This Policy sets out the details of the personal information processed by Out of Set Inc. ("Company") in connection with a User's use of "Airy API" (the "Service"), provided by the Company through Airy.
This Policy constitutes an Individual Policy under the Airy Privacy Policy (the "Common Policy") and applies together with the Common Policy. In the event of a conflict between this Policy and the Common Policy, this Policy shall prevail with respect to matters concerning the Service.
Individual Users of the Service must be at least 18 years of age, which differs from the age assumed under the Common Policy (14 years of age); the 18-year-of-age requirement under this Policy prevails for Users of the Service.
Article 1 (Purposes of Processing Personal Information)
In addition to the purposes set out in Article 1 of the Common Policy, the Company processes personal information for the following purposes:
- API Key Management and Fraud Prevention: Issuance and management of API Keys, age (18+) verification, fraud prevention, and management of per-account usage limits
- Provision of the Service: Processing Input to generate and provide Output, and managing usage limits and response performance
- Billing: Managing credit deduction records, billing and settlement based on usage, and invoicing through the merchant of record (Paddle or Polar; the "Merchant of Record")
- AI Model Training: Where a User has consented, training speech synthesis models using input and output data generated in the course of using the Service
Article 2 (Items of Personal Information Processed and Retention Periods)
1. Items Processed Without Consent (Information Necessary for Performance of Contract)
In addition to the items set out in Article 2(1) of the Common Policy, the Company processes the following:
| Category | Items Processed | Retention Period |
|---|---|---|
| API Key Management | API Key, key issuance/revocation history | Until account withdrawal |
| Age Verification | Timestamp of age (18+) verification | Until account withdrawal |
| Usage History | Input text transmitted by the User via the API, and the model, voice, and language used for each call | Until account withdrawal |
| Technical Operations Logs | Call timestamp, endpoint, response status, error code | Duration of the account |
| Billing Information | Plan, credit balance and usage history, credit deduction records (evidence of charges), Merchant of Record (Paddle or Polar) customer/subscription ID, payment amount and date (payment method information such as card details is not held by the Company and is processed by the Merchant of Record) | Until account withdrawal; records related to payment settlement are retained for 5 years under applicable law |
2. Items Processed With Consent
| Category | Items Processed | Retention Period |
|---|---|---|
| AI Model Training | Input text and output data (Output) generated in the course of using the Service | Until consent is withdrawn (except for data already incorporated into training prior to withdrawal) |
3. Retention Periods Required by Law
In addition to the retention periods set out in Article 2(3) of the Common Policy, the following apply to the Service:
| Legal Basis | Item | Retention Period |
|---|---|---|
| Act on the Consumer Protection in Electronic Commerce | Records of contracts, withdrawal of subscription, payment, and supply of goods or services | 5 years |
| Act on the Consumer Protection in Electronic Commerce | Records of labeling and advertising | 6 months |
| Act on the Consumer Protection in Electronic Commerce | Records of consumer complaints or dispute resolution | 3 years |
| Framework Act on National Taxes, Article 85-3 | Books and documentary evidence relating to transactions required under tax law | 5 years |
Article 3 (Provision to Third Parties, Outsourcing, and Overseas Transfer of Personal Information)
Matters concerning the outsourcing and overseas transfer of personal information for the Service are governed by Articles 4 and 5 of the Common Policy. In addition, in connection with payment processing, the Company provides personal information as a third party to, and transfers personal information overseas to, the Merchant of Record for the relevant payment (Paddle or Polar), as set out below. The Merchant of Record for each payment is shown on the checkout page and receipt, and personal information relating to a given payment is provided and transferred only to the Merchant of Record for that payment.
| Recipient | Purpose of Provision | Items Provided | Retention/Use Period |
|---|---|---|---|
| Paddle.com Market Ltd. and its affiliates involved in payment processing (including Paddle Payments Limited and Paddle.com Inc.) | Payment processing, invoicing, subscription management, and tax reporting | Email address, account ID, plan and payment amount/history | Until the purpose of contract performance is achieved or the retention period required by applicable law expires (Paddle's own retention period is governed by Paddle's Privacy Policy) |
| Polar Software, Inc. and its affiliates and payment processors involved in payment processing (including Stripe, Inc.) | Payment processing, invoicing, subscription management, and tax reporting | Email address, account ID, plan and payment amount/history | Until the purpose of contract performance is achieved or the retention period required by applicable law expires (Polar's own retention period is governed by Polar's Privacy Policy) |
Overseas Transfer to Paddle
| Item | Details |
|---|---|
| Recipient | Paddle.com Market Ltd. and its affiliates involved in payment processing (including Paddle Payments Limited and Paddle.com Inc.) |
| Contact | privacy@paddle.com (governed by Paddle's Privacy Policy) |
| Countries of Transfer | United Kingdom, Ireland, United States, and other countries where the Paddle group processes personal information for payment purposes |
| Timing and Method of Transfer | Immediately, via encrypted network, at the time of a payment for which Paddle is the Merchant of Record (including renewal payments for existing Paddle subscriptions) |
| Items Transferred | Email address, account ID, plan and payment amount/history |
| Purpose of Transfer | Payment processing, invoicing, subscription management, and tax reporting |
| Retention Period by Recipient | Governed by Paddle's Privacy Policy |
| Method to Refuse Transfer | Refusal is possible by not using paid plans or credit purchases that require payment (the free plan may be used without any overseas transfer) |
Overseas Transfer to Polar
| Item | Details |
|---|---|
| Recipient | Polar Software, Inc. and its affiliates and payment processors involved in payment processing (including Stripe, Inc.) |
| Contact | Governed by Polar's Privacy Policy (polar.sh/legal/privacy) |
| Countries of Transfer | United States and other countries where Polar and its payment processors process personal information for payment purposes |
| Timing and Method of Transfer | Immediately, via encrypted network, at the time of a payment for which Polar is the Merchant of Record |
| Items Transferred | Email address, account ID, plan and payment amount/history |
| Purpose of Transfer | Payment processing, invoicing, subscription management, and tax reporting |
| Retention Period by Recipient | Governed by Polar's Privacy Policy |
| Method to Refuse Transfer | Refusal is possible by not using paid plans or credit purchases that require payment (the free plan may be used without any overseas transfer) |
Payment method information such as card details is entered by the User directly into the Merchant of Record's checkout interface and provided to the Merchant of Record (or a payment processor used by the Merchant of Record); the Company does not collect such information or provide it to, or transfer it overseas to, the Merchant of Record.
Article 4 (Miscellaneous)
Matters not addressed in this Policy shall be governed by the Common Policy. In addition to the rights set out in Article 3 of the Common Policy, Users may revoke their API Key and withdraw from the Service through the developer console settings menu or by contacting customer service (help@airy.so).
Addendum
This Policy takes effect on November 13, 2026.
This English version is provided for convenience only. In the event of any discrepancy between the Korean and English versions, the Korean version shall prevail.