Privacy Policy (Beta)
Effective date: November 8, 2026
Shoong (business registration in progress; the "Operator") processes personal information as follows when providing the Shoong service (the "Service"). If this translation differs from the Korean version, the Korean version prevails.
1. Information we process and why
| Item | Purpose | Retention |
|---|---|---|
| Email address | Sign-up and sign-in (email sign-in links), service notices, replies to inquiries | Until you terminate |
| Workspace information (name, plan, credit history) | Providing the Service, usage and billing | Until you terminate (credit history kept anonymized, see Section 3) |
| Videos you upload or import by link, and the audio, transcripts, subtitles, translations, clips and renders made from them | Providing the Service (transcription, translation, clip selection, rendering) | Originals, audio and preview copies 30 days; results until you ask for deletion during the beta (plan-based at the full launch); subtitle and clip data until you ask for deletion |
| Payment information | Selling paid plans and credits | The Operator does not receive card details. Our payment reseller (Lemon Squeezy) processes them; the Operator keeps only subscription status and order numbers |
| Service usage records (job IDs, times, error codes) and access information (IP address, browser information) | Incident response, security, abuse prevention | 30 days |
| Error monitoring records (job and request IDs, error types) — no user information, IP addresses or request bodies are sent | Incident response | Up to 30 days |
| Rights confirmation records (time of consent before importing) | Handling infringement reports | As long as the video is kept |
| What you write in the feedback form (Google Forms) — including your email if you give it | Improving the Service, replying to reports and inquiries | 6 months after the beta ends |
- Videos may contain information such as faces and voices of you or others. The Operator processes these only for clip selection and framing (finding where faces are) and does not identify people by their faces.
- Logs contain IDs only — no emails, video content or tokens.
2. Processing by third parties and transfers abroad
To provide the Service, we entrust processing to the companies below. Some processing happens outside Korea.
| Recipient | Task | Information transferred | Where it is processed |
|---|---|---|---|
| Supabase, Inc. | Authentication, database | Email, workspace and job information | Republic of Korea (Seoul, ap-northeast-2) |
| Vercel Inc. | Web and API hosting | Access information, request contents | Republic of Korea (Seoul) and the United States |
| Cloudflare, Inc. (R2) | Storing videos and results | Videos, audio, results | Asia-Pacific (Cloudflare R2 location APAC — Cloudflare chooses the data center within the region) |
| Hetzner Online GmbH | Video processing servers (import, conversion, rendering) | Videos, audio | Finland |
| IPRoyal Services FZE LLC | Relaying the connection when fetching videos from platform links such as YouTube (static ISP proxy) | The destination of the video being fetched and the video data (the connection is encrypted, so the contents cannot be read) | United States (proxy IP location) — operating company in the United Arab Emirates |
| AssemblyAI, Inc. / Deepgram, Inc. | Speech recognition (transcription) | Audio | United States |
| Anthropic, PBC | Translation, AI clip selection and titles | Transcripts | United States |
| Lemon Squeezy, LLC | Payment reseller (merchant of record) | Payment and billing information (collected directly by the reseller) | United States |
| Resend, Inc. | Sending email (sign-in links) | Email address | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error information (job and request IDs, error types — no user information, IP addresses or request bodies), kept up to 30 days | Germany (EU) |
| Google LLC (Google Forms) | Receiving feedback, reports and inquiries | What you write in the form | United States |
- When and how: sent over encrypted networks while you use the Service.
- If you do not want transfers abroad, you cannot use the Service (they are required for transcription and rendering).
- Providers use the information they receive only for the task entrusted to them under contract.
- Our speech recognition providers (AssemblyAI and Deepgram) are set to opt out of their model improvement (training) programs, so the audio and transcripts we send are not used to train their models. AssemblyAI begins deleting processing results after 1 day, and Deepgram does not keep the audio or transcripts after processing (it keeps only records such as request time and usage).
- Anthropic, which handles translation and AI clip selection, does not train models on customer content received through its services, under its Commercial Terms of Service (effective 2025-06-17; https://www.anthropic.com/legal/commercial-terms).
3. Retention and deletion
- Original videos (and the audio and preview copies made from them) are deleted automatically 30 days after upload. Transcripts, subtitles, clip data and results (renders) remain. During the beta, results are kept until you delete them; plan-based retention periods will apply at the full launch (announced in advance).
- Download links expire after 1 hour.
- You can delete videos and clips in the Service and request deletion of your workspace. Deleting a workspace removes its files from storage and its rows from the database.
- Credit history is kept anonymized (not linked to you) for accounting and dispute handling.
4. Your rights
You can ask at any time to access, correct, delete or stop the processing of your personal information. Requests made through the "Send feedback" form in the Service (a dedicated email address will be added later) are handled within 10 days.
5. Cookies
We use only the session cookie that keeps you signed in (HttpOnly, Secure). We do not use advertising or analytics cookies. If we add an analytics tool, we will update this policy and notify you before it takes effect.
6. Security measures
Encryption in transit (HTTPS), separated storage access permissions, API keys stored only as hashes, encrypted storage of third-party tokens, masking of personal information in logs, and records of administrator access.
7. Children under 14
People under 14 cannot sign up.
8. Privacy officer
- Name: Choi Won-jeong (최원정)
- Contact: the "Send feedback" form in the Service (a dedicated email address will be added later)
9. Changes
If this policy changes, we will notify you on the Service 7 days before it takes effect.