Privacy Policy
IDEAINNOV · Effective July 23, 2026
1. General Provisions
IDEAINNOV (the “Company”) complies with the Korean Personal Information Protection Act and other relevant laws, and establishes and discloses this Privacy Policy to protect users' personal information and safeguard their rights.
2. Personal Information We Collect
- Sign-up / authentication: email address, name (optional), social-login identifier (e.g. Google)
- Payment / subscription: payment-method information (handled by the card issuer / payment provider), payment history, subscription status
- Service use: uploaded documents (for conversion/analysis), generated outputs and their metadata, job progress records — see section 3 for retention
- Automatically collected: access IP, browser/device information, cookies, usage logs (for security and abuse prevention)
3. Purpose of Collection and Use
- Member identification/authentication and service delivery (paper writing, proposals, document conversion)
- Payment/settlement, subscription and credit management, refund processing
- Responding to inquiries, notices and announcements
- Abuse prevention, security incident response, and compliance with legal obligations
- Marketing email (optional consent): ideainnov.com news and event announcements, once a week; consent can be withdrawn immediately via the link at the bottom of the email or in your account settings
4. Retention and Use Period
- Member information: until account withdrawal (destroyed immediately upon withdrawal, except where retention is required by law)
- Files uploaded to the document converter: deleted immediately after conversion (never stored permanently on the server)
- Generated outputs (manuscripts, proposals and other result files): Download period: paid plans 30 days (7 days for outputs generated from 2026-11-30 00:00 KST) · free trial 24 hours / Server copies: deleted once 30 days have passed since creation, at the next job processed after that
- Job progress records (job status and error details): kept for 7 days, then deleted in turn
- Payment / transaction records: retained 5 years under the Korean Act on Consumer Protection in Electronic Commerce
- Access logs: retained 3 months under the Korean Protection of Communications Secrets Act
- Marketing consent and withdrawal records: kept until consent is withdrawn or the account is closed, then retained for 1 year from withdrawal as evidence of the withdrawal, and destroyed thereafter
5. Provision to Third Parties
The Company does not provide users' personal information to third parties beyond the scope stated in this Policy, except where there is a legal basis or a lawful request from an investigative authority.
6. Outsourcing of Processing
For smooth service delivery, the Company entrusts the processing of personal information as below, and stipulates in the entrustment contracts that personal information is managed securely.
- Clerk — member authentication and login management
- Turso (libSQL) — database storage and operation
- Vercel — web service hosting
- PortOne (Iamport) and contracted PG companies — domestic payment processing/settlement
- Paddle · PayPal — overseas payment processing (Paddle acts as Merchant of Record)
7. Rights of Users and Legal Representatives
Users may at any time view, correct, or delete their personal information or request suspension of its processing, and may withdraw consent to the collection/use of personal information by closing their account. Rights may be exercised by written or email request to the Personal Information Protection Officer below.
8. Destruction of Personal Information
Personal information whose retention period has elapsed or whose processing purpose has been achieved is destroyed without delay. Electronic files are permanently deleted by irrecoverable means, and printed materials are shredded or incinerated.
9. Security Measures
- Encryption in transit (HTTPS/TLS); secure storage of passwords and authentication data
- Minimized access privileges and access control; security-event audit logs
- Converter uploads deleted immediately after processing; server copies of generated outputs deleted once 30 days have passed since creation, at the next job processed after that, and job records after 7 days (no permanent storage)
10. Personal Information Protection Officer
- Company: IDEAINNOV (MiraeSahoeiR&D Inc.)
- Representative / Protection Officer: Cho Tae-jun (조태준)
- Address: 4F, Room J90, 566 Gyeryong-ro, Seo-gu, Daejeon, Republic of Korea
- Tel: +82-31-539-2026
- Email: info@ideainnov.com
11. Duty of Notification
Any addition, deletion, or amendment to this Privacy Policy will be announced via the website notices at least 7 days before it takes effect.
12. YouTube API Services
- Our creator automation tool (IDEAINNOV Creator Pipeline) uses YouTube API Services. By using it, you also agree to the YouTube Terms of Service and the Google Privacy Policy.
- The client uses the API only to upload videos to the authenticated owner's own channel and to read the owner's own channel analytics. It does not access, collect, store, or share any third-party users' YouTube data.
- OAuth tokens are stored only on the user's local device and are never transmitted to or retained on our servers.
- Revoking access: you can revoke this client's access at any time via Google security settings.
- To request deletion of any stored API-related data, contact info@ideainnov.com and we will process it without undue delay.
Usage records for abuse prevention
Notice 2026-10-29 · Effective 2026-10-29
- What we record: when you use the chatbot or the service, the time, the type of use, your signed-in account identifier, and keyed hashes of your IP address and of the question (hashes cannot be turned back into the original). This record does not store the text of ordinary questions.
- Only for a request blocked as automated collection or an attempt to extract internal information, the first 200 characters of that request are kept for review.
- Conversation context: so the chatbot can follow up on earlier turns, the last 6 turns of a chat (questions and answers) are kept per chat session (cookie) for 24 hours and then deleted.
- Retention: conversation context 24 hours; excerpts of blocked requests 30 days; usage records and counters at most 90 days. Expired records are deleted by a daily automatic clean-up.
- Purpose and basis: detecting and preventing abuse, automated collection and security threats (legitimate interest and performance of the service contract). These records are not used for marketing or profiling.
Change of output retention period (advance notice)
Notice 2026-10-30 · Effective 2026-11-30
- Output retention: 30 days → 7 days. Outputs generated on a paid plan (including pay-per-use), such as manuscripts, proposals and converted files, can be downloaded again for 7 days from creation instead of 30 days.
- Outputs generated from 00:00 Korea time on the effective date (2026-11-30) can be downloaded for 7 days from creation. Outputs generated before the effective date keep the expiry set when they were created (30 days from creation). Please download the files you need before they expire.
- The free-trial download link period and the completion emails do not change.
- These are download periods. Server copies of outputs are, separately, deleted once 30 days have passed since creation, at the next job processed after that.