Privacy Policy
Effective: July 17, 2026
Soven (“Company”) explains how Postro collects, uses, stores, and shares personal data for accounts and subscription billing (PortOne/KCP in Korea; Paddle internationally).
Article 1 (Data we collect)
Soven (“Company”) collects personal data needed to run Postro (postro.app), including monthly subscription billing.
| Category | Examples | How collected |
|---|---|---|
| Account | Email, display name, avatar (optional), auth identifiers | Sign-up / login (e.g. Supabase Auth) |
| SNS connections | Platform account IDs, handles, OAuth tokens and related metadata | When you connect an account |
| Content & usage | Drafts, titles, uploaded photos used for avatars, generated images/videos and media URLs, generation/publish logs, credit usage, errors | While you use the Service |
| Billing | Name/email/contact as needed for checkout, plan, amounts, timestamps, order/payment IDs, billing-key or subscription identifiers from payment providers. We do not store full card numbers or CVCs on our servers. | Subscribe / renew / cancel |
| Technical | IP, cookies/session IDs, browser, access logs | Automatically |
Article 2 (Purposes)
- Account authentication and management
- SNS linking, content processing, storage, and publishing
- AI drafting and platform optimization (including OpenAI processing)
- Image generation, talking-avatar / photo-avatar video generation, and media storage (including HeyGen and similar providers when you use those features)
- Subscription billing, renewals, cancelation, receipts, and support
- Quota management and abuse prevention
- Security, debugging, product improvement, and analytics (e.g. Google Analytics)
- Legal compliance and dispute handling
- Service notices (marketing only with consent where required)
Article 3 (Retention)
- We delete or anonymize data when purposes are fulfilled, except where law requires retention.
- Account data: until deletion, then any legally required segregated retention.
- Billing records / keys: for the subscription lifecycle and periods required by applicable law (e.g. Korean e-commerce record-keeping). Billing keys are deleted or revoked within a reasonable time after cancelation/deletion, subject to legal holds.
- Access logs: as required (e.g. communications secrecy rules where applicable).
Article 4 (Sharing)
- We do not sell personal data. We share only with consent, as needed to provide the Service you request, or where required by law.
- When you publish to SNS, necessary content and account data are sent to that platform at your request.
Article 5 (Processors / providers)
| Provider | Role | Retention |
|---|---|---|
| PortOne / NHN KCP | Korea (KRW) payments and billing keys | Per contract / legal retention |
| Paddle | International (USD) merchant of record: checkout, tax, refunds, subscription sync | Per Paddle policies / legal retention |
| Supabase | Auth, database, storage | Until account end / contract end |
| Vercel | Hosting and edge infrastructure | Until contract end |
| OpenAI | AI content generation, platform optimization, and image generation (submitted text, prompts, and related metadata you request to process) | Per processing purpose / OpenAI policies |
| HeyGen | Photo-avatar creation and talking-avatar video generation (face photos you upload for avatars, scripts, voice settings, and related media metadata) | Per processing purpose / HeyGen policies |
| Google (Analytics 4) | Product analytics and traffic measurement (cookies / device / navigation data) | Per contract / Google policies |
| Discord | Operational alerts for errors and user feedback (message content and related metadata) | Until operational purpose / contract end |
Articles 6–9 (Deletion, rights, cookies, security)
- We destroy personal data so it cannot reasonably be recovered once retention ends.
- You may request access, correction, deletion, restriction, withdraw consent, disconnect SNS, cancel billing, or delete your account via Settings in the Service or support@postro.app.
- We use cookies for session, security, UX, and analytics (Google Analytics 4). Blocking cookies may limit login, checkout, or measurement.
- We use HTTPS, access controls, and minimize exposure of tokens and billing identifiers.
Article 10 (Children)
The Service is not directed to children under 14 (or the higher age required in your region). We delete such data if we learn it was collected.
Article 11 (Contact)
- Privacy lead: Kanghyun Lee (Representative)
- Business: Soven · Reg. No. 666-21-02220
- Address: 19-11 Hwayang-dong, Gwangjin-gu, Seoul, #701, Korea
- Email: support@postro.app
- Phone: 010-8778-0310
Article 12–13 (Remedies & changes)
Depending on your location you may contact local privacy authorities. We may update this policy; material changes will be posted in the Service. Effective date: July 17, 2026. The English text is for convenience; Korean may control for Korea-regulated processing where required.