1. Controller and Contact
JJLabsIO (Sole Proprietorship) operates LumoCut, a SaaS that localizes short product videos for ads and listings. The representative and privacy contact is Jaejin Song.
Business registration number: 836-64-00736. Address: 211-4 Omok-ro, Yangcheon-gu, Seoul, Republic of Korea. Privacy contact: [email protected]. We disclose email as the public contact channel and do not publicly disclose a phone number.
2. Personal Information We Collect
We collect only information needed to operate the service, provide video localization, manage accounts and payments, protect the service, and communicate with users.
| Category | Items | Purpose |
|---|---|---|
| Account | Email, name, profile image, Google sign-in identifier | Login, account identification, and user management |
| Billing | Payment status, customer identifier, transaction records | Credit purchase, refund, tax, accounting, and dispute handling |
| Video service | Uploaded product short videos, output videos, job status, processing logs | AI video processing, result delivery, troubleshooting, and abuse prevention |
| Automatic data | IP address, cookies, device/browser data, access logs | Security, fraud prevention, service operation, product analytics, and service improvement |
3. Sensitive and Unique Identifier Information
LumoCut does not collect sensitive information such as health, biometric, political, religious, or criminal history information.
LumoCut does not collect Korean resident registration numbers, passport numbers, driver license numbers, or foreign registration numbers.
4. Purposes of Processing
We process personal information for account management, service provision, video upload and AI processing, result delivery, payment and settlement, customer support, security and operations, product improvement, and analytics.
Marketing emails are sent only to users who separately opt in after account registration. Users may unsubscribe at any time.
5. Retention Periods
We retain personal information only for the period necessary for the processing purpose or as required by applicable law.
| Data | Retention Period | Basis |
|---|---|---|
| Account data | Until account deletion, unless legal retention applies | Service contract |
| Payment and transaction records | 5 years | E-Commerce Act, tax and accounting laws |
| Consumer complaints and dispute records | 3 years | E-Commerce Act |
| Security logs including IP address | 3 months | Protection of Communications Secrets Act and security operations |
| Source and output videos | 30 days after processing, unless deleted earlier or legally required | Service contract and storage minimization |
6. Third-Party Provision
We do not provide personal information to third parties for their own independent purposes, except with user consent or where permitted or required by law.
External services used for login, payment, email, hosting, storage, and database operations are treated as processors or service providers, not marketing recipients.
7. Processors and Service Providers
We use the following processors and service providers to operate LumoCut. We require appropriate protection measures through contracts and provider terms.
| Processor | Task | Period | Country/Region |
|---|---|---|---|
| Google sign-in and identity authentication; Google Analytics 4 measurement and product analytics | Term of service use | Global, including United States | |
| Polar | Payment processing and billing status management | Term of service use and legal retention period | Global, including United States |
| Vercel | Web application hosting and Vercel Analytics product analytics | Term of service use | Global, including United States |
| Cloudflare | DNS, CDN, security, and R2 file storage | Term of service use | Global, including United States |
| Neon | PostgreSQL database hosting | Term of service use | Global, including United States |
| Railway | Application and worker hosting | Term of service use | Global, including United States |
8. International Transfers
Personal information may be transferred to Korea, the United States, and other countries where our service providers operate.
For transfers from the EEA, we rely on adequacy decisions, Standard Contractual Clauses, and other safeguards where applicable. Korea is subject to an EU adequacy decision, and U.S. or global providers generally use SCCs or comparable safeguards.
9. Cookies and Analytics
We use essential cookies for site operation, security, and user preferences. We also use Google Analytics 4 and Vercel Analytics to measure visits, feature usage, website performance, and service improvement. These tools may collect IP address, browser/device data, page views, referral information, and interaction or performance signals.
Google Analytics 4 and Vercel Analytics are enabled by default when you use the website. You can block or delete cookies through browser settings, but this may affect analytics measurement.
- Chrome: Settings > Privacy and security > Cookies and other site data
- Safari: Settings or Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions
- Firefox: Settings > Privacy & Security > Cookies and Site Data
10. User Rights
Users may request access, correction, deletion, suspension of processing, withdrawal of consent, objection to marketing, and data portability where applicable by contacting [email protected].
We will verify the requester and respond without undue delay under Korean law. EU users have additional GDPR rights described in the EU Privacy Notice.
11. Children
LumoCut is not intended for users under 16. We do not knowingly collect personal information from children under 16.
12. Automated Decision-Making
LumoCut uses AI to process uploaded product videos, but it does not make automated decisions that produce legal or similarly significant effects on users, such as credit approval, employment screening, or eligibility denial.
13. Security Measures
We apply administrative, technical, and physical safeguards, including access control, encryption in transit, provider security controls, log monitoring, least-privilege access, and deletion or anonymization when retention is no longer required.
14. Remedies and Complaints
For privacy inquiries, contact [email protected]. Korean users may also contact the Personal Information Dispute Mediation Committee (1833-6972), the KISA Privacy Infringement Report Center (118), the Supreme Prosecutors' Office (1301), or the Korean National Police Agency (182).
15. Changes
Material changes to this Privacy Policy will be announced at least 7 days before they take effect. Changes that materially affect user rights may be announced at least 30 days in advance where appropriate.
Revision history: 2026-08-28 - Initial publication.