Privacy Policy

Fairium (hereinafter “the Company”) values the personal information of users of the GenToon service (hereinafter “the Service”) and complies with applicable data protection laws, including the Korean Personal Information Protection Act (PIPA). This Privacy Policy describes the categories of personal information we collect, the purposes for which we use it, the retention periods, third-party disclosures, and the rights available to data subjects.

1. Categories of Personal Information Collected and Methods of Collection

A. Categories Collected

B. Methods of Collection

• Direct input during sign-up and service use on the website
• Social login via Google or Kakao OAuth
• Automatic collection during payment processing via Polar
• Automatic generation and collection through cookies, logs, and similar technologies during service use
• Collection during customer inquiries via email or the Help page

2. Purposes of Processing Personal Information

1. Member management. Identity verification, prevention of unauthorized use, complaint resolution, and delivery of notices
2. Service provision. AI image and script generation, project storage, character management, and community operation
3. Payment and billing. Subscription payments, credit purchases, refunds, and issuance of tax receipts and invoices
4. Service improvement. Usage statistics analysis, error detection (Sentry), and service quality enhancement
5. Marketing (optional). Event and benefit notifications (only with prior consent)

3. Retention and Use Periods

The Company destroys personal information without delay once the purpose of processing has been fulfilled. However, where retention is required by applicable law, the information shall be securely stored for the prescribed period before destruction.

4. Provision of Personal Information to Third Parties

The Company does not provide personal information to third parties without the user's consent. However, the minimum necessary information is shared with the following parties for the purpose of providing the Service.

Personal information may also be disclosed where required by law, such as upon presentation of a warrant by investigative authorities.

5. Entrustment of Personal Information Processing

The Company entrusts the processing of personal information to the following service providers for the purpose of operating the Service. In each entrustment agreement, the Company ensures the safe handling of personal information in accordance with applicable data protection laws.

6. Overseas Transfer of Personal Information

Among the processors listed above, personal information is transferred overseas to the following entities located outside the Republic of Korea.

7. Rights of Data Subjects and How to Exercise Them

Users (data subjects) may exercise the following rights at any time:

1. Right to access personal information
2. Right to request correction of inaccurate information
3. Right to request deletion of personal information
4. Right to request suspension of processing

You may exercise these rights through Settings > My Account within the Service or by contacting our support team at service@gentoon.ai. Requests will be processed within 10 days of receipt. If processing is delayed, we will notify you of the reason.

8. Destruction of Personal Information

1. Personal information shall be destroyed without delay once the retention period has expired or the processing purpose has been achieved.
2. Electronic files: Permanently deleted using methods that prevent recovery.
3. Paper documents: Shredded or incinerated.
4. Upon account deletion, all projects, characters, generated images, and files stored in the Service are immediately deleted. Trashed projects are permanently deleted after the 30-day retention period has elapsed.

9. Use of Cookies

The Company uses the following cookies:

By using the Service (signing up or logging in), you are deemed to have consented to this Privacy Policy, and the analytics cookies listed above will be collected automatically. You may refuse the storage of cookies through your web browser settings. However, blocking cookies may restrict your ability to use certain features, such as logging in.

10. Measures to Ensure the Security of Personal Information

The Company implements the following measures in accordance with applicable data protection laws:

1. Access control. Access to personal information is restricted to the minimum number of authorized personnel, and administrator accounts are managed via UUID-based whitelisting.
2. Encryption. Passwords are stored using one-way hashing, and payment card information is processed by Polar in compliance with PCI-DSS standards. All communications are encrypted using TLS (HTTPS).
3. Security headers. Security headers including HSTS, CSP, and X-Frame-Options are applied to prevent web-based attacks.
4. Access restrictions. CSRF tokens, API rate limiting, and IP-based anomalous access blocking are implemented.
5. Monitoring. Real-time error detection and security event monitoring are performed through Sentry.

11. Personal Information of Children Under 14

The Company does not collect personal information from children under the age of 14. If a user is identified as being under 14 years of age, the Company will delete the account and destroy the collected information without delay.

12. Data Protection Officer

Name

Jung-hwi Kim

Title

Representative / DPO

Contact

service@gentoon.ai

13. Remedial Agencies for Privacy Infringement

If you need to report or seek consultation regarding a privacy infringement, you may contact the following organizations:

Personal Information Protection Commission (PIPC)

privacy.go.kr / Tel: 182

Korea Internet & Security Agency (KISA)

privacy.kisa.or.kr / Tel: 118

Supreme Prosecutors' Office, Cybercrime Investigation Division

spo.go.kr / Tel: (02) 3480-2000

National Police Agency, Cyber Bureau

ecrm.police.go.kr / Tel: (02) 392-0330

14. Changes to This Policy

1. This Privacy Policy may be amended due to changes in applicable laws, regulations, or internal policies of the Company.
2. Any amendments will be announced within the Service at least 7 days prior to the effective date of the change.
3. This Policy has been in effect since January 1, 2025. The revision dated May 9, 2026 takes effect on the same date.

15. Chính sách lưu trữ tin nhắn

Công ty áp dụng thời hạn lưu trữ khác nhau tùy theo loại tin nhắn được trao đổi trong Dịch vụ.

16. Hợp tác với cơ quan thực thi pháp luật và cơ quan nhà nước

Công ty cam kết bảo vệ thông tin cá nhân của người dùng; tuy nhiên, khi cơ quan nhà nước gửi yêu cầu hợp pháp theo đúng trình tự thủ tục, Công ty sẽ hợp tác trong phạm vi pháp luật hiện hành cho phép.