Privacy Policy
How Zet Co., Ltd. (주식회사 제트) ("we") handles personal information in Zet Studio. This is a translation; the Korean version prevails if they differ.
Effective: November 2, 2026
1. What we collect and why
| Purpose | Information |
|---|---|
| Sign-up and sign-in | Email, account ID. With Google sign-in, the name and profile picture Google provides |
| Generating images and videos, and keeping your history | Prompts, uploaded images and videos, results, selected options, generation history |
| Credits, refunds and balance | Payment amount, order number, payment status, purchase and usage history, the email prefilled at checkout |
| Running the service and preventing abuse | IP address, browser details, access logs, sign-in cookie |
We do not store card numbers; Toss Payments and Lemon Squeezy handle them. Your photos may show people, but we do not process them to identify anyone.
We do not use your prompts or uploaded files to train our own models.
2. How long we keep it
We keep personal information, uploaded files and results while your account exists, and destroy them when you close your account or ask us to delete them. The law requires us to keep the following for set periods:
- Contracts, withdrawals, payments and delivery records: 5 years (Korean E-Commerce Act)
- Consumer complaints and dispute records: 3 years (Korean E-Commerce Act)
- Labeling and advertising records: 6 months (Korean E-Commerce Act)
- Transaction records for tax filing: 5 years (Korean Framework Act on National Taxes)
- Access logs: 3 months (Korean Protection of Communications Secrets Act)
3. Service providers and transfers abroad
To provide the service under our contract with you, we entrust personal information to the companies below. Transfers outside Korea are made under Article 28-8(1)(3) of the Korean Personal Information Protection Act.
| Recipient | Country | Information | Purpose | Contact |
|---|---|---|---|---|
| Amazon Web Services | Republic of Korea (Seoul), CloudFront edge locations | Uploaded files, results | Storing and delivering files | Privacy notice |
| Supabase | Republic of Korea (Seoul) | Email, account ID, prompts, usage records, payment records | Sign-in and data storage | Privacy notice |
| Vercel | United States and others | IP address, browser details, request logs | Running the website | Privacy notice |
| Trigger.dev | United States and others | Job IDs, processing logs | Running generation jobs | Privacy notice |
| BytePlus | Singapore and others | Prompts, uploaded files | Generating images and videos (Seedance, Seedream, Remix) | Privacy notice |
| United States and others | Prompts, uploaded files | Generating images and videos (Nano Banana, Gemini Omni) | Privacy notice | |
| OpenAI | United States and others | Prompts, uploaded files | Generating images (GPT Image) | Privacy notice |
| fal | United States and others | Prompts, uploaded files | Generating images and videos (Kling, MiniMax and others). fal may pass requests on to the model's developer | Privacy notice |
| Higgsfield | United States | Prompts, uploaded files (including photos and videos of people) | Generating Remix videos. Under Higgsfield's terms, inputs and outputs may be used to improve its models | Privacy notice |
| Toss Payments | Republic of Korea | Payment amount, order number, payment details | Processing payments made on Korean pages | Privacy notice |
| Lemon Squeezy | United States | Email, payment amount, order number, payment details | Selling and processing payments made on English pages | Privacy notice |
- When and how: sent over encrypted connections when you use the service.
- How long: until the contract ends or each company’s retention period passes.
- How to refuse: email gonnabe@thezet.io. These transfers are needed to provide the service, so refusing may mean you cannot use the feature or must close your account.
4. Sharing with third parties
We do not share personal information with third parties, except where the law allows it or law enforcement lawfully requests it. If you pay on an English page, Lemon Squeezy collects payment information directly as the seller.
5. How we destroy information
When a retention period ends or its purpose is met, we destroy the information without delay. Electronic files are deleted so they cannot be recovered. Information the law requires us to keep is managed separately.
6. Your rights
- You can ask to see, correct or delete your personal information, ask us to stop processing it, or withdraw consent at any time.
- Email gonnabe@thezet.io and we will act without delay. A representative can also ask on your behalf.
- We do not accept sign-ups from children under 14.
7. How we protect information
- Connections are encrypted with HTTPS.
- Database access is limited by role, and you cannot see other users’ records.
- Access keys for service providers are kept separately in server settings.
Uploaded files and results are served from addresses that are hard to guess, but anyone with the address can view them without signing in.
8. Cookies
We use only the cookie that keeps you signed in, and no advertising or analytics cookies. You can refuse cookies in your browser, but you will not be able to sign in.
9. Privacy officer
채영대, gonnabe@thezet.io, +82-10-3363-6374
10. Getting help
If you need advice or a remedy for a privacy violation, you can contact these Korean agencies:
- Personal Information Infringement Report Center: 118 (in Korea)
- Personal Information Dispute Mediation Committee: 1833-6972, kopico.go.kr
- Supreme Prosecutors’ Office: 1301 (in Korea), spo.go.kr
- National Police Agency: 182 (in Korea), ecrm.police.go.kr
11. Changes to this policy
We give notice in the service 7 days before changes take effect.