OneCrePrivacy Policy
Version: October 10, 2026
OneCre is operated by WONK AI in the Republic of Korea. This notice describes how we handle information when you visit onecre.site or use the studio. Contact us at onecre.support@gmail.com for privacy questions or requests. This notice explains processing; reading it or using the website is not blanket consent to optional processing.
Your choices: optional analytics is off until you accept it. Marketing email requires a separate opt-in. Neither is required to use the studio. AI features send relevant content to external providers when you request them.
1. Information and purposes
| Information | What we do with it |
|---|---|
| Google account | Email address, display name, account ID and profile details made available through sign-in. Used to authenticate you and associate projects, preferences and credits with your account. OneCre does not receive your Google password. |
| Account eligibility | Your confirmation that you are at least 18, accepted Terms and notice versions, wording, account ID, source and server-recorded time. Used to administer adult eligibility and record your agreement. This is a self-declaration; this step does not collect your date of birth or identity documents. |
| Creative work | Tracks, lyrics, prompts, chat messages, reference images, character names and aliases, storyboards, generated images/video, media links and project settings. Used to analyze your track, plan and generate content, edit/export it and save or sync your work. |
| Purchases and generation usage | Account ID, pack, amount, currency, order and capture/receipt IDs, status, timestamps, credit balance/ledger, generation job records and accepted policy versions. Used to fulfill purchases, show usage, prevent duplicate charges, investigate failures and handle refunds. PayPal processes payment credentials; our application does not store card numbers. |
| Support and security | Your correspondence and the account/order information needed to resolve it. If you submit an online request, we record your authenticated account ID and email, request type, details, optional order reference, receipt reference, time, status and handling notes. Authorized operators use these to review and respond to the request. Hosting and service providers also process connection and request information, such as IP addresses, browser information, time, error and security events, to deliver and protect the service. |
| Optional marketing | If you subscribe: email, account ID, subscription status, consent wording, source and time, and unsubscribe records. Used to send product updates, creative tips and marketing offers. Unsubscribe through each email or the studio's Email settings. |
| Optional analytics | If accepted: cookie identifiers, page visits, feature events, approximate location and browser/device information processed by Google Analytics. Used to understand service usage. These statistics are not described as anonymous: identifiers and technical information may be personal data. |
2. Grounds for processing
We process information needed to provide the service you request and manage your account and purchases. We also process information to meet applicable legal obligations and, where permitted, protect the service and resolve disputes. We rely on your separate choice for optional analytics and marketing. Where applicable law requires consent or another specific basis for a transfer or disclosure, that requirement applies separately. You can decline optional uses without losing access to core features.
Do not submit identity documents, financial account details, health information or other sensitive personal information in prompts or uploads. Obtain the necessary permission before uploading another person's face, voice, work or identifying information.
3. External services and disclosures
The information sent depends on the feature you use. Providers supporting our service and providers handling their own accounts or transactions have different roles; not all disclosures are a sale or an independent third-party use.
| Service | Purpose and information involved |
|---|---|
| Google Firebase | Authentication and cloud storage: account identifiers, project data, optimized reference images, credit and order records, account agreement records, support requests and newsletter preferences. |
| Google Gemini API | AI planning and chat: instructions, lyrics, conversation and project context sent for the requested response. Google's treatment of inputs depends on whether its paid-service terms apply; unpaid-service terms permit additional improvement uses and human review. |
| Groq | Audio transcription and fallback text processing: audio or audio segments for lyrics, and relevant chat/project text for responses. |
| fal.ai | Image/video generation and media processing: prompts, reference images, source media, audio and media links as needed by the chosen feature. Generated files can be hosted by the provider. |
| Vercel | Website hosting and API execution: connection/request information and content passing through our endpoints. |
| PayPal | Checkout, transaction security and refunds. PayPal processes payment information under its own notice; we store order/receipt information to credit your account and handle purchase issues. |
| Google Analytics / Gmail / Fonts | Analytics after opt-in; email delivery and support correspondence; and font delivery on studio pages that request Google-hosted fonts. Font requests can transmit IP address and browser request information. Newsletter delivery is separate from analytics consent. |
We do not sell your personal information. We may disclose information where required by law or necessary to establish or defend legal claims. Sharing a direct media URL or downloaded file can make that content accessible outside your OneCre account; share such links carefully.
4. International processing
We operate from Korea and use international infrastructure. Information may be processed outside your country, including in the United States and other locations used by the providers above. Transfers occur over the network when you sign in, sync work, request an AI feature, pay, contact us, or enable optional analytics or email. Processing locations and provider retention depend on the service and account configuration. Contact our privacy contact to request information about a specific processing activity or to exercise applicable transfer-related rights.
You can decline optional analytics and email. If you do not want content sent to an AI provider, do not request the corresponding cloud feature. Account and cloud features require the processing described here. These choices do not replace any separate notice, consent or transfer safeguards required by applicable law.
5. Storage, retention and deletion
Account agreement records are kept while needed to administer the account and document the agreement. Support requests and handling records are kept while needed to respond, resolve disputes and meet applicable recordkeeping duties. They are reviewed with an account-deletion request; statutory retention applies only to the relevant records.
- Account and project data: kept to provide your account and saved work until you delete that work or request account deletion, subject to lawful retention needs. Projects also use browser storage. Deleting a project does not itself delete separately maintained billing/job records.
- Reference Library: optimized image copies, names and aliases sync through your account. Original local files can remain in the browser where they were added. Removing a library item removes its active cloud copy and retains a deletion marker to prevent an older device from restoring it. Copies already used in projects and downloaded backups are separate.
- Audio and generated media: local originals may be cached on your device. Transcription, generation and rendering can send audio or other content to providers; an original remaining on your device does not mean that no copy is transmitted. Provider files, processing logs and backups can have separate retention rules.
- Marketing: subscription information is used until withdrawal. A limited suppression record is retained while needed to honor the opt-out, with consent evidence retained where needed to resolve a dispute or satisfy law.
- Analytics: your browser choice is remembered for up to 180 days and can be changed earlier. Google Analytics cookies are configured with a 180-day lifetime; Google-held event data is subject to the property's retention settings and applicable provider terms.
Where Korean electronic-commerce recordkeeping requirements apply, the relevant records are retained for the statutory period: contract/withdrawal records and payment/supply records for 5 years; consumer complaints/disputes for 3 years; and advertising records for 6 months. Only the information needed for the applicable obligation is retained for that purpose. Other mandatory retention or an unresolved legal claim may require limited retention; we will explain a restriction when responding to a deletion request.
For deletion requests, we verify control of the account using proportionate information, remove data from active systems that is no longer needed, and address provider-held copies through the available deletion processes. Electronic records are deleted or made irreversibly unidentifiable when their retention purpose ends. Legally retained records are restricted to their retention purpose. Deletion is not a promise that every provider backup disappears instantly. We explain any continuing retention when completing your request. Downloaded backups and copies on other devices must be removed separately.
6. Cookies and browser storage
Essential browser storage supports authentication, account-scoped projects, reference files, preferences and your privacy choice. Clearing it may sign you out or remove local-only work, so export files you want to keep first.
Google Analytics is not loaded before you choose Accept analytics. Rejecting it leaves core features available. Withdrawal disables future analytics collection by our integration and removes accessible Google Analytics cookies for this site; it does not erase data previously received by Google. We keep analytics off when a supported Global Privacy Control or Do Not Track signal is detected. Choices apply to this browser; other browsers or devices need their own choice.
7. Your rights and privacy requests
Signed-in users can open Support, refunds & deletion from the account menu, or use the support button on the account Terms screen. Online submission is available only when the form shows it is active. Email remains available without signing in or accepting new Terms. A receipt confirms submission for manual review, not completion of deletion or a cash refund.
Email onecre.support@gmail.com to request access, correction, deletion, restriction or cessation of processing, withdrawal of consent, or a copy of your information where applicable. You can also request account deletion. Include your sign-in email and the request; do not send a password, full card number or identity document unless a proportionate verification method has been agreed.
We respond within the period required by applicable law and explain any lawful limitation or extension. Account deletion does not by itself cancel a valid refund claim. Contact us about a balance or pending refund so it can be handled alongside deletion. You can complain to the authority responsible for privacy in your location. In Korea, privacy infringement assistance is available through KISA (118) and dispute resolution through the Personal Information Dispute Mediation Committee.
8. Security and age eligibility
We use authenticated access, account-scoped access rules and server-side checks for account and billing operations. No online service can guarantee absolute security. Protect your sign-in account and avoid sharing private media links. OneCre is intended for users aged 18 or older. If a minor's information has been submitted, contact us to request review and deletion.
9. Policy changes and contact
We identify revisions by date and will provide appropriate notice of material changes. Changes requiring a new optional consent will not be authorized merely by changing this notice. Earlier policy versions can be requested by email.
Privacy inquiries: WONK AI, OneCre operator, Republic of Korea.
onecre.support@gmail.com · +82 10-9615-1762
Representative: Seongcheol Lee. Business address and registration number appear below.