Version v1.2 · last updated 21 September 2026
This policy explains what we collect when you use HelperBee, why, and what you can do about it. The controller is LJAD Co., Ltd., business registration number 184-81-01913, 809, 233 Gasan Digital 1-ro, Geumcheon-gu, Seoul 08501, Republic of Korea. Chief executive: Lee Jaewoo. Telephone 1668-4640.
1. What we collect
- Account data — your email address and basic profile information from Google sign-in.
- Subscription data — which plans you hold and their status. Card details are handled by Paddle.com Market Ltd and never reach our servers.
- Usage data — technical logs such as timestamps, error records and feature usage needed to run and debug the service.
- Support data — what you write to us when you ask for help.
- Referral data — the campaign parameters in the link you arrived through, and a per-page record of the page path, the referring site and those parameters, so we can tell which channel brought you. No identifier is stored with it and no cookie is used.
- AI feature content — the material a feature has to send in order to work. Section 2 lists this feature by feature, because it is the part people most need to know.
2. What each AI feature sends, and what stays on your machine
Our products run partly on your computer and partly on our AI gateway in the Republic of Korea, which forwards requests to the AI provider serving them. This table is written per feature because a single sentence about “local processing” would be wrong for at least one of them.
| Feature | What leaves your machine | What does not |
|---|---|---|
| Editor — subtitles (speech to text) | Nothing. Transcription runs on your machine with a model bundled in the app. | The audio and video files. |
| Editor — scene analysis and cut suggestions | Still frames taken from your video (up to twelve per request, composed into a single analysis image that also shows the subtitle text and the audio waveform) and the transcribed dialogue as text. These can contain faces, places and other people, which is why we name them here. | The video file and the audio file themselves. |
| Editor — export and rendering | Nothing. | Everything; the render runs on your hardware. |
| Browser — CAPTCHA solving | The image of the challenge and its instruction text. | Your browsing history, your cookies and the rest of the page. |
| Browser — AI assistant | The instruction you type and the content of the tab you point it at, including a screenshot when the task needs one. | Tabs and profiles you did not point it at. |
| Social — AI drafting | The brief you write and any text you ask it to rework. | Your platform passwords; publishing uses each platform’s own authorisation. |
AI requests are retained by us only as long as needed to return the result and to investigate errors, and are covered by the log retention period in section 6.
3. Why we process it
- To provide the service you signed up for (performance of a contract). Account and subscription data are necessary for the contract: without them we cannot provide the service.
- To take payment and meet accounting obligations (legal obligation).
- To keep the service secure and to fix faults (legitimate interests).
- To understand which marketing channels work (legitimate interests, and where the law requires it, your consent to storing anything on your device).
We do not make decisions about you by automated means that produce legal or similarly significant effects.
4. Who we share it with
Processors acting on our instructions.
- Cloudflare, Inc. (United States) — content delivery, protection, and the page-view measurement described in section 8.
- AI providers. Anthropic PBC (United States); OpenAI, L.L.C. (United States); Google LLC (United States). They receive the material listed in section 2 for the purpose of returning that result.
Independent controllers. These decide their own purposes and are not our processors; their own policies apply to what they do with your data.
- Paddle.com Market Ltd — merchant of record and seller. It handles payment, invoicing and tax, and is the controller for that transaction. See its privacy policy and buyer terms.
- Google LLC — sign-in. Google is a controller for the authentication it performs. We receive your email address and basic profile from it.
We do not sell personal data.
5. International transfers
Our servers are in the Republic of Korea. If you are in the EEA, the European Commission has adopted an adequacy decision for the Republic of Korea, so transfers to us do not need additional safeguards. If you are in the UK, transfers rely on the UK adequacy regulations for the Republic of Korea. Transfers onward to the processors listed above, which are in the United States, rely on standard contractual clauses or another lawful transfer mechanism. You can obtain a copy of the safeguards that apply by writing to [email protected].
6. How long we keep it
- Account data — while your account exists, then deleted within 90 days of closure.
- Transaction records — as long as tax and accounting law requires.
- Technical logs, including AI request logs — normally 7 days.
- Referral and page-view records — 12 months.
- Support correspondence — up to 2 years.
- The record kept in your own browser (section 8) — 90 days, after which the site discards it.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on legitimate interests. You can also ask for your data in a portable format, and withdraw any consent you have given, at any time, without affecting what was done before you withdrew it. Write to [email protected] and we will respond within 30 days.
If you are in the EEA or the UK, you may also complain to your local data protection authority.
8. Cookies and storage on your device
We use no advertising cookies and no cross-site tracking. Two things may be stored in your browser by us: the campaign parameters of the link you arrived through, and the fact that you dismissed the Korean-language banner. Both are kept in local storage, expire after 90 days, and are removed if you clear your browser storage.
Our pages also load Cloudflare Web Analytics, a page-view measurement script served
by Cloudflare from static.cloudflareinsights.com. It sets no cookies, does not use local
storage, and does not follow you to other sites. We use it to count page views; we do not receive an
identifier for you from it.
If you appear to be in the EEA or the UK, nothing is written to your device until you agree on the banner, and the site works normally if you decline.
9. Data protection officer
Lee Jaewoo, CEO. Email [email protected]. Postal address as above.
Representatives in the EU and the UK
Not yet appointed. We are established in the Republic of Korea and have no establishment in the European Union or the United Kingdom. Article 27 of the GDPR and of the UK GDPR requires us to appoint representatives there before we offer these services to residents of those territories, and that appointment is in progress. This page is a pre-launch preview and the services are not on sale. Until the representatives are named here, write to our data protection officer at [email protected].
11. Children
The service is not directed at children and we do not knowingly collect their data.
12. Changes
If we change this policy materially, we will give notice before the change takes effect. Each version carries a version number and date at the top of this page.
13. Contact
LJAD Co., Ltd., 809, 233 Gasan Digital 1-ro, Geumcheon-gu, Seoul 08501, Republic of Korea. Telephone 1668-4640. Email [email protected]. Privacy matters: [email protected].