Street Drop

Privacy Policy

Last updated: April 20, 2026

Extory Inc. ("Company") values the privacy of Street Drop ("Service") users and complies with applicable data protection laws. This Privacy Policy describes the personal information we collect, how we use it, and how we handle it.

1. Information We Collect

1.1 Account Registration Information

  • Email signup: Email address, password (encrypted), name
  • Google signup: Email address, name, profile picture, Google account ID

1.2 Information Collected During Service Use

  • Uploaded portrait photos (original)
  • Selected Google Street View images and location (latitude/longitude)
  • AI-generated composite images
  • Country and city of the composite location (for statistics)
  • Usage logs, IP address, cookies, access timestamps, device info

1.3 Information Collected from Guest Users

  • Hashed fingerprint of IP address and User-Agent (to enforce free trial limits; original IP is not stored)

2. How We Use Your Information

  • Service delivery: AI image compositing, result storage and download, history management
  • Account management: Identity verification, duplicate account prevention, usage restriction enforcement
  • Service improvement: Usage pattern analysis, error diagnosis, statistical aggregation
  • Usage limit enforcement: Daily generation caps and policy enforcement
  • Legal compliance: Record-keeping as required by law

3. Data Retention

  • Account data: Until account deletion (purged within 30 days after deletion)
  • Composite and original images: Until deleted by the user or account closure
  • Service usage logs: 1 year from collection
  • Statutory retention:
    • Access logs under the Communications Privacy Act: 3 months
    • Contract/cancellation records under the Electronic Commerce Act: 5 years (if applicable)

4. Third-Party Disclosure

We do not disclose your personal information to third parties, except:

  • With your explicit consent
  • When required by law or in response to valid legal process

5. Third-Party Processors

We use the following third-party services to operate Street Drop:

  • Google Cloud Platform (Google LLC): Image storage (GCS), server infrastructure
  • Google Gemini API (Google LLC): AI image compositing
  • Google OAuth (Google LLC): Social login (if you choose Google signup)
  • Google Maps Platform (Google LLC): Street View imagery and geocoding

These processors are bound by their own privacy policies and may use your information only for the purposes we specify.

6. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion (including account closure)
  • Request restriction of processing

You may exercise these rights through your account settings or by contacting us using the details below. We will respond without undue delay.

7. Security Measures

  • Encryption: Passwords are hashed with bcrypt. All communication is encrypted via HTTPS.
  • Access control: Minimal admin privileges, access logs, and regular audits
  • Service account management: Principle of least privilege for Google Cloud service account keys
  • Backup and recovery: Regular backups and incident response procedures

8. Cookies

We use cookies for the following purposes:

  • Maintaining login sessions (NextAuth.js)
  • Passing invitation tokens during signup
  • Saving language preferences

You can disable cookies in your browser settings, but some features (such as login) may not work properly.

9. Children's Privacy

The Service is not intended for children under 14. If we become aware that we have collected information from a child under 14, we will delete the account immediately.

10. Privacy Officer

  • Name: Byungcheol Kim
  • Email: nick@extory.co

11. Changes to This Policy

We will provide at least 7 days' notice before any material change to this Privacy Policy. For significant changes, we may notify you separately via email.