Privacy Policy
Last Modified: March 19, 2026
1. Overview
GH International Group LLC ("Company") values the privacy of its users of the HeroMyStory (storybook) service and outlines its collection, use, storage, and sharing practices in this policy.
2. Personal Information Collected
2-1. Collected via Google Authentication
- Google User ID
- Name (Google Account Display Name)
- Email Address (Google Account Email)
- Profile Picture URL
2-2. Provided Directly by User
- Face Photo (for generating storybook protagonist, JPEG/PNG/WebP, up to 10MB)
- Protagonist Name
- Custom Story Content (Answers to 5W1H questions, free text)
- Chat Messages (Character AI Chat)
- Comments (Community Gallery)
2-3. Automatically Generated During Service Use
- AI Generated Content (storybook images, scenario text, TTS voice files)
- Pipeline Logs (Model used, token count, duration, cost)
- Image Safety Filter Logs
2-4. During Payment
- Stripe Customer ID (for payment processing)
- Subscription ID
Payment method information such as credit card number and CVV is not collected or stored directly by the Company. All payment information is processed directly by Stripe.
3. Purpose of Personal Information Use
- User authentication and account management
- AI storybook generation (face analysis, image generation, voice synthesis)
- Provision of character AI chat service
- Subscription payment processing and management
- Community features (gallery, likes, comments)
- Service quality improvement and error analysis
4. Third-Party Service Providers
Information is transferred to the following third parties for service operation:
| Service | Data Transferred | Purpose | Server Location |
|---|---|---|---|
| Google Gemini API | Face Photo, Text Prompt | AI Image/Text/Voice Generation | USA (Google Cloud) |
| Google Vertex AI | Face Photo, Text Prompt | AI Generation (Alternative Source) | us-central1 (Iowa, USA) |
| Stripe | Email, Name | Payment Processing | USA |
| OAuth Authentication Code | User Authentication | USA | |
| GCP PostgreSQL | All Structured Data | Database | asia-northeast3 (Seoul) |
| GCP VPS | Web Traffic | Frontend Hosting | Global CDN |
Important Notice Regarding Face Photos: Uploaded face photos will be sent to Google's AI services for storybook image generation. Google's Privacy Policy will apply separately.
In this process, personal information may be transferred to or processed outside your country, including in the United States, global CDN locations, and overseas cloud regions. The Company limits such transfers to what is reasonably necessary for service delivery, authentication, payments, AI generation, and storage.
5. Children's Personal Information
This service is not available for direct signup or use by children under 13 years of age (Google account age restrictions apply).
Parents or guardians may upload their child's photo to create a storybook, and in such cases, it is presumed that the parent or guardian has consented to the provision of the child's personal information (photo).
Children's photos are used solely for the purpose of storybook creation. When the parent or guardian deletes the storybook, the photos will also be permanently deleted.
A parent or legal guardian may request deletion of a child's photo or related data at any time by contacting [email protected]. The Company will process the request within a reasonable period after verification.
6. Cookies and Sessions
The service uses only a single session cookie for authentication:
- Cookie Name:
sb_session - Type: HttpOnly (inaccessible by JavaScript), Essential Cookie
- Expiration: 30 days
- Purpose: Maintain login status
Cookies for marketing, analytics, or tracking purposes are not used.
7. Data Retention and Deletion
| Data | Retention Period | Deletion Method |
|---|---|---|
| Account Information | Duration of account existence | Permanently deleted upon account deletion |
| Storybook + Photos | Until user deletion | Upon deletion from library or account deletion |
| Chat History | Until session deletion | Upon chat session deletion or account deletion |
| Session Token | 30 days | Deleted upon expiration or logout |
| Stripe Customer Information | Subject to Stripe's policy | Upon separate request to Stripe |
| Public community posts | Until the user makes them private or deletes them | Exposure stops and deletion is processed when the user changes settings or deletes the account |
8. User Rights
- Right of Access: Right to access one's own data (viewable within the service, such as library, chat history)
- Right of Deletion: Deletion of individual storybooks, chat sessions, or entire account
- Right to Data Portability: Generated storybooks can be downloaded as HTML files
- Right to Withdraw Consent: Ability to change community sharing settings from public to private
For exercising other rights or inquiries: [email protected]
9. Security
- Session tokens are generated using cryptographically secure random numbers.
- Cookies are set to HttpOnly to protect against XSS attacks.
- Payment information is processed directly by Stripe and not stored on company servers.
- Database connections are encrypted using SSL/TLS.
10. Policy Changes
This policy may be changed from time to time, and changes will be announced within the service. Please check the last modified date.