Moeumi Privacy Policy

1. Overview

Moeumi (모음이) is an AI-powered promotional content and multi-platform publishing service for small and medium-sized businesses. This policy explains what information Moeumi collects, how it is used, and how it is protected.

Moeumi is operated by The Luxury Lord (더 럭셔리 로드), a Korean software business.

2. Data We Collect

• Member information: email, encrypted password, mobile phone number, business information
• OAuth connection information: access token, refresh token, account identifier, expiry time
• Service usage information: uploaded images, generated posts, publishing results, error logs
• Payment information: payment amount, purchased creation-pass bundle, payment status. Card numbers are not stored.

3. Purpose

• Signing up, signing in, and customer support
• Publishing to social media and managing comments and replies, as explicitly approved by the user
• Checking post performance, providing reports, and improving service quality
• Payment processing and management of creation-pass grants and refunds

4. Third-Party API Usage

Moeumi calls the Meta Graph API, Threads API, YouTube Data API, TikTok API and Pinterest API only within the scope the user has explicitly approved through OAuth. The features available depend on each platform's review and connection status.

We use platform APIs solely to deliver user-approved service features. We do not sell, rent, or repurpose platform data. We do not modify user profiles, follow or unfollow accounts, send messages, or publish content unless the user explicitly performs the corresponding action inside Moeumi.

5. Data Sharing

Moeumi does not sell or rent users' personal information. The minimum necessary information is processed only where required by law, for the payment service provider (PG) integration used for payment processing, or for publishing to a platform the user chose directly.

When you connect an MCP client such as ChatGPT, or an external automation, directly, the names of your connected accounts, your post drafts, media confirmation information and publishing status are provided to that client within the scope you allowed. SNS passwords and SNS access tokens are not provided. MCP connection tokens are stored as hashes, and we keep a record of the account, text, media and scheduled time that you approved in your own signed-in session, in order to block publishing that was not approved and duplicate publishing. You can withdraw the connection or request deletion of your account.

Images that you chose and provided through ChatGPT's file input are fetched within the scope of that download permission and stored as your own original files. The saved result is checked with a file hash, and the temporary download address is not kept in Moeumi's result responses or database. Fetching a file does not by itself ask any other image-generation service to regenerate it.

6. Retention

When withdrawal or a deletion request is confirmed, the account, store information, content, OAuth tokens and platform connection information are deleted immediately. Payment records that must be kept under the E-Commerce Act (5 years) are kept separately from personal information such as name and email, and deleted after the period ends.

7. User Rights

Users can request access to, correction of, deletion of, or suspension of the processing of their personal information at any time. Data deletion requests can be submitted at /data-deletion (Korean page), or email aljjang95@gmail.com.

7-A. Meta Permissions

Moeumi uses Facebook, Instagram and Threads permissions only within the scope the user approved through OAuth. Every post, comment reply and message reply is executed only when there is an explicit button click on the user's screen.

• instagram_basic, instagram_business_basic: read the profile, account ID and media information of the connected Instagram account so the user can confirm the right account is connected.
• instagram_content_publish: publish posts the user wrote or approved to the Instagram feed or Reels.
• instagram_manage_comments: read comments on posts the user owns and publish replies the user wrote directly.
• instagram_manage_messages, instagram_business_manage_messages: read Instagram Direct messages in the unified inbox and send replies the user wrote directly.
• pages_show_list: show the list of Facebook Pages the user manages so the user can choose the target page.
• pages_read_engagement: read comments, reactions and reach metrics of posts and show them to the user as a performance report.
• pages_manage_posts: publish content the user approved to the Facebook Page the user selected.
• business_management: map the pages and Instagram accounts linked to the user's Business Manager assets. Moeumi does not create, modify or delete Business Manager assets.
• threads_basic: read the connected Threads profile information to confirm the account connection status.
• threads_content_publish: publish content the user approved to Threads.
• threads_read_replies, threads_manage_replies: read replies to Threads posts and publish replies the user typed directly.

7-B. Google and YouTube Data

Moeumi uses YouTube API Services. We access and store Google account identifiers, authorized channel names and IDs, uploaded video IDs and processing/privacy status, granted scopes, and encrypted OAuth credentials to connect accounts and verify user-approved uploads. User-selected video files and metadata are sent to YouTube. Cloudflare processes service data on our behalf. Google/YouTube API data is not sold, used for advertising targeting, or used to train AI models. Our use and transfer of Google API data comply with the Google API Services User Data Policy, including its Limited Use requirements.

The Google sign-in identifier, email and profile, the connected YouTube channel ID and name, uploaded video IDs and processing/visibility status, granted scopes and encrypted OAuth tokens are used to connect accounts and to check publishing results. youtube.readonly is used to check the target channel and processing status, and youtube.upload is used to upload videos the user reviewed and approved. The video, title, description, visibility and audience settings the user entered are sent to the YouTube channel the user selected.

If you disconnect an account on Moeumi's platform connection screen, the stored OAuth tokens are destroyed and no new publishing is run through that connection. Disconnecting does not delete videos already on YouTube. You can request deletion of stored account information and publishing records through the data deletion request page (Korean) or at aljjang95@gmail.com. To revoke access directly from Google, use the Google security settings.

See the Google Privacy Policy. We use session cookies for sign-in and security, not YouTube advertising tracking.

7-C. Moeumi PC Blog Helper

This is an optional feature that connects your PC to your account by signing in to Moeumi in Chrome or Edge on the PC, and read-only checks the status of approved tasks and the Naver Blog editor. Automatic writing, saving and publishing are currently blocked because editor verification is not finished. Your Naver password and sign-in cookies are not read or sent to Moeumi, and your Naver sign-in state stays in your PC browser.

• Connection and communication: the signed-in Moeumi site passes a one-time connection code directly to the extension. The extension exchanges the connection code, the device identifier and name, the connection token, connection and task status and result-check information with that Moeumi site's server over HTTPS. The site's sign-in cookies are not passed to the extension.
• Storage on the PC: connection information and status are kept in the extension's own storage, and received task content, images and run history in the extension's own database. Browser sync storage is not used.
• Access scope: limited to admoum.tllhouse.com, moeumi.tllhouse.com and blog.naver.com; there is no feature that collects browsing history on other sites.
• Disconnecting: when you disconnect in the extension popup, the local connection information, task content, images and run history are erased, and only the task identifier, content hash, end state and time are kept to prevent re-execution. If you disconnect the device on the site, the extension performs the same cleanup when it detects the disconnection at its next authentication request. Disconnecting the device on the server and deleting the account or content are separate procedures, and disconnecting the PC does not mean all server data is deleted.

8. Security

• All communication uses HTTPS.
• Passwords are hashed, and OAuth tokens are encrypted with AES-256-GCM.
• Data in Cloudflare D1 is access-restricted by the server, which checks the signed-in user and account ownership.
• Administrator features go through separate authentication and permission checks.

8-A. Payment Processing

For payment processing, the company entrusts payment information to the payment service provider (PG) it has a contract with.

• Entrusted work: credit card payment processing, refund processing, payment fraud prevention
• Entrusted information: order identifier, product name, payment amount, payment method, payment date and time, payment result
• Buyer information: member identifier, name, email, contact information. Provided to the extent necessary for the card payment request and buyer verification.
• Card numbers are not stored on the company's servers and are processed directly by the payment service provider.

8-B. Usage Analytics

To fix errors and improve the service, the company analyzes usage records on the web and in the apps (Google Play and ONE store). This analytics is not used in Moeumi inside the Toss app.

• Items collected: member identifier (random ID), screens visited and navigation path, button-press records, screen error information, device/browser/operating-system type, approximate access region, and creation and payment step records (amount and product type)
• Screen replay: to find the cause of errors, screen usage is recorded; text typed in input fields and inquiry content are masked and not stored.
• Information not collected: email, name, contact information, card information, passwords, and the content of the text and photos you create
• Transfer abroad: PostHog, Inc. (United States; destination country: United States). Data is sent over the network when the service is used; analytics records are kept for up to 1 year and screen replay records for up to 30 days, then deleted. Contact: privacy@posthog.com
• How to decline: if you turn on the browser's Do Not Track setting, analytics are not collected. Declining does not restrict your use of the service.

8-B-1. Cookie and Acquisition-Source Measurement

To learn which channel a member came from before signing up or paying, the company stores a first-party cookie.

• Cookie name: am_src
• Items stored: the domain of the referring site, UTM campaign name and medium, in-app browser type (e.g. Threads, Instagram), first-visit time, and the Moeumi / Gwanggo-moeum address visited. IP addresses, device identifiers, and email are not stored.
• Purpose: to measure which channels bring members who sign up and pay, for service improvement and marketing efficiency.
• Retention: the cookie lasts 30 days. When you sign up, it is linked to your account as the acquisition source and kept for up to 400 days or until you withdraw your membership, whichever comes first.
• How to decline: block cookies in your browser settings. Declining does not restrict your use of the service.
• This measurement uses no external analytics tool or advertising tracking pixel; it is counted only on the company's own servers.

8-C. Customer Inquiries

• Items collected: inquiry type, inquiry content, the screen the inquiry was made from, and the account email to receive the answer
• Purpose: checking and answering the inquiry and resolving errors
• Retention: 3 years as a record of handling consumer complaints or disputes (Act on Consumer Protection in Electronic Commerce, Etc.)

9. Business Operator

Moeumi (모음이) is operated by The Luxury Lord (더 럭셔리 로드). The registered business details below are shown in Korean.

10. Contact

Privacy inquiries: aljjang95@gmail.com