Privacy Policy

Scheduled effective date: September 30, 2026

The company operating the content-protection service "Luveo" (the "Service", the "Company") complies with applicable laws including the Personal Information Protection Act, and maintains the following privacy policy to protect users' personal information.

1. Personal Information We Collect

• Account information: email, account name (the value entered at sign-up, or the profile name from a social login), password (stored encrypted), or social login identifier
• Protected-subject information: the platform and account handles registered by the member, and information about the content for which protection is requested (may include sensitive information)
• Service usage information: scan results, takedown processing records, reports
• Payment information: subscription payments are processed by a payment processor (Stripe); the Company does not store card details and keeps only minimal information such as payment identifiers and subscription status
• Automatically collected information: access logs, cookies, device and browser information

2. Purposes of Use

We use personal information to identify and authenticate members, perform content detection and takedown filing, demonstrate the fact of the authorization, manage payments and subscriptions, respond to customer inquiries, improve the Service, and prevent abuse.

3. Provision to Third Parties and Outsourcing

The Company does not provide personal information to third parties except where based on law or where the member has consented. To provide the Service, the Company outsources payment processing (Stripe), infrastructure and hosting (Google Cloud Platform, etc.), and usage analytics (Mixpanel). In the course of filing takedowns, the member's creator name, channel address, and the leak URLs are passed to hosting providers, platforms, search engines, and their designated agents, and the Company's own name and contact information are used as the complainant information. The member's account name, address, and contact details are not passed. This does not apply, however, where provision is required under applicable law or pursuant to a lawful request.

4. Overseas Transfer of Personal Information

To provide the Service, some personal information may be processed overseas (e.g., Stripe — United States; Google Cloud Platform — Japan region; Mixpanel — United States). The items, purposes, and retention periods of transferred information follow what is set out in this policy.

5. Retention Period and Destruction

Personal information is destroyed without delay once the purpose of collection and use is achieved. However, where applicable law requires retention, it is kept for the relevant period and then destroyed. Upon a member's withdrawal, account information is destroyed, while payment and transaction records subject to a statutory retention obligation are kept for the relevant period.

6. Rights of Data Subjects and How to Exercise Them

Members may at any time request to access, correct, delete, or suspend the processing of their personal information, and may exercise these rights through in-service settings or by contacting us.

7. Sensitive Information and Children's Personal Information

The Company handles any sensitive information that may be included in content for which a member requests protection only to the extent necessary for detection, takedown, and protection, and minimizes access to it. The Company does not collect personal information of children under the age of 14.

8. Use of Cookies

The Company uses cookies to maintain login sessions and to analyze service usage. For visit analytics the Company uses Mixpanel, which stores an anonymous visitor identifier in the browser (local storage, not a cookie) and processes information such as the path of the pages viewed (without query strings), the referring site, campaign parameters, the approximate region inferred from the IP address, and the device and browser type. Page content and leak details are not transmitted, and browser "Do Not Track" requests are honored. Members may refuse cookie storage through their browser settings, but in that case the use of some features, such as login, may be restricted.

9. Measures to Ensure Security

To protect personal information, the Company applies technical and administrative safeguards such as encryption in transit, access-control restrictions, and encrypted storage of passwords.

10. Contact

For questions about how we handle personal information, contact luveo@loihitech.com. This policy may be revised in line with changes in law or the Service, and any changes will be posted within the Service along with their effective date.