Privacy Policy

Information We Collect

Paprika US Inc. (hereinafter "Company," "we," or "us") collects the following categories of personal information to operate the vid.quelsuite service (hereinafter "Service").

• Required: Email address, name (or nickname), social login profile data (profile photo URL, social account unique ID)
• Optional: Business name, place name / trade name, address, field, contact
• Automatically generated during use: Service usage records, access logs, cookies and similar technologies, IP address, device information (OS, browser type, language settings), subscription plan and payment history
• Payment-related: Depositor name, payment amount, payment date and time. We do not directly collect or store financial credentials such as card numbers.
• User-uploaded content: Content source photos (places, people, products, logos, reference images, etc.), text information (hereinafter "User Content")

Purpose of Collection and Use

Collected personal information is used solely for the following purposes. We will not use your data for any purpose beyond those listed without your explicit consent.

• Member registration, identity verification, and session authentication
• Service provision (AI video generation, storage, download, and delivery)
• Plan management, billing, and receipt issuance
• Automated payment verification via depositor name matching
• Customer support, incident notifications, and service change announcements
• Fraud detection, prevention, and security enhancement
• Service quality improvement, new feature development, and usage analytics
• Compliance with applicable legal obligations

Retention Period

Personal information is deleted promptly upon account cancellation. However, if retention is required by applicable law, it will be retained for the statutory period as follows.

• E-commerce records (contracts, cancellations, payments, goods delivery): 5 years (E-Commerce Act)
• Consumer complaints and dispute records: 3 years (E-Commerce Act)
• Display and advertising records: 6 months (E-Commerce Act)
• Access log records: 3 months (Communications Secrets Protection Act)
• Fraud prevention records: 1 year (internal policy)

Upon expiration of the retention period, electronic files are permanently deleted using methods that render recovery impossible, and physical documents are shredded or incinerated.

Third-Party Disclosure

We do not, as a rule, disclose your personal information to third parties. Exceptions apply only in the following circumstances.

• When you have given explicit prior consent
• When required by law, or when a law enforcement agency requests information through legally prescribed procedures for investigative purposes
• When necessary to protect the life, body, or property of you or a third party, and obtaining your consent is not feasible
• In the event of a merger, demerger, or business transfer of all or part of our operations (you will be notified in advance)

Data Processing Delegation

We delegate certain personal information processing tasks to third-party service providers to operate the Service. Processors receive only the minimum personal information necessary for their designated purpose and are contractually prohibited from using it for any other purpose or disclosing it to additional parties.

• Authentication service provider — Member authentication and session management
• Cloud infrastructure provider — Database management, storage, and server operations
• Social login provider — OAuth authentication processing
• AI video generation engine provider — Video content synthesis and generation
• SMS and notification provider — Service notification delivery
• Payment processing provider — Payment confirmation and settlement

We maintain data processing agreements with all processors and supervise their handling of personal information.

Destruction of Personal Information

Personal information for which the purpose of collection has been fulfilled is destroyed without delay through the following procedures and methods.

• Destruction procedure: Upon receiving a cancellation request, we verify the reason for destruction, obtain approval from our Data Protection Officer, and proceed with destruction. Information retained under legal obligations is stored separately and destroyed upon expiration of the applicable period.
• Electronic files: Permanently deleted using technical methods (e.g., low-level formatting) that render recovery impossible.
• Physical documents: Destroyed by shredding or incineration.

User Rights and Responsibilities

You may exercise the following rights at any time with respect to your personal information.

• Right to access your personal information
• Right to correct or delete your personal information
• Right to restrict or object to processing
• Right to data portability (where technically feasible)
• Right to cancel your membership (personal information deleted immediately upon cancellation)

To exercise these rights, please contact us at support@vid.quelsuite.com or manage your account directly in the account settings page within the Service. We will respond within a reasonable timeframe.

GDPR rights (EEA residents): If you are located in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority.

CCPA rights (California residents): California residents have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To submit a verifiable request, contact us at the email above.

You are responsible for the following.

• Providing accurate personal information and maintaining its accuracy.
• Not uploading User Content that infringes the copyright, trademark, or other intellectual property rights of any third party. You bear full legal responsibility for any intellectual property infringement arising from your User Content.
• AI-generated content is produced based on your inputs. The Company does not warrant the accuracy, legality, or fitness for purpose of AI-generated outputs. You are solely responsible for reviewing and determining the appropriateness of any AI-generated content before use or publication.

Technical and Administrative Safeguards

We implement the following safeguards to protect personal information against unauthorized access, loss, theft, alteration, or destruction.

• Technical measures: Encryption in transit (TLS 1.3 or higher) and at rest (AES-256), access control lists (ACL), regular security patching, and intrusion detection systems
• Administrative measures: Access to personal information limited to personnel with a legitimate business need, regular security training, and maintenance of data handling procedures
• Physical measures: Controlled access to server facilities and locked storage for physical documents

Notwithstanding the foregoing, the Company shall not be liable, to the maximum extent permitted by applicable law, for data loss resulting from force majeure events including natural disasters, system failures, or cyberattacks. The Company shall not be liable for data breaches attributable to the user's own negligence or intentional misconduct.

Cookies and Automatic Collection Technologies

We use cookies and similar technologies (local storage, session storage, etc.) to enhance usability, analyze usage patterns, and strengthen security.

• Essential cookies: Required for core service functionality such as maintaining login sessions and CSRF protection. These cannot be refused without affecting service availability.
• Analytics cookies: Used for anonymized statistical analysis of service usage. You may refuse these via your browser settings, though some features may be limited.
• Functional cookies: Used to save preferences such as language and UI settings. Refusing these cookies will cause settings to reset on each visit.

You may disable cookies through your browser settings. Please note that doing so may prevent certain features from functioning correctly.

International data transfer: To provide the Service, your personal information may be transferred to and processed in countries other than your country of residence, including the United States. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for any cross-border data transfers.

Data Protection Officer and Contact

For any privacy-related inquiries, please contact our Data Protection Officer at the following.

• Company: Paprika US Inc.
• Address: 217 Diamond Oaks Road, Roseville, CA 95678, United States
• Data Protection Officer: Representative
• Email: support@vid.quelsuite.com

Users may also seek dispute resolution through the Personal Information Dispute Mediation Committee (www.kopico.go.kr) or the KISA Privacy Infringement Report Center (privacy.kisa.or.kr).

This Privacy Policy may be amended without prior individual notice. In the event of material changes, we will notify you via the Service or your registered email address. Continued use of the Service after such notification constitutes your acceptance of the updated Policy.