Privacy Policy

1. What we collect

• Account info (email, name, login provider).
• Identity verification result (hashed CI/DI, phone number) when you complete KCP verification.
• Uploaded photos and the generated outputs.
• Payment records (handled by Toss Payments; we store the transaction reference, not card details).
• Device and usage analytics: page views, generation events, crash reports.

2. How we use it

• To run the photo-generation Service and deliver your outputs.
• To process payments and ship printed photos.
• To verify identity where required by Korean law.
• To diagnose problems and improve quality.
• To send transactional emails (receipts, shipping notifications). Marketing email is opt-in only.

3. Sharing

We do not sell your personal information. We share data only with processors who help us run the Service: AWS (storage, email), Toss Payments (billing), PortOne / KCP (identity verification), Google Firebase (push notifications). Each processor is bound by their own data protection terms.

4. Retention

• Uploaded originals: 90 days after last activity, then deleted.
• Generated photos you have purchased: 3 years (so you can re-download them).
• Generated photos you have not purchased: 30 days.
• Identity verification records: 5 years (Korean e-commerce dispute window).
• Payment records: 5 years (statutory).

These windows are subject to legal review before launch.

5. Your rights

You can view, export, or delete your data from the MY tab, or by emailing agent@extn.ai. We respond within 30 days.

6. Security

Photos are stored with encryption at rest. Originals and unwatermarked results are never publicly accessible — they are served only via short-lived signed URLs after you have unlocked the photo.

7. Contact

Questions about this policy or to exercise your rights: agent@extn.ai.