Privacy Policy
HiClone Co., Ltd. (the “Company”) complies with the Personal Information Protection Act of Korea and other applicable laws, and establishes and discloses this Privacy Policy for the personal information processed while you use the SpeechMirror subscription edition program and website (the “Service”).
1. Personal information we process and why
| Category | Items | Purpose |
|---|---|---|
| Account information | Email address, account identifier (Firebase UID), email verification status | Identifying members, sign-in, connecting free trials and subscriptions, answering inquiries |
| PC information | PC identifier (an irreversible SHA-256 hash of the PC's hardware identifier), PC name, connection and check times | Issuing licenses, enforcing one PC per subscription, preventing repeated free trials |
| Subscription and payment information | Paddle subscription and customer numbers, plan, currency, billing period and status, cancellation and refund status | Managing subscriptions, calculating periods of use, keeping legally required transaction records |
| Organization information (organization subscriptions only) | Organization name, organization administrator account | Managing organization subscriptions |
| Service usage records | Records of actions such as trial starts, license issue and release and subscription status changes; one-time codes that link the program with the browser | Preventing misuse, handling disputes |
| Access logs | IP address, access time, requested address, browser and program information | Security, incident response, preventing unauthorized access |
- Passwords are handled by Google (Firebase Authentication). The Company never receives them.
- Payment details such as card numbers are handled directly by Paddle. The Company neither receives nor stores them.
2. Information stored only on your PC
Recorded voices, information you enter in the program such as trainee names, and training, check and assignment records are stored only on your PC and are never sent to the Company's server. This information is managed by the user (teacher or organization) who entered it; the Company does not view or keep it. License files and program settings are also stored only on the PC.
3. Retention period
- Account, PC and subscription information and service usage records: until you ask us to delete your account. The legally required records below are kept for the periods stated.
- Access logs: up to 3 months
- Server backups: daily backups are kept for 7 days and then deleted.
| Record | Legal basis | Retention |
|---|---|---|
| Records of contracts or withdrawal of offers | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records of payment and supply of goods | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records of consumer complaints or dispute resolution | Act on Consumer Protection in Electronic Commerce | 3 years |
| Website visit records | Protection of Communications Secrets Act | 3 months |
4. Outsourcing of processing
| Processor | Task |
|---|---|
| Google LLC (Firebase Authentication) | Sign-up and sign-in, sending email verification and password reset emails |
| Google LLC (Google Cloud) | Running the Service's server (data stored in the Seoul region, Republic of Korea) |
| Paddle.com Market Ltd. and affiliates | Payment processing, recurring billing management, tax calculation and collection, receipt issuance |
| Cloudflare, Inc. | Distributing training content for installation |
5. International transfers
| Recipient | Country | Items transferred | When and how | Retention |
|---|---|---|---|---|
| Google LLC Privacy policy | United States | Email address, password, account identifier, sign-in records | When you create an account or sign in, sent over the network | Until the account is deleted |
| Paddle.com Market Ltd. and affiliates Privacy policy | United Kingdom, United States, etc. | Email address, name, payment and billing information (country, postal code, etc.), payment method information | When you pay for a subscription: you enter it in the Paddle checkout, and the Company passes on your email address and order number | According to Paddle's policy and legal retention periods |
| Cloudflare, Inc. Privacy policy | United States, etc. | Access information such as IP address | When training content is downloaded during installation, sent over the network | According to Cloudflare's policy |
You may refuse these international transfers. If you do, account sign-in, subscription payment and training content downloads will not be available.
6. Provision to third parties
The Company does not provide or sell your personal information to third parties, except where required by law.
7. Destruction procedure and method
Personal information whose retention period has expired or whose purpose has been fulfilled is destroyed without delay. Electronic files are deleted in a way that prevents recovery; paper documents are shredded or incinerated.
8. Your rights and how to exercise them
You can ask at any time to view, correct or delete your personal information or to stop its processing, and you can ask us to delete your account. Send requests to customer support (info@hiclone.net) and we will handle them without delay. When an account is deleted, its account and PC information is deleted; legally required records are destroyed after their retention periods end.
9. Children under 14
The Service is for adult users such as teachers and organizations, and children under 14 cannot create accounts. Information about trainees who are children is stored only on the user's PC and is not collected by the Company.
10. Cookies and similar technologies
The website does not use advertising or analytics cookies. To keep you signed in, sign-in information (Firebase) is stored in your browser's storage and is deleted when you sign out or clear your browser data.
11. Security measures
- Encryption of all data in transit (HTTPS)
- Minimized server access and restricted administrator access locations
- Passwords are not kept by the Company, and PC identifiers are stored only as irreversible hashes
- Separate storage of secret keys, regular backups and security updates
12. Privacy officer and contact
- Name: 박봉래
- Title: CEO
- Email: info@hiclone.net | Tel. +82-2-702-7567
For reports or consultation about privacy infringements, you may contact the Personal Information Dispute Mediation Committee of Korea (+82-1833-6972) or the KISA Privacy Infringement Report Center (privacy.kisa.or.kr, 118 within Korea).
13. Changes to this policy
If anything in this Policy is added, removed or changed, we will announce it on the Service introduction page from 7 days before it takes effect and update the effective date.
Addendum
This Policy takes effect on October 16, 2026.