This English version is a reference translation provided for the convenience of users. The legally binding document is the Korean version. In the event of any discrepancy or conflict between this English translation and the Korean version, the Korean version shall prevail. The Korean original is available at /privacy (한국어).
In accordance with Article 30 of the Personal Information Protection Act, H International (the "Company") establishes and discloses the following Privacy Policy to protect users' personal information and to promptly and smoothly handle related grievances.
| Category | Items Collected | Purpose of Collection | Retention Period |
|---|---|---|---|
| Membership Registration | Email address, password (encrypted) | Identifying service users, login | Deleted immediately after withdrawal |
| Social Login | Email address, name or nickname (provided by the relevant platform such as Naver / Google) | Identifying service users, login | Deleted immediately after withdrawal |
| Payment | Payment method information (processed by the PG company) | Credit / subscription payment | 5 years pursuant to the Act on the Consumer Protection in Electronic Commerce, etc. |
| Service Use | Credit balance, usage records | Service provision, settlement | Deleted immediately after withdrawal |
| Misuse Prevention | Hash value of the registered email address (SHA-256 — the email address itself is not stored and cannot be recovered from the hash) | Preventing misuse such as repeatedly claiming the free sign-up credits | 1 year from the date recorded (sign-up date) |
| Customer Inquiries | Reply email address, inquiry type and content, account email address if the user is logged in, IP address, reply content (including drafts written by AI) | Receiving and answering inquiries, handling disputes | 3 years pursuant to the Act on the Consumer Protection in Electronic Commerce (records of consumer complaints and dispute handling) |
| Automatically Collected | IP address, access country (estimated based on IP), browser/OS/device classification (summary), access date and time, visited pages, referral path (referrer, UTM source, campaign keyword) | Service security, misuse prevention, access statistics | 3 months (raw logs — de-identified daily statistics are retained separately) |
| Outputs | Video, audio and image outputs generated by the user (for image and speech synthesis outputs, only one representative file per generation is stored) | Restoration of generated results, handling of inquiries and disputes | Automatically deleted after up to 7 days (deleted immediately upon withdrawal; may be deleted earlier due to capacity, failure, etc. — storage not guaranteed) |
Retention of a hash value to prevent misuse: To prevent misuse in which a user repeatedly withdraws and re-registers in order to claim the free sign-up credits more than once, the Company separately retains only a one-way hash (SHA-256) of the registered email address. The email address itself is not stored; an individual cannot be identified from the hash, nor can the original address be recovered from it. This hash is used solely to determine whether an account is a re-registration (that is, whether the free sign-up credits are granted) and is not used for marketing, profiling or any other purpose. It is retained after account withdrawal for that determination, but is automatically deleted 1 year after the date it was recorded. While the hash remains, re-registration is not restricted in any way; only the free sign-up credits are not granted.
The Company collects only the minimum personal information necessary to perform the service agreement and does not collect unnecessary information such as phone number or address. A name (or nickname) is stored only where provided by the relevant platform when using social login.
Payment information is not stored directly by the Company; it is processed by PortOne Inc. and the relevant PG company.
Temporary storage of outputs for up to 7 days, then automatic deletion: Video, audio and image outputs generated by users are stored in the cloud storage used by the Company for up to 7 days from the date of generation for the purposes of restoring results and handling inquiries and disputes, and are automatically deleted after 7 days (upon account withdrawal they are deleted immediately, regardless of the period). The upper limit of this retention period is the same as the withdrawal-of-subscription period under Article 9 of the Terms of Service. For image outputs and speech synthesis outputs, only one representative file per generation is stored for the same period (up to 7 days) to allow verification of results and handling of inquiries; the remaining outputs are not stored on the Company's servers and are saved only on the user's own PC (locally).
No guarantee of storage and possibility of early deletion (important): The above storage is an ancillary convenience provided free of charge, and the Company does not guarantee the storage of outputs. Outputs may be deleted or become inaccessible before 7 days have elapsed for reasons such as the following, and in such cases they cannot be recovered.
AI-generated outputs are not reproduced identically even under identical conditions, so recovery is impossible after deletion. Responsibility for storing and backing up outputs rests with the user; please save the originals to your own PC immediately after generation.
Exception for H REWARD submissions: Outputs that a user has themselves submitted to the H REWARD program are, unlike the maximum of 7 days above, retained for the periods below for the purposes of reviewing the submission, paying the reward, and performing the licence granted over the submission. This exception applies only to outputs submitted under the H REWARD program terms after consenting to them; it does not apply to outputs that have not been submitted.
Upon account withdrawal the stored copy is deleted immediately, regardless of the period. This does not, however, apply retroactively to materials already distributed or published before withdrawal (Article 1 of the H REWARD program terms).
As a rule, the Company does not provide users' personal information to external parties. However, the following are exceptions:
| Trustee | Country | Entrusted Content (Transferred Items) |
|---|---|---|
| Supabase, Inc. | India (Mumbai server) | Member authentication and database operation (email, name/nickname, Credit/usage records, access logs) |
| PortOne Inc. | Republic of Korea | Payment processing |
| PayPal Pte. Ltd. | Singapore | Overseas payment processing (PayPal simple payment) |
| Railway Corp. | United States | Server hosting and operation (all data passing through the Service) |
| Functional Software, Inc. (Sentry) | United States | Service error monitoring (access information and request context when an error occurs) |
| PostHog, Inc. | United States | Service usage analytics (service usage behavior records and access information) |
| Plus Five Five, Inc. (Resend) | United States | Delivery of notification/confirmation emails (recipient email address; name, inquiry content and attachments contained in the message body) |
| Cloudflare, Inc. | United States | Automated sign-up/login (bot) prevention checks (access IP address, browser information) |
| Google LLC | United States | AI image/video/voice generation and analysis (input prompts, uploaded images/videos), receiving customer inquiry emails and sending replies (Google Workspace Gmail — sender and recipient email addresses, inquiry content, reply content) |
| OpenAI OpCo, LLC | United States | AI image/voice/text generation (input prompts/text, uploaded images) |
| Anthropic PBC | United States | AI scenario/prompt generation (input text, uploaded images/documents), drafting replies to customer inquiries (inquiry type and content and, for logged-in members, service usage records for the 24 hours before the inquiry — task type, model used, request and completion times, processing status, whether the result was saved, and whether a refund was made) |
| BytePlus Pte Ltd. | Singapore | AI video generation (input prompts, uploaded images) |
| Kling AI Pte. Ltd (Kling) | Singapore | AI image/video/sound-effect generation (input prompts, uploaded images/audio) |
| Eleven Labs Inc. | United States | AI voice/sound-effect generation and voice conversion (input text, uploaded voice/video) |
| Nanonoble Pte. Ltd. (MiniMax) | Singapore | AI voice/music/video generation (input text/prompts, uploaded images [which may include faces], video, and audio) |
| Suno, Inc. (via sunoapi.org) | United States | AI music generation (input prompts) |
| SKYWORK AI PTE. LTD. (Mureka) | Singapore | AI music/background-music generation (input prompts) |
| X.AI LLC (xAI) | United States | AI image/video generation (input prompts, uploaded images) |
Among the above trustees, those located outside the Republic of Korea constitute an overseas transfer under Article 28-8 of the Personal Information Protection Act. The point of transfer is at the time of service use (generation requests, login, etc.) and at the time customer inquiries are received and answered, and the method of transfer is encrypted network transmission (TLS). Only content directly entered or uploaded by the user — not member-identifying information — is transmitted to AI-generation trustees. However, to draft replies to customer inquiries, the inquiry content and the service usage records listed in the table above are transmitted to Anthropic PBC; email addresses, IP addresses, names and account identifiers are not transmitted. Each trustee retains or destroys such content in accordance with its own policy after achieving the processing purpose. Users may refuse the overseas transfer, but in that case use of the relevant AI-generation feature will be restricted.
When entrusting processing, the Company stipulates the matters necessary to ensure personal information is managed safely, and supervises whether trustees process personal information properly.
AI-assisted replies to customer inquiries: For inquiries about errors and bugs and about how to use the Service, AI may draft a reply based on the user's service usage records and the publicly available usage guide and send it automatically, in which case the reply email states that it was written by AI. For other inquiries, a staff member reviews the AI-written draft before it is sent. The Company keeps AI-written drafts together with the inquiry records to check the quality of replies.
Users may exercise the following rights at any time:
Rights may be exercised by applying via email (help@h-international.co.kr) or telephone (070-8869-3409), and requests will be handled without delay.
Users may withdraw their consent to the processing of personal information at any time. However, suspending the processing of information essential to the performance of the service agreement may lead to restrictions on service use.
The Service is available only to those aged 18 or older. Registration by users under 18 is not permitted, and this is verified during the registration process. If it is confirmed that personal information of a user under 18 (including children under 14) has been collected, it is deleted immediately.
For service operation and security, the Company automatically collects access IP, access country (estimated based on IP), browser/OS/device classification (summary), date and time of use, visited pages, and referral path (referrer, UTM source, campaign keyword). This is used only for the purposes of preventing misuse, improving service quality, and access statistics, and raw logs are deleted after 3 months (de-identified daily statistics are retained separately).
| Item | Details |
|---|---|
| Name | Bae Se-young (배세영) |
| Position | Representative |
| Contact | 070-8869-3409 |
| help@h-international.co.kr |
You may also report or consult regarding personal information infringement to the following agencies:
This policy is effective as of September 6, 2026 (enacted June 1, 2026; amendments disclosed July 27, 2026, August 13, 2026, August 22, 2026, August 28, 2026 and September 6, 2026). Amendment of October 8, 2026: provisions on the use of AI in answering customer inquiries have been added (Articles 1, 2 and 4). For inquiries about errors and bugs and about how to use the Service, Anthropic PBC drafts replies using the inquiry content and the service usage records for the 24 hours before the inquiry, and Google LLC (Google Workspace Gmail) is used to receive customer inquiry emails and send replies. The items collected through customer inquiries and their retention period are now set out in Article 1. Disclosed on October 1, 2026, seven days before the effective date. Amendment of September 6, 2026: an exception to the retention period has been added for outputs submitted to the H REWARD program (Articles 1 and 5). A submission is retained until the review result is notified; if it is not selected it is deleted without delay thereafter; if it is selected it is retained for as long as the licence under Article 1 of the H REWARD program terms remains in effect — the purposes being review of the submission, payment of the reward, and performance of that licence. This exception applies only to outputs a user has themselves submitted after consenting to the program terms, and there is no change to the maximum 7-day retention of outputs that have not been submitted. Disclosed on August 30, 2026, seven days before the effective date. Amendment of August 28, 2026: video generation has been added as a processing purpose for Nanonoble Pte. Ltd. (MiniMax) in the cross-border transfer table in Article 4, and the transferred items now expressly include reference images (which may include faces), video and audio uploaded by the user. This follows the introduction of a new video generation model and is disclosed on August 21, 2026, seven days before the effective date. Amendment of August 22, 2026: (1) image outputs and speech synthesis outputs are now retained for the same period as video and audio (up to 7 days), limited to one representative file per generation (Articles 1, 3, 5 and 6) — for verification of results and handling of inquiries and disputes; (2) two trustees already in use (Plus Five Five, Inc. (Resend) for notification email delivery and Cloudflare, Inc. for automated-access prevention checks) have been added to the table in Article 4; the corporate names of the trustees have been aligned with their official privacy policies; and the processing entity and country for the Kling service used by the Company have been corrected to reflect the actual basis (Kling AI Pte. Ltd, Singapore). Disclosed on August 15, 2026, seven days before the effective date. Amendment of August 13, 2026: addition of provisions on the retention of a hash value of the registered email address to prevent misuse (Articles 1, 5 and 6) — disclosed without delay as the relevant processing has commenced. Amendment of July 27, 2026: addition of provisions on the 7-day temporary storage and automatic deletion of outputs (video and audio) (Articles 3, 5 and 6). In the event of changes to its content, the changes will be notified via the website notice board or email, and disclosed on the website from 7 days before the effective date.
Effective Date: September 6, 2026 (amendment of October 8, 2026 pending · Enacted June 1, 2026) | H International, Representative Bae Se-young