Privacy Policy

1. What we collect

Sign-up and sign-in: email address, name, profile photo, and the account identifier of the service you signed in with (Google, Apple, Kakao)

Using the Service: product photos you upload, descriptions you enter, generation requests and outputs, credit history

Payment: date, amount and status. Card numbers and other payment details are handled by Toss Payments; we do not store them.

Collected automatically: access logs, IP address, browser details, cookies

2. Why we use it

To identify members and sign them in, generate images and videos, deduct and refund credits, take payments, answer support requests, prevent abuse and improve the Service.

3. How long we keep it

We keep member data, uploaded photos and outputs until the account is closed and then delete them without delay.

Some records are kept for the periods the law requires: contracts, cancellations, payments and supply 5 years; consumer complaints and disputes 3 years (Korean E-Commerce Act); access logs 3 months (Protection of Communications Secrets Act).

4. Processors and transfers abroad

We use these companies to run the Service, and one of them receives personal data abroad.

Toss Payments (Korea): payment processing. Payment records are kept for the legal periods above.

Amazon Web Services (Seoul region, Korea; Amazon Web Services Korea LLC): servers and data storage. Data is deleted when the contract ends or the member closes the account.

Google LLC (US, Google Workspace, policies.google.com/privacy): uses your email address and messages to answer support requests and send service emails. Data is sent over encrypted connections each time you contact us or we email you, and support records are kept for 3 years. Tell us if you do not want this transfer; you then cannot use email support or service emails.

To generate images and videos we send the product photos and video start images you upload, and the generation instructions, to the AI model providers OpenAI (US), Google (US) and BytePlus (Singapore, Malaysia). We send no account details such as your name or email.

If a photo you upload shows a person, it is sent too. Upload only photos of yourself or of people who agreed. Anyone can see outputs you publish to Explore, so publish results that show a person only with that person's consent.

5. Sharing with third parties

We do not give personal data to third parties unless you consent or a law provides for it.

6. How we delete it

Electronic files are erased so they cannot be recovered; printed records are shredded.

7. Your rights

You can ask to see, correct or delete your personal data, or stop its processing, at any time. Email support@dewycut.com and we will act within 10 days.

People under 14 cannot sign up. If we learn we collected data from someone under 14, we delete it right away.

8. Cookies

We use cookies to keep you signed in and to remember settings such as language and theme. You can block cookies in your browser, but you will not stay signed in.

9. Security

All traffic is encrypted, and access to personal data is limited to the people and permissions that need it.

10. Privacy officer and remedies

Privacy officer: Seongju Park (Representative) · support@dewycut.com

You can also report privacy issues to: Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), Supreme Prosecutors' Office (spo.go.kr, 1301 in Korea), Korean National Police Agency (ecrm.police.go.kr, 182 in Korea).

11. Changes to this policy

We announce changes in the Service 7 days before they apply. Changes that matter to your rights, such as new data items, purposes or transfers abroad, are announced 30 days before and by email.