consumer complaints or dispute resolution	3 years	「전자상거래 등에서의 소비자보호에 관한 법률」
   Records of advertising/display	6 months	「전자상거래 등에서의 소비자보호에 관한 법률」
   Electronic financial transaction records	5 years	「전자금융거래법」
   Website/app access logs (IP, etc.)	3 months	「통신비밀보호법」

4. Use and Third‑Party Provision of Personal Information

1. The “Company” do not provide personal information to third parties without your consent, except as permitted by law.

2. When posting videos via external platform APIs (e.g., YouTube, TikTok, Instagram), we transmit only the video metadata authorized during account linking.

3. For paid plan payment processing, we provide information to the following payment gateway:

   Recipient	Purpose	Information Provided	Retention Period
   Tosspayments	Payment and refund processing	Card information (encrypted), email, billing address	5 years after payment completion (Electronic Financial Transactions Act)

4. We do not transfer or disclose your information to third parties for purposes other than the ones provided.

5. Rights of Data Subjects and How to Exercise Them

1. You may exercise the following rights at any time:
   • Access your personal information
   • Correct any inaccuracies
   • Delete information
   • Request suspension of processing

2. Submit your request in writing or by email, and the “Company” will respond within ten days.

6. Procedures and Methods for Destruction of Personal Information

1. The “Company” will delete the relevant personal data without delay if the purpose of processing the data has been fulfilled or if the user requests deletion.

   a. In particular, since POSTREAM provides services that are linked with the Meta (Instagram) platform, personal data may be deleted in the following ways:

   • [Disconnection from Meta Platform]

     Users may manually disconnect POSTREAM from their Instagram settings:

     • Instagram app > Settings > Apps and Websites > POSTREAM > Remove

     In this case, POSTREAM will automatically lose access to data from Meta.

     However, some user-related content stored within POSTREAM's internal systems may still remain.

2. Users can delete their POSTREAM account directly via the “Delete Account” function within the POSTREAM web platform. Alternatively, they may request deletion by contacting us at the following email address.
   • 📧 ai.business@voithru.com

3. All electronic data is destroyed using secure technical methods (including logical and physical deletion), ensuring it cannot be restored. Any personal information printed on paper is shredded or incinerated.

7. Personal Information Protection Officer

The “Company” has designated a Personal Information Protection Officer who oversees and takes overall responsibility for personal information processing pursuant to Article 31(1) of the Personal Information Protection Act.

8. Changes to This Policy

1. This Policy is effective as of July 1, 2025.