Privacy Policy

Effective October 8, 2026

This policy explains what personal data LUDGI Inc. collects when you use www.ludgi.ai, why, who processes it for us, and the choices you have. We do not sell personal data.

1. Who we are

LUDGI Inc. (주식회사 럿지), 인천광역시 연수구 인천타워대로 323, 에이동 20층 2001~2006호 A-317호(송도동), Republic of Korea, is responsible for your personal data (the “controller”). Contact us at milli@ludgi.ai.

2. What we collect

  • Account: email, name or display name, password (stored only in hashed form by our sign-in provider; we never see it), account ID; with Google sign-in, the email, name and photo of your Google account; optional profile photo, bio and language.
  • Payments: order number, product, amount, time, and the payment details the payment company returns to us (such as card brand and a masked card number). We never receive full card numbers.
  • What you make: your requests, the files and links you add, your results, and your credit history.
  • Courses: enrolments, lesson playback (time and position) and the name on a certificate.
  • Support: your name, email, optional phone number, messages and attachments.
  • Technical: IP address, access logs, device and browser details, cookies and usage statistics.

3. How we use it

  • To provide LUDGI: your account, generations and their delivery, courses and certificates, credits and refunds.
  • To take payments and keep the records the law requires.
  • To answer you and handle complaints.
  • To keep LUDGI safe and working: preventing abuse, limiting request rates and fixing errors.
  • To understand how LUDGI is used, from aggregated statistics.

We do not use your requests, files or results to train our own AI models.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you; our legitimate interests in keeping the service secure and improving it; legal obligations; and your consent where it is required, for example for analytics cookies.

4. Who processes it for us

Service providers process personal data on our instructions, only for these purposes:

ProviderWhat forWhere
Google LLCSign-in and file storage (Firebase), usage statistics (Google Analytics), ads on the blog (AdSense), music generation (Lyria)United States
Amazon Web Services, Inc.File storage and delivery, email, job queue, video renderingRepublic of Korea, United States
Vercel Inc.HostingUnited States
Neon, Inc.DatabaseSingapore
Anthropic, PBCMaking motion graphics (the AI), summarising support messagesUnited States
ElevenLabs Inc.Music generationUnited States
Higgsfield AIAI video and image generationUnited States
Toss Payments Co., Ltd.Payments in KRWRepublic of Korea
Armitage Labs OÜ (Creem)Screening generation prompts for content safetyEstonia
Upstash, Inc.Request rate limitsUnited States
Functional Software, Inc. (Sentry)Error reportsUnited States
Cloudflare, Inc.Bot protection (Turnstile)United States

If you buy credits in US dollars, Creem (Armitage Labs OÜ, Estonia, creem.io) sells them to you as merchant of record and processes the payment under its own privacy policy. We give Creem your account email, account ID and an order reference, and receive back the order's status and amounts, never your card details. We share personal data with others only with your consent or where the law requires it.

5. International transfers

We are based in Korea, and our providers process data in the countries listed above. Data travels encrypted (HTTPS). Our contracts with providers limit their use of your data to the services they perform for us. Where the law of your country requires specific safeguards for such transfers, we rely on the safeguards our providers offer, such as standard contractual clauses.

6. How long we keep it

  • Your account: until you close it.
  • Your files and results: until you delete them or close your account (results are kept for at least 7 days).
  • Payment and contract records: 5 years, and records of complaints and disputes: 3 years, as Korean consumer law requires.
  • Access logs: 3 months.

7. Your rights

You can ask to see, correct or delete your personal data, to restrict or object to its use, to receive a copy, and to withdraw a consent you gave. Email milli@ludgi.ai from the address on your account. We answer within 10 days, and tell you why if we cannot do something, for example because the law requires us to keep a record.

You can also complain to the data protection authority where you live, or to Korea's Personal Information Protection Commission.

8. Cookies

  • A sign-in cookie keeps you logged in (up to 5 days). Your browser also stores small conveniences, such as a dismissed language tip or an unsent draft.
  • Google Analytics uses cookies for usage statistics, and AdSense uses cookies for ads on our blog.
  • You can block cookies in your browser; you then cannot log in. You can also use Google's Analytics opt-out and turn off personalised ads in Google's ad settings.

9. Children

LUDGI is not for children under 14, and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.

10. Security

All traffic is encrypted. Access to personal data is limited to the people who need it, and administrative actions are logged. Paid course videos and other protected files are only served through links issued after an access check.

11. People in your files

If your request or files include another person's face, voice or personal details, you need that person's permission.

12. Changes

We announce changes to this policy on the site at least 7 days before they apply, and at least 30 days before for important changes.

13. Contact

Privacy officer: 노상우, CEO · milli@ludgi.ai

14. Effective date

This policy applies from October 8, 2026.