← Back to HFLUX Home

Privacy Policy

Effective Date: August 3, 2026 (Enacted June 1, 2026) | H International (HFLUX)

This English version is a reference translation provided for the convenience of users. The legally binding document is the Korean version. In the event of any discrepancy or conflict between this English translation and the Korean version, the Korean version shall prevail. The Korean original is available at /privacy (한국어).

In accordance with Article 30 of the Personal Information Protection Act, H International (the "Company") establishes and discloses the following Privacy Policy to protect users' personal information and to promptly and smoothly handle related grievances.

Article 1 (Items of Personal Information Collected and Methods of Collection)

CategoryItems CollectedPurpose of CollectionRetention Period
Membership RegistrationEmail address, password (encrypted)Identifying service users, loginDeleted immediately after withdrawal
Social LoginEmail address, name or nickname (provided by the relevant platform such as Naver / Google)Identifying service users, loginDeleted immediately after withdrawal
PaymentPayment method information (processed by the PG company)Credit / subscription payment5 years pursuant to the Act on the Consumer Protection in Electronic Commerce, etc.
Service UseCredit balance, usage recordsService provision, settlementDeleted immediately after withdrawal
Automatically CollectedIP address, access country (estimated based on IP), browser/OS/device classification (summary), access date and time, visited pages, referral path (referrer, UTM source, campaign keyword)Service security, misuse prevention, access statistics3 months (raw logs — de-identified daily statistics are retained separately)
OutputsVideo and audio outputs generated by the user (image and real-time speech synthesis outputs are not stored)Restoration of generated results, handling of inquiries and disputesAutomatically deleted after up to 7 days (deleted immediately upon withdrawal; may be deleted earlier due to capacity, failure, etc. — storage not guaranteed)

The Company collects only the minimum personal information necessary to perform the service agreement and does not collect unnecessary information such as phone number or address. A name (or nickname) is stored only where provided by the relevant platform when using social login.

Payment information is not stored directly by the Company; it is processed by PortOne Inc. and the relevant PG company.

Temporary storage of outputs for up to 7 days, then automatic deletion: Video and audio outputs generated by users are stored in the cloud storage used by the Company for up to 7 days from the date of generation for the purposes of restoring results and handling inquiries and disputes, and are automatically deleted after 7 days (upon account withdrawal they are deleted immediately, regardless of the period). The upper limit of this retention period is the same as the withdrawal-of-subscription period under Article 9 of the Terms of Service. Image outputs and real-time speech synthesis outputs are not stored on the Company's servers and are saved only on the user's own PC (locally).

No guarantee of storage and possibility of early deletion (important): The above storage is an ancillary convenience provided free of charge, and the Company does not guarantee the storage of outputs. Outputs may be deleted or become inaccessible before 7 days have elapsed for reasons such as the following, and in such cases they cannot be recovered.

AI-generated outputs are not reproduced identically even under identical conditions, so recovery is impossible after deletion. Responsibility for storing and backing up outputs rests with the user; please save the originals to your own PC immediately after generation.

Article 2 (Purposes of Processing Personal Information)

  1. Member identification and service provision (Article 15, Paragraph 1, Item 4 of the Personal Information Protection Act — performance of a contract)
  2. Management of Credit purchase and usage records
  3. Delivery of service notices
  4. Misuse prevention and security
  5. With the user's consent: sending marketing information related to the Service

Article 3 (Provision of Personal Information to Third Parties)

As a rule, the Company does not provide users' personal information to external parties. However, the following are exceptions:

  1. Where the user has consented in advance
  2. Where required by law (e.g., a request from an investigative agency)

Article 4 (Entrustment of Personal Information Processing and Overseas Transfer)

TrusteeCountryEntrusted Content (Transferred Items)
Supabase Inc.India (Mumbai server)Member authentication and database operation (email, name/nickname, Credit/usage records, access logs)
PortOne Inc.Republic of KoreaPayment processing
PayPal Pte. Ltd.SingaporeOverseas payment processing (PayPal simple payment)
Railway Corp.United StatesServer hosting and operation (all data passing through the Service)
Functional Software, Inc. (Sentry)United StatesService error monitoring (access information and request context when an error occurs)
PostHog, Inc.United StatesService usage analytics (service usage behavior records and access information)
Google LLCUnited StatesAI image/video/voice generation and analysis (input prompts, uploaded images/videos)
OpenAI Inc.United StatesAI image/voice/text generation (input prompts/text, uploaded images)
Anthropic PBCUnited StatesAI scenario/prompt generation (input text, uploaded images/documents)
BytePlus Pte. Ltd.SingaporeAI video generation (input prompts, uploaded images)
Beijing Kuaishou Technology Co. (Kling)ChinaAI image/video generation (input prompts, uploaded images)
ElevenLabs Inc.United StatesAI voice/sound-effect generation and voice conversion (input text, uploaded voice/video)
Nanonoble Pte. Ltd. (MiniMax)SingaporeAI voice/music generation (input text/prompts)
Suno Inc. (via sunoapi.org)United StatesAI music generation (input prompts)
SKYWORK AI Pte. Ltd. (Mureka)SingaporeAI music/background-music generation (input prompts)
xAI Corp.United StatesAI image/video generation (input prompts, uploaded images)

Among the above trustees, those located outside the Republic of Korea constitute an overseas transfer under Article 28-8 of the Personal Information Protection Act. The point of transfer is at the time of service use (generation requests, login, etc.), and the method of transfer is encrypted network transmission (TLS). Only content directly entered or uploaded by the user — not member-identifying information — is transmitted to AI-generation trustees, and each trustee retains or destroys such content in accordance with its own policy after achieving the processing purpose. Users may refuse the overseas transfer, but in that case use of the relevant AI-generation feature will be restricted.

When entrusting processing, the Company stipulates the matters necessary to ensure personal information is managed safely, and supervises whether trustees process personal information properly.

Article 5 (Retention and Use Period of Personal Information)

  1. Member information: destroyed immediately upon withdrawal. However, where retention is required by applicable laws, it is retained for the relevant period.
    • Act on the Consumer Protection in Electronic Commerce, etc.: records of contracts/withdrawal of subscription for 5 years, records of payment/supply for 5 years, records of consumer complaints/disputes for 3 years
    • Protection of Communications Secrets Act: access logs for 3 months
  2. Outputs (video and audio): retained for up to 7 days from the date of generation and then automatically deleted. Deleted immediately upon account withdrawal, regardless of the period. Image and real-time speech synthesis outputs are not stored. The above period is an upper limit on storage; outputs may be deleted before 7 days for reasons such as storage capacity limits, failures, compliance with laws, or responses to misuse, and the Company does not guarantee storage (see Article 3).
  3. Information retained under the law is not used for purposes other than the relevant purpose.

Article 6 (Destruction of Personal Information)

  1. Personal information is destroyed without delay upon the expiration of the retention period or the achievement of the processing purpose.
  2. Electronic files: permanently deleted in an unrecoverable manner
  3. Outputs (video and audio): items exceeding the retention period (7 days) are permanently deleted from cloud storage through an automated daily cleanup process, and are deleted immediately together with the withdrawal process upon account withdrawal.
  4. Paper documents: shredded or incinerated

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Users may exercise the following rights at any time:

  1. Request to access personal information
  2. Request to correct errors, etc.
  3. Request for deletion
  4. Request to suspend processing

Rights may be exercised by applying via email (help@h-international.co.kr) or telephone (070-8869-3409), and requests will be handled without delay.

Users may withdraw their consent to the processing of personal information at any time. However, suspending the processing of information essential to the performance of the service agreement may lead to restrictions on service use.

Article 8 (Personal Information of Users Under 18 Years of Age)

The Service is available only to those aged 18 or older. Registration by users under 18 is not permitted, and this is verified during the registration process. If it is confirmed that personal information of a user under 18 (including children under 14) has been collected, it is deleted immediately.

Article 9 (Automatic Collection Devices)

For service operation and security, the Company automatically collects access IP, access country (estimated based on IP), browser/OS/device classification (summary), date and time of use, visited pages, and referral path (referrer, UTM source, campaign keyword). This is used only for the purposes of preventing misuse, improving service quality, and access statistics, and raw logs are deleted after 3 months (de-identified daily statistics are retained separately).

Article 10 (Personal Information Protection Officer)

ItemDetails
NameBae Se-young (배세영)
PositionRepresentative
Contact070-8869-3409
Emailhelp@h-international.co.kr

You may also report or consult regarding personal information infringement to the following agencies:

Article 11 (Changes to the Privacy Policy)

This policy is effective as of August 3, 2026 (enacted June 1, 2026; amendment disclosed July 27, 2026). Amendment: addition of provisions on the 7-day temporary storage and automatic deletion of outputs (video and audio) (Articles 3, 5 and 6). In the event of changes to its content, the changes will be notified via the website notice board or email, and disclosed on the website from 7 days before the effective date.

Effective Date: August 3, 2026 (Enacted June 1, 2026) | H International, Representative Bae Se-young