Legal
Privacy Policy
Effective Draft — 2026-09-25
This policy explains how The CreamUnion Co., Ltd. ("we") collects and uses personal data when you use Sellery. We are the controller of your personal data, except for payment data handled by Paddle as described below.
1. Who is responsible
| Item | Details |
|---|---|
| Company | The CreamUnion Co., Ltd. |
| Representative | Jeonghoon Lee |
| Business registration no. | 206-81-92596 |
| Mail-order business registration no. | 2026-Seoul Gangnam-03303 |
| Address | Cream Building, 18 Dosan-daero 12-gil, Gangnam-gu, Seoul, Republic of Korea |
| Phone | +82-2-3446-1886 |
| axlab@crea-m.com |
2. Data we collect
We do not receive or store your card or bank details. Paddle collects them in its secure checkout.
Please do not include other people's personal data in brand or product information unless you have the right to share it.
| Category | Data | When |
|---|---|---|
| Account | Email address, password (stored encrypted); or social login identifier, email, name and profile image | When you sign up |
| Your content | Brand and product information, uploaded images, generation instructions, generated files | When you use the service |
| Subscription | Plan, billing period, subscription status and transaction ID received from Paddle | When you subscribe or your plan changes |
| Usage and device | IP address, browser and device information, pages visited, access times, feature usage and errors | Automatically, when you use the service |
| Sign-up signals | One-way hashes of your email address and IP address (not the originals) | The first time you sign in after creating your account, to prevent repeated free-credit claims |
3. How we use it and our legal bases
| Purpose | Legal basis (where GDPR / UK GDPR applies) |
|---|---|
| Creating and managing your account; providing the service and storing your files | Performance of our contract with you |
| Managing your subscription and credits; handling refunds and disputes | Performance of contract; legal obligations |
| Security, fraud and abuse prevention (for example, multiple free accounts) | Legitimate interests |
| Improving the service using usage statistics and error logs | Legitimate interests |
| Sending service and billing emails | Performance of contract |
| Website analytics cookies | Consent, where required by law |
4. Paddle, our Merchant of Record
Payments are processed by Paddle.com Market Ltd, which sells our subscriptions as Merchant of Record. Paddle collects and processes your payment and billing data as an independent controller under its own privacy policy (paddle.com/legal/privacy). Paddle shares with us the information needed to provide your plan, such as your email, country, plan and transaction status.
5. Service providers and international transfers
We use the following providers to run the service. They process data on our instructions. Some are located outside your country, including in the United States and the Republic of Korea.
Content generation sends the brand and product information and images you provide to our AI providers, through their business APIs, only to produce your Outputs. We do not use your data to train our own models.
Where the law requires it, we rely on appropriate safeguards for international transfers, such as the Standard Contractual Clauses offered in our providers' data processing terms.
| Provider | Country | Purpose | Data |
|---|---|---|---|
| OpenAI, L.L.C. | United States | Generating copy and page text, analyzing brand and product information, reading uploaded images | Brand and product information you enter, generation instructions, uploaded product images |
| Google LLC | United States | Generating product images; website analytics (Google Analytics) | Uploaded product images and generation instructions; pseudonymous usage data (IP anonymized) |
| Supabase, Inc. | United States | Authentication, database and file storage | Account data (email, social login identifier), usage records, uploaded and generated files |
| Vercel, Inc. | United States | Hosting and access logs | IP address, browser information, access time |
| Paddle.com Market Ltd | United Kingdom | Checkout, payment, tax, invoicing, subscription billing and refunds (as Merchant of Record) | Name, email, billing country and address, payment details, transaction records |
6. How long we keep data
- 1.Account data and your content: while your account is active. When you delete your account, we delete them without undue delay.
- 2.Generated files: for the storage period shown in your account, or until you delete them or your account.
- 3.Subscription and transaction records: for 5 years, to meet accounting, tax and consumer protection obligations.
- 4.Access logs: up to 3 months, unless needed longer to investigate a security incident.
- 5.Sign-up signals (hashes): 12 months from collection, including after account deletion, to prevent abuse of free credits.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, and object to or restrict certain processing. Where we rely on consent, you can withdraw it at any time.
You can edit account details and delete your account yourself in Settings. For other requests, email axlab@crea-m.com. We respond within 30 days.
If you are in the EU/EEA or the UK, you can also complain to your local data protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising.
8. Cookies
- 1.Essential cookies and browser storage keep you signed in and remember your settings (such as theme). The service does not work without them.
- 2.Analytics: we use Google Analytics with IP anonymization to understand how the website is used. Where consent is required, we only use it after you agree, and you can change your choice at any time.
- 3.We do not use advertising cookies.
9. Security
- 1.Passwords are stored encrypted, and all traffic uses HTTPS.
- 2.Access is restricted at the database level so that each user can only reach their own data.
- 3.Uploaded and generated files are stored privately and served only to their owner.
10. Children
Sellery is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children.
11. Changes
We will post updates on this page. For material changes we will notify you by email or in the service at least 30 days in advance.
12. Contact
Privacy contact: Jeonghoon Lee, Representative Director · axlab@crea-m.com · +82-2-3446-1886 · Cream Building, 18 Dosan-daero 12-gil, Gangnam-gu, Seoul, Republic of Korea