1. Controller and Contact Details
Science Fiction Inc. (주식회사 싸이언스픽션) operates the Footage Manager website, account, licensing backend, and macOS app and processes personal data as needed to provide the service.
| Item | Details |
|---|---|
| Legal name | Science Fiction Inc. (주식회사 싸이언스픽션) |
| Representative | Mun Juseong |
| Business registration number | 839-86-03068 |
| Mail-order sales registration | 2026-인천서구-2619 / Incheon Seo-gu Office |
| Address | Cheongna Lake Park Plaza 708-A65, 100 Crystal-ro, Seo-gu, Incheon, 22760, Republic of Korea |
| Phone | +82-10-4269-7274 |
| Privacy and customer support | support@footagemanager.com |
| Privacy officer | Mun Juseong, Representative / support@footagemanager.com |
| Website hosting provider | Amazon Web Services Korea LLC (AWS) |
2. Scope and Provider Roles
We are the controller for account, app entitlement, device activation, support, and service-operation data. At checkout, Lemon Squeezy separately processes buyer billing, tax, receipt, refund, and chargeback data as merchant of record (MoR) and reseller.
As of this version, Lemon Squeezy's published entity is Sold through Link, LLC f/k/a Lemon Squeezy LLC, 222 S Main St Ste 500, Salt Lake City, Utah 84101, United States. We retain the entity shown at checkout or on the receipt for the transaction if a successor or different payment entity is identified there.
The app does not upload source video, audio, image files, Final Cut Pro libraries, or generated project media to our servers by default. Analysis and working data normally remain on your Mac. We process such material only if you choose to send it for support.
3. Personal Data We Process
| Category | Data |
|---|---|
| Account | Email address, display name, Firebase UID, verification status, and account creation or update timestamps |
| License and subscription | Free or Pro status, plan, order, subscription and payment-customer identifiers, entitlement, trial, renewal, and expiry timestamps |
| Device activation | Device identifier, activation, reassignment and last-check timestamps, app version, and operating-system information |
| Billing integration | Payment, failure, refund, tax, currency, and subscription-status metadata received from Lemon Squeezy. We do not store full card or raw payment-method details. |
| Website and app | Access time, IP address, browser and device information, page views, download requests, consent state, consented GA client/session identifiers, and page, checkout, purchase, renewal, and refund analytics events including transaction ID, currency, value, and item |
| Security and operations | Authentication results, rate-limit records, error, webhook, and operational logs |
| Email and support | Automated email delivery status, support address, messages, and logs, screenshots, or attachments you choose to provide |
4. Purposes
- Account registration, sign-in, email verification, and identity management
- Free and Pro entitlement, subscription synchronization, device activation, and reassignment
- Billing, tax, receipts, cancellation, refunds, chargebacks, and customer-portal access
- Website, installer, updates, verification, and password-recovery email delivery
- Customer support, legal requests, disputes, and security incidents
- Consent-based analytics and service improvement
- Legal compliance and prevention of fraud, abuse, and license misuse
5. Retention
We delete or anonymize personal data when its purpose is complete, unless a limited record is needed for contract performance, billing and tax, consumer complaints, disputes, security, fraud prevention, or another legal obligation.
Deleting a Footage Manager account does not automatically delete Lemon Squeezy transaction or tax records or cancel an active subscription. Check and cancel any active subscription separately before deleting your account.
After consent withdrawal or account deletion, transaction records and the minimum identifiers that law requires us to retain are kept separately and used only for the statutory purpose. Electronic records are securely deleted so they cannot ordinarily be restored; any paper record is shredded or otherwise securely destroyed.
| Data | Retention standard |
|---|---|
| Account and profile | Deleted after the account or deletion request is processed, except where legal or security retention is necessary |
| Display and advertising records | 6 months under the Korean E-Commerce Act Enforcement Decree |
| Contract and withdrawal records, including subscription consent, cancellation, and refund | 5 years under the Korean E-Commerce Act Enforcement Decree |
| Payment and service-supply records | 5 years under the Korean E-Commerce Act Enforcement Decree |
| Consumer complaint and dispute records | 3 years under the Korean E-Commerce Act Enforcement Decree |
| Other subscription, license, and consent records | For a reasonable period needed for contract, security, disputes, and abuse prevention |
| Consent-based checkout attribution | Up to 400 days after the latest successfully measured purchase. GA client/session identifiers are deleted or disabled when a revocation token is processed or the account is deleted |
| Operational and security logs | For a reasonable period needed for security, reliability, and abuse response |
6. External Services and Processing Flows
We use the services below and limit transfers to what is needed. Each provider may process data under its contractual role and privacy terms.
The current contracting entity for paid Firebase and Google Cloud services for a South Korean customer is Google Cloud Korea LLC, and the Google Workspace contracting entity is Google Asia Pacific Pte. Ltd. Processing may also involve their affiliates and disclosed subprocessors globally.
| Service | Verified use | Data that may be processed |
|---|---|---|
| Google Cloud Korea LLC and Google-affiliated processors — Firebase Authentication | Registration, sign-in, email verification, and token validation | Email, display name, Firebase UID, verification state, and security logs |
| Google Cloud Korea LLC and Google-affiliated processors — Cloud Firestore | Storage of account, subscription, license, device, and operational data | Account identifiers and subscription, license, device, consent, and operational data |
| Google Cloud Korea LLC and Google-affiliated processors — Cloud Functions for Firebase | Authenticated backend APIs and license or subscription synchronization. The current function region is us-central1. | Account identifiers, authentication results, entitlement data, request and error logs |
| Google LLC and Google-affiliated processors — Google Analytics | Website, download, checkout, purchase, renewal, and refund analytics after analytics-cookie consent | GA client/session identifiers, page, transaction ID, currency, value, item and refund events, and IP, browser, and device-related information |
| Amazon S3 and Amazon CloudFront | Website, installer, and update files stored in a Seoul (ap-northeast-2) S3 origin and delivered through global CloudFront edge locations | IP address, request time and URL, browser and device information, and delivery logs |
| Amazon Simple Email Service (SES) | System emails such as registration, verification, and password recovery from the Seoul (ap-northeast-2) region | Recipient address, message content, delivery state, and related metadata |
| Google Asia Pacific Pte. Ltd. and Google-affiliated processors — Google Workspace / Gmail | Manual support communication through support@footagemanager.com | Email address, message, attachments, and response history |
| Sold through Link, LLC f/k/a Lemon Squeezy LLC (Lemon Squeezy), or the successor payment entity shown for the transaction | MoR and reseller services for billing, tax, receipts, subscriptions, portal, refunds, and chargebacks | Buyer and billing details and order, subscription, payment, tax, currency, and refund status |
7. Processing Locations and International Transfers
Personal data may be transferred to and processed outside Korea as these services operate. Cloud Functions currently runs in the U.S. region us-central1, and the default Cloud Firestore database is stored in the U.S. multi-region nam5. Google's published nam5 topology uses read-write regions in Iowa (us-central1) and Oklahoma (us-central2) and a witness region in South Carolina (us-east1).
International transfers are limited to what is needed for outsourced processing or storage necessary to perform the service contract, performance of the payment contract, support you request, or analytics consent you choose to give.
You may object to an international transfer, but account, authentication, billing, licensing, email, download, or update features that depend on the relevant provider may then be unavailable.
| Recipient service | Verified location or scope | Timing and method | Purpose and retention basis |
|---|---|---|---|
| Google Cloud Korea LLC and Google-affiliated processors — Firebase / Google Cloud | Cloud Functions: U.S. us-central1; Firestore: U.S. multi-region nam5; otherwise countries where Google operates infrastructure | Encrypted network transfer during registration, sign-in, account or app use, and backend requests | Authentication, storage, backend execution, security, and reliability / service, contract, and security needs |
| Google LLC and Google-affiliated processors — Google Analytics | United States and other analytics-infrastructure locations | Network transfer after consent when page, checkout, renewal, or refund events occur | Analytics and improvement / checkout attribution up to 400 days after the latest measured purchase; received data under our configuration and Google policy |
| AWS S3 / CloudFront / SES | S3 and SES origin: Seoul, Korea (ap-northeast-2); CloudFront: global edge locations | Network transfer during site or file requests and automated email delivery | Content delivery, downloads, updates, automated email, and security / operational needs |
| Google Asia Pacific Pte. Ltd. and Google-affiliated processors — Google Workspace / Gmail | Countries used under the applicable Google Workspace service and contract | Network transfer when support email is sent or received | Support and dispute handling / request resolution and legal needs |
| Sold through Link, LLC f/k/a Lemon Squeezy LLC (Lemon Squeezy), 222 S Main St Ste 500, Salt Lake City, UT 84101, USA, and payment processors | United States and countries used by the successor entity shown at checkout or on the receipt and by payment infrastructure | Network or webhook transfer during checkout, subscription changes, portal use, refund, or chargeback | Billing, tax, receipts, refunds, and disputes / law and MoR retention rules |
8. Your Rights
Signed-in users can download currently available account, license, and activation data and request account deletion from My Account.
Contact support@footagemanager.com to request access, correction, deletion, restriction, withdrawal of consent, account deletion, information about international transfers, or an additional copy of your data. We may verify your identity and will respond under applicable law.
- You may refuse or withdraw optional analytics-cookie consent.
- Refusing data or transfers required for an account, payment, or license feature may make that feature unavailable.
- Data subject to a legal retention obligation, another person's rights, or a valid security need may not be deleted immediately.
10. Changes, Languages, and Previous Versions
We provide reasonable advance notice of material changes through the website, email, in-app notice, or another appropriate method. Previous versions remain available in this page's document history.
The Korean version applies to users in Korea, and the English version is the reference version for other users. Other translations are provided for understanding. Translation errors will not be interpreted to reduce a data subject's or consumer's non-waivable rights.
11. Provider Contacts and Published Subprocessor Lists
Providers may operationally change their affiliates, subprocessors, and processing countries. The official lists below contain current information. We update this Policy and the international-transfer notice when we identify a material change affecting the service.
- Google/Firebase/Google Workspace: the Korean privacy contact is Google Korea LLC, +82-2-531-9000, data-access-requests@google.com.
- AWS: the Korean privacy contact is AWS Korea Privacy, aws-korea-privacy@amazon.com.
- Lemon Squeezy: check the checkout, receipt, customer portal, or then-current Buyer Terms for the transaction's payment entity and contact route.