LC Ministry Privacy Policy
Effective: October 6, 2026. This is an English translation of the Korean policy at lcministry.com/privacy; if the two differ, the Korean version governs.
LC Lab, Inc. ("we") operates LC Ministry (the "Service") and sets out this policy to protect the personal information of its users, in accordance with the Personal Information Protection Act of Korea and the laws that apply to us.
1. What we collect
| Category | Items | When |
|---|---|---|
| Sign-up (required) | Email, name, password (stored with a one-way hash), invitation code | When you sign up |
| Sign-up (optional) | Church name | When you sign up |
| Google sign-in | Email, name and account ID of your Google account | When you sign up or sign in with Google |
| Church information (optional) | Church name, denomination, size, region, audience (age groups, faith stages), tone, Bible translation, church links, church logo | When you fill in the church profile |
| Settings | Language, theme, default hashtags, weekly goals, reminder times | When you change settings |
| Material you upload or enter | Sermon manuscripts, videos and YouTube links, photos, videos, voice recordings, testimony texts, event details, posting plans | When you use a feature |
| Instagram connection (optional) | Instagram account ID, username, account type, profile picture URL, publishing access token (stored encrypted), the Instagram links of posts published automatically | When you connect Instagram in Settings, and when a scheduled post is published |
| Collected automatically | IP address, browser information, access times, usage records, a cookie that keeps you signed in | When you use the Service |
Sensitive information
By its nature, what you upload (sermons, testimonies, church information) contains information about religion and faith, and testimonies may mention health or family history. We use it only to make what you ask for and never for any other purpose (analytics, advertising, or giving it to third parties).
If material shows other people (for example a testimony or interview video), the user who uploads it must have their consent.
2. Why we use it
- To confirm sign-up, identify you, keep you signed in and manage your account
- To make what you ask for — transcribing sermons and choosing and rendering short clips, generating cards, documents and videos, and storing and showing the results
- To find and fix errors, check output quality, prevent abuse and manage usage limits
- To answer enquiries and announce important changes to the Service or its terms
- (If you connect Instagram) To publish the posts you scheduled to your Instagram account at the time you set. The connection is used only to publish; we do not read your other posts, comments, messages or insights.
We do not use your material to train AI models or for advertising.
3. How long we keep it
- Personal information and your material are kept until you delete your account, and destroyed without delay after that.
- Projects, videos, images and documents you delete in the Service are destroyed at that time. Deleting a Sermon Remix project also deletes its source video and transcript on the analysis server.
- The following are kept for the periods the law requires: access records for 3 months (Protection of Communications Secrets Act); (after paid plans begin) contract and payment records for 5 years and complaint records for 3 years (Act on Consumer Protection in Electronic Commerce).
- Information left in disaster-recovery backups is deleted in turn within 45 days.
- Your Instagram connection is deleted without delay when you disconnect it in Settings, when you remove LC Ministry from your Instagram account (Settings → Apps and websites), or when you request deletion through Meta. Posts already published stay on your Instagram account; delete them on Instagram if you wish.
4. Sharing with third parties
We do not give your personal information to third parties, except when a public authority requests it through lawful procedures under applicable law.
5. Processors and transfers abroad
We use the following companies to run the Service. Their servers are outside Korea (in the United States and elsewhere). Information is sent to them over encrypted connections (HTTPS) while you use the Service.
| Recipient | Country | What they do | What is sent | How long |
|---|---|---|---|---|
| Microsoft Corporation (Azure) | USA | Hosting the Service's servers and database | Everything in section 1 | Until account deletion |
| Microsoft Corporation (Azure OpenAI) | USA | AI text generation (summaries, discussion guides, card text) and output checks | Sermon manuscripts and transcripts, text you enter | Not used for model training; may be kept up to 30 days for abuse monitoring |
| Microsoft Corporation (Azure AI Speech) | USA | Speech recognition (transcription) and speech synthesis | Audio of videos and recordings, narration text | Not stored after processing |
| Microsoft Corporation (Azure OpenAI images) | USA | AI image generation | Image descriptions | Not used for model training; may be kept up to 30 days for abuse monitoring |
| Cloudflare, Inc. (R2) | USA and elsewhere | Storing image and video files | Files you upload and files we make for you | Until deleted or account deletion |
| Newfold Digital, Inc. (Bluehost) | USA | Keeping disaster-recovery backups | Backups of the database and files | Up to 45 days |
| Google LLC | USA | Google sign-in (if you choose it) | Email, name, Google account ID | Per Google's policy |
| Meta Platforms, Inc. (Instagram) | USA | Publishing scheduled posts (if you connect Instagram) | The images, videos and captions to publish | Kept on your Instagram account as posts (per Meta's policy) |
- Sermon transcription, clip selection and rendering, and backups are also processed on servers we manage ourselves (USA).
- If you do not want your information transferred abroad, you may choose not to sign up, or delete your account. The Service cannot be provided without these companies.
- Microsoft states that content sent to Azure OpenAI is not provided to other customers or used to train models, and may be kept for up to 30 days to monitor abuse.
6. How we destroy it
Personal information whose retention period has ended or whose purpose has been met is destroyed without delay. Electronic files are deleted so they cannot be recovered; information kept by law is stored separately from other information.
7. Your rights
- You may at any time see, correct or delete your personal information, ask us to stop processing it, or withdraw consent by deleting your account.
- You can change your name, church information and settings yourself in Settings and Church Profile, and delete what you made on each screen.
- You can delete your account directly in Settings. Other requests can be emailed to the privacy officer below and are handled within 10 days.
- You may also make requests through a legal representative or someone you authorize.
8. When we look at your material
We look at your material only as far as needed to find and fix errors, check output quality, check reported or suspected violations of the terms or the law, or handle a request you made. Only designated staff do this, and what they see is not used for any other purpose or disclosed. Personal material such as testimonies and voice recordings is opened only when strictly necessary.
9. Cookies and browser storage
- The Service uses a cookie to keep you signed in. If you block it, you cannot sign in.
- Conveniences such as your language and the last screen settings you chose are stored in your browser and are not sent to us.
- The Service uses no cookies for advertising or visitor tracking.
10. Children
The Service does not accept users under 14.
11. Security
- Passwords are stored with a one-way hash (bcrypt).
- All traffic is encrypted with HTTPS.
- Instagram access tokens are stored encrypted (AES-256-GCM).
- The database cannot be reached directly from outside, and server access is limited to designated administrators.
- File storage access is separated per service.
- Server access records are kept and checked for unusual access.
12. Privacy officer
- Name: Joseph Cho
- Email: info@lclab.io
Users in Korea may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr), the Supreme Prosecutors' Office cybercrime division (www.spo.go.kr, 1301) or the Korean National Police Agency cyber bureau (ecrm.police.go.kr, 182).
13. Changes
We announce changes to this policy in the Service 7 days before they take effect. Important changes — such as new items collected, new purposes or new processors — are announced 30 days ahead and also by email.
This policy takes effect on October 6, 2026.