1. Controller
JJLabsIO (Sole Proprietorship) is the data controller for Relayvid. Representative and privacy contact: Jaejin Song. Address: 211-4 Omok-ro, Yangcheon-gu, Seoul, Republic of Korea. Email: wowlxx28@gmail.com.
We have not appointed a Data Protection Officer. We have not currently appointed an EU Representative and will appoint one where legally required.
2. Personal Data Categories and Sources
We collect personal data directly from users, automatically from service use, and from service providers such as Google and Polar.
| Category | Items | Source |
|---|---|---|
| Contact data | Email, name | Direct input, Google sign-in |
| Account data | Profile image, Google identifier, login metadata | Google sign-in and service use |
| Billing data | Customer identifier, payment status, transaction metadata | Polar |
| User content | Uploaded product videos, output videos, job metadata | Direct upload and service processing |
| Usage and device data | IP address, cookies, browser/device data, access logs | Automatic collection |
3. Purposes and Legal Bases
We process personal data only where a GDPR legal basis applies.
| Purpose | Legal Basis |
|---|---|
| Account creation, login, and service delivery | Contract |
| Video upload, AI processing, result delivery, and support | Contract |
| Payment records, tax, and accounting | Legal obligation |
| Security logs, abuse prevention, and incident response | Legitimate interests |
| Product analytics and service improvement | Legitimate interests or consent where required |
| Google Analytics cookies | Consent |
| Marketing emails | Consent |
| Customer support | Contract or legitimate interests |
4. Special Category Data
We do not intentionally collect special categories of personal data under GDPR Article 9. Users must not upload videos containing sensitive personal data unless they have a valid legal basis and authorization.
5. Recipients and Processors
We do not sell personal data. We use processors and service providers for identity, payment, email, hosting, storage, database, and worker operations.
| Recipient/Processor | Purpose | Category |
|---|---|---|
| Google sign-in and identity authentication | Global, including United States | |
| Polar | Payment processing and billing status management | Global, including United States |
| Resend | Email delivery and waitlist contact management | United States |
| Vercel | Web application hosting | Global, including United States |
| Cloudflare | DNS, CDN, security, and R2 file storage | Global, including United States |
| Neon | PostgreSQL database hosting | Global, including United States |
| Railway | Application and worker hosting | Global, including United States |
6. International Transfers
Personal data may be transferred to Korea, the United States, and other countries where our providers operate. Korea benefits from an EU adequacy decision. For other transfers, we rely on Standard Contractual Clauses and other safeguards where applicable.
7. Retention
We keep data only as long as necessary for the purposes described or as required by law.
| Data | Retention Period | Criteria |
|---|---|---|
| Account data | Until account deletion, unless legal retention applies | Service contract |
| Payment and transaction records | 5 years | E-Commerce Act, tax and accounting laws |
| Consumer complaints and dispute records | 3 years | E-Commerce Act |
| Security logs including IP address | 3 months | Protection of Communications Secrets Act and security operations |
| Waitlist email | Until launch notice is sent, consent is withdrawn, or deletion is requested | Consent and legitimate service communication |
| Source and output videos | 30 days after processing, unless deleted earlier or legally required | Service contract and storage minimization |
8. GDPR Rights
You may request access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and review of automated decisions by contacting wowlxx28@gmail.com. We respond within one month unless an extension is permitted by GDPR.
You also have the right to lodge a complaint with your local supervisory authority. EU authority information is available from the European Data Protection Board.
9. Cookies and ePrivacy
Non-essential cookies, including analytics cookies, are used only with prior opt-in consent. Rejecting analytics cookies does not prevent use of core site features.
10. Automated Decisions and Children
Relayvid does not make decisions based solely on automated processing that produce legal or similarly significant effects on users.
Relayvid is not intended for children under 16 and does not knowingly collect their data.
11. Security and Changes
We use appropriate technical and organizational measures such as access controls, encryption in transit, provider safeguards, logs, and deletion controls.
Revision history: 2026-06-28 - Initial publication.