ANAKONN INC (hereinafter “Company”) values the personal information of members of the Ankk service (hereinafter “Service”) and complies with relevant laws including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Table of Contents
- Google User Data Handling
- Personal Information Collected
- Purpose of Collection and Use
- Retention Period
- Third-Party Disclosure
- Processing Delegation
- User Rights
- Automatic Data Collection
- Privacy Officer
Use of YouTube API Services
Ankk uses YouTube API Services. When a user authorizes a YouTube connection, Ankk accesses, collects, stores, and processes, within the granted scope, the channel ID, channel name or handle, profile image, OAuth access and refresh tokens, granted scopes, video publishing data and status, and channel and content analytics. Ankk uses this data only to connect and manage the requested YouTube channel, publish user-requested content, and provide publishing status and analytics. It is transmitted to Google to perform user-requested actions and may be processed by the service providers disclosed below. See the Google Privacy Policy for information about Google’s data practices.
Google User Data Handling
Google User Data We Collect or Access
When a member authorizes Google sign-in or Google/YouTube integration, the Company may collect or access Google user data within the scope approved by the member, including basic Google account information such as email address, name or nickname, profile image URL, Google account unique identifier, and Google API data required to provide the requested service features.
Purpose of Use
Google user data is used only to provide or improve user-facing Service features, including sign-in, account identification, requested feature delivery, connected Google/YouTube channel management, content drafting, optimization, publishing, customer support, and maintaining Service security.
Sharing, Transfer, and Disclosure
The Company does not sell Google user data, and does not share, transfer, or disclose Google user data to third parties such as advertising platforms, data brokers, information resellers, credit-worthiness evaluators, or lenders. Google user data may be shared, transferred, or disclosed only with Cloudflare, Inc. for service hosting, security, and Cloudflare data or media storage; Netcup GmbH for PostgreSQL and ClickHouse database hosting and storage; Google LLC for Google sign-in, Google/YouTube APIs, and transactional email processing; integrated platforms or publishing destinations, including TikTok, explicitly requested by the member; security or abuse investigation needs; legal compliance; or cases where the member has given prior consent.
Data Protection Mechanisms for Sensitive Data
The Company transmits Google user data through encrypted communications such as HTTPS, and encrypts stored data as well as OAuth access tokens and refresh tokens. Access is limited to personnel with a business need, and the Company uses access controls, logging, monitoring, and regular security reviews to help prevent unauthorized access, use, loss, alteration, or disclosure.
Retention and Deletion
Google user data is retained only for as long as necessary to provide the Service. When a member disconnects a Google integration or deletes their account, related tokens and account information are deleted unless retention is required by law.
No AI Model Training or Advertising Use
The Company does not use Google user data for generalized AI/ML model training, personalized advertising, retargeting advertising, interest-based advertising, user profiling, credit-worthiness evaluation, or lending purposes.
1. Personal Information Collected
Required Information
The following information is collected through social login (Google) during registration:
- Email address
- Name (nickname)
- Profile picture URL
- Social account unique identifier
Information Collected During SNS Account Linking
When members link SNS accounts for content publishing, the following information is collected from each platform:
- Instagram: Account ID, username, profile picture, display name, access token
- Threads: Account ID, username, profile picture, bio, access token
- Facebook Page: Page ID, page name, page access token
- Bluesky: Account ID (DID), username, access token, refresh token
- YouTube: Channel ID, channel name or handle, profile picture, access token, refresh token, granted scopes
- TikTok: Business account ID, username, profile picture, access token, refresh token, granted scopes
All access tokens are encrypted using the XChaCha20-Poly1305 algorithm and are never stored in plaintext.
Information Collected During Service Usage
- Product information (name, description, images)
- Generated and published content
- Uploaded image and video files
- Publishing settings and publishing status
Automatically Collected Information
- Access IP address
- Browser type and version
- Service usage records
- Access timestamps
2. Purpose of Collection and Use
Member Management
- Confirming registration intent
- Member identification and verification
- Identity verification for service usage
- Customer inquiries and complaint handling
Service Provision
- SNS auto-publishing service
- Personalized service delivery
Service Improvement
- Service usage statistics analysis
- New service development
- Service quality improvement
3. Retention Period
Upon Account Deletion
Personal information is destroyed immediately upon account deletion. However, if retention is required by applicable laws, the information is retained for the specified period.
Legal Retention Requirements
| Information | Retention Period | Legal Basis |
|---|---|---|
| Records of contracts or withdrawal of offers | 5 years | E-Commerce Act |
| Records of payment and supply of goods | 5 years | E-Commerce Act |
| Records of consumer complaints or dispute resolution | 3 years | E-Commerce Act |
| Website access logs | 3 months | Telecommunications Privacy Act |
4. Third-Party Disclosure
The Company does not, in principle, provide members’ personal information to third parties. However, exceptions are made in the following cases:
- When the member has given prior consent
- When required by law
Information Sharing Through SNS Platform Integration
When members link SNS accounts and use the publishing feature, content authored by the member (text, images, videos, captions, hashtags, and publishing settings) is transmitted to the respective platforms:
| Recipient | Items Provided | Purpose of Use |
|---|---|---|
| Meta Platforms (Instagram, Threads, Facebook Page) | Published content (text, images, hashtags) | Content publishing requested by the member |
| Bluesky (AT Protocol) | Published content (text, images, hashtags) | Content publishing requested by the member |
| YouTube | Videos, titles, descriptions, thumbnails, and publishing settings | Content publishing and status checks requested by the member |
| TikTok | Videos/photos, captions, hashtags, and publishing settings | Content publishing and status checks requested by the member |
The above information sharing only occurs when the member explicitly requests it by clicking the publish button.
5. Processing Delegation
The Company delegates personal information processing as follows for service provision:
| Delegated Company | Delegated Task | Storage Country |
|---|---|---|
| Cloudflare, Inc. | Service hosting, CDN/security, D1/R2 data and media storage, and browser rendering | Global (including USA) |
| Netcup GmbH | PostgreSQL and ClickHouse database hosting and storage | Germany |
| Google LLC | Google sign-in and Google/YouTube API integration | USA |
| Google LLC (Gmail) | Transaction email delivery (verification, invitation emails, etc.) | USA |
6. User Rights
Members may exercise the following rights at any time:
- Right to Access: Request to view personal information processing status
- Right to Correction: Request to correct inaccurate personal information
- Right to Deletion: Request to delete personal information
- Right to Suspend: Request to suspend personal information processing
The above rights can be exercised through the settings menu within the service or by contacting customer service (mail@ankk.app).
SNS Integration Removal and Data Deletion
Members can unlink SNS integrations and delete related data through the following methods:
- Clicking the disconnect button for linked SNS accounts on the account management page within the service will immediately delete stored access tokens and account information.
- You can also directly unlink app integration from each SNS platform’s settings (Instagram: Settings > Website > Apps and Websites, Facebook: Settings > Apps and Websites).
- Upon account deletion, all SNS integration information (tokens, account info) is immediately deleted.
Content already published on SNS platforms must be deleted directly on the respective platform.
YouTube Disconnect, Access Revocation, and Data Deletion
For YouTube data, the following specific procedure controls over the generic SNS wording above.
- In Ankk, go to Channels > select the connected YouTube channel > Settings > Disconnect and disconnect the connection.
- To also revoke Google-side access, open Google Account third-party connections and remove Ankk’s access.
- If you cannot complete these steps, request deletion at mail@ankk.app.
After an in-product disconnect is completed, Ankk disables the connection and deletes or schedules deletion of stored OAuth access and refresh tokens, granted scopes, YouTube channel identifiers and profile information, and Authorized Data obtained through YouTube API Services. After Google-side revocation, Ankk schedules deletion of the same data when it detects the revocation during the next token validation. Account deletion also includes YouTube connection data in the account-deletion process. Ankk does not delete content already published to YouTube; users must delete that content on YouTube.
Deletion is completed as soon as possible and no later than 7 calendar days after an in-product disconnect, or 30 calendar days after Ankk detects Google-side revocation or confirms account deletion. Data that must be retained by law is segregated for the required retention period and is not used for another purpose.
7. Automatic Data Collection
Cookies
The Company uses cookies for service convenience. Cookies store session information, user settings, and other data necessary for website operation.
Cookie Rejection
Members can reject cookie storage through browser settings. However, some services may be limited if cookies are rejected.
8. Privacy Officer
The Company designates a Privacy Officer to oversee personal information processing and to handle member complaints and remedies related to personal information processing.
Privacy Officer
- Email: mail@ankk.app
This Privacy Policy is effective as of 2026-08-26.