Privacy Policy

Last updated: September 28, 2026

This English text is provided for convenience only. The Korean version is the legally binding original; if the two differ, the Korean version prevails.

1. Personal data we collect

MOVO collects the following personal data in order to provide the Service:

• Required: email address, nickname
• Collected automatically: service usage records, IP address, cookies, access logs
• Sign-up acquisition path (stored with your account when you sign up): the first page you visited, ad parameters (UTM, ad click IDs, and search-ad keyword and search term), referral link identifier and in-app browser name, the site you came from, the time of your first visit, the page you were taken to right after signing up, and your Google Analytics visitor ID
• Payment data: payment method details (processed and stored by our payment processor, Lemon Squeezy — we do not store them ourselves)
• Additional data for pre-registration (beta recruitment) users: contact number (mobile), job role, types of material of interest, consent to take part in an interview, and acquisition path (UTM / share-link identifier / landing path). This data is collected and used only for the purpose and period stated separately on the pre-registration form.

2. Purposes of collection and use

• Sign-up and account management: identity verification for membership services, personal identification, and prevention of fraudulent use
• Service delivery: AI-based presentation generation, editing, and saving
• Payment and settlement: charging and refunding paid services
• Customer support: handling enquiries or complaints and delivering notices
• Service improvement: analysing usage statistics and developing new services
• Marketing analysis: understanding how members found us (ads, search, referrals, and similar) to improve our advertising and content
• Pre-registration (beta recruitment): sending beta launch announcements, granting pre-registration benefits (e.g. settlement credits), and confirming willingness to take part in an interview. Retained until the beta announcement and benefit settlement are complete, then destroyed.

3. Retention and use periods

MOVO processes and retains personal data within the retention and use period required by law, or within the period consented to by the data subject at the time of collection. Personal data is destroyed immediately upon account withdrawal; payment and contract data is moved to a separate retention area and automatically destroyed after 7 years, as required by applicable law (the Act on Consumer Protection in Electronic Commerce, the Value-Added Tax Act, and the Corporate Tax Act).

• Personal data such as account, profile, and user content: destroyed immediately upon withdrawal (Personal Information Protection Act §21)
• Sign-up acquisition path: destroyed immediately upon withdrawal. The cookie that remembers how you arrived before signing up (movo_ft) stays in your browser for up to 90 days
• Order, payment, and subscription records: retained for 7 years after withdrawal, then destroyed (Act on Consumer Protection in Electronic Commerce §6 / Value-Added Tax Act and Corporate Tax Act)
• Withdrawal history (email hash + withdrawal timestamp): retained for 7 years after withdrawal, then destroyed (to prevent re-registration abuse)
• Service usage records (access logs, IP, and similar): retained for 3 months under the Protection of Communications Secrets Act
• Pre-registration (beta recruitment) data: retained until the beta announcement and benefit settlement are complete, then destroyed

During the retention period this data is not accessible to ordinary users; our operators may access it directly only for legitimate reasons such as dispute resolution or tax compliance. If you need payment evidence such as a receipt, download it before withdrawing your account or contact customer support afterwards.

4. Provision of personal data to third parties

As a rule, MOVO does not provide users' personal data to third parties. The following are exceptions:

• Where the user has given prior consent
• Where required under law, or where an investigative authority requests it for investigative purposes following the procedures and methods prescribed by law

5. Outsourcing of personal data processing

MOVO outsources personal data processing tasks as follows in order to provide the Service:

• Payment processing: Lemon Squeezy (payment processing, storage of payment data, and execution of refunds). Payment data held by the processor is governed by the processor's own policy and is not directly controlled by us.
• Cloud infrastructure: Vercel, Supabase (service operation and data storage)
• AI services: Google Gemini (Vertex AI), OpenAI, Replicate (AI-based content and image generation)

External OAuth providers (such as Google) are an authentication integration rather than one of the processors above. We do not separately store access or refresh tokens issued by external OAuth providers. When you withdraw your account we clear the authentication link on our side, but the app permission registered on your external account must be revoked by you in that account's security settings (see section 6, Rights of the data subject, for details).

6. Rights and obligations of the data subject, and how to exercise them

You may exercise the following rights at any time:

• Request access to your personal data
• Request correction or deletion of your personal data
• Request suspension of processing of your personal data
• Withdraw your account (terminate the service agreement)

Active subscriptions and unused credits on account withdrawal

If you have an active subscription, you may choose one of the following two flows.

• (Default) Cancel the subscription yourself in subscription management and withdraw after the billing period ends
• (Immediate withdrawal) Withdraw after requesting and completing a refund for the remaining period (see the Refund Policy for calculation and procedure)

If you hold unused one-off credit purchases, withdrawal is completed after those are refunded. Requests to access or delete payment and contract data during the retention period may be refused because of statutory retention obligations.

Revoking permissions on external accounts (Google and similar)

If you signed up with an external account such as Google, we clear the authentication link between our system and that external account when you withdraw. However, we have no means of revoking the app permission registered on your external account, so you must revoke it yourself on that account's security settings page. (Google account permissions page: https://myaccount.google.com/permissions)

7. Data protection officer

MOVO takes overall responsibility for personal data processing and has designated the following data protection officer to handle complaints and provide remedies for data subjects in relation to personal data processing.

8. Measures to ensure the security of personal data

MOVO takes the following measures to ensure the security of personal data:

• Administrative measures: establishing and implementing an internal management plan, and regular staff training
• Technical measures: managing access rights to the personal data processing system, installing access control systems, and encrypting personal data
• Physical measures: access control for server rooms, document storage rooms, and similar areas

9. Installation, operation, and refusal of automatic data collection devices

MOVO uses 'cookies' — which store and periodically retrieve usage information — to provide individually tailored services. A cookie is a small piece of information that the server operating the website sends to your browser and that is stored on your computer.

You have a choice about the installation of cookies. Through your web browser's options you may allow all cookies, be asked for confirmation each time a cookie is stored, or refuse the storage of all cookies.

The cookies and third-party analytics and advertising tools MOVO uses are:

• Acquisition cookie (movo_ft, MOVO): remembers your first page, ad parameters, the site you came from, and the time of your first visit for up to 90 days, and is stored with your account when you sign up.
• Google Analytics (Google): visit and usage statistics. Opt out: https://tools.google.com/dlpage/gaoptout
• Google Ads (Google): measuring ad performance and showing ads to past visitors (retargeting). Ad settings: https://myadcenter.google.com
• Meta Pixel (Meta): measuring ad performance and showing ads to past visitors (retargeting). Ad settings help: https://www.facebook.com/help/109378269482053
• Microsoft Clarity (Microsoft): analysing how pages are used (session recordings and heatmaps: mouse movement, clicks, scrolling). For signed-in members, a hashed member ID, email address, plan, and job role are sent. Opt out: https://optout.aboutads.info/ · Privacy statement: https://www.microsoft.com/privacy/privacystatement

Each of these third parties collects visit records through cookies or similar technologies and processes them under its own privacy policy. If you refuse cookies in your browser, your acquisition path is not recorded. If you refuse all cookies, some features such as signing in will not work.