SparkLore

Privacy Policy

Last updated 2026-09-21

This is an English translation provided for convenience. The Korean version is the legally binding original; where the two differ, the Korean version prevails. Read the Korean original

Overview

The business operating SparkLore AI (the "Company") complies with the Personal Information Protection Act of the Republic of Korea and related laws, and processes your personal data as described below. The Company's legal name, representative, address, and contact details are shown at the bottom of the Korean site.

1. Data We Collect

  1. On sign-up (Google sign-in): email address, name, profile image URL, Google account identifier
  2. On paid purchases: mobile phone number for payment confirmation and support (PayApp, Korea); billing email and country (Whop, international); order number, amount, and timestamp. Card numbers and other payment instrument details are held by the payment provider and are not stored by the Company.
  3. While using the Service: manuscripts, story bibles, instructions, and other Input you enter or store; the resulting Output; project metadata
  4. When contacting support: name (optional), email, message
  5. Automatically: IP address, browser and device information, access timestamps, usage records (features used, credit deductions), cookies

2. Purposes of Processing

  1. Identifying members, maintaining sign-in, managing accounts, and preventing abuse (multiple accounts, automation)
  2. Processing payments, granting and deducting credits, handling refunds and withdrawals, and keeping records required by e-commerce law
  3. Providing AI writing features by sending Input to third-party AI providers and returning Output
  4. Responding to support inquiries and sending notices of important changes
  5. Aggregate, non-identifying statistics to improve the Service
  6. Marketing communications (only with separate consent)

3. Retention

Personal data is destroyed without delay once its purpose is fulfilled, except for the following, which are kept for the periods stated.

  1. Records of contracts and withdrawals, payments, and supply of goods or services: 5 years (Korean Act on Consumer Protection in Electronic Commerce)
  2. Records of consumer complaints and dispute handling: 3 years (same Act)
  3. Access logs (IP, timestamps): 3 months (Korean Protection of Communications Secrets Act)
  4. Your manuscripts, story bibles, and Output: until you delete them or close your account. On closure they are deleted immediately or irreversibly anonymized; backup copies are purged within 30 days.
  5. Email in the payment ledger: kept in pseudonymized form for the statutory retention period after account closure.

4. Processors and International Transfers

The Company entrusts the following providers with processing, some of which are located outside Korea. You may refuse the international transfer, but the Service may then be unavailable.

  1. Google LLC (USA) — Google sign-in (OAuth): email, name, profile
  2. Neon Inc. (USA; data center region per service configuration) — database hosting: accounts, credit ledger, manuscript data
  3. Vercel Inc. (USA) — web hosting, edge network, access logs, anonymous analytics
  4. Anthropic PBC (USA) and Google LLC (USA) — AI generation: the parts of manuscripts, story bibles, and instructions needed for generation. Not used for model training under API terms; retained briefly for abuse prevention per provider policy, then deleted.
  5. PayApp (Republic of Korea) — domestic payment processing: phone number, payment details
  6. Whop Inc. (USA) — international payments and subscriptions: email, country, payment details
  7. Resend (USA) — transactional email delivery: email address, message content

5. Your Rights

  1. You may access, correct, delete, or restrict processing of your personal data at any time from the account page or by contacting us below.
  2. On account closure, your personal data including manuscripts is deleted immediately, except for records subject to statutory retention in Section 3. Export your manuscripts before closing your account.
  3. You may exercise these rights through a legal representative or authorized agent. The Company acts on requests within 10 days.
  4. Residents of the EU, UK, or California may have additional rights under local law (such as data portability or the right to object); we honor such requests where applicable. Korean residents may also contact the Personal Information Dispute Mediation Committee or the Privacy Infringement Report Center (118).

6. Cookies

  1. Authentication cookie to keep you signed in (essential).
  2. sl_aid: an anonymous identifier cookie used for the daily limit on free tools when signed out and for abuse prevention (essential; does not identify you personally).
  3. Anonymous traffic analytics (Vercel Analytics): cookie-free and non-identifying.
  4. You can refuse cookies in your browser settings, but refusing essential cookies limits sign-in and free tool use.

7. Security Measures

  1. Encryption in transit (TLS), least-privilege database access, administrator access logging
  2. No passwords stored (Google sign-in)
  3. No payment instrument details stored (handled by payment providers)
  4. Only the minimum manuscript context needed for generation is sent to AI providers

8. Data Protection Officer and Contact

The person in charge of the Service also serves as data protection officer. Send privacy inquiries, access, and deletion requests to the support email hello@sparkloreai.com. We reply within 10 days of receipt.

9. Changes to This Policy

This policy applies from 2026-09-21. Changes are announced in the Service at least 7 days before they take effect (30 days for material changes to your rights).