Version: 1.0 | Effective Date: December 27, 2025 | Last Updated: December 27, 2025
DAPARA FACTORY, operated by PRINCEPRICE ("we," "our," or "Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered viral shopping shorts and storytelling shorts video generation service.
1. Information We Collect
1.1 Information from Google OAuth
When you sign in with Google, we receive:
| Information | Purpose |
|---|---|
| Email address | Account identification, service notifications |
| Name | Display name within the service |
| Profile picture | Profile display |
| Google Account ID | Unique account identifier |
1.2 Google API Data Access
| API Scope | Data Accessed | Purpose |
|---|---|---|
| YouTube Upload | Your YouTube channels | Upload generated videos to your channel as private (default) |
| YouTube Readonly | Channel list | Allow you to select private upload destination |
| Gmail Send | Send-only access | Send completion/failure notifications |
| Drive File | App-created files only (no access to existing files) | Backup generated videos to user's own Drive |
1.3 Automatically Collected Information
- Service usage logs (generation requests, schedules)
- Payment information (credit purchases/usage)
- Access logs, IP addresses, cookies
📱 INSTAGRAM DATA POLICY
This section describes how we collect, use, retain, and delete Instagram-related data in compliance with Meta Platform Terms.
1. Data We Collect
| Information | Purpose |
|---|---|
| Instagram username | Account identification, display within service |
| Instagram account ID (ig_user_id) | Unique account identifier |
| Profile picture URL | Profile display within service |
| Access Token (encrypted storage) | Instagram API access permission |
| Upload history (media_id, permalink) | Upload history management |
| DM send logs (recipient, send time, status) | DM statistics and log management |
2. How We Use Instagram Data
- Profile Display: Show connected account information on dashboard and mini multi-link page
- Content Publishing: Upload AI-generated Reels directly to Instagram (creator-initiated only)
- Comment-to-DM: Send automated DM responses when followers request information via comments (user-initiated, 24-hour policy compliant)
- Analytics: Track upload history and DM delivery status for service improvement
3. Data Retention
| Data Type | Retention Period |
|---|---|
| Instagram Account Information | Until account disconnection |
| Instagram Upload History | Until account disconnection |
| DM Send Logs | Until account disconnection |
4. Data Deletion
You can delete your Instagram data at any time through the following methods:
- Within Service: Settings > Connected Accounts > Instagram > Disconnect
- From Instagram Settings: Instagram Settings > Apps and Websites > Remove DAPARA FACTORY
- Email Request: ssabufactory@gmail.com
⚠️ Upon disconnection, all Instagram-related data (account information, upload history, DM settings and logs) is permanently deleted within 24 hours.
※ Data collection is minimized to account metadata only, and users can request data deletion at any time.
2. How We Use Your Information
We use collected information solely for:
| Purpose | Description |
|---|---|
| Service Delivery | Generate viral shopping shorts and storytelling shorts videos based on user-provided product information, private upload to YouTube, automatic upload to Instagram Reels, backup to Drive |
| Notifications | Send completion/failure alerts via email |
| Account Management | User authentication and authorization |
| Payment Processing | Subscription billing, credit management, refunds |
| Customer Support | Respond to inquiries and resolve disputes |
| Legal Compliance | Maintain transaction records as required by law |
⚠️ Important Notice About Google Data
This service is a creative tool that assists users in generating unlimited unique viral shopping shorts and storytelling shorts videos through AI-powered combinations of user-provided product information (product name, URL, description) and 48 proven storytelling strategies.
Google account data (YouTube, Gmail, Drive) is NOT used for video content generation - it is only used for upload, notification, and storage functions that users explicitly request.
3. Google API Services User Data Policy Compliance
DAPARA FACTORY complies with Google API Services User Data Policy, including the Limited Use requirements.
3.1 Limited Use Disclosure
Our use of information received from Google APIs adheres to the following restrictions:
- We only use Google data to provide the services you explicitly request
- YouTube: Upload videos as private by default only when you initiate the upload
- Gmail: Send notifications only for service-related events
- Drive: Store only video files our service creates
- We do not transfer Google user data to third parties except with your explicit consent or as required by law
- We do not use Google user data for advertising or analytics
- We do not use Google user data for AI/ML model training
3.2 Data Storage
| Item | Storage Location | Encryption |
|---|---|---|
| OAuth Tokens | Supabase (AWS US Region) | AES-256 encrypted |
| Channel IDs | Supabase | Standard database security |
| Generated Content | Supabase Storage | SSL/TLS in transit |
Google Drive Usage: Generated videos are uploaded to the user's own Google Drive for backup purposes upon user request. We do NOT access user's existing Google Drive files (drive.file scope limitation).
We DO NOT store or access:
- User's existing YouTube channel videos and metadata
- User's Gmail email contents
- User's existing Google Drive files
※ Only videos generated by DAPARA FACTORY are retained for 30 days before automatic deletion.
3.3 Data Deletion
You can delete your Google data at any time:
- Within Service: Settings > Delete Account
- Google Account: myaccount.google.com/permissions
- Email Request: ssabufactory@gmail.com
Upon deletion request, all Google-related data is permanently deleted within 48 hours.
4. Data Retention
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account Information | Until account deletion | Service contract |
| Transaction Records | 5 years | E-commerce Consumer Protection Act |
| Service Usage Logs | 3 years | Communications Privacy Act |
| Dispute Records | 3 years | E-commerce Consumer Protection Act |
Generated Content Retention
- Video files: Deleted 30 days after generation
- Scripts/Hashtags: Same retention as video files
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties.
Limited Sharing:
| Recipient | Purpose | Data Shared |
|---|---|---|
| TossPayments | Payment processing | Payment information only |
| Legal authorities | Court orders/subpoenas | As legally required |
6. Data Security
We implement industry-standard security measures:
| Measure | Implementation |
|---|---|
| Access Control | Role-based access to personal data systems |
| Encryption | AES-256 for sensitive data at rest |
| Transit Security | TLS 1.3 for all data transmission |
| Monitoring | 24/7 security monitoring and intrusion detection |
| Audit Logs | Complete audit trail of data access |
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Restriction: Request limitation of data processing
- Portability: Receive your data in a portable format
- Objection: Object to certain data processing
To exercise your rights:
- Email: ssabufactory@gmail.com
- Response time: Within 10 business days
8. International Data Transfers
Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements with service providers
- Compliance with applicable data protection laws
9. Children's Privacy
DAPARA FACTORY is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be notified through:
- In-service announcements
- Email notifications for significant changes
Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related inquiries:
| Contact | Information |
|---|---|
| Person in Charge | CEO |
| ssabufactory@gmail.com | |
| Phone | 010-2541-7278 |
12. Governing Law
This Privacy Policy is governed by the laws of the Republic of Korea. Any disputes shall be subject to the exclusive jurisdiction of Korean courts.
Last Updated: December 27, 2025
Chrome Extension — Whisk Factory
1. Information We Collect
Whisk Factory does not collect personal information. The following data is stored only in your browser's local storage (chrome.storage.local) and is not transmitted to any external server:
- Gemini API Key (entered by you)
- User settings (image ratio, wait time, theme, language)
- Password authentication status (session only)
2. Third-Party Services
- Gemini API (generativelanguage.googleapis.com): Used to convert scripts into image prompts. Only your API key and prompt text are sent.
- Google Apps Script (script.google.com): Used only for password authentication. No personal information is transmitted.
3. Data Sharing
No data is shared with third parties. All data is stored only in your browser's local storage.
4. Data Deletion
When you remove the extension, all locally stored data is automatically deleted.
5. Contact
For inquiries, please contact us through the DAPARA FACTORY website.
Chrome Extension — Grok Factory
1. Information We Collect
Grok Factory does not collect personal information. The following data is stored only in your browser's local storage (chrome.storage.local) and is not transmitted to any external server:
- Gemini API Key (entered by you)
- User settings (video length, wait time, theme, language)
- Password authentication status (session only)
2. Third-Party Services
- Gemini API (generativelanguage.googleapis.com): Used to convert scripts into image/video prompts. Only your API key and prompt text are sent.
- Google Apps Script (script.google.com): Used only for password authentication. No personal information is transmitted.
3. Data Sharing
No data is shared with third parties. All data is stored only in your browser's local storage.
4. Data Deletion
When you remove the extension, all locally stored data is automatically deleted.
5. Contact
For inquiries, please contact us through the DAPARA FACTORY website.