Privacy Policy

Effective: November 11, 2026

This Privacy Policy explains how Kwangwoo An ("we"), the operator of Liftio (the "Service"), handles personal information in accordance with the Personal Information Protection Act of Korea. The Service is currently in a test phase and this policy may be updated before general release.

1. Information we process and why

We do not receive personal information about individual people who see ads. We only use aggregated metrics provided by Meta.

Photos you upload are used by AI to suggest a product name and ad text, and to check whether a person's face is visible. If a face is visible we ask you to confirm you have the person's consent. We do not identify who the person is.

Category	Items	Purpose
Account	Email, name (optional), sign-in logs	Sign-in, alerts and reports, support
Meta connection	Access token received through Facebook Login for Business (stored encrypted), Meta user ID and name of the person who connected, granted permissions, chosen ad account and Page IDs and names	Reading performance and creating/editing ads in ad accounts you authorize
Ad data	Aggregated ad metrics (impressions, clicks, purchases, etc.), aggregated age/gender breakdowns, images and ad text you upload	Performance analysis, ad operation decisions, reports
Usage logs	IP address, device/browser info, action logs	Security, troubleshooting, abuse prevention

2. Retention

Account and Meta connection data: deleted without delay (within 30 days) after account deletion or disconnection
Ad data: kept while you use the Service, deleted within 30 days after account deletion
Access and action logs: kept for 1 year
Longer where required by law

3. Sharing

We do not sell or share your personal information. We send ad information to Meta only to carry out ad tasks you request.

4. Processors and international transfer

We use the following processors. Data is transferred over encrypted connections (TLS) as you use the Service.

Company	Service	Location	Data
Supabase Inc.	Database and file storage	Republic of Korea (Seoul region)	All items in section 1
Vercel Inc.	Web hosting and server execution	Republic of Korea (Seoul region); operational logs in the United States	Request data being processed, access logs
Anthropic PBC	AI analysis and copywriting	United States	Ad data, images and text (no emails or tokens)
Meta Platforms, Inc.	Ad reading and delivery	United States and others	Meta connection data, ad data

5. Deletion

Data is deleted irreversibly when its retention period ends. Meta access tokens are deleted immediately upon disconnection.

6. Your rights

You may request access, correction, deletion or suspension of processing at any time by emailing kwangwoo1207@gmail.com. We respond within 10 days. See the Data Deletion page for Meta data.

7. Security

Encryption in transit (TLS 1.2+) and at rest
Meta access tokens encrypted with AES-256-GCM on our server and never shown in screens, logs or responses
Two-factor authentication and least-privilege access for admin accounts
Access logging with regular review, automated dependency security checks

8. AI processing

Uploaded photos and ad performance figures are sent to AI (Anthropic Claude) to suggest ad copy and judge performance. Account emails and Meta access tokens are never sent to AI.
This data is not used to train AI models. Anthropic does not train on data received through its commercial API by default.
You review every AI suggestion before it runs. To report a wrong suggestion or judgment, contact us below. We reply within 10 days.

9. Cookies

We use one cookie to keep you signed in (up to 30 days) and one cookie to protect the Facebook login from forged requests (10 minutes).
We use no advertising or tracking cookies and no third-party analytics.

10. Children

The Service is a business tool and does not collect information from children under 14.

11. Contact

Privacy officer: Kwangwoo An
Email: kwangwoo1207@gmail.com

12. Changes

This policy is effective from November 11, 2026. We will notify you in the Service before changes take effect.