Privacy Policy

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, we will take necessary measures such as obtaining separate consent.

• Service Provision and Operation: Providing core services such as YouTube channel analysis, planning document creation, cover image production, and video uploads
• Member Registration and Management: Identity verification, personal identification, prevention of fraudulent use by unauthorized members, confirmation of membership intent, age verification, complaint handling, and delivery of notices
• Paid Service Billing: Billing and payment processing for paid services
• Marketing and Advertising: Development of new services (products) and specialization, event and promotion notifications (with consent)
• Instrument Analysis: Identifying detected instruments and possible candidates from the segment selected by the user in a directly uploaded MP3 or from a user-initiated YouTube tab-audio recording. Audio and source information are used only to provide and securely operate this feature, and are not sold, used for personalized advertising, or used for unrelated purposes.

2. Categories and Methods of Personal Information Collection

• When linking Google Account:
  • Required: Email address, profile image, name, Google ID
  • Optional (when YouTube permissions are granted): YouTube channel information (channel name, subscriber count, view count, etc.), video upload permissions
• Generated during service use: Access logs, cookies, access IP information, payment records, service suspension records
• When requesting instrument analysis: For direct uploads, the selected MP3 (source duration up to 3 hours), file name, and selected start and end timestamps are processed, and only the selected segment of up to 3 minutes per request is analyzed. With the Chrome extension, only the MP3 encoded from the user-selected YouTube tab-audio segment (up to 3 minutes per request) is transmitted, together with the video title, URL, and video ID as source information.
• Children under 14: The Company does not collect personal information from children under 14 years of age. If it is confirmed that the user is under 14, the information will be immediately deleted.

3. Processing and Retention Period of Personal Information

The Company processes and retains personal information within the retention and use period prescribed by law or within the retention and use period agreed upon when collecting personal information from the data subject.

• Member Information: Until membership withdrawal (however, if investigation/inquiry is in progress due to violation of relevant laws, until the completion of such investigation/inquiry)
• Payment Information: Retained for 5 years pursuant to the Act on Consumer Protection in Electronic Commerce
• Access Logs: Retained for 3 months pursuant to the Protection of Communications Secrets Act
• Records of consumer complaints or dispute resolution: 3 years
• Instrument analysis data: For newly created private instrument-analysis data, a daily cleanup process targets an unconfirmed upload after its 10-minute reservation expires, a confirmed source that is not connected to an analysis job after 24 hours, a source MP3 used for analysis 7 days after the last related job ends, and an internal audit artifact 30 days after the job ends. A storage deletion failure is retried during a later daily cleanup. Analysis request and result records are retained until account withdrawal or a valid deletion request, unless applicable law requires a longer period.

4. Provision of Personal Information to Third Parties

The Company processes personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only with the consent of the data subject or in accordance with special provisions of law.

• YouTube API Services:
  This service uses YouTube API Services. By using the service, you agree to the YouTube Terms of Service and Google Privacy Policy.

5. Outsourcing of Personal Information Processing

The Company outsources personal information processing tasks as follows for smooth handling of personal information operations.

• Payment Processing: Paddle
• Cloud Services and Private Object Storage: Amazon Web Services (AWS) / Vercel / Cloudflare R2
• Email Delivery: NHN Cloud
• Instrument Analysis Infrastructure: Railway (classifier hosting and selected-range extraction) / Replicate (auxiliary AI analysis of the selected range)

6. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may exercise the following rights:

• Request to access personal information
• Request for correction in case of errors
• Request for deletion
• Request to suspend processing
• Revoke Google Permissions: Users can Google Security Settings pagerevoke this service's permissions at any time from the

7. Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose. For information in electronic file format, technical methods are used to ensure that records cannot be recovered.

8. Measures to Ensure Security of Personal Information

• Encryption of Personal Information: Passwords and key personal information are encrypted for storage and management.
• Technical Measures Against Hacking: Installation and regular updates/inspections of security programs.
• Access Control to Personal Information: Access control through granting, modifying, and revoking access rights to database systems that process personal information.
• Protection of Instrument Analysis Audio: Source audio and internal audit objects are stored in private object storage with server-side encryption and are protected by restricted, expiring URLs and access controls.

9. Privacy Officer

The Company has designated a Privacy Officer as follows to be responsible for overall personal information processing and to handle complaints and remedies related to personal information processing by data subjects.

10. Changes to Privacy Policy

Revisions to this Privacy Policy are reflected in the last-updated date shown above. Material changes that require prior notice under applicable law will be announced within the period and by the method required by that law.

11. Chrome Extension Permissions and User Data

The MusePilot Chrome extension uses the following permissions to provide visible page features, including screenshot capture, and user-initiated YouTube instrument analysis. Audio capture and processing permissions are limited as described below.

• tabCapture: Only after the user activates the extension for the current YouTube tab and starts recording, the extension captures that tab's audio for the selected range, up to 3 minutes per request. A range may be selected from a video up to 3 hours long.
• offscreen: A hidden extension document temporarily receives the authorized tab-audio stream and encodes the selected range as MP3 so recording can operate reliably under Chrome Manifest V3. It is not used for background browsing or unrelated data collection.
• scripting: This permission is used to display or recover MusePilot's visible content script and interfaces on the active YouTube page, including range selection and recording controls. It is not used to collect unrelated page content. For instrument analysis, the video title, URL, and video ID are processed only as source information.
• activeTab and Screenshot Capture: Only when the user explicitly starts the screenshot feature does the extension temporarily capture the visible area of the active tab. If the user edits and confirms saving it, the resulting image, source-page URL, selected Scrapsheet, and optional note are transmitted to the MusePilot server. The extension does not take screenshots arbitrarily in the background.
• Audio Collection Limits: The extension does not collect microphone or camera data, audio from other tabs, or continuous background recordings, and the MusePilot server does not download the YouTube video. Only the selected audio range and source information are used to provide the requested instrument analysis.
• Chrome Web Store Limited Use: The use of information received through Chrome extension permissions and Google APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. The information is used and transferred only as necessary to provide and secure the user-facing features disclosed in this Policy. Humans do not read user data except with the user's explicit consent to read specific data, when necessary for security or abuse investigations, to comply with applicable law, or when aggregated and anonymized data is used for internal operations.