Privacy Notice

Effective 2026-11-11

What we collect

주식회사 알레아캡타 (the "Company") establishes this privacy notice to protect users' personal information in accordance with the Personal Information Protection Act and other applicable laws of Korea. The Company collects only the minimum information strictly necessary for the Service.

Sign-up and sign-in: email address, password (stored encrypted in a form that cannot be restored), and, if you use social sign-in, the user identifier and email address from that service (Google, Apple, Kakao, Naver, LINE).

Using the Service: adult-check records (whether checked, method, country and time; the IP address at the time of consent is stored only as an irreversible hash), language and preference settings, characters, chats, stories and images you create and photos you upload, and Coins, membership and payment records (product, amount, payment status).

Information generated automatically: device and browser information (User-Agent), access and usage logs, IP address (as a hash), cookies, referral source (advertising and link information) if you consent to measurement, and push subscription information if you turn on web push.

Questions and removal requests: email address, details of the request, and the URL concerned.

The Company does not directly collect or store national identification numbers, copies of identity documents or card numbers. Payment information is processed by the payment processor. If we introduce third-party adult (identity) verification, we will add the items received from that provider to this notice.

How we use it

Member management: sign-up and sign-in, checking whether you are an adult, preventing fraudulent use, and processing account deletion.

Providing the Service: generating AI chats, images and webtoons, saving and publishing works, granting Coins and memberships, and processing payments and refunds.

User support and safety: handling questions, reports and removal requests, delivering notices, analyzing errors, security, dealing with illegal or harmful content, and usage statistics. Measurement and advertising cookies are used only if you allow them.

How long we keep it

The Company destroys personal information without delay once the purpose of processing has been achieved. Member information is kept until account deletion is processed (7 days after the request).

However, the following are kept for the periods required by law: records of contracts and withdrawal of offers, 5 years; records of payment and supply of goods, 5 years; records of consumer complaints and dispute handling, 3 years; records of labeling and advertising, 6 months (Act on the Consumer Protection in Electronic Commerce); and access logs, 3 months (Protection of Communications Secrets Act).

So that one-per-person offers such as the first-purchase pack and the trial are not granted again when someone deletes their account and signs up again, we keep a value derived from the email address that cannot be reversed (a hash).

How we delete data

Electronic files are deleted using methods that make recovery impossible, and information printed on paper is shredded or incinerated. Information kept because of legal requirements is stored separately from other information and used only for that purpose.

Sharing with third parties

The Company does not provide personal information to third parties except with the user's consent or where there is a legal basis.

Service providers

The Company entrusts the processing of personal information to the following providers in order to provide the Service: Amazon Web Services, Inc. (server operation, data storage and sending email), Google LLC (generating AI chats and, if you allow it, usage statistics), a payment processor (to be named once contracted; processing payments and refunds), and Meta Platforms, Inc. (measuring advertising performance, if you allow it). Images are generated on servers operated by the Company itself and are not outsourced.

The Company sets out personal information protection obligations in its entrustment contracts and manages and supervises the providers to ensure they comply. If a provider changes, we will notify you through this notice.

International transfers

To generate AI chats, the chat text and character and story settings are sent to Google LLC (the United States and other countries) over an encrypted network each time you use the feature, and are processed there; they are deleted once the purpose of processing is achieved or the entrustment contract ends.

Servers and data are kept with AWS in the Republic of Korea. Usage statistics and advertising measurement cookies (if you allow them) are processed by Google and Meta in the United States.

You may refuse the international transfer. Measurement cookies can be turned off in cookie settings. To refuse the transfer needed for AI chat you may delete your account, but in that case you cannot use AI chat.

Cookies

Cookies we use: dd_sid (sign-in and guest identity; essential), dd_consent (remembers your cookie choice; essential), and dd_attr and dd_attr_last (referral source; only if you allow measurement). You can block cookies in your browser settings, but if you block essential cookies, features such as sign-in will not work.

Measurement cookies are set only if you allow them. Cookies the service needs to run (sign-in, the 18+ check, language) are always on.

Your rights

You may at any time request access to, correction or deletion of, or suspension of processing of your personal information, and you may withdraw your consent. If you make a request by email, the Company will notify you of the result within 10 days. You may also make a request through a representative.

You can download your data or delete your account under Account in Settings. Deletion happens after 7 days, and you can cancel before then.

Account

How we protect data

Passwords are encrypted in a form that cannot be restored, all communication is encrypted with HTTPS, and IP addresses are stored only as hash values. Access to personal information is given only to those who strictly need it, and administrator actions are logged. Private images are delivered through signed links that are valid only for a short time.

Privacy officer

For questions, complaints or remedies regarding personal information, please contact the privacy officer below.

You may also report or seek advice about privacy infringements from: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office (1301 in Korea), and the Korean National Police Agency (ecrm.police.go.kr, 182 in Korea).

개인정보 보호책임자
양화승
이메일
contact@aleacapta.com
대표 전화
02-2135-9124

Changes to this notice

If this privacy notice changes, we will announce it through a Service notice 7 days before it takes effect (30 days for changes that materially affect your rights).

Contact

상호
주식회사 알레아캡타
이메일
contact@aleacapta.com
대표 전화
02-2135-9124
주소
서울특별시 구로구 디지털로 242, 1동 12층 1203호(구로동, 한화비즈메트로1차)
Help & content removal