Privacy Policy
Effective 2026-11-11
주식회사 샌드버그 (“we”, “the Company”) handles the personal information of OnAir users under Korea's Personal Information Protection Act.
1. Information we handle
- Sign-up (required): name, email, password (stored encrypted), member type (presenter or investor), company or firm
- Sign-up (optional): job title, firm logo, focus areas and stages (investors), consent to news emails
- Using the Service: voice recordings, presenter photos and videos, pitch decks and reference files, scripts, pitch videos, contacts entered by Presenters (name, email, firm), email delivery and open records, meeting requests and code requests
- Collected automatically: access logs, viewing records, cookies
2. Why we use it
- Identifying members and managing accounts
- Writing scripts, cloning voices, generating speech and producing pitch videos
- Providing share links and the online convention, and passing on meeting requests
- Sending pitch emails and showing whether they were opened
- Issuing OnAir codes and answering payment questions
- Preventing abuse and improving the Service
- (If you agreed) telling you about new features and events
3. How long we keep it
- We keep member information and Materials until you close your account, then destroy them without delay.
- Voice clones created at ElevenLabs are deleted after 30 days without use. The original recordings are kept until you close your account or ask us to delete them, so we can recreate the clone for your next video.
- Information that the law requires us to keep is kept for that period: contract, withdrawal and payment records for 5 years and complaint and dispute records for 3 years (E-Commerce Act), access logs for 3 months (Protection of Communications Secrets Act).
4. Processors and transfers abroad
We use the providers below to run the Service. Information is sent to providers abroad over encrypted connections when you use the related feature, and each provider deletes it under its own policy once the work is done.
| Recipient | Country | Information | Purpose |
|---|---|---|---|
| ElevenLabs, Inc. | United States | Voice recordings, pitch scripts | Cloning the presenter's voice and generating speech |
| Anthropic, PBC | United States | Contents of decks and reference files, scripts | Drafting scripts with AI |
| Resend, Inc. | United States | Recipient names and email addresses, email contents | Sending pitch emails |
| Paddle.com Market Limited | United Kingdom | Name, email, purchase records (card details go directly to the processor) | Processing payments and refunds as Merchant of Record |
| Amazon Web Services, Inc. | Republic of Korea (Seoul region) | All information stored in the service | Running servers and storing data |
If you do not want your information transferred abroad, you can choose not to use voice registration, AI script writing or pitch emails. Those features will not be available in that case.
5. Sharing with third parties
We do not provide personal information to third parties. Information you choose to publish or send is visible to others as follows.
- Anyone with a Presenter's share link, and logged-in members if the pitch is published to the online convention, can see the pitch video and company information.
- When an Investor requests a meeting, their name, firm, email and message are passed to that Presenter.
- For pitches a Presenter sends through OnAir email, the Presenter can see whether each recipient opened it and watched to the end.
- If an Investor agrees, the firm's name and logo are shown on the investor billboard.
- We comply with requests from investigative agencies and others when the law requires it.
6. Contacts entered by Presenters
- Investor contacts that a Presenter enters are used only for that Presenter's pitch emails and are never shown to other members.
- Presenters must obtain contacts lawfully. Recipients can opt out at any time with the unsubscribe link at the bottom of each email, after which no more emails are sent to them.
7. How we destroy information
When the retention period ends or the purpose is fulfilled, we destroy the information without delay. Electronic files are deleted so they cannot be recovered.
8. Your rights
You can ask to see, correct, delete or stop the processing of your personal information, or withdraw consent, at any time by writing to hello@deckonair.com. We will act without delay (within 10 days). You can withdraw consent to news emails the same way.
9. Security measures
- Passwords are stored with one-way encryption (bcrypt).
- All traffic is encrypted with HTTPS.
- Admin features are limited to designated accounts.
- Materials and files that are not published can only be seen by people with permission.
10. Cookies
- onair_session: keeps you logged in
- onair_lang: display language
- onair_ref: records how you found us (30 days)
You can block cookies in your browser settings, but you will not be able to log in.
11. Minors
The Service is intended for people aged 18 or older, and we do not accept sign-ups from anyone under 18. If we learn that we have collected information from someone under 18, we delete it without delay.
12. Privacy officer
- Name: 배호진
- Email: hello@deckonair.com
13. Remedies
You can also contact the following Korean agencies about privacy violations.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
14. Changes
If we change this policy, we will announce it in the Service 7 days before it takes effect.