Privacy Policy

This Privacy Policy explains how SFAI, the operator of MyouV ("we", "us"), collects, uses, shares and protects personal information when you use the MyouV website and web app (the "Service").

SFAI is based in the Republic of Korea and handles personal information under Korea's Personal Information Protection Act (PIPA) and other applicable laws. We decide how your personal information is used and are responsible for it.

Our Terms of Service explain the rules for using MyouV.

We only collect what we need to run MyouV. Here is what we collect and when:

We do not collect payment information, because MyouV is free during the beta. We do not ask for sensitive information such as health data, biometric data or identification numbers.

Please do not include personal information about yourself or other people in your stories or prompts.

• To create and manage your account and keep you signed in.
• To generate images and video clips from your story and show them in your "My videos" library.
• To apply daily generation limits and keep the Service fair.
• To answer messages you send through the contact form.
• To send newsletter emails if you signed up for them.
• To send service emails, such as notices about your account, changes to our terms, or upcoming paid plans.
• To understand how the site is used, fix problems and improve the Service.
• To keep the Service secure, prevent abuse and enforce our Terms of Service.
• To meet legal obligations and respond to lawful requests.

We use this information to provide the Service you signed up for, with your consent where the law requires it (for example, for the newsletter), and to comply with the law. Before using personal information for a new purpose beyond these, we will ask for your consent where required.

We do not sell your personal information, and we do not use it for targeted advertising.

We share personal information only with the service providers that help us run MyouV, and only as needed for the tasks below. Under PIPA, these are providers we entrust with processing personal information on our behalf.

We supervise these providers so that they handle personal information securely and only for the tasks we give them.

We may also share information:

• When the law requires it, such as a valid request from a court or government authority.
• When needed to protect a person's life, safety or rights, as the law allows.
• If SFAI's business is merged or transferred, with advance notice to you as the law requires.
• In other cases, only with your consent.

Some of our providers process data outside Korea. When you use the relevant feature, your information is sent to them over encrypted network connections.

You can refuse these transfers by contacting us. Because generation and hosting depend on these providers, you would not be able to use the Service if you refuse.

• Session records: until the session ends or expires, and no longer than [session log retention period].
• Account information: while your account is active. After you close your account, we delete it within [retention period, e.g. 30 days], unless the law requires us to keep it longer.
• Your projects and generated outputs: until you ask us to delete them or close your account, then within the same period.
• Contact messages: [retention period] after we resolve your request.
• Newsletter email address: until you unsubscribe.
• Analytics data: [retention period].
• Backups: deleted data may remain in backups for up to [backup retention period] before it is overwritten.

If a law requires us to keep certain records for a set period, we store them separately and use them only for that purpose.

How we delete data

When the retention period ends or the purpose is fulfilled, we delete electronic records so that they cannot be recovered. Any paper records are shredded.

You have the right to:

• Ask what personal information we hold about you and receive a copy.
• Correct information that is wrong or incomplete.
• Ask us to delete your information.
• Ask us to suspend processing of your information.
• Withdraw consent you gave us, such as for the newsletter.

To make a request, use our contact form or email [privacy contact email]. A legal guardian or a person you authorize can also make a request for you, with proof of their authority. We will confirm your identity before acting and reply within the time the law requires (generally 10 days under Korean law).

In some cases the law allows or requires us to refuse or limit a request, for example if another law requires us to keep the information. If so, we will explain why. If we delete information needed for your account, you may not be able to keep using the Service.

You must be at least 14 to use MyouV. We do not knowingly collect personal information from children under 14. If we learn that a child under 14 has created an account, we will delete the account and its data.

Users under the age of majority (19 in Korea) need a parent or guardian's consent to use the Service. If you are a parent or guardian with a concern, please contact us.

We use a small number of cookies and similar technologies:

• A session cookie that keeps you signed in. Sign-in does not work without it.
• Analytics collected by our hosting platform, which records page views and events so we can see how the site is used.

We do not use advertising cookies.

You can block or delete cookies in your browser settings. If you block the session cookie, you will not be able to sign in.

If you sign up for our newsletter, we will send you updates about MyouV. Every newsletter includes a way to unsubscribe, or you can ask us through the contact form.

Even if you unsubscribe, we will still send essential service emails, such as account notices or changes to our terms.

• Passwords are stored as hashes, not in readable form.
• Data travels over encrypted HTTPS connections.
• Access to personal information is limited to the people who need it to run the Service.
• We choose providers with their own security measures and limit what we share with them.

No online service is completely secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.

MyouV is operated from Korea, but you may use it from elsewhere. Depending on where you live, you may have additional rights.

European Economic Area and United Kingdom

If EU or UK data protection law applies to you, we rely on these legal bases: performing our agreement with you, your consent, our legitimate interest in running and securing the Service, and our legal obligations. You may have the right to access, correct, delete, restrict, object to and move your data, and to complain to your local data protection authority. Where the law requires safeguards for transfers to other countries, we will put them in place.

California

If you live in California, you may have the right to know what personal information we collect and how we use and share it, to access, correct or delete it, and not to be treated differently for using these rights. We do not sell personal information or share it for cross-context behavioral advertising, as those terms are defined in California law.

To use any of these rights, contact us as described in section 14.

The Service may link to websites and services run by others. We do not control them, and this policy does not apply to them. Please read their privacy policies before sharing information with them.

SFAI has appointed a privacy officer who is responsible for protecting personal information and handling privacy complaints.

• Privacy officer: [Privacy officer name and position]
• Email: [privacy contact email]
• Address: [SFAI business address]
• Contact form: myouv.com/contact

If you need further help with a privacy concern, you can also contact these Korean public bodies:

• Personal Information Dispute Mediation Committee: www.kopico.go.kr, phone 1833-6972
• Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr, phone 118
• Supreme Prosecutors' Office: www.spo.go.kr, phone 1301
• Korean National Police Agency cyber crime reporting: ecrm.police.go.kr, phone 182

We will update this policy when our practices or the law change. We will post the new version here with a new "Last updated" date, and we will announce important changes in the Service or by email at least [notice period, e.g. 7 days] before they take effect. If a change significantly affects your rights, we will give at least [longer notice period, e.g. 30 days] notice, or ask for your consent where the law requires it.