Privacy Policy

1. Information we collect

We collect only what we need to run the service:

• Account information — your name and email address, provided directly or through Google sign-in. If you register with a password, we store only a salted hash, never the password itself.
• Content you submit — the topics, scripts, brand guides, channel descriptions, uploaded images and reference material, and voice or style selections you provide so the service can generate videos for you.
• Generated output — the scripts, images, audio, and video files the service produces for you, and the project metadata associated with each run.
• Billing information — your subscription plan and billing status. Card payments are processed by Stripe; we do not receive or store your full card number.
• Usage and technical data — basic log data such as actions taken, approximate usage volume for plan limits, browser/device information, and error diagnostics.
• Cookies — strictly necessary cookies for sign-in/session, plus your saved language and theme preferences. We do not use advertising cookies.

2. How we use your information

We do not sell your personal information, and we do not use your private content to train our own models.

• To provide, operate, and maintain the service and generate the videos you request.
• To process subscriptions, enforce plan limits and usage caps, and prevent billing abuse.
• To authenticate you, secure your account, and detect or prevent fraud and abuse.
• To provide support and respond to your requests.
• To improve reliability and quality of the service.
• To comply with legal obligations.

3. AI providers and service subprocessors

To generate your videos and run the platform, your content is processed by trusted third-party providers acting on our behalf. Depending on the features you use, the content you submit (text, images, and audio) is sent to these AI providers solely to produce your requested output:

• Anthropic and OpenAI — for scriptwriting and creative planning.
• Google (Gemini, Veo) and xAI (Grok) — for image and video generation.
• ElevenLabs — for voice and music generation.
• Serper — for optional web/image research when you enable it.

4. Infrastructure providers

We rely on the following providers to host and operate the service. They process data on our behalf under their own security and privacy commitments:

• Supabase — database, authentication, and file storage.
• Vercel and Railway — application and processing hosting.
• Stripe — subscription billing and payment processing.
• Google — optional sign-in (OAuth).

5. How we share information

We share information only with the subprocessors listed above to run the service, when required by law or valid legal process, to protect the rights, safety, and security of our users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you). We never sell your personal information.

6. Data retention

We keep your account information and content for as long as your account is active. You can delete your projects at any time. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (for example, billing records) to meet legal, accounting, or security obligations.

7. Security

We use industry-standard safeguards including encryption in transit, access controls, and isolation of each account's data. No method of transmission or storage is perfectly secure, but we work to protect your information and to address vulnerabilities promptly.

8. International transfers

We and our providers may process your information in countries other than your own, including the United States and the Republic of Korea. Where required, we use appropriate safeguards for such transfers.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. This includes rights under the EU/UK GDPR, the California Consumer Privacy Act (CCPA), and Korea's Personal Information Protection Act (PIPA). To exercise any of these rights, contact us at the address below; we will respond within the timeframe required by applicable law.

10. Children

The service is not directed to children. You must be at least 14 years old (or the minimum age of digital consent in your country) to use it. We do not knowingly collect personal information from children below that age.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

12. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at jinsek@liche.co.kr.