Privacy Policy

Last updated: October 14, 2026

Before you begin

If you're wondering what happens to the files you upload, the answer is simple. Your files are uploaded securely, generated just as you'd expect, made available for you to download the results, and the original images are automatically deleted 30 days after generation is complete. That's all.

We do not make your files public, and we do not share them with anyone you wouldn't expect. Others can see your results only if you create a share link yourself or consent to publishing them in the gallery.

For more details, please see the Privacy Policy below.

This Privacy Policy explains who we are, how we collect, use and disclose personal information, and what rights you have and how you can exercise them. If you have any questions, suggestions or complaints about privacy, please contact us at any time using the contact details at the bottom of this page.

We are WebGift (웹기프트) (the “Operator,” “we” or “us”). This Policy applies to visitors and users of Somssii (www.somssii.com and its subdomains and API) (the “Service”), the image variation (set generation) service we operate.

Children: In this Policy, a child means a person under the age of 14 (or under the minimum age at which a person can give valid consent to the processing of personal information on their own under applicable law). The Service and our content are not directed at children. Children may not sign up for the Service and, under the Terms of Service, may not access or use the Service. We do not knowingly collect personal information from children. If we become aware that a child's personal information has been collected without the valid consent of a legal guardian, we will delete that information as soon as possible.

1. Personal information we process

1.1 Information you provide directly

We collect personal information when you use the Service. For example, to register an account, sign up to receive marketing information, submit an inquiry or respond to a survey, we may ask for your name, email address, company name (optional), marketing consent status, subscription type, purpose of use and similar information. We clearly tell you what information we collect and why.

We also collect messages you send us (inquiries, appeals, refund requests, etc.). We use this information to operate, maintain and provide the features of the Service, to communicate with you, and to resolve issues you raise.

If you do not provide personal information, you may be unable to use certain features of the Service (such as submitting generation jobs, making payments and receiving result notifications by email).

If files or content you upload or generate (photos, images, identifiable information, etc.) include another person's personal information, you are responsible for informing that person of this Policy and our processing and, where required, obtaining their clear consent.

1.2 Information we receive from third parties

We may receive information about you from third parties. For example, if you access the Service through a social login (such as Google), that third party may pass to us information you have allowed it to share, such as your name and email address. Before connecting a third-party service, please check that service's privacy settings and adjust them if necessary. If you disconnect it, we will no longer receive information from that service.

1.3 Information we collect as you use the Service

Our web servers collect data transmitted by your browser. This includes the IP address of the requesting computer, device and app information, date and time of access, the content of the request and the requested file (name and URL), the amount of data transferred, whether the request was successful, browser and operating system identification information, and, if you arrived via a link, the previous website. Server logs are kept for up to 3 months.

We also collect information about how you use the Service, such as pages viewed, links clicked, features used, session duration, login status and payment behavior, and we may infer your industry from the types of images you generate. We use this information for internal analysis to understand how people use the Service and to improve its quality and relevance. We may use this information to create aggregated, anonymized statistics and use them to provide certain features within the Service and to promote and improve the Service.

We may analyze your activity, uploaded images, generated results and related data to provide and personalize the Service and to improve generation quality. If we use your images and results to train our own or third-party AI models, we will notify you separately and obtain your consent in advance.

1.4 Cookie information

When you use the Service, we send cookies (small text files containing a string of characters that uniquely identifies your browser) to your device. Cookies help you log in faster and navigate smoothly, and may send us information about how you use the Service (pages viewed, links clicked, etc.). You can control or reset cookies in your browser settings, and choose to refuse all cookies or be notified when a cookie is sent. However, if you refuse cookies, some features, such as staying logged in, may not work properly. For details, please see our Cookie Policy.

We may use cookies from web analytics tools (such as Google Analytics) to understand how the Service is used. You can learn how Google collects and uses data at www.google.com/policies/privacy/partners/, and opt out at https://tools.google.com/dlpage/gaoptout.

1.5 Behavioral information for personalized advertising

To measure the effectiveness of our ads and show you ads that match your interests, we allow the advertising companies below to collect and process behavioral information on the Service.

• Companies that collect it: Meta Platforms, Inc. (Meta Pixel — Facebook and Instagram ads), Google LLC (Google Ads tag) and NAVER Corp. (Naver Ads conversion tracking — Naver search and display ads)
• Information collected: addresses of pages you visit, time of access, ad click information, conversion information such as sign-ups, payments and form submissions (including payment amounts), browser identifiers such as cookies, IP address, and browser and device information
• How it is collected: each company's script collects it automatically when you open a page of the Service. When a sign-up or payment is completed, our server may also send the same information directly to Meta; in that case your email address, mobile phone number and member number are converted into a form from which the original values cannot be recovered (SHA-256 hash) before being sent.
• Purposes: measuring ad effectiveness (which ad led to a sign-up or payment), optimizing ad delivery, and showing ads that match your interests
• Transfer abroad: the information is sent over the internet, at the time you use the Service, to each company's servers (including in the United States) and processed there.
• Retention period: browser cookies are kept for up to two years depending on the company (Meta's cookie for 90 days). Information sent to each company is retained and deleted under that company's privacy policy.
• How to refuse: you can prevent collection by blocking or deleting cookies in your browser settings. You can turn off personalized ads in Facebook and Instagram ad preferences (https://www.facebook.com/adpreferences) and in Google My Ad Center (https://myadcenter.google.com), and on mobile devices you can reset your advertising ID or limit ad tracking. Refusing advertising cookies does not restrict your use of the Service (blocking all cookies may restrict features such as staying logged in, as described in 1.4).

We do not collect sensitive behavioral information such as health, ideology or beliefs, and we do not serve personalized ads to children under 14. Please send any questions or complaints about behavioral information to the contacts in section 8 below.

2. Legal bases and purposes of processing personal information

We need a legal basis to collect, use and disclose personal information. The basis depends on the type of information and the context of processing, but in general we process information (i) where necessary to perform our contract with you (providing the Service), (ii) for our legitimate interests, or (iii) with your consent, and in some cases to comply with legal obligations.

2.1 Processing in the course of inquiries and communication

When you contact us by email, phone or contact form, we process your information to take steps prior to entering into a contract, to perform a contract, or for our legitimate interests.

2.2 General processing in a business relationship

We process information to handle transactions such as submitting generation jobs, credit and subscription payments and result notifications, and to carry out sales of the Service. We do not store payment information (such as card numbers) ourselves; it is processed by the payment gateway (PG).

2.3 Processing for marketing purposes

When we contact you to share our news, offers and events or to promote the Service, we process information on the basis of your consent or our legitimate interests. We send advertising information such as newsletters only to users who have consented to receive it.

2.4 Processing for security management, analysis and service improvement

We process information on the basis of our legitimate interests to ensure system security, technically administer the website, optimize service quality, understand our users, and analyze and improve the use of the Service. We do not rely on this basis where your interest in protecting your information overrides our legitimate interests.

2.5 Processing to comply with legal obligations

We process information where necessary to fulfill obligations under tax, accounting, audit and e-commerce laws and regulations.

3. Disclosure and entrustment of personal information

We may disclose personal information to, or entrust its processing to, the following categories of recipients:

• Affiliates, service providers and partners that provide data processing services to us (e.g., supporting website delivery, functionality and security, and analytics services). Current entrustment of processing: server hosting (Cafe24), email delivery (Brevo), payment processing (payment gateway), and generation processing (our own generation farm and external AI model APIs — images are sent for generation purposes, and we contractually and technically ensure they are not used for training).
• Investigative agencies, regulatory and administrative authorities, courts and other third parties, where disclosure is required by applicable law, or where we deem it necessary to exercise, establish or defend our legal rights, or to protect the vital interests of you or another person.
• An actual or prospective buyer (and its agents and advisers) in connection with an actual or proposed purchase, merger or acquisition of all or part of our business. In this case, we will inform the buyer that it must use personal information only for the purposes stated in this Policy.
• Any other person to whom you have consented to disclosure.

If our processors change, we will notify you through this Policy.

4. Transfer, storage and protection of personal information

Your information is stored and processed on our servers located in the Republic of Korea. For generation processing or email delivery, information may be transferred to and processed in other countries where the facilities of external service providers are located (e.g., the United States and Europe). The data protection laws of such countries may differ from those of the Republic of Korea.

We take appropriate safeguards to ensure that your information remains protected in accordance with this Policy and applicable laws. These include encryption in transit (TLS), one-way encrypted storage of passwords, access control, retention of access logs, and imposing protection obligations through entrustment agreements.

5. Your rights regarding personal information

You have the right to access your information that we process, to have inaccurate information corrected, to request deletion, to demand that processing be suspended, to request transfer (portability) of your information, and to object to improper processing. Where processing is based on consent, you may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.

You can exercise these rights by sending a request to the contact details under “Contact” at the bottom of this page, or directly in your account settings. We will respond to every request we receive within the period prescribed by applicable law.

You may opt out of receiving marketing information from us at any time. Click the “Unsubscribe” link in a marketing email or contact us.

You have the right to file a complaint with a supervisory authority. You can contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118 without an area code), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Cyber Investigation Division of the Supreme Prosecutors' Office (www.spo.go.kr, 1301), or the Cyber Bureau of the Korean National Police Agency (ecrm.cyber.go.kr, 182).

We do not make decisions that have legal effects on you based solely on automated decision-making. If we come to process personal information for a purpose different from the purpose of collection, we will inform you of that fact and the purpose.

6. Retention period of personal information

We retain personal information for as long as we have an ongoing legitimate business need (e.g., providing a service you requested, or complying with legal, tax and accounting requirements). As a rule, information is destroyed immediately when you delete your account, with the following exceptions:

• Uploaded original images and generated results: kept until you delete the set or your account (deleting a set deletes its original and result files together).
• Server access logs (IP addresses, etc.): 3 months (Protection of Communications Secrets Act)
• Records of contracts, withdrawal of subscriptions, payments and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• Records of consumer complaints and dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• Transaction evidence under tax laws: 5 years (Framework Act on National Taxes)

When there is no longer a legitimate business need, we delete or anonymize personal information. If it is stored in backup archives and cannot be deleted immediately, we securely isolate and store it until deletion becomes possible. We may retain some account information to fulfill legal obligations such as accounting and auditing.

7. Changes to this Policy

We may update this Policy from time to time to reflect our current processing practices and to comply with applicable laws. When we do, we will update the “Last updated” date at the top of this page, and if there are material changes to how we collect, use, store or share information, we will notify you through a service notice or by email. We encourage you to check this page periodically to review any changes.

8. Contact

The controller responsible for the processing of personal information is WebGift (brand: Somssii).

Chief Privacy Officer: Seo Young-sil (서영실) (Representative) · Email seossine@gmail.com · Phone 010-3834-6214

Mail: WebGift (Somssii) · [06305] 123, 265 Gaepo-ro (Gaepo-dong), Gangnam-gu, Seoul, Republic of Korea (서울특별시 강남구 개포로 265(개포동) 123)

If you have any questions, suggestions or concerns about the use of personal information or this Policy, please let us know using the contact details above.