invi Privacy Policy

Effective Date: June 24, 2026
Last Revised: June 24, 2026

Motius Inc. (the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect users' personal information and to handle related grievances promptly and smoothly.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes and does not use it for purposes other than those stated below.

1. Membership Registration and Management

• User identification through social login (Google, Naver, Kakao)
• Creation and management of member accounts
• Processing of membership withdrawal
• Management of service usage records
• Responding to customer inquiries and delivering notices

2. Service Provision

• Provision of moving poster creation services
• Storage and management of generated content
• Provision of download services
• Confirmation of payment history
• Improvement of service quality

3. Payment and Settlement

• Processing of payments for paid services
• Management of payment records
• Processing of refunds
• Retention of records related to electronic financial transactions

4. Service Analysis and Improvement

• Analysis of usage statistics
• Enhancement of service quality
• Error analysis and improvement
• Improvement of user experience

5. Customer Inquiries and Complaint Handling

• Receipt and response to inquiries
• Handling of complaints
• Resolution of disputes

Article 2 (Personal Information Items Processed)

1. Information Collected During Social Login

Google Login

• Name
• Email address
• Profile image

Naver Login

• Name
• Email address

Kakao Login

• Nickname
• Email address

2. Information Collected During Service Use

Information Entered Directly by Users

• Text information required for moving poster creation
• Uploaded photos and images
• Event-related information

Information Generated During Payment

• Order number
• Payment approval number
• Payment amount
• Date and time of payment

※ Sensitive financial information such as credit card numbers and bank account numbers is processed by the payment gateway (PG) provider and is not stored by the Company.

3. Automatically Collected Information

• IP address
• Cookies
• Access logs
• Browser information
• Operating system information
• Device information
• Pages visited
• Service usage records

Article 3 (Processing and Retention Period of Personal Information)

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved.

1. Member Information

• Until membership withdrawal

2. Uploaded Original Files

• Retained for 30 days after moving poster creation is completed
• Automatically deleted after the retention period expires

3. Generated Video Files (MP4)

• Retained for 6 months from the date of creation
• Automatically deleted after the retention period expires

4. Thumbnail Images

• Retained for 6 months from the date of creation
• Automatically deleted after the retention period expires

5. Retention in Accordance with Applicable Laws

Records of Contracts or Withdrawal of Offers

• 5 years

Records of Payment and Supply of Goods

• 5 years

Records of Consumer Complaints or Dispute Resolution

• 3 years

Records of Electronic Financial Transactions

• 5 years

Access Logs

• 3 months

Article 4 (Rights of Data Subjects and How to Exercise Them)

Users may exercise the following rights at any time.

• Access to personal information
• Correction of personal information
• Deletion of personal information
• Request for suspension of processing of personal information
• Membership withdrawal

Rights may be exercised by submitting a request to the email address below.

official@invi.so

The Company will take action without delay in accordance with applicable laws and regulations.

Article 5 (Destruction of Personal Information)

The Company destroys personal information without delay when it is no longer necessary, such as upon expiration of the retention period or achievement of the processing purpose.

Electronic Files

Deleted using technical methods that make recovery impossible

Paper Documents

Shredded or incinerated

Article 6 (Measures to Ensure the Security of Personal Information)

The Company implements the following measures to protect personal information.

• HTTPS encrypted communication
• Minimization of access privileges
• Access control for personal information
• Server security management
• Regular security inspections
• Log monitoring
• Operation of backup and disaster recovery systems

Article 7 (Outsourcing of Personal Information Processing)

The Company may outsource certain tasks to external service providers to ensure smooth service operation.

When entering into outsourcing agreements, the Company manages and supervises service providers to ensure compliance with personal information protection laws and regulations.

Article 8 (Cross-Border Transfer of Personal Information)

In the course of service operation, some personal information may be processed through servers located outside Korea.

Recipients

• Google LLC

Destination Countries

• United States

Items Transferred

• Service usage records
• Cookies and device information

Purpose of Transfer

• Service analysis
• Service operation

Retention Period

• Until the purpose of processing is achieved

Article 9 (Use of Cookies)

The Company may use cookies to provide services and analyze usage.

Users may refuse or delete cookie storage through browser settings.

However, if cookie storage is refused, use of some services may be restricted.

Article 10 (Service Analytics Tools)

The Company may use the following analytics tools to improve service quality.

• Proprietary analytics system
• Google Analytics

The information collected includes the following.

• Page visit information
• Button click information
• Template selection information
• Payment conversion information
• Device and browser information

The Company does not use analytics information for the purpose of identifying individuals.

Article 11 (User-Generated Content)

Users retain the rights and responsibilities for photos, images, text, and other content they upload.

Users must ensure that uploaded content does not infringe upon the rights of third parties, and users bear legal responsibility for such matters.

The Company does not guarantee the legality, accuracy, or rights status of content uploaded by users.

Article 12 (AI and Automatically Generated Content)

The Company may provide content generation features using automated systems or AI technology.

The Company does not guarantee the accuracy, completeness, or fitness for a particular purpose of generated results, and users must review generated results before use.

Article 13 (Personal Information Protection Officer)

• Name: Halim Song
• Title: Manager
• Department: Motius Inc.
• Email: iamnothalim@invi.so

Article 14 (Remedies for Infringement of Rights)

Users who need to report or seek consultation regarding personal information infringement may contact the following institutions.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
• Cyber Investigation Division, Supreme Prosecutors' Office (www.spo.go.kr / 1301)
• Cyber Bureau, Korean National Police Agency (ecrm.police.go.kr / 182)

Article 15 (Changes to This Privacy Policy)

The Company may amend this Privacy Policy to reflect changes in applicable laws or services.

In the event of material changes, the Company will provide notice through in-service announcements at least 7 days before the effective date (at least 30 days in advance for changes unfavorable to users).

Date of Publication: June 12, 2026
Effective Date: June 12, 2026