Privacy Policy

Company

Stipop Inc.

Address

416 Hangang-daero, Jung-gu, Seoul, South Korea

Data protection manager

Tony Park

Contact

support@stipop.io

We collect the following in order to provide the Service.

• Account information: email address, display name, profile image. If you register with Google, the email address, name and profile image Google provides.
• Usage information: videos you generate together with their prompts and input images, visibility settings, viewing history, purchase history and Coin transaction history.
• Payment information: amount, timestamp and status of each purchase. Card numbers and expiry dates are collected directly by our payment processor and are never stored by us.
• Device and connection information: IP address, browser type, operating system, referrer, access timestamps, and identifiers set by cookies and similar technologies.
• Error information: error messages, stack traces and recent interactions captured when a fault occurs.

• To provide the Service, verify identity and administer accounts.
• To generate, publish and sell videos and to maintain Coin balances.
• To review content and to detect and prevent prohibited conduct.
• To detect and prevent payment fraud and abuse.
• To analyse how the Service is used, improve it and develop new features.
• To respond to your enquiries.
• To comply with law and to handle rights infringement claims.

We do not disclose personal information to third parties without your consent except where required by law. We do entrust processing to the following providers to the extent necessary to run the Service.

Supabase, Inc.

Database, authentication and file storage (servers located in Tokyo, Japan)

Vercel, Inc.

Website hosting and delivery

Stripe, Inc.

Payment processing

Google LLC

Sign-in with a Google account

Mixpanel, Inc.

Usage analytics

Functional Software, Inc. (Sentry)

Error monitoring

Video generation API provider

Generating videos from prompts and input images

Some of the providers above are located outside Japan, and personal information may be transferred to the United States or other countries. We confirm that appropriate safeguards are in place before entrusting processing.

For details of the data protection regime and measures at any individual provider, please contact us.

We use cookies to keep you signed in, remember your language preference and analyse usage. You can disable cookies in your browser, but some features including sign-in will then stop working.

Analytics cookies are used for statistical processing that does not identify you individually.

• Account information and Generated Content: for as long as the account exists.
• Coin and payment transaction records: for the period required by law (as a rule, seven years).
• Access logs and error information: up to 12 months from collection.

Information beyond its retention period is deleted or anonymised unless the law requires us to keep it.

You may request disclosure, correction, addition, deletion, suspension of use, or suspension of third-party provision of your personal information. Write to support@stipop.io. We will verify your identity and respond within a reasonable period.

Deleting your account deletes your account information and Generated Content. Records we are legally required to retain, such as transaction records, cannot be deleted during their retention period.

• All traffic is encrypted with TLS.
• Row Level Security is applied in the database so that each User can reach only their own data.
• Payments and Coin balance changes execute only through defined server-side routines running with elevated privilege.
• Credentials and third-party secrets are kept separate from application source code.

The Service is for people aged 18 and over, and we do not collect personal information from anyone under 18. If we learn that we have, we delete that information and the associated account promptly.

We may revise this policy in response to changes in law or in the Service. Significant changes are announced in the Service.

For questions about this policy or our handling of personal information, write to support@stipop.io.