Privacy Policy

Gilbreth(“we”) processes personal data as described below when you use pickcam.

1. Why we process personal data

• to identify you, manage your account, and attach results to it
• to process the video you upload and generate one vertical clip per person
• to take payment and handle refunds
• to operate the service, fix errors, and answer your questions

2. What we process

• Account: the email address, name and profile picture on your Google account. Before you sign in, only an anonymous session identifier exists.
• The video you upload and the frames extracted from it. These may contain personal data of the people who appear in the video, including their faces.
• Facial feature data (see section 5).
• Payment: payment is handled by Paddle.com. We never hold your card details. We receive only a transaction identifier and its status.
• Collected automatically: IP address, browser information, access times, and usage records.

3. How long we keep it

• Account data: until you close your account.
• Uploaded videos, extracted frames and generated results: until you close your account or ask us to delete them.
• Facial feature data: destroyed as soon as the job finishes (see section 5).
• Payment and transaction records: 5 years, as required by Korean consumer protection law.

You can ask us to delete your uploads and results at any time by writing to support@pickcam.app. We act without delay.

4. How we destroy it

Personal data is destroyed without delay once its retention period expires or its purpose is fulfilled. Electronic files are permanently deleted in a way that cannot be reversed; printed material is shredded or incinerated.

5. Facial feature data

To keep each person consistently identified from frame to frame within your video, our engine computes a numeric representation of facial features (a feature vector). Under Korean law this is biometric data and is treated as sensitive personal data. In the EU and UK it is special category data under Article 9 GDPR.

We do not store it. The feature vectors exist only in volatile working storage while the job runs, and are deleted together with that working directory the moment the job ends. They are never written to our database or object storage, never compared against any other video or external database, and never disclosed to anyone.

We ask for your consent to this processing separately from your consent to other processing. Under our Terms, you warrant that everyone appearing in the video has consented to it.

6. Who we share data with

• Google LLC: sign-in. We receive your email address, name and profile picture from Google.
• Paddle.com Market Ltd.: payment. As Merchant of Record, Paddle processes your data as an independent controller.

7. Processors acting for us

• Supabase, Inc. · authentication and database
• Cloudflare, Inc. · storage of video and image files
• Modal Labs, Inc. · video processing compute
• Vercel Inc. · web hosting

8. Transfers outside Korea

Running the service requires transferring personal data abroad. We disclose the details here under Article 28-8(1)(3) of Korea's Personal Information Protection Act.

• Recipients: Supabase, Inc. / Cloudflare, Inc. / Modal Labs, Inc. / Vercel Inc. Each publishes its own privacy contact.
• Country: United States of America
• When and how: continuously, over the network, as you use the service
• Data transferred: the categories listed in section 2
• Purpose and retention: as in sections 1 and 3
• How to refuse: write to support@pickcam.app. These transfers are essential to the service, so if you refuse them you cannot use it.

9. Your rights

You may ask us at any time to give you access to your personal data, to correct or delete it, or to stop processing it, and you may withdraw your consent. Write to support@pickcam.app and we will act without delay. If you are in the EU or UK you also have the right to complain to your supervisory authority.

10. Children

We do not knowingly collect personal data from children under 14. If we learn that an account belongs to a child under 14, we delete the account and its data without delay.

11. Cookies

We use cookies that are strictly necessary to keep you signed in. You can refuse them in your browser settings, but then features requiring sign-in will not work. We do not use advertising or tracking cookies.

12. Security

• data in transit is encrypted (HTTPS/TLS)
• stored files are reachable only through short-lived signed URLs issued by our server
• the number of people with access to personal data is kept to a minimum, and access is controlled

13. Data protection officer

Yoonseo Kim, representative of Gilbreth
support@pickcam.app
37 Nonhyeon-ro 24-gil, Seoul, Republic of Korea

14. Complaints

If you are in Korea you may contact the Personal Information Dispute Mediation Committee (privacy.go.kr, 1833-6972) or the Privacy Infringement Report Centre (privacy.kisa.or.kr, 118). Elsewhere, you may complain to your local data protection authority.

15. Changes to this policy

We will announce any change on the service at least 7 days before it takes effect, and at least 30 days beforehand where the change is adverse to you.