Footage ManagerFootage Manager
Aktuelle VersionVersion 2026-08-11

Privacy Policy

How personal data is handled across the Footage Manager website, account, licensing backend, payment integration, and macOS app.

Gültig ab
11. August 2026
Zuletzt aktualisiert
11. August 2026
Veröffentlicht
11. August 2026
Änderungsübersicht
Added disclosures for optional in-app analytics and crash diagnostics, including processing, international transfers, and withdrawal

Diese Richtlinie wird derzeit auf Englisch angezeigt, da noch keine deutsche Übersetzung verfügbar ist. Für Nutzer in Korea gilt die koreanische Fassung; zwingende Rechte an Ihrem Wohnort bleiben unberührt.

1. Controller and Contact Details

Science Fiction Inc. (주식회사 싸이언스픽션) operates the Footage Manager website, account, licensing backend, and macOS app and processes personal data as needed to provide the service.

ItemDetails
Legal nameScience Fiction Inc. (주식회사 싸이언스픽션)
RepresentativeMun Juseong
Business registration number839-86-03068
Mail-order sales registration2026-인천서구-2619 / Incheon Seo-gu Office
AddressCheongna Lake Park Plaza 708-A65, 100 Crystal-ro, Seo-gu, Incheon, 22760, Republic of Korea
Phone+82-10-4269-7274
Privacy contactsupport@sciencefiction.co.kr
Customer supportsupport@footagemanager.com
Privacy officerMun Juseong, Representative / support@sciencefiction.co.kr
Website hosting providerAmazon Web Services Korea LLC (AWS)

2. Scope and Provider Roles

We are the controller for account, app entitlement, device activation, support, and service-operation data. At checkout, Lemon Squeezy separately processes buyer billing, tax, receipt, refund, and chargeback data as merchant of record (MoR) and reseller.

As of this version, Lemon Squeezy's published entity is Sold through Link, LLC f/k/a Lemon Squeezy LLC, 222 S Main St Ste 500, Salt Lake City, Utah 84101, United States. We retain the entity shown at checkout or on the receipt for the transaction if a successor or different payment entity is identified there.

The app does not upload source video, audio, image files, Final Cut Pro libraries, or generated project media to our servers by default. Analysis and working data normally remain on your Mac. We process such material only if you choose to send it for support.

3. Personal Data We Process

CategoryData
AccountEmail address, display name, Firebase UID, verification status, and account creation or update timestamps
License and subscriptionFree or Pro status, plan, order, subscription and payment-customer identifiers, entitlement, trial, renewal, and expiry timestamps
Device activationDevice identifier, activation, reassignment and last-check timestamps, app version, and operating-system information
Billing integrationPayment, failure, refund, tax, currency, and subscription-status metadata received from Lemon Squeezy. We do not store full card or raw payment-method details.
Website usageAccess time, IP address, browser and device information, page views, download requests, cookie-consent state, consented GA client/session identifiers, and page, checkout, purchase, renewal, and refund analytics events including transaction ID, currency, value, and item
App usage (with consent)Feature usage, start, success, failure, and cancellation outcomes of file operations, bucketed counts, sizes, and durations, app version and build, operating-system version, device architecture, a per-installation analytics identifier, and crash and error diagnostics. The per-installation analytics identifier is not linked to Firebase UID or another account identifier. File names, file paths, library and project names, volume and device names, email addresses, and account identifiers are not transmitted.
Security and operationsAuthentication results, rate-limit records, error, webhook, and operational logs
Email and supportAutomated email delivery status, support address, messages, and logs, screenshots, or attachments you choose to provide

4. Purposes

  • Account registration, sign-in, email verification, and identity management
  • Free and Pro entitlement, subscription synchronization, device activation, and reassignment
  • Billing, tax, receipts, cancellation, refunds, chargebacks, and customer-portal access
  • Website, installer, updates, verification, and password-recovery email delivery
  • Customer support, legal requests, disputes, and security incidents
  • Consent-based analytics and service improvement
  • Legal compliance and prevention of fraud, abuse, and license misuse

5. Retention

We delete or anonymize personal data when its purpose is complete, unless a limited record is needed for contract performance, billing and tax, consumer complaints, disputes, security, fraud prevention, or another legal obligation.

Deleting a Footage Manager account does not automatically delete Lemon Squeezy transaction or tax records or cancel an active subscription. Check and cancel any active subscription separately before deleting your account.

After consent withdrawal or account deletion, transaction records and the minimum identifiers that law requires us to retain are kept separately and used only for the statutory purpose. Electronic records are securely deleted so they cannot ordinarily be restored; any paper record is shredded or otherwise securely destroyed.

DataRetention standard
Account and profileDeleted after the account or deletion request is processed, except where legal or security retention is necessary
Display and advertising records6 months under the Korean E-Commerce Act Enforcement Decree
Contract and withdrawal records, including subscription consent, cancellation, and refund5 years under the Korean E-Commerce Act Enforcement Decree
Payment and service-supply records5 years under the Korean E-Commerce Act Enforcement Decree
Consumer complaint and dispute records3 years under the Korean E-Commerce Act Enforcement Decree
Other subscription, license, and consent recordsFor a reasonable period needed for contract, security, disputes, and abuse prevention
Consent-based checkout attributionUp to 400 days after the latest successfully measured purchase. GA client/session identifiers are deleted or disabled when a revocation token is processed or the account is deleted
Consent-based app analyticsGA4 user-level and event-level data for 14 months. Standard aggregated reports may be retained separately under Google policy.
App crash and error diagnosticsFirebase Crashlytics retains crash stack traces and associated installation identifiers for 90 days before starting removal from live and backup systems.
Operational and security logsFor a reasonable period needed for security, reliability, and abuse response

6. External Services and Processing Flows

We use the services below and limit transfers to what is needed. Each provider may process data under its contractual role and privacy terms.

The current contracting entity for paid Firebase and Google Cloud services for a South Korean customer is Google Cloud Korea LLC, and the Google Workspace contracting entity is Google Asia Pacific Pte. Ltd. Processing may also involve their affiliates and disclosed subprocessors globally.

ServiceVerified useData that may be processed
Google Cloud Korea LLC and Google-affiliated processors — Firebase AuthenticationRegistration, sign-in, email verification, and token validationEmail, display name, Firebase UID, verification state, and security logs
Google Cloud Korea LLC and Google-affiliated processors — Cloud FirestoreStorage of account, subscription, license, device, and operational dataAccount identifiers and subscription, license, device, consent, and operational data
Google Cloud Korea LLC and Google-affiliated processors — Cloud Functions for FirebaseAuthenticated backend APIs and license or subscription synchronization. The current function region is us-central1.Account identifiers, authentication results, entitlement data, request and error logs
Google LLC and Google-affiliated processors — Google AnalyticsWebsite, download, checkout, purchase, renewal, and refund analytics after analytics-cookie consent on the websiteGA client/session identifiers, page, transaction ID, currency, value, item and refund events, and IP, browser, and device-related information
Google LLC and Google-affiliated processors — Firebase AnalyticsFeature-usage and operation-outcome statistics after you consent to analytics collection in the appPer-installation analytics identifier, app version and build, operating-system and device information, and bucketed feature-usage and operation-outcome events
Google LLC and Google-affiliated processors — Firebase CrashlyticsCrash and error diagnostics and stability improvement after you consent to analytics collection in the appCrash stack traces, app version and build, operating-system and device information, and runtime state at the time of the crash
Amazon S3 and Amazon CloudFrontWebsite, installer, and update files stored in a Seoul (ap-northeast-2) S3 origin and delivered through global CloudFront edge locationsIP address, request time and URL, browser and device information, and delivery logs
Amazon Simple Email Service (SES)System emails such as registration, verification, and password recovery from the Seoul (ap-northeast-2) regionRecipient address, message content, delivery state, and related metadata
Google Asia Pacific Pte. Ltd. and Google-affiliated processors — Google Workspace / GmailManual support communication through support@footagemanager.comEmail address, message, attachments, and response history
Sold through Link, LLC f/k/a Lemon Squeezy LLC (Lemon Squeezy), or the successor payment entity shown for the transactionMoR and reseller services for billing, tax, receipts, subscriptions, portal, refunds, and chargebacksBuyer and billing details and order, subscription, payment, tax, currency, and refund status

7. Processing Locations and International Transfers

Personal data may be transferred to and processed outside Korea as these services operate. Cloud Functions currently runs in the U.S. region us-central1, and the default Cloud Firestore database is stored in the U.S. multi-region nam5. Google's published nam5 topology uses read-write regions in Iowa (us-central1) and Oklahoma (us-central2) and a witness region in South Carolina (us-east1).

International transfers are limited to what is needed for outsourced processing or storage necessary to perform the service contract, performance of the payment contract, support you request, or analytics consent you choose to give.

You may object to an international transfer, but account, authentication, billing, licensing, email, download, or update features that depend on the relevant provider may then be unavailable.

Recipient serviceVerified location or scopeTiming and methodPurpose and retention basis
Google Cloud Korea LLC and Google-affiliated processors — Firebase / Google CloudCloud Functions: U.S. us-central1; Firestore: U.S. multi-region nam5; otherwise countries where Google operates infrastructureEncrypted network transfer during registration, sign-in, account or app use, and backend requestsAuthentication, storage, backend execution, security, and reliability / service, contract, and security needs
Google LLC and Google-affiliated processors — Google AnalyticsUnited States and other analytics-infrastructure locationsNetwork transfer after website analytics consent when page, checkout, renewal, or refund events occurAnalytics and improvement / checkout attribution up to 400 days after the latest measured purchase; received data under our configuration and Google policy
Google LLC and Google-affiliated processors — Firebase AnalyticsUnited States and other Firebase analytics-infrastructure locationsNetwork transfer after you consent in the app when app-usage events occurApp-usage statistics and improvement / GA4 user-level and event-level data for 14 months; standard aggregated reports under Google policy
Google LLC and Google-affiliated processors — Firebase CrashlyticsUnited States and other Firebase diagnostics-infrastructure locationsNetwork transfer after you consent in the app when a crash or diagnostic event occursCrash and error diagnostics and stability improvement / crash stack traces and associated installation identifiers retained for 90 days before removal begins from live and backup systems
AWS S3 / CloudFront / SESS3 and SES origin: Seoul, Korea (ap-northeast-2); CloudFront: global edge locationsNetwork transfer during site or file requests and automated email deliveryContent delivery, downloads, updates, automated email, and security / operational needs
Google Asia Pacific Pte. Ltd. and Google-affiliated processors — Google Workspace / GmailCountries used under the applicable Google Workspace service and contractNetwork transfer when support email is sent or receivedSupport and dispute handling / request resolution and legal needs
Sold through Link, LLC f/k/a Lemon Squeezy LLC (Lemon Squeezy), 222 S Main St Ste 500, Salt Lake City, UT 84101, USA, and payment processorsUnited States and countries used by the successor entity shown at checkout or on the receipt and by payment infrastructureNetwork or webhook transfer during checkout, subscription changes, portal use, refund, or chargebackBilling, tax, receipts, refunds, and disputes / law and MoR retention rules

8. Your Rights

Signed-in users can download currently available account, license, and activation data and request account deletion from My Account.

Contact support@sciencefiction.co.kr to request access, correction, deletion, restriction, withdrawal of consent, account deletion, information about international transfers, or an additional copy of your data. We may verify your identity and will respond under applicable law.

  • You may refuse or withdraw optional analytics-cookie consent.
  • Refusing data or transfers required for an account, payment, or license feature may make that feature unavailable.
  • Data subject to a legal retention obligation, another person's rights, or a valid security need may not be deleted immediately.
  • You can choose whether the app collects analytics when you first launch it, and you can change or withdraw that choice at any time under Settings > General > App Behavior > ‘Share Analytics’. Withdrawing stops further collection and resets the app's analytics identifier.
  • Withdrawal stops future collection. Data already received by Google/Firebase before withdrawal remains subject to this Policy's retention standards. You may request deletion of previously collected data at support@sciencefiction.co.kr; however, because app analytics is not linked to an account identifier, we may be unable to associate and delete data for a particular installation, and aggregated or de-identified data may not be individually deletable.

9. Cookies, Analytics, and Safeguards

Google Analytics is enabled only after you accept analytics cookies. Consented checkout may be linked to later Lemon Squeezy purchase, renewal, and refund webhooks; withdrawal uses an opaque browser token to disable that server attribution. Essential browser storage may still be used for sign-in, security, and remembering consent and revocation requests.

Website analytics-cookie consent and in-app analytics consent are independent; consenting to one does not apply to the other. Before you consent, the app transmits no analytics or diagnostics data, including automatic collection.

  • Firebase tokens and server-side authorization checks
  • Server-side storage of billing and licensing secrets with least-privilege access
  • Encryption in transit, rate limits, webhook verification, and error logging
  • Data minimization and restricted access to account and operational data
  • Purpose limitation for support material you provide

10. Changes, Languages, and Previous Versions

We provide reasonable advance notice of material changes through the website, email, in-app notice, or another appropriate method. Previous versions remain available in this page's document history.

The Korean version applies to users in Korea, and the English version is the reference version for other users. Other translations are provided for understanding. Translation errors will not be interpreted to reduce a data subject's or consumer's non-waivable rights.

11. Provider Contacts and Published Subprocessor Lists

Providers may operationally change their affiliates, subprocessors, and processing countries. The official lists below contain current information. We update this Policy and the international-transfer notice when we identify a material change affecting the service.

  • Google/Firebase/Google Workspace: the Korean privacy contact is Google Korea LLC, +82-2-531-9000, data-access-requests@google.com.
  • AWS: the Korean privacy contact is AWS Korea Privacy, aws-korea-privacy@amazon.com.
  • Lemon Squeezy: check the checkout, receipt, customer portal, or then-current Buyer Terms for the transaction's payment entity and contact route.

Dokumentverlauf

Zugehörige Dokumente