Version: US-EN

SOY MEDIA (the "Company," "we," or "us") operates IMYN, an interactive AI story platform, and related services (the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

We are a company based in the Republic of Korea. For users in the United States, we follow applicable U.S. privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), other U.S. state privacy laws, and the Children's Online Privacy Protection Act (COPPA).

Summary

1. Information We Collect, Why, and How Long We Keep It

We collect information you give us, information collected automatically when you use the Service, and information from partners such as login, payment, and age verification providers. We use it only for the purposes below. If a purpose changes, we will ask for your consent where required by law.

1-1. Information needed to provide the Service or required by law

Category Purpose Information Retention
Account registration and management Confirming age (under 13 not allowed), identifying users, preventing misuse Email address, date of birth, gender, social login type and ID, nickname Until 10 days after account deletion request
Age verification Age check for purchases of $70 or more in a month, parent or guardian consent for users under 18 Verification result (adult or not), verification date, parent or guardian verification result While the verification is valid, and until 10 days after account deletion request
Payments and refunds Processing payments and refunds, preventing payment fraud Order number, payment date and time, amount, payment method (card brand, last 4 digits), transaction ID 10 years from payment
Aura and Halo records Managing grants and use of in-service currency, accounting, handling inquiries and disputes User ID number, currency type and amount, date and place of use 5 years from use
Currency settlement at withdrawal Keeping a record of currency balances at withdrawal for accounting and tax purposes User ID number, total currency purchased, used, and expired 10 years from withdrawal
Service usage records Providing and improving the AI service, keeping the Service stable (Collected automatically) AI chat logs, IP address, cookies, usage records, device information Until 10 days after account deletion request (access logs and IP address: 6 months)
Account link after withdrawal Confirming identity when looking up payment or inquiry records after withdrawal One-way hash of email address, user ID number Until all linked records are deleted
Customer support and disputes Handling inquiries and disputes User ID number, inquiry details, actions taken, notices sent 5 years from inquiry
Enforcement records Preventing serious policy violators from re-registering Violation records (restrictions and reasons), hashed email address, device identifiers Temporary suspension: remaining period / Permanent ban: permanently / Self-exclusion: 5 years from the action
Cooperation with law enforcement Reporting and cooperating with authorities on serious violations, such as child sexual exploitation Email address, original records related to the violation 1 year from detection, or longer if required by law
Withdrawal records Proving that the withdrawal was properly processed User ID number, date and items of consent Permanently (no personally identifying information)
Creator payouts and taxes Paying earnings, tax withholding and reporting Legal name, address, tax ID (SSN, ITIN, EIN, or foreign tax ID), tax forms (W-9 or W-8), payout account information As required by applicable tax law
Event prizes and taxes Paying prizes and handling related taxes Address, payout account information, tax ID, masked ID copy 5 years after prize payment and tax processing
Push notifications Sending notices needed to use the Service Device token, device model, app version Until 10 days after account deletion request

1-2. Information we process only with your consent (optional)

You can refuse these. Refusing does not limit your basic use of the Service.

Category Purpose Information Retention
Profile Showing your profile Profile photo Until 10 days after account deletion request
Personalization Improving recommendations and showing content you may like Interests Until 10 days after account deletion request
Marketing messages Sending event, benefit, and Service update information Email address, service usage records Until you withdraw consent or delete your account, whichever comes first
Targeted advertising Measuring ad performance and showing personalized ads Cookies, visit and usage records, device information, purchase amount, transaction ID Until you opt out or delete your account, whichever comes first
Events and contests Identifying entrants, announcing winners, judging Nickname, email address, name, contact information, entry 5 years after prize payment and tax processing

1-3. Other principles

  1. Some information you enter may differ from your actual information. We provide the Service based on the information you enter.
  2. Sensitive information: Your conversations with AI may include sensitive information you choose to share. We do not use it to infer your characteristics or for advertising. Tax IDs are collected only for tax reporting and are encrypted and stored separately.
  3. Age verification is performed by our age verification provider. We receive only the result (for example, whether you are an adult). We do not receive or store your facial images or ID documents from this process.
  4. Payment records are kept for 10 years because, as a Korean company, we must keep business and tax records under Korean law.