Privacy Policy
Effective 2026-11-02
RepetoAI Co., Ltd. (the "Company") operates Story License Bank (the "Service") and processes users' personal information as follows under the Personal Information Protection Act.
1. Personal information we collect and why
The Company collects only the minimum information needed to provide the Service. The Service does not receive or store your Google password. Authentication records from earlier email sign-ups may remain in the authentication system for account migration and security. Google provides your basic profile and email; we do not request access to Gmail or Drive files.
| Category | Items | Purpose | When |
|---|---|---|---|
| Sign-up | Account identifier, email, name and profile picture provided by Google sign-in, service display name | Identifying members, sign-in, service notices, preventing misuse | At Google sign-in or sign-up |
| Collected automatically | IP address, access time, browser type, cookies, usage records | Security, failure analysis, service improvement | While using the Service |
| Manuscript registration | Manuscript file and text, copyright holder's name and contact details (email, phone, when not the member), agreed versions and times | Manuscript review, rights checks, publishing scenes, selling books, paying copyright holders | When uploading a manuscript |
| Rights checks | Consent document file (may include a signature and contact details) | Confirming the copyright holder's identity, publication approval, simple contract notices | When the operations team asks |
| Paid members and purchases | Order history, amounts, payment confirmation records, [after the payment method is decided: PG transaction number, card company, etc.] | Processing payments, withdrawal and refunds, keeping records under the E-Commerce Act | When upgrading or buying |
| Settlement | Copyright holder's real name, bank account, date of birth or the last digits of the resident registration number (when needed for withholding) | Paying sales income, tax filing | Before the first settlement |
| Enquiries | Email, enquiry content | Answering enquiries, handling disputes | When enquiring |
The Company does not separately collect third parties' personal information contained in manuscript text (names and stories of family or acquaintances) and masks real names when publishing. The Company does not store payment method details itself; the payment agent processes them.
2. Legal bases
- Sign-up, sign-in, purchases and settlement: concluding and performing the service contract (Personal Information Protection Act, Article 15(1)4).
- Keeping access and payment records: legal obligations (Protection of Communications Secrets Act, E-Commerce Act).
- Transfers abroad for external AI processing, marketing notices: the separate consent of the user.
- Preventing misuse and keeping the Service safe: the Company's legitimate interests (Article 15(1)6).
3. When members enter other people's information
When a member enters the name and contact details of a copyright holder (someone other than the member) while registering a manuscript, the member confirms that the copyright holder agreed to giving that information to the Company. The Company uses the entered contact details to tell the copyright holder about the collection, its purpose and this policy (Article 20 of the Personal Information Protection Act), and holds back publication of the manuscript if the copyright holder refuses. Copyright holder contact details are used only for rights checks, publication approval and settlement notices, and are logged when an operator views them.
4. Retention and destruction
| Information | Retention | Basis |
|---|---|---|
| Google account identifier, email, name and profile picture, service display name | Destroyed as soon as the member leaves | Purpose fulfilled |
| Access records (IP, time) | 3 months | Protection of Communications Secrets Act |
| Contract and withdrawal records | 5 years | E-Commerce Act |
| Payment and settlement records | 5 years | E-Commerce Act |
| Consumer complaint and dispute records | 3 years | E-Commerce Act |
| Copyright holder name and contact details | While the manuscript is published or on sale; 5 years after the last settlement if there are settlement records | Basis for settlement |
| Settlement information (account, tax information) | 5 years after the last settlement | Framework Act on National Taxes |
| Manuscript file and text | [ ] days after publication stops or the member leaves; for as long as transaction or settlement records are kept, if any | Scope of permission |
| Consent document file | Until the date written in the document; consent documents that were the basis of a sale are kept 5 years after the last sale | Preparing for rights disputes |
| Records of administrators viewing personal information | At least 1 year | Personal information security measures |
When the retention period ends, electronic files are deleted so that they cannot be recovered, and only the fact and reason of destruction are recorded. Records kept by law are separated from other information and access to them is restricted.
When a member leaves, manuscript submissions waiting for acceptance are cancelled, orders not yet confirmed as paid are cancelled, and the cart is emptied. Manuscripts already published or on sale and their settlement relationship continue under the terms of service.
5. Processing on our behalf
| Processor | Work | Information |
|---|---|---|
| Supabase, Inc. (Seoul region) | Database storage, member authentication, file storage | All member information, manuscripts, orders and settlement information |
| Vercel, Inc. | Web hosting, access logs | IP address, time, request records |
The Company states the duties under Article 26 of the Personal Information Protection Act in its processing contracts and supervises the processors. When a processor changes, this policy is updated and announced.
6. Transfers abroad
| Recipient | Country | Items | Purpose | When and how | Retention | Basis |
|---|---|---|---|---|---|---|
| Anthropic, PBC | United States | Manuscript text (masked text when masking was requested) | Splitting scenes, drafting summaries, suggesting classifications | Each time a manuscript whose uploader gave optional consent is processed, over an encrypted API connection | For the period under the Anthropic API data policy [to be filled in after checking, usually within 30 days] | Separate consent of the member |
| OpenAI, L.L.C. | United States | Titles, summaries, tags and keywords of published scenes, search terms (separated from member information) | Converting to vectors for meaning search | Each time a scene is published or searched, over an encrypted API connection | For the period under the OpenAI API data policy [to be filled in after checking, usually within 30 days] | Public information, sent separately from personal information |
| Vercel, Inc. | United States | IP address, time, request records | Running the web service | Automatically on each visit | Log retention period [1 year] | Performing the service contract |
Consent to external AI processing of a manuscript is optional and given when uploading; manuscripts can be uploaded without it. It can be withdrawn at any time by telling the operations team. If you do not want to send search terms, you can search with filters only.
Manuscripts whose members did not consent to external AI processing are not sent abroad; people split their scenes.
7. Your rights
- You can ask at any time to view, correct or delete your personal information or to stop processing it. You can change your email and display name and leave the Service yourself in My account; send other requests to the protection officer's email below and we will tell you the result within 10 days.
- A legal representative or an authorised person can also make requests and must submit a power of attorney.
- Deletion or suspension may be limited for information that must be kept by law, information whose disclosure may infringe others' rights, and information on which settlement or transactions are based. We tell you the reason in that case.
- Consent to external AI processing and to marketing notices can be withdrawn at any time.
8. Security measures
- Passwords are stored encrypted in a way that cannot be decrypted, and data in transit is encrypted with TLS.
- Access to personal information is given only to the operators who need it for their work, and viewing sensitive information such as copyright holder contact details and consent documents is logged.
- Access records are kept and protected against tampering.
- The database is kept in the Seoul region and backed up regularly.
9. Cookies and automatic collection
The Service uses only the cookies strictly needed to keep you signed in and for security. It does not use third-party cookies for behavioural analysis or advertising. You can refuse cookies in your browser settings, but you may then not stay signed in.
10. Children under 14
Children under 14 cannot sign up. If we learn that information about a child under 14 was collected, we delete it at once.
11. Personal information protection officer
| Item | Details |
|---|---|
| Company | RepetoAI Co., Ltd. (CEOs Kim Woong, Lee Daebeom) |
| Protection officer | CEO Kim Woong |
| contact@repetoai.com | |
| Phone | 010-4889-3641 |
Send questions, complaints and requests about personal information to the contacts above.
12. Remedies
If you need relief or advice about the Company's processing, you can contact these bodies.
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, kopico.go.kr
- Supreme Prosecutors' Office Cyber Investigation Division: 1301
- Korean National Police Agency Cyber Bureau: 182
13. Changes to this policy
When this policy changes, we announce it on the Service from 7 days before it takes effect (30 days for changes important to users). Earlier versions can be viewed on the Service.
Addendum
This policy takes effect on 2026-11-02.
Previous versions
Version effective 2026-11-01
RepetoAI Co., Ltd. (the "Company") operates Story License Bank (the "Service") and processes users' personal information as follows under the Personal Information Protection Act.
1. Personal information we collect and why
The Company collects only the minimum information needed to provide the Service.
| Category | Items | Purpose | When |
|---|---|---|---|
| Sign-up | Email, password (stored encrypted), display name | Identifying members, sign-in, service notices, preventing misuse | At sign-up |
| Collected automatically | IP address, access time, browser type, cookies, usage records | Security, failure analysis, service improvement | While using the Service |
| Manuscript registration | Manuscript file and text, copyright holder's name and contact details (email, phone, when not the member), agreed versions and times | Manuscript review, rights checks, publishing scenes, selling books, paying copyright holders | When uploading a manuscript |
| Rights checks | Consent document file (may include a signature and contact details) | Confirming the copyright holder's identity, publication approval, simple contract notices | When the operations team asks |
| Paid members and purchases | Order history, amounts, payment confirmation records, [after the payment method is decided: PG transaction number, card company, etc.] | Processing payments, withdrawal and refunds, keeping records under the E-Commerce Act | When upgrading or buying |
| Settlement | Copyright holder's real name, bank account, date of birth or the last digits of the resident registration number (when needed for withholding) | Paying sales income, tax filing | Before the first settlement |
| Enquiries | Email, enquiry content | Answering enquiries, handling disputes | When enquiring |
The Company does not separately collect third parties' personal information contained in manuscript text (names and stories of family or acquaintances) and masks real names when publishing. The Company does not store payment method details itself; the payment agent processes them.
2. Legal bases
- Sign-up, sign-in, purchases and settlement: concluding and performing the service contract (Personal Information Protection Act, Article 15(1)4).
- Keeping access and payment records: legal obligations (Protection of Communications Secrets Act, E-Commerce Act).
- Transfers abroad for external AI processing, marketing notices: the separate consent of the user.
- Preventing misuse and keeping the Service safe: the Company's legitimate interests (Article 15(1)6).
3. When members enter other people's information
When a member enters the name and contact details of a copyright holder (someone other than the member) while registering a manuscript, the member confirms that the copyright holder agreed to giving that information to the Company. The Company uses the entered contact details to tell the copyright holder about the collection, its purpose and this policy (Article 20 of the Personal Information Protection Act), and holds back publication of the manuscript if the copyright holder refuses. Copyright holder contact details are used only for rights checks, publication approval and settlement notices, and are logged when an operator views them.
4. Retention and destruction
| Information | Retention | Basis |
|---|---|---|
| Email, display name, password | Destroyed as soon as the member leaves | Purpose fulfilled |
| Access records (IP, time) | 3 months | Protection of Communications Secrets Act |
| Contract and withdrawal records | 5 years | E-Commerce Act |
| Payment and settlement records | 5 years | E-Commerce Act |
| Consumer complaint and dispute records | 3 years | E-Commerce Act |
| Copyright holder name and contact details | While the manuscript is published or on sale; 5 years after the last settlement if there are settlement records | Basis for settlement |
| Settlement information (account, tax information) | 5 years after the last settlement | Framework Act on National Taxes |
| Manuscript file and text | [ ] days after publication stops or the member leaves; for as long as transaction or settlement records are kept, if any | Scope of permission |
| Consent document file | Until the date written in the document; consent documents that were the basis of a sale are kept 5 years after the last sale | Preparing for rights disputes |
| Records of administrators viewing personal information | At least 1 year | Personal information security measures |
When the retention period ends, electronic files are deleted so that they cannot be recovered, and only the fact and reason of destruction are recorded. Records kept by law are separated from other information and access to them is restricted.
When a member leaves, manuscript submissions waiting for acceptance are cancelled, orders not yet confirmed as paid are cancelled, and the cart is emptied. Manuscripts already published or on sale and their settlement relationship continue under the terms of service.
5. Processing on our behalf
| Processor | Work | Information |
|---|---|---|
| Supabase, Inc. (Seoul region) | Database storage, member authentication, file storage | All member information, manuscripts, orders and settlement information |
| Vercel, Inc. | Web hosting, access logs | IP address, time, request records |
The Company states the duties under Article 26 of the Personal Information Protection Act in its processing contracts and supervises the processors. When a processor changes, this policy is updated and announced.
6. Transfers abroad
| Recipient | Country | Items | Purpose | When and how | Retention | Basis |
|---|---|---|---|---|---|---|
| Anthropic, PBC | United States | Manuscript text (masked text when masking was requested) | Splitting scenes, drafting summaries, suggesting classifications | Each time a manuscript whose uploader gave optional consent is processed, over an encrypted API connection | For the period under the Anthropic API data policy [to be filled in after checking, usually within 30 days] | Separate consent of the member |
| OpenAI, L.L.C. | United States | Titles, summaries, tags and keywords of published scenes, search terms (separated from member information) | Converting to vectors for meaning search | Each time a scene is published or searched, over an encrypted API connection | For the period under the OpenAI API data policy [to be filled in after checking, usually within 30 days] | Public information, sent separately from personal information |
| Vercel, Inc. | United States | IP address, time, request records | Running the web service | Automatically on each visit | Log retention period [1 year] | Performing the service contract |
Consent to external AI processing of a manuscript is optional and given when uploading; manuscripts can be uploaded without it. It can be withdrawn at any time by telling the operations team. If you do not want to send search terms, you can search with filters only.
Manuscripts whose members did not consent to external AI processing are not sent abroad; people split their scenes.
7. Your rights
- You can ask at any time to view, correct or delete your personal information or to stop processing it. You can change your email and display name and leave the Service yourself in My account; send other requests to the protection officer's email below and we will tell you the result within 10 days.
- A legal representative or an authorised person can also make requests and must submit a power of attorney.
- Deletion or suspension may be limited for information that must be kept by law, information whose disclosure may infringe others' rights, and information on which settlement or transactions are based. We tell you the reason in that case.
- Consent to external AI processing and to marketing notices can be withdrawn at any time.
8. Security measures
- Passwords are stored encrypted in a way that cannot be decrypted, and data in transit is encrypted with TLS.
- Access to personal information is given only to the operators who need it for their work, and viewing sensitive information such as copyright holder contact details and consent documents is logged.
- Access records are kept and protected against tampering.
- The database is kept in the Seoul region and backed up regularly.
9. Cookies and automatic collection
The Service uses only the cookies strictly needed to keep you signed in and for security. It does not use third-party cookies for behavioural analysis or advertising. You can refuse cookies in your browser settings, but you may then not stay signed in.
10. Children under 14
Children under 14 cannot sign up. If we learn that information about a child under 14 was collected, we delete it at once.
11. Personal information protection officer
| Item | Details |
|---|---|
| Company | RepetoAI Co., Ltd. (CEOs Kim Woong, Lee Daebeom) |
| Protection officer | CEO Kim Woong |
| contact@repetoai.com | |
| Phone | 010-4889-3641 |
Send questions, complaints and requests about personal information to the contacts above.
12. Remedies
If you need relief or advice about the Company's processing, you can contact these bodies.
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, kopico.go.kr
- Supreme Prosecutors' Office Cyber Investigation Division: 1301
- Korean National Police Agency Cyber Bureau: 182
13. Changes to this policy
When this policy changes, we announce it on the Service from 7 days before it takes effect (30 days for changes important to users). Earlier versions can be viewed on the Service.
Addendum
This policy takes effect on 2026-11-01.
Version effective 2026-10-08
What we collect
Email, password (stored encrypted), display name, access records (IP address, time).
When you upload a manuscript: the file and its text, the copyright holder name and when you agreed. When the operator checks rights: consent document files (which may contain signatures and contact details) and rights holder contact details (email and phone number, only if provided).
When you order: the books ordered, amounts, payment confirmation records and usage records.
Why we use it
Identifying members and sign-in, service notices, preventing abuse.
Reviewing manuscripts, publishing scenes, selling books, settling with copyright holders, checking rights.
Rights holder contact details are used only to confirm the rights holder, get their approval to publish and send simple contracts. Each time an operator opens them, an access record is kept.
Retention and destruction
We keep your data until you leave and then delete your email and display name right away. Records required by law, such as e-commerce records, are kept masked for the legal period and then destroyed. Records of administrators viewing personal data are kept for at least one year.
When you leave, manuscripts waiting for review are withdrawn, orders waiting for payment confirmation are cancelled and your cart is emptied. Copyright holder names are masked when there are no settlement records; otherwise they are kept as settlement evidence for the same period as transaction records (5 years).
Consent document files are kept until the retention date written on the document, and manuscript files and text are kept while the transaction and settlement records of that manuscript are kept.
A consent document behind a sale is kept for five years after the last sale, even past its retention date, and then destroyed. When destroyed, the file is deleted and only the fact and reason of destruction are kept.
Rights holder contact details are kept while that rights holder's manuscripts are published or sold. If the rights holder is the member themselves and there are no settlement records, the contact details are deleted when they leave and their name is masked on issued simple contracts.
Processors
Data storage and authentication: Supabase (Seoul region). Web hosting: Vercel. Processors and any transfer abroad will be confirmed after legal review.
Transfers abroad (draft before legal review): (1) Anthropic (United States) receives the text of manuscripts that have a basis for external AI processing (the uploading member's agreement, or a rights holder's consent document and rights record) over an encrypted connection each time scenes are split or classification is suggested; where masking of names was requested or required, the masked text is sent. (2) OpenAI (United States) receives published scene text (titles, summaries, tags and keywords) and the search words you type, over an encrypted connection each time they are converted into numbers for meaning-based search (search words are not sent with any member information).
Both keep data received through their APIs only for the period set by each company's API data policy (to be stated after legal review). You can decline external AI processing when uploading or withdraw it by contacting us, and you can search with filters instead of search words if you prefer not to send them.
Your rights
You can ask to view, correct, delete or stop processing your data. You can edit your details and leave from My account; for anything else, contact us.
Children under 14
People under 14 cannot sign up.
Version effective 2026-10-01
What we collect
Email, password (stored encrypted), display name, access records (IP address, time).
When you upload a manuscript: the file and its text, the copyright holder name and when you agreed. When the operator checks rights: consent document files (which may contain signatures and contact details) and rights holder contact details (email and phone number, only if provided).
When you order: the episodes ordered, amounts, payment confirmation records and usage records.
Why we use it
Identifying members and sign-in, service notices, preventing abuse.
Reviewing manuscripts, publishing and selling scenes, settling with copyright holders, checking rights.
Rights holder contact details are used only to confirm the rights holder, get their approval to publish and send simple contracts. Each time an operator opens them, an access record is kept.
Retention and destruction
We keep your data until you leave and then delete your email and display name right away. Records required by law, such as e-commerce records, are kept masked for the legal period and then destroyed. Records of administrators viewing personal data are kept for at least one year.
When you leave, manuscripts waiting for review are withdrawn, orders waiting for payment confirmation are cancelled and your cart is emptied. Copyright holder names are masked when there are no settlement records; otherwise they are kept as settlement evidence for the same period as transaction records (5 years).
Consent document files are kept until the retention date written on the document, and manuscript files and text are kept while the transaction and settlement records of that manuscript are kept.
A consent document behind a sale is kept for five years after the last sale, even past its retention date, and then destroyed. When destroyed, the file is deleted and only the fact and reason of destruction are kept.
Rights holder contact details are kept while that rights holder's manuscripts are published or sold. If the rights holder is the member themselves and there are no settlement records, the contact details are deleted when they leave and their name is masked on issued simple contracts.
Processors
Data storage and authentication: Supabase (Seoul region). Web hosting: Vercel. Processors and any transfer abroad will be confirmed after legal review.
Your rights
You can ask to view, correct, delete or stop processing your data. You can edit your details and leave from My account; for anything else, contact us.
Children under 14
People under 14 cannot sign up.