Privacy Policy

Last updated: March 2026 · EduShorts Ltd. · Seoul, South Korea

1. Data controller

EduShorts Ltd. ("EduShorts"), registered in Seoul, South Korea. For any data-related inquiries, contact us at ceo@veliormedia.com or +82 (0) 10-7513-5267.

2. Data we collect

2.1 Data you provide directly

• Account information: name, email address, phone number, company name, job title
• Demo request form: name, email, phone, company size, message
• Course content you create or upload on the platform
• Communication data: emails, support requests, WhatsApp messages

2.2 Data collected automatically

• Usage data: pages visited, features used, course progress, completion rates
• Device data: browser type, operating system, device type, screen resolution
• Log data: IP address, access times, referring URL
• Cookies: essential cookies for site functionality and optional analytics cookies (see Section 7)

3. Why we process your data (legal basis)

Under GDPR Article 6 and PIPA Article 15, we process your data on the following legal bases:

• Contract performance — to provide the EduShorts service, manage your account, deliver courses, and issue certificates
• Legitimate interest — to improve our platform, analyze usage patterns, prevent fraud, and ensure security
• Consent — for marketing communications, optional analytics cookies, and AI training recommendations. You can withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, and regulatory requirements in Korea, EU, and US

4. How we share your data

We never sell your personal data. We may share data with:

• Your employer/organization — if your account is managed by your company, your administrator can see your course progress, completion rates, and certificates. They cannot see your personal browsing behavior outside the platform.
• Service providers — hosting (cloud infrastructure), email delivery, payment processing, analytics. All providers are bound by data processing agreements.
• Legal authorities — only when required by law, court order, or to protect our legal rights.

5. International data transfers

Your data may be processed in South Korea, the European Union, and the United States. For transfers outside the EU/EEA, we use Standard Contractual Clauses (SCCs) approved by the European Commission. For transfers from Korea, we comply with PIPA cross-border transfer requirements including obtaining consent where required.

6. Data retention

We retain your personal data only as long as necessary for the purposes described above. Account data is retained for the duration of your subscription plus 3 years for legal/tax requirements. Demo request data is retained for 12 months. You can request deletion at any time (see Section 8).

7. Cookies

We use the following types of cookies:

• Essential cookies — required for the platform to function (authentication, language preference, session management). Cannot be disabled.
• Analytics cookies — help us understand how visitors use our site (Google Analytics). These are only set with your consent.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the platform from working properly.

8. Your rights

Under GDPR, PIPA, and applicable US privacy laws, you have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — limit processing of your data in certain circumstances
• Objection — object to processing based on legitimate interest or for direct marketing
• Withdraw consent — at any time, without affecting prior lawful processing

To exercise your rights, email ceo@veliormedia.com. We will respond within 30 days (GDPR) / 10 days (PIPA).

9. Data security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, access controls, regular security audits, and incident response procedures.

10. Children's privacy

EduShorts is a B2B corporate training platform. We do not knowingly collect data from individuals under 16 (EU) or 14 (Korea). If we discover such data has been collected, we will delete it immediately.

11. AI and automated decision-making

EduShorts uses AI for course creation and training recommendations. AI recommendations are based on your role, department, and learning history. No automated decisions with legal or significant effects are made without human oversight. Your proprietary content is never used to train our AI models.

12. Supervisory authorities

If you believe your data rights have been violated, you have the right to lodge a complaint with:

• Korea — Personal Information Protection Commission (PIPC), pipc.go.kr
• France / EU — Commission Nationale de l'Informatique et des Libertés (CNIL), cnil.fr
• US — Federal Trade Commission (FTC), ftc.gov, or your state attorney general

13. Changes to this policy

We may update this policy periodically. Material changes will be communicated via email or platform notification at least 30 days before taking effect. The "last updated" date at the top always reflects the current version.

14. Contact

For any questions about this privacy policy or your personal data:
EduShorts Ltd.
Email: ceo@veliormedia.com
Phone: +82 (0) 10-7513-5267
Address: Seoul, South Korea