• Handling inquiries: Personal information is processed to verify the identity of the person making an inquiry, review the inquiry, contact or notify the person for fact-finding, and provide notice of the handling results.
• Receiving and handling reports: Personal information is processed for reports of privacy infringements, AI ethics violations, and other matters in order to verify the identity of the reporter, review the report, contact or notify the reporter for fact-finding, and provide notice of the handling results.
• Marketing: Personal information is processed for service usage statistics and marketing purposes.

• Konan Technology processes and retains personal information within the retention and use period prescribed by applicable laws and regulations or within the period consented to by the data subject at the time the personal information is collected.
• The processing and retention periods for each category of personal information are as follows:
  1. 1. Handling inquiries: 1 year after the inquiry is closed
  2. 2. Receiving and handling reports: 1 year after the report is closed
  3. 3. Service improvement and marketing: 1 year
  4. 4. Other

     - If an investigation or inquiry is in progress due to a violation of applicable laws and regulations: until the investigation or inquiry is concluded
     - If any claim or debt relationship arising from use of the website remains outstanding: until the relevant claim or debt relationship is settled

* Because inquiry details and report details are entered directly by users, please do not enter personal information that is not necessary for the relevant processing purpose.

• In principle, Konan Technology Co., Ltd. destroys personal information without delay once the purpose of processing has been achieved. However, this does not apply where retention is required under other laws and regulations. The procedures, timing, and methods of destruction are as follows:
  
  1. A. Destruction Procedures
  2.      Unnecessary personal information and personal information files are handled in accordance with internal procedures under the responsibility of the Chief Privacy Officer as follows:

      - Destruction of personal information: Personal information whose retention period has expired is destroyed without delay after the expiration date.
      - Destruction of personal information files: When a personal information file is no longer necessary due to achievement of the processing purpose, discontinuation of the relevant service, termination of the business, or other reasons, the file is destroyed without delay from the date on which processing of the personal information is deemed unnecessary.

  3. B. Retention Periods Required by Law

   - Act on the Consumer Protection in Electronic Commerce
     · Records on contracts or withdrawal of offers, etc.: 5 years
     · Records on payment and supply of goods, etc.: 5 years
     · Records on consumer complaints or dispute resolution: 3 years
   - Framework Act on Electronic Documents and Transactions
     · Records on the distribution of electronic documents through certified electronic addresses: 10 years
   - Protection of Communications Secrets Act
     · Login records: 3 months

  4. C. Methods of Destruction
  5.      1) Information in electronic form is destroyed using technical methods that prevent the records from being recovered or reproduced.
  6.      2) Personal information printed on paper is destroyed by shredding or incineration.

• A data subject may exercise the following rights regarding the protection of personal information against Konan Technology at any time:
  1. 1. Request access to personal information
  2. 2. Request correction of errors, etc.
  3. 3. Request deletion
  4. 4. Request suspension of processing
• The rights under paragraph ① may be exercised against Konan Technology in writing, by email, by facsimile (FAX), or by other means in accordance with Form No. 8 attached to the Enforcement Rule of the Personal Information Protection Act, and Konan Technology will take action without delay.
• If a data subject requests correction or deletion of errors in personal information, Konan Technology will not use or provide the relevant personal information until the correction or deletion is completed.
• The rights under paragraph ① may be exercised through a representative, such as the data subject's legal representative or an authorized agent. In such case, a power of attorney in accordance with Form No. 11 attached to the Enforcement Rule of the Personal Information Protection Act must be submitted.

1. 1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
2. 2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, installation of security programs, etc.
3. 3. Physical measures: Access control for computer rooms, data storage rooms, etc.

• Konan Technology uses cookies, which store and retrieve information about service use from time to time.
• A cookie is a small piece of information sent by the server (HTTP) used to operate a website to the user's computer browser, and it may also be stored on the hard drive of the user's computer.
  1. 1. Purpose of using cookies: Cookies are used to understand users' visit and usage patterns, secure access status, and other information in order to provide information optimized for users.
  2. 2. Installation, operation, and rejection of cookies: Users may reject the storage of cookies by changing privacy or cookie-related options in the settings menu of the web browser they use.
  3. 3. Rejecting the storage of cookies may cause difficulties in using the website.

• Konan Technology has designated the following Chief Privacy Officer and department responsible for personal information protection to oversee personal information processing and to handle complaints and provide remedies relating to personal information processing:

  Chief Privacy Officer	Head of Corporate Management Support Division (Executive Director)
  Department Responsible for Personal Information Protection and Grievances	Department: General Affairs & Security Team, Corporate Management Support Division Tel: 02-3469-8537 Email: neobizbox_gkonantech_c1_b5_d1418@konantech.com
  Department for Receiving and Processing Requests for Access to Personal Information	Same as the department responsible for personal information protection and grievances above.

• Data subjects may contact the Chief Privacy Officer or the responsible department specified in paragraph ① regarding any inquiries, complaints, or requests for remedies related to personal information protection that arise while using Konan Technology's services (or business activities). Konan Technology will respond to and handle such inquiries without delay.
• Data subjects may submit a request to access personal information under Article 35 of the Personal Information Protection Act to the department responsible for receiving and processing access requests specified in paragraph ①.

1. 1. Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
2. 2. Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
3. 3. Cybercrime Investigation Division, Supreme Prosecutors' Office: www.spo.go.kr / 1301
4. 4. Cyber Bureau, Korean National Police Agency: cyberbureau.police.go.kr / 182

• This Privacy Policy applies from its effective date. If any additions, deletions, or revisions are made due to changes in laws, regulations, or policies, notice will be provided through the website notice board at least 7 days before the changes take effect.
• This Privacy Policy is effective as of September 15, 2026.
• The previous Privacy Policy (effective January 1, 2021) is available below.
  Previous Privacy Policy (Effective January 1, 2021)