Privacy Policy
Effective October 8, 2026
This policy explains what personal data LUDGI Inc. collects when you use www.ludgi.ai, why, who processes it for us, and the choices you have. We do not sell personal data.
1. Who we are
LUDGI Inc. (주식회사 럿지), 인천광역시 연수구 인천타워대로 323, 에이동 20층 2001~2006호 A-317호(송도동), Republic of Korea, is responsible for your personal data (the “controller”). Contact us at milli@ludgi.ai.
2. What we collect
- Account: email, name or display name, password (stored only in hashed form by our sign-in provider; we never see it), account ID; with Google sign-in, the email, name and photo of your Google account; optional profile photo, bio and language.
- Payments: order number, product, amount, time, and the payment details the payment company returns to us (such as card brand and a masked card number). We never receive full card numbers.
- What you make: your requests, the files and links you add, your results, and your credit history.
- Courses: enrolments, lesson playback (time and position) and the name on a certificate.
- Support: your name, email, optional phone number, messages and attachments.
- Technical: IP address, access logs, device and browser details, cookies and usage statistics.
3. How we use it
- To provide LUDGI: your account, generations and their delivery, courses and certificates, credits and refunds.
- To take payments and keep the records the law requires.
- To answer you and handle complaints.
- To keep LUDGI safe and working: preventing abuse, limiting request rates and fixing errors.
- To understand how LUDGI is used, from aggregated statistics.
We do not use your requests, files or results to train our own AI models.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you; our legitimate interests in keeping the service secure and improving it; legal obligations; and your consent where it is required, for example for analytics cookies.
4. Who processes it for us
Service providers process personal data on our instructions, only for these purposes:
| Provider | What for | Where |
|---|---|---|
| Google LLC | Sign-in and file storage (Firebase), usage statistics (Google Analytics), ads on the blog (AdSense), music generation (Lyria) | United States |
| Amazon Web Services, Inc. | File storage and delivery, email, job queue, video rendering | Republic of Korea, United States |
| Vercel Inc. | Hosting | United States |
| Neon, Inc. | Database | Singapore |
| Anthropic, PBC | Making motion graphics (the AI), summarising support messages | United States |
| ElevenLabs Inc. | Music generation | United States |
| Higgsfield AI | AI video and image generation | United States |
| Toss Payments Co., Ltd. | Payments in KRW | Republic of Korea |
| Armitage Labs OÜ (Creem) | Screening generation prompts for content safety | Estonia |
| Upstash, Inc. | Request rate limits | United States |
| Functional Software, Inc. (Sentry) | Error reports | United States |
| Cloudflare, Inc. | Bot protection (Turnstile) | United States |
If you buy credits in US dollars, Creem (Armitage Labs OÜ, Estonia, creem.io) sells them to you as merchant of record and processes the payment under its own privacy policy. We give Creem your account email, account ID and an order reference, and receive back the order's status and amounts, never your card details. We share personal data with others only with your consent or where the law requires it.
5. International transfers
We are based in Korea, and our providers process data in the countries listed above. Data travels encrypted (HTTPS). Our contracts with providers limit their use of your data to the services they perform for us. Where the law of your country requires specific safeguards for such transfers, we rely on the safeguards our providers offer, such as standard contractual clauses.
6. How long we keep it
- Your account: until you close it.
- Your files and results: until you delete them or close your account (results are kept for at least 7 days).
- Payment and contract records: 5 years, and records of complaints and disputes: 3 years, as Korean consumer law requires.
- Access logs: 3 months.
7. Your rights
You can ask to see, correct or delete your personal data, to restrict or object to its use, to receive a copy, and to withdraw a consent you gave. Email milli@ludgi.ai from the address on your account. We answer within 10 days, and tell you why if we cannot do something, for example because the law requires us to keep a record.
You can also complain to the data protection authority where you live, or to Korea's Personal Information Protection Commission.
9. Children
LUDGI is not for children under 14, and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.
10. Security
All traffic is encrypted. Access to personal data is limited to the people who need it, and administrative actions are logged. Paid course videos and other protected files are only served through links issued after an access check.
11. People in your files
If your request or files include another person's face, voice or personal details, you need that person's permission.
12. Changes
We announce changes to this policy on the site at least 7 days before they apply, and at least 30 days before for important changes.
13. Contact
Privacy officer: 노상우, CEO · milli@ludgi.ai
14. Effective date
This policy applies from October 8, 2026.