Privacy Policy

Data controller: 미리랩스, a sole proprietorship.

Address: 경기도 용인시 기흥구 동백죽전대로 444, C608-S82호(중동,쥬네브)

Contact for privacy inquiries: support@youclan.io

Account and profile: email address, display name, avatar, language preferences, and similar profile fields you provide.

Content you create: posts, comments, messages, media uploads, and community participation data.

Meta and Instagram data: if a creator connects an Instagram account for curation, we collect the Instagram account ID, username, access token, token expiry, and imported media metadata such as media ID, media type, media URL or thumbnail URL, caption, timestamp, and permalink. We do not request Instagram messaging, comments management, advertising, or publishing permissions unless we add those features and update this policy.

YouTube data: if a creator connects a YouTube account for curation, we collect the channel identifier, access token, token expiry, and imported upload metadata such as video ID, title, description, thumbnail URL, published time, and video URL.

Technical data: device/browser type, approximate location from IP (if processed), log data, and cookies or similar technologies needed to operate and secure the Service.

If we add optional analytics or marketing tools, we will update this policy and, where required, obtain consent before use.

To provide, maintain, and improve the Service; authenticate users; moderate and secure the platform; communicate service-related notices; and comply with law.

We use Instagram and YouTube data only to let the creator connect their own social account, import authorized posts or videos into the connected clan curation area, keep that curation feed updated, display imported metadata to clan members where the creator enables it, and maintain the security and integrity of the connection.

We do not use Meta, Instagram, or YouTube data for unrelated advertising targeting, resale, or profiling outside the Service.

We do not sell your personal information as that term is commonly defined in U.S. state privacy laws.

You can disconnect Instagram from the curation settings in the Service where available. Disconnecting stops future imports for that clan and removes or invalidates the stored connection token according to our retention practices.

You can also request deletion of Meta/Instagram data, imported curation metadata, your account, or associated personal data by emailing support@youclan.io or by using our Data Deletion page at /data-deletion.

If you revoke YouClan access from Meta or Instagram account settings, we will no longer be able to refresh or use that connection. Previously imported curation items may remain visible only where needed to operate the clan feed until deleted, hidden, or removed under our retention and deletion process.

Depending on your region, we may rely on contract performance, legitimate interests (e.g., security and service improvement), consent where required, or legal obligation.

We use infrastructure and service providers to host and operate the Service. The current technical stack includes Vercel for application hosting and delivery, and Supabase for authentication, Postgres database, Realtime features, and file storage.

If you sign in with Google, Google OAuth information is processed through Supabase Auth. If you use meet-up location features, Google Maps JavaScript API and Places API may process place search and location-related information.

If a creator connects social accounts for curation, we may process access tokens and imported content metadata through Instagram Graph API and YouTube Data API, only for the connected clan and authorized account.

If AI image generation is used for clan logos or covers, prompt text and community metadata needed for generation may be sent to Google Gemini API. Generated assets may be stored in Supabase Storage.

Uploaded avatars, clan images, post media, comment images, and generated assets may be stored in Supabase Storage buckets. Providers process data only on our instructions and under appropriate agreements.

PostHog analytics and Stripe payments are not currently described as active production processors in the Service. If we add analytics, payments, or other processors, we will update this policy before or when required by law.

We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer subject to safeguards.

Your data may be processed in countries where our providers operate, including outside your country of residence. We implement appropriate safeguards where required (such as standard contractual clauses) and describe further details on request.

We retain information as long as your account is active or as needed to provide the Service, then delete or anonymize it subject to legal, security, and dispute-resolution needs.

Social account access tokens are retained only while the creator keeps the connection enabled or as otherwise needed for security, troubleshooting, legal compliance, or deletion processing.

Depending on applicable law (including in the United States, the Republic of Korea, and Japan), you may have rights to access, correct, delete, restrict or object to processing, port data, or withdraw consent.

California residents may have additional rights under the CCPA/CPRA. We will not discriminate for exercising rights.

Korea: you may request access or correction of personal data under the Personal Information Protection Act (PIPA), subject to exceptions.

Japan: you may request disclosure, correction, or suspension of use under the Act on the Protection of Personal Information (APPI), subject to exceptions.

To exercise rights, contact support@youclan.io. We may verify your request as permitted by law.

The Service is not directed to children under the age where parental consent is required in your jurisdiction. If you believe we received a child’s data, contact us and we will take appropriate steps.

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure.

We may update this policy from time to time. We will post the revised version with an updated date and, where required, provide additional notice.