We may collect birth information, gender selection, calendar type, service inputs, purchase records, order identifiers, email address for receipts, and support messages.

For Idol CEO Studio, we may collect selected styling options, fictional age-appropriate trainee choices, fictional agency names, generation prompts, generated outputs, and uploaded reference materials when the feature is available.

We may also collect IP address, browser information, cookies, device information, access logs, and analytics events for security, fraud prevention, service improvement, and product operations.

We use information to provide digital content, generate AI entertainment results, process payments, deliver receipts, prevent misuse, handle support requests, and improve the service.

For GPT Store handoff, we use birth information to issue an opaque single-use token that fills the matching Oracle Saju input flow.

We may review prompts, generated outputs, and support records to investigate rights-infringing requests, impersonation, unsafe content, failed generation, or payment disputes.

We may use Stripe or local payment providers for checkout, payment support, and fraud prevention.

We may use Supabase for database and authentication, Vercel for hosting, analytics tools for product measurement, and AI providers for generation requests.

We keep records only as long as needed for service delivery, legal obligations, tax and accounting records, support, dispute handling, security, and product operations.

A GPT Store autofill token is valid for five minutes. Birth information is deleted immediately after its first successful use, and unused expired records are deleted by an automated cleanup that runs every minute.

Payment and transaction records may be retained for the period required by applicable commerce, tax, accounting, and consumer protection laws.

Uploaded materials, prompts, and generated outputs are used to provide the requested feature and to operate safety review, rights-infringement prevention, payment dispute handling, support, and abuse-prevention processes.

Users should not upload private images, copyrighted materials, celebrity references, private person likenesses, agency materials, or content they do not have permission to use.

Privacy requests can be sent to gyejin.lee@oraclesaju.com.

Korean privacy information is available at /legal/privacy.