Privacy policy

Black Armor Studio processes information as necessary to provide OFFON AI. Sign-in and Pro subscriptions are optional.

1. Information and purposes

• Audio and separation results: Selected audio is sent to a server and temporarily processed for AI separation, delivery and playback. Depending on format, the browser converts it to WAV.
• Connection and sessions: IP addresses, request information and random session identifiers are processed to provide the service and protect access to jobs. Essential session cookies last up to 24 hours.
• Free usage records: A protected identifier that changes daily is derived from the connection IP to enforce limits. Whether a job was used and its audio duration are recorded. The original IP is not stored in this record. Users on the same network share limits.
• Operational statistics: Successes, failures and processing times are aggregated. Aggregated statistics exclude audio, filenames and device identifiers.
• Support: Email addresses, messages and attachments you send are processed to answer questions and resolve problems. Send only what is necessary.

2. Retention and deletion

• Server audio: Original audio and results are temporarily retained for processing and delivery. We request deletion of originals after processing and deletion of the server job after results load in the browser. Interrupted or unretrieved jobs are cleaned up around their one-hour expiry. Network problems and retries may delay actual deletion.
• Usage limits: Records are configured for automatic deletion two days after the relevant day ends. Cleanup retries can cause delays.
• Statistics: Internal records that prevent duplicate counting are retained for up to 90 days. Non-identifying aggregate statistics may be kept for ongoing service analysis.
• Support: Requests are deleted within 90 days of resolution. Information required by law or an ongoing dispute is retained separately for only the necessary period.

Electronic information scheduled for deletion is deleted irrecoverably. External providers' security and operational logs and platform records may be handled separately under their policies.

3. Results stored in your browser

Completed results, filenames and editing settings are saved in this browser and restored on refresh. You can delete them by choosing Return home in the confirmation dialog or clearing browser site data. Manage downloaded files yourself. Blocking essential cookies may limit job checking or result delivery.

Your language choice is stored in this browser to keep Korean or English selected across pages and future visits. It is not used for advertising.

4. External providers and international processing

The following providers process audio, temporarily store files and handle support as necessary to fulfill the service contract. Uploads and requests are sent over encrypted connections and may be processed in Korea or abroad.

• Cloudflare, Inc.: Web hosting, connection information, temporary audio storage and usage-limit records. Its global infrastructure is not fixed to one country. The retention periods above apply to files and records; separate provider logs follow Cloudflare's privacy policy.
• Modal Labs, Inc.: AI audio processing, with request delivery through the United States and global processing servers. Temporary audio files on processing servers are cleaned up when a job ends. Platform records, including invocation inputs, outputs and logs, follow Modal's retention policies and data residency information.
• Runpod, Inc.: Backup AI processing and temporary storage when the primary processing server fails. The current audio storage region is Romania. Server files follow the cleanup rules above; platform information follows Runpod's privacy policy.
• Google (Gmail): Email addresses, messages and attachments sent by users are processed for support on Google's global infrastructure, including the United States. The support retention period above and Google's privacy policy apply.

Contact the email below for questions about international processing or to request that processing stop. If you do not want server-side audio processing, you can choose not to upload; AI separation will then be unavailable. We do not sell audio or usage records for advertising.

5. Sign-in and Pro subscriptions

Required account information: Email, account identifiers, authentication information and usage necessary to verify sign-in and manage accounts and subscriptions are processed to establish and fulfill the service contract without a separate collection/use consent, under Article 15(1)(4) of Korea's Personal Information Protection Act. This essential information is not used for advertising or marketing. OFFON AI servers do not store sign-in providers' profile names or photos as account information.

Google/Firebase and your selected sign-in provider process your sign-in email and account identifier. OFFON AI connects the verified identifier and email with Paddle customer, subscription and payment identifiers, subscription status and usage to verify sign-in, provide subscription access and support customers. Processing may occur abroad, including the United States, on Google, Apple and Paddle infrastructure. Paddle processes card numbers; OFFON AI servers do not store them.

Account and subscription linkage records are retained while you use the service. Request account deletion by email; if you have a subscription, we also check cancellation of automatic payments. Usage records are cleaned up automatically two days after their usage period ends; payment-notification deduplication records after 90 days. Information required by law or disputes is retained separately for the necessary period. Provider policies govern information and retention at Google/Firebase and Paddle. Google privacy policy · Paddle privacy policy

Apple sign-in uses your Apple account identifier and email, or a relay address if you choose Hide My Email, for authentication. Different sign-in methods use separate accounts. Usage and subscriptions apply to the signed-in account. Apple privacy policy

Firebase Authentication processing

• Provider and contact: Google LLC (Firebase Authentication). Use Google's privacy contact or the OFFON AI email below for privacy questions.
• Country: United States. Firebase Authentication processes authentication information in US data centers.
• Information: Email, account identifiers, authentication information, IP address and browser information. Google sign-in may include basic Google profile information in Firebase. OFFON AI does not offer password or phone-number sign-in.
• Timing, method and purpose: During Google/Apple sign-in or email-link requests and verification, information is sent over encrypted connections for identity verification, persistent sign-in, account management and abuse prevention.
• Retention: Firebase authentication information is retained until account deletion is requested. Removal from operational and backup systems may take up to 180 days afterward. Firebase IP logs are retained for several weeks.
• Legal basis for international processing: Processing delegation and storage necessary to establish and fulfill the sign-in service contract, disclosed in this policy under Article 28-8(1)(3) of Korea's Personal Information Protection Act.
• Choice and requests: Free audio separation is available without sign-in. You may decline to sign in if you do not want Firebase authentication processing; account management and Pro subscriptions will then be unavailable. Request deletion or suspension of processing for an existing account through the OFFON AI email below.

Standalone audio tools in your browser

The standalone tools on our BPM Finder, Tempo Changer and Key Changer pages process the selected audio in this browser without uploading it to the AI separation server. Audio and results that you have not downloaded are released from memory when you close the tool or leave the page. AI vocal separation uses the server processing described above.

Registration and payment account totals

Our own server records the Firebase-verified creation time, existing hashed account identifier, sign-in method, operator/test classification and server-confirmed first subscription payment amounts, currencies and refund status. These account totals are separate from optional advertising cookies and follow the account/subscription retention period. Without measurement permission, acquisition remains unknown and no sign-up or purchase conversions are sent to advertising services. For consenting visits, only the referring domain is used to classify search or referrals; original search queries, referrer paths and query parameters are not retained. Missing sources are not assumed to be organic search.

Optional advertising and visit measurement

Only with your permission in Cookie settings, we use Google Analytics, Google Ads and Naver advertising measurement. We measure visited pages, advertising attribution codes, a random browser identifier, completed separations, new sign-ups and server-verified first subscription payments, including order IDs, amounts and currencies. Google Analytics also records pricing page views, Pro plan links clicked and monthly or annual plan selections. With permission, standalone BPM, tempo and key tools report only the tool type, start/completion/failure stage, elapsed time and a limited error category to Google Analytics. These actions are not counted as AI separations or payments. Detected BPM/key values, audio and filenames are not sent. Google and Naver may also process IP addresses and browser information. Audio, filenames, sign-in emails, Firebase account identifiers and card information are never sent to advertising analytics.

Known advertising, search and referral attribution lasts 30 days. Action-linking and deduplication records are kept for up to 90 days; daily aggregates without personal identifiers may be retained. Processing may take place on Google's global infrastructure, including the United States, and Naver services. External retention follows Google's privacy policy and Naver's privacy policy. You can decline without affecting separation, account access or checkout, and withdraw permission using Cookie settings. Contact us below to request deletion of existing external records.

6. Protection and your rights

We encrypt transmission, verify access to jobs and keep server storage private. Request access, correction, deletion or suspension of processing by email. We verify only the minimum information needed to handle requests and explain any restrictions, such as statutory retention obligations.

7. Contact and changes

Privacy contact: OFFON AI operator (Black Armor Studio)
Questions and rights requests: parkeuntaek1222@gmail.com

Material changes to purposes, retention periods or providers will be announced on the site before they take effect.

Effective October 14, 2026 · Operator: Black Armor Studio