Last updated: September 6, 2026
Before You Begin
If you're wondering what happens to your uploaded files, the answer is simple: your files are uploaded securely, converted as expected, made available for download, and the original images are automatically deleted 30 days after conversion. That’s all there is to it.
We do not make your files public or share them with unexpected third parties. Your Output can only be viewed by others if you create a share link yourself or agree to publish it to our gallery.
For more details, please review the full Privacy Policy below.
This Privacy Policy explains who we are, how we collect, use, and share personal information, and what rights you have and how to exercise them. If you have questions, suggestions, or complaints regarding privacy, please contact us anytime using the contact details at the bottom of this page.
We are Beauty Again Co., Ltd. (the "Operator," "we"). This Policy applies to visitors and users of Gumson (www.gumson.com and its subdomains/APIs) (the "Service"), an image-to-HTML conversion service operated by us.
Children: Under this Policy, a child refers to anyone under the age of 14 (or the minimum age required by applicable law to provide valid consent to personal information processing on their own). The Service and our content are not directed to children. Children may not sign up for the Service, nor may they access or use the Service under our Terms of Service. We do not knowingly collect personal information from children. If we learn that personal information of a child has been collected without valid consent from a legal guardian, we will delete it as quickly as possible.
1. Personal Information We Process
1.1 Information You Provide Directly
We collect personal information when you use the Service. For example, when creating an account, opting in to marketing communications, submitting inquiries, or responding to surveys, we may request your name, email address, company name (optional), marketing preferences, subscription plan, intended use, and more. We clearly inform you of what information we collect and why.
We also collect messages you send us (such as inquiries, disputes, and refund requests). We use this information to operate, maintain, and provide the Service's features, communicate with you, and resolve issues you raise.
If you choose not to provide personal information, you may not be able to use certain features of the Service (such as conversion submissions, payments, or receiving results by email).
If files or content you upload or create (such as photos, images, or identifiable information) contain personal information of others, you are responsible for informing them of this Policy and our processing practices, and obtaining explicit consent where necessary.
1.2 Information Received from Third Parties
We may receive information about you from third parties. For example, when you access the Service via social login (such as Google), that third party may transmit information you have permitted to share, such as your name and email address. Please review and adjust your privacy settings on third-party services before connecting them. Once disconnected, we will no longer receive information from that service.
1.3 Information Collected During Service Use
Our web servers collect data transmitted by your browser. This includes the IP address of the requesting computer, device/app information, date and time of access, request content and requested files (name and URL), data transfer volume, request status (success/failure), browser and operating system identifiers, and the referring website if accessed via a link. Server logs are retained for up to 3 months.
We also collect information about how you use the Service, including pages viewed, links clicked, features used, session duration, login status, and payment behavior, and we may infer your industry from the types of images converted. We use this information for internal analytics to understand how people use the Service and to enhance its quality and relevance. We may use this data to generate aggregated, anonymized statistics to deliver specific features and to promote and improve the Service.
We may analyze user activity, uploaded images, conversion results, and related data to provide and customize the Service and improve conversion quality. If we use your images and Output to train our own or third-party AI models, we will notify you separately and obtain your prior consent.
1.4 Cookie Information
When you use the Service, we send cookies (small text files containing a unique browser identifier string) to your device. Cookies enable faster login, smoother navigation, and help provide us with information about how you use the Service (such as pages viewed and links clicked). You can manage or reset cookies in your browser settings, refuse all cookies, or set alerts when cookies are sent. However, refusing cookies may prevent certain features, such as staying logged in, from functioning properly. For more details, please see our Cookie Policy.
We may use cookies from web analytics tools (such as Google Analytics) to understand Service usage. You can learn how Google collects and uses data at www.google.com/policies/privacy/partners/ and opt out at https://tools.google.com/dlpage/gaoptout.
2. Legal Bases and Purposes of Processing
We require a legal basis to collect, use, and share personal information. The specific basis depends on the type of information and the context of processing, but we generally process data when: (i) necessary to perform a contract with you (providing the Service), (ii) pursuing our legitimate interests, (iii) based on your consent, and where applicable, to comply with legal obligations.
2.1 Inquiries and Communications
When you contact us via email, phone, or contact forms, we process your information to take steps prior to entering into a contract, perform a contract, or pursue our legitimate interests.
2.2 Commercial Transactions
We process information to handle transactions and deliver services, including conversion submissions, credit and subscription payments, and result notifications. Payment details (such as credit card numbers) are processed by our payment gateway (PG) and are not stored directly by us.
2.3 Marketing Purposes
When communicating news, promotional offers, and events to market our Service, we process information based on your consent or our legitimate interests. Promotional communications, such as newsletters, are sent only to users who have consented to receive them.
2.4 Security, Analytics, and Service Improvement
We process information based on our legitimate interests to maintain system security, manage technical aspects of the website, optimize service quality, understand our users, and analyze and improve Service usage. We do not rely on this basis where your data protection interests override our legitimate interests.
2.5 Compliance with Legal Obligations
We process information as necessary to comply with statutory obligations related to tax, accounting, auditing, and electronic commerce.
3. Sharing and Outsourcing of Personal Information
We may share personal information with or outsource its processing to the following categories of recipients:
- Affiliates, service providers, and partners providing data processing services to us (e.g., website hosting, feature and security support, and analytics). Current outsourcing: server hosting (Cafe24), email delivery (Brevo), payment processing (payment gateways), conversion processing (our conversion farm and external AI model APIs — images are transmitted solely for conversion purposes and are contractually configured not to be used for training).
- Law enforcement, regulatory or administrative agencies, courts, or other third parties when disclosure is required by applicable law, or where necessary to exercise, establish, or defend our legal rights, or protect the vital interests of users or others.
- Actual or prospective buyers (and their agents and advisors) in connection with any actual or proposed purchase, merger, or acquisition of all or part of our business, provided that we inform the buyer to use personal information solely for purposes disclosed in this Policy.
- Any other third party where you have consented to disclosure.
If our outsourced processors change, we will update this Policy accordingly.
4. Transfer, Storage, and Security of Personal Information
Your information is stored and processed on our servers in Korea. To perform conversions or dispatch emails, data may be transferred to and processed in other countries where third-party service provider facilities are located (e.g., the United States and Europe). Data protection laws in those countries may differ from those in Korea.
We implement appropriate security measures to ensure your information remains protected in accordance with this Policy and applicable laws. These include transport layer encryption (TLS), one-way hashed password storage, access controls, access logging, and imposing data protection obligations through processing agreements.
5. Your Rights Regarding Personal Information
You have the right to access your information processed by us, correct inaccurate data, request deletion, demand suspension of processing, request data portability, and object to unlawful processing. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
You can exercise these rights directly within your account settings or by contacting us via the details in the "Contact Us" section at the bottom of this page. We respond to all requests within the timeframes prescribed by applicable law.
You may opt out of receiving marketing communications from us at any time. Simply click the "Unsubscribe" link in any marketing email or contact us.
You have the right to lodge a complaint with regulatory authorities. In Korea, you can contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office Cybercrime Investigation Division (www.spo.go.kr, 1301), or the Korean National Police Agency Cyber Investigation Bureau (ecrm.cyber.go.kr, 182).
We do not make decisions producing legal effects concerning you based solely on automated processing. If we process personal information for purposes other than those originally collected, we will notify you of the fact and purpose.
6. Retention Period of Personal Information
We retain personal information for as long as an ongoing legitimate business need exists (such as providing requested services or complying with applicable legal, tax, or accounting requirements). As a general rule, information is destroyed immediately upon account closure, with the following exceptions:
- Original uploaded images: Retained for 30 days after conversion, then automatically deleted. Output is retained until deleted by the user or upon account closure.
- Server access logs (IP address, etc.): 3 months (Protection of Communications Secrets Act)
- Records on contracts, withdrawal of subscription, payment, and supply of goods: 5 years (Korea's Act on Consumer Protection in Electronic Commerce)
- Records on consumer complaints or dispute settlement: 3 years (Korea's Act on Consumer Protection in Electronic Commerce)
- Tax transaction records: 5 years (Framework Act on National Taxes)
When we no longer have an ongoing legitimate business need, we delete or anonymize personal information. If data is stored in backup archives and cannot be deleted immediately, it is securely isolated until deletion is feasible. We may retain certain account information to fulfill statutory obligations such as accounting and auditing.
7. Changes to This Policy
We may update this Policy from time to time to reflect current practices and comply with applicable laws. When changes are made, we will update the "Last updated" date at the top of this page. If material changes are made to how we collect, use, store, or share information, we will notify you via a Service announcement or by email. We encourage you to review this page periodically for updates.
8. Contact Us
The data controller responsible for processing personal information is Beauty Again Co., Ltd. (Brand: Gumson).
Privacy Officer: Taeksoo Jung (CEO) · Email support@rebeauty.co.kr · Tel 010-7213-3785
Mail: Beauty Again Co., Ltd. (Gumson) · 210, B1, Somang Bldg., 508 Gaepo-ro, Gangnam-gu, Seoul, Korea
If you have any questions, suggestions, or concerns regarding your personal information or this Policy, please contact us using the information above.