Privacy Policy

• Identifying members, login and account management, and preventing sign-up by persons under age 14
• Managing Credit top-ups and usage, payments and refunds, and handling withdrawal of purchases
• Sending notices needed to use the Service, such as login links and purchase confirmations
• Handling customer inquiries and complaints, and responding to disputes
• Showing the information of the YouTube and TikTok accounts the user has connected on the user’s dashboard, and refreshing those figures daily while the connection is kept
• Understanding what kind of creator the user is, in order to provide and improve the Service’s features to suit the user (not used for advertising profiling, and not sold or shared with third parties other than the Google and TikTok APIs)
• Showing onboarding answers on the dashboard and helping the user use the Service
• Analyzing service usage statistics and improving errors
• Preventing misuse, security, and fulfilling legal obligations
• Announcing new features and events, only to those who have agreed to receive marketing communications

The Company destroys personal information without delay once the purpose of use has been achieved. However, the information below is retained for the periods prescribed by law.

Even after an account is closed, records that must be retained by law are kept separately from other information and are not used for any purpose other than the retention purpose. They are destroyed without delay once the retention period ends.

Electronic files are deleted by a method that makes recovery impossible. It may take time for information to be completely erased from processors’ systems and backups, following each processor’s own deletion procedures.

To provide the Service, the Company entrusts the processing of personal information to the following companies. The Company manages processors in accordance with applicable laws so that they process personal information only within the scope of the entrusted purpose, and reflects any change of processor or entrusted task in this Policy.

When a user chooses to connect YouTube or TikTok, the Company calls the APIs of the service providers below. They are not processors to whom the Company has entrusted the processing of personal information: they are service providers that pass the user’s own account information to the Company within the scope the user allowed (the information flows from the provider to the Company, and what the Company sends to the provider is only credentials and lookup requests). They are listed here for transparency. Details of the connections are in Sections 12 to 14.

The Company transfers personal information abroad as shown below, as entrusted processing and storage necessary for the performance of the contract, and discloses this in this Policy in accordance with Article 28-8 of PIPA. Even where the database is in the Seoul region, a transfer is treated as a cross-border transfer and disclosed where the operator is a foreign business. The YouTube and TikTok service providers whose APIs the Company calls when a user chooses to connect are also listed.

Users who do not want their personal information transferred abroad can refuse by not signing up or by closing their account. Login, data storage and web hosting are essential to providing the Service, so if they are refused the Service cannot be used. Visit statistics (Google Analytics) can be refused by the method described in Section 7, and refusing does not affect use of the Service. Connecting YouTube or TikTok is optional, so users can refuse by not connecting or by disconnecting, and refusing does not affect use of the other features of the Service.

The Company does not sell users’ personal information, and does not provide it to third parties except where the user has agreed, where there is a legal basis, or where an investigative agency requests it by the procedure prescribed by law. The companies in the first table of Section 4 are entrusted processors, not third-party recipients.

Google and Kakao login work by the user authenticating directly on the provider’s screen and agreeing to the items to be provided, and the Company receives only the items the user has agreed to. The provider’s own policy applies to the provider’s processing of personal information (Google, Kakao).

Information about the YouTube and TikTok accounts a user has connected is likewise not sold and not provided to third parties. It passes only from the Google and TikTok APIs to the Company. Details are in Sections 12 to 14.

The Company does not use cookies for advertising purposes. The information the Service stores in the user’s browser, and the analytics tools used, are as follows.

Users may exercise the following rights over their personal information at any time.

• Request for access
• Request for correction or deletion
• Request to suspend processing
• Withdrawal of consent (consent to marketing communications, YouTube and TikTok connections, etc.)

1. Users can disconnect YouTube or TikTok, or delete (close) their account, on the dashboard or the account page.
2. Please send other requests to admin@streamize.net. The Company asks only for the information that is truly necessary to verify identity, and where an agent makes the request, verifies the authorization.
3. On receiving a request, the Company takes action without delay and informs the user of the result. Where a request cannot be granted, such as for records that must be retained by law, the Company explains the reason.

The Company does not accept sign-ups from children under age 14, and does not offer sign-up with a legal guardian’s consent. If the Company becomes aware that personal information of a child under age 14 has been collected, it deletes it without delay.

• Receiving marketing information (new features, event announcements, etc.) is optional, and the default is not to have agreed. The Service can be used without agreeing.
• Even after agreeing, a user can withdraw at any time on the account page or by email to admin@streamize.net.
• In accordance with law, the Company reconfirms every 2 years whether users who agreed to receive marketing communications still agree.
• Notices that are essential to using the Service, such as login links, purchase confirmations and changes to the Terms, are not advertising information and are sent regardless of whether the user has agreed to receive marketing communications.

The Company protects personal information through the following measures.

• Encryption in transit: information exchanged with the Service is encrypted with TLS (HTTPS).
• Access control: access rules allow users to read only their own data, and data is written only from the Company’s servers so that it cannot be changed directly from the browser. Within the Company, only the minimum necessary people have access.
• Management of secret keys: server secret keys and credentials are managed only in server-only settings and are never sent to the browser.
• Protection of connection tokens: the refresh and access tokens issued by Google and TikTok are encrypted with AES-256-GCM and kept only in a server-only database collection that the browser (client) cannot read. Tokens are never shown on screen, written to logs or shared elsewhere.
• No storage of payment method information: card numbers and the like are not stored by the Company and are processed by the payment service provider.
• Protection of the login session cookie: the login session cookie is set so that scripts cannot read it.

No system is perfect. If a personal information breach occurs, the Company notifies affected users and takes action without delay in accordance with law.

Channel Connection is an optional feature that the user starts, and every other feature of the Service can be used without connecting. A connection is made only when the user allows the permissions on Google’s or TikTok’s own screen.

1. Read-only: the permissions the Company requests are read-only (YouTube: youtube.readonly; TikTok: user.info.basic, user.info.profile, user.info.stats. On TikTok, the Company may also request video.list only where the user allows it on the consent screen). With these permissions, videos cannot be uploaded to, edited on or deleted from the user’s YouTube channel or TikTok account.
2. Information stored: the Company stores the account information listed in the table in Section 1 (channel identifier or open ID, name, handle, profile image address, subscriber or follower count, video count, view count, like count, permissions granted, and the times of connection and synchronization), and, to keep the connection and refresh the figures, the refresh token and access token issued by Google and TikTok.
3. Protection of tokens: tokens are encrypted with AES-256-GCM and kept only in a server-only database collection that the browser (client) cannot read. Tokens are not shown even to the user, and are not written to logs or shared elsewhere.
4. Purposes: to show the user’s own channel and account information on the user’s dashboard and refresh the figures daily, and to understand what kind of creator the user is so that the Service’s features can be provided and improved to suit the user. The information is not used for advertising profiling, is not sold, and is not shared with third parties other than the Google and TikTok APIs.
5. Retention and deletion: while the connection is healthy, the information is refreshed daily. When the user disconnects on the dashboard or the account page, or deletes the account, the stored information and tokens are deleted at once and permission is revoked at Google and TikTok. If the provider rejects the token (permission revoked, expired, etc.) and the connection stays broken for more than 28 days, the stored information and tokens are deleted. Deletion does not affect the user’s accounts or videos at Google and TikTok.
6. Revoking permission: besides the disconnect feature above, the user can revoke permission at any time on the permissions page of the Google Account (myaccount.google.com/permissions, or the Google security settings page) and in the TikTok app’s settings (on an English-language screen: Settings → Security & permissions → Apps and websites). If the user revokes at the provider directly, the Company’s refresh is refused and the stored information and tokens are deleted within the period above. For faster deletion, use the disconnect feature or request deletion under Section 8.
7. Paid posting feature (not currently offered): in future, as a paid subscription feature, the Company may offer publishing videos the user has created to the user’s own channel through the user’s explicit action. The posting permissions this requires will be requested only from subscribing users, separately and with separate consent on a separate consent screen, and are not requested today. If the Company starts offering that feature, it will reflect the processing in this Policy.

1. The Company uses YouTube API Services. By connecting a channel, the user agrees to be bound by the YouTube Terms of Service, and the YouTube API Services Terms of Service apply to the Company’s use of the YouTube API. The Google Privacy Policy applies to Google’s processing of personal information.
2. The only permission the Company requests is youtube.readonly (read-only). Google describes this permission as one for viewing the YouTube account, and its scope may extend to account data beyond public information. The Company reads and stores only the channel information listed in the table in Section 1, does not request or store any other data, and does not currently request permission to upload videos.
3. Tellscene’s use of information received from Google APIs (Google user data), and its transfer of that information to any other app, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Accordingly, the Company handles Google user data only as follows.

• It is used only to provide or improve user-facing features (showing channel information on the dashboard, refreshing the figures, and providing the Service to suit the user). It is not used to serve advertising, is not sold, and is not used for credit rating or lending decisions.
• It is not transferred to third parties, except where necessary to comply with law or for security (such as investigating abuse), or where the user has given explicit consent.
• No human reads it, except where the user has given explicit consent, where necessary for security purposes (such as investigating abuse) or to comply with law, or where it is aggregated and anonymized and used only for the Company’s internal operations.

1. The user can revoke permission at any time using the Service’s disconnect feature or the permissions management page of their Google Account. When the user disconnects or closes the account, the Company deletes the stored YouTube channel information and tokens at once and asks Google to revoke the permission. If the user revokes directly at Google, the information is deleted within the period stated in Section 12.
2. Inquiries about Google user data can be submitted to the contact in Section 16.

1. When a user chooses to connect TikTok, the Company obtains the user’s own account information through TikTok Login Kit and the TikTok API. The TikTok Privacy Policy applies to the user’s use of TikTok, and the TikTok Developer Terms apply to the Company’s use of the TikTok API.
2. The permissions the Company requests are user.info.basic, user.info.profile, user.info.stats (read-only), and it may also request video.list (reading the list of public videos) where the user allows it. On TikTok’s consent screen the user can choose, permission by permission, whether to allow it, and if the user allows only some, only information within that scope is read. Permission to post or upload videos is not currently requested.
3. Information received from TikTok is used only for the purposes stated in Section 12. It is not sold, not used for advertising, not shared with third parties, and not used to build profiles or databases of anyone other than the user themselves.
4. The user can revoke permission at any time using the Service’s disconnect feature or in the TikTok app’s settings (on an English-language screen: Settings → Security & permissions → Apps and websites). When the user disconnects or closes the account, the Company deletes the stored TikTok account information and tokens at once and asks TikTok to revoke the permission. If the user revokes directly at TikTok, the information is deleted within the period stated in Section 12.

The video production feature is in preparation. When the Company starts providing this feature, it will reflect in this Policy the purposes of processing, retention periods, entrusted processing and cross-border transfers for the Inputs (scripts, descriptions, etc.) and Outputs used to make videos, and will explain them on the Service screens.

Please submit inquiries, complaints and requests for relief concerning personal information to the contact above. The Company replies and handles them without delay.

If you need help with an infringement of personal information, you can report it to, or request consultation from, the following organizations.

• Personal Information Infringement Report Center: privacy.kisa.or.kr (118)
• Personal Information Dispute Mediation Committee: kopico.go.kr (1833-6972)

If this Policy changes, the Company announces the changes and the effective date on this page. Changes that are unfavorable to users or that are material are notified on the Service screen or by email from 7 days before they take effect (30 days before, for material changes).

This Policy takes effect on October 10, 2026.