XLINK Privacy Policy

Edit Co., Ltd. (hereinafter the "Company") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act, in order to protect users' personal information and to handle related grievances promptly and smoothly.

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, the Company will implement necessary measures, such as obtaining separate consent in accordance with applicable law.

  • Membership registration and management: Confirming intent to register as a member, identity verification/authentication, maintaining and managing membership status, preventing fraudulent use, various notices, handling complaints, etc.
  • Service provision: Providing content, providing customized services, identity verification, billing/settlement, etc.
  • XLINK service-specific purposes: Providing YouTube and Instagram channel analytics reports, content management and performance metric visualization, service improvement and personalized content recommendations
  • Marketing and advertising: Analyzing usage records, research, delivering promotional information such as events
Article 2 (Items of Personal Information Processed and Collection Methods)

The Company collects the minimum personal information necessary to provide its services.

  • General member information: Name, ID, password, mobile phone number, email
  • When providing goods/services: Payment information, delivery information (name, mobile phone number, address), refund account information
  • XLINK API integration information (upon OAuth authorization):
    • YouTube (Google API): Channel information (name, profile image), video metadata (view count, comments, upload status), analytics statistics data
    • Instagram (Meta API): Profile information, post data (likes, comment counts), insight statistics
  • Automatically collected items: IP address, cookies, service usage records, visit history, etc.
Article 3 (Processing and Retention Period of Personal Information)

In principle, users' personal information is destroyed without delay once the purpose of collecting and using the information has been achieved. However, the following are exceptions.

  • Company internal policy: Retained for 90 days after membership withdrawal to prevent fraudulent use (records of fraudulent use retained for 1 year)
  • Retention pursuant to relevant laws:
    • Records of contracts or withdrawal of subscription, payment settlement, and supply of goods: 5 years
    • Records of consumer complaints or dispute resolution: 3 years
    • Records related to labeling/advertising: 6 months
    • Website access records: 3 months
Article 4 (Provision of Personal Information to Third Parties and Outsourcing)

Third-party provision: The Company provides users' personal information to third parties only where the user has given consent or where specifically permitted by law.

[Notice] Google User Data Protection and YouTube API Usage Notice
  • Purpose of collection and use: The Company uses the YouTube API service to enable users to upload AI-generated videos as YouTube Shorts and to provide channel performance analytics reports. For this purpose, the Company collects the user's channel ID, channel name, uploaded video data, and metadata (title, description).
  • Method of data use: All video uploads are carried out via a "user-initiated" method executed directly by the user clicking the upload button, and the Company does not post videos arbitrarily without the user's explicit consent.
  • Prohibition on data sharing and sale: The Company does not sell, share, or transfer users' personal information or data obtained through the Google API to third parties (advertising networks, data brokers, etc.).
  • Data retention and destruction: Tokens and channel identification information obtained through the YouTube API are immediately destroyed when the user clicks "Disconnect" within the service or withdraws their membership.
  • Compliance with limited use: The Company strictly complies with the "Limited Use" requirements of the Google API Services User Data Policy. Data received from Google is used only to improve and provide the service features requested by the user.
  • Notice on revoking permissions: In addition to disconnecting within the service, users may revoke the app's access permissions at any time via the Google Security Settings page.
[Notice] External Service API Policy Links
[Notice] TikTok User Data Protection
  • The Company collects and processes TikTok account identification information, access tokens, uploaded video files, and posting metadata in order to provide the TikTok content upload feature.
  • The collected information is used for TikTok account authentication, scheduled posting, checking posting status, and responding to customer inquiries.
  • Posting information such as the uploaded video, title, visibility settings, and whether comments are allowed is transmitted to the TikTok account selected by the user.
  • In the course of providing the service, some data may be transmitted to servers of TikTok Pte. Ltd. or its affiliates (located overseas).
  • TikTok access tokens are retained for the duration that the automatic posting feature is provided, and are immediately destroyed upon account disconnection or membership withdrawal.
  • Users may disconnect their TikTok account at any time and may request deletion of stored tokens and scheduled posting information.
  • Videos scheduled by the user are automatically posted at the designated time via the TikTok API, and for this purpose the video file and posting settings information are temporarily stored on the server until the post is published.
Article 5 (Rights and Obligations of Users and Methods of Exercising Them)

Users may exercise their rights to view, correct, delete, or request suspension of processing of their personal information at any time.

Data deletion request (API): Users may revoke app permissions at any time via the Google and Instagram settings pages, and data collected will be immediately destroyed upon disconnection within the service. (Google Security Settings (Remove Access Permissions))

Article 6 (Procedures and Methods for Destruction of Personal Information)

Destruction procedure: Personal information for which grounds for destruction have arisen is selected and destroyed upon approval by the Personal Information Protection Officer.

Destruction method: Electronic files are deleted using technical methods that prevent recovery, and paper documents are shredded or incinerated.

Article 7 (Measures to Ensure the Security of Personal Information)

The Company implements the following to protect personal information: establishment of an internal management plan, management of access authority, encryption of unique identification information, installation of security programs, and physical access control.

Article 8 (Personal Information Protection Officer and Contact)

The Company has designated the following officer to take overall responsibility for personal information processing and to handle user complaints.

  • Personal Information Protection Officer: Yeom Gwang-rok
  • Contact: 1666-0712 / editt.co.kr@gmail.com
  • Department: Customer Management Team
Article 9 (Remedies for Infringement of Rights)

Users may contact the following institutions for damage relief, consultation, etc. regarding infringement of personal information.

  • Personal Information Infringement Report Center (dial 118 without area code / privacy.kisa.or.kr)
  • Personal Information Dispute Mediation Committee (dial 1833-6972 without area code / www.kopico.go.kr)
Article 10 (Changes to the Privacy Policy)

This Privacy Policy is effective as of January 1, 2025. (Last revised: April 4, 2026.)