CCantilena

Privacy Policy

Last updated: September 7, 2026

View Terms of Service

1. Personal data we collect

We collect the following. ① Account: email, display name, Google account identifier (if you use Google sign-in), and password (email sign-up only; stored hashed). ② Payments: order ID, amount, currency, method (Kakao Pay or Paddle), status, and paid-at time. Card numbers and similar credentials are processed by the payment provider and are not stored by the Company. ③ Usage: generation timestamps, input text and prompts, generation/download records, file identifiers, credit balance and deductions. ④ Support: inquiry content and handling history. ⑤ Automatically collected: access logs, browser type, IP address (which may be used to suggest a default payment method), and similar logs needed for security and incident response.

2. Purposes of processing

We use this information to identify members, sign you in securely, provide voice generation, process credits and payments, support customers, improve the Service, prevent abuse, review content, and meet legal duties. We may send important service notices (security, payments, outages, material legal updates, notices required by law). Those are not marketing and cannot be opted out of. Marketing emails are sent only with separate consent. We do not train our own AI models on your personal data. If we ever do, we will disclose that fact and scope here or in a consent screen.

3. Retention periods

We destroy personal data without delay when the purpose of collection is fulfilled, except as follows. ① Account data: until you close the account. ② Records of contracts or withdrawal, and of payment and supply of goods/services: 5 years (Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, Article 6). ③ Consumer complaints or dispute handling: 3 years (same Article 6). ④ Labeling/advertising records: 6 months (same Article 6). ⑤ Access logs and similar communications data: for the period required by law. Generation history and audio files are kept until account closure. We do not keep input text longer than needed to provide generation, re-download, support, abuse prevention, and statutory records. Payment and dispute records are kept for the statutory periods above.

4. Destruction

When the retention period ends or the purpose of processing is fulfilled, we destroy personal data so it cannot be recovered. Electronic files are securely deleted or media is reset; paper records are shredded or incinerated. Data remaining in backups is destroyed after the backup cycle ends.

5. Processors, disclosures, and independent sellers

We use the following parties as needed to operate the Service. ① Google LLC: Google sign-in and account identification. ② Kakao Pay Corp.: KRW payment authorization, cancellation, and refunds. Card numbers are processed by Kakao Pay and are not stored by the Company. ③ Paddle (the Paddle contracting entity for the buyer’s location): Merchant of Record for international checkout. Paddle processes email, country, transaction amount, and tax data under its own privacy policy. For Paddle checkouts, Paddle is an independent controller of that payment data. ④ Supabase, Inc.: member authentication, database, and audio storage. ⑤ Amazon Web Services, Inc.: web/API hosting. ⑥ OpenAI, LLC and OpenRouter, Inc.: moderation/translation and similar generation-assist processing of input text and prompts. ⑦ Resend, Inc.: verification emails and important service notices. We will update this policy if these parties change. If we receive a lawful request for a criminal investigation, prosecution, trial, or other grounds set by law, we may provide account information, contact details, generation/download records, and file identifiers, limited to what is necessary.

6. Transfers abroad

Some processing is performed outside Korea. ① Google LLC (United States): email, display name, Google account identifier. Purpose: sign-in. Retention: until account closure or as determined by Google. ② Paddle (United Kingdom and other regions): email, country, transaction data. Purpose: international payments and tax. Retention: Paddle’s policy and tax/accounting law. ③ Supabase, Inc. (United States, AWS infrastructure): account and payment metadata, generation history, audio files. Purpose: providing the Service. Retention: as in Article 3. ④ Amazon Web Services, Inc. (United States or the region we select): server logs and application data. Purpose: hosting. Retention: as in Article 3. ⑤ OpenAI, LLC / OpenRouter, Inc. (United States): input text and prompts. Purpose: generation assist. Retention: the vendor’s policy and as needed to provide the Service. ⑥ Resend, Inc. (United States): email address and message content. Purpose: verification and important notices. Retention: as needed to manage send records. Kakao Pay KRW payments are processed in Korea. You may request access, correction, deletion, or restriction of overseas transfers via support. Refusing a transfer may limit sign-up, voice generation, or international checkout.

7. Your rights (Korea and EU/EEA)

You may request access, correction, deletion, restriction of processing, and withdrawal of consent. You can close your account from Support → Account. Deletion of records we must keep by law may be limited until that period ends. If you are in the EU/EEA or another region where GDPR-style rights apply, you may also have rights of access, rectification, erasure, restriction, portability, objection, and lodging a complaint with a supervisory authority. Legal bases may include contract performance, legitimate interests (security and abuse prevention), legal obligation, or consent. Submit requests via in-app support or the contacts below.

8. Privacy officer and operator

Privacy officer: Ramhee Yeon (Owner) Business name: Spatzen Address: 3164, 3F, 21, Dunsan-ro 137beon-gil, Seo-gu, Daejeon, Korea Phone: 070-4554-5152 Email: cantilena.spatzen@gmail.com For privacy questions, use these contacts or in-app support. We may update this policy for legal or product changes and will announce material updates in the Service or by registered email.

9. Cookies and access logs

We may use cookies, local storage, and IP-based country information to keep you signed in, secure the Service, and suggest a default payment method. Blocking cookies may limit sign-in and similar features.

10. Changes to this policy

We may update this policy for legal or product changes. Material updates will be announced in the Service or by registered email before they take effect.