Alphacode Inc. (hereinafter referred to as the “Company”) collects, uses, and provides personal information through the inquiry function on its website based on the user’s consent, and actively guarantees the user’s rights (right to informational self-determination). The Company complies with the relevant laws and regulations of the Republic of Korea, as well as personal information protection rules and guidelines that information and communications service providers are required to observe.

Article 1 (Purpose of Personal Information Processing)

The personal information being processed is not used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act. The company processes your personal information for the following purposes:

1. Purpose of processing personal information

Article 2 (Personal Information Collected)

The company collects and processes the following personal information. When collecting user's personal information, we will make sure to inform the user in advance and ask for consent.

1. Personal information items collected to use the service

2. The Company does not collect personal information of minors under 14 years old.

Article 3 (Processing and Retention Period of Personal Information)

The company processes and retains personal information within the period of personal information retention and use under laws and regulations or within the period of personal information retention and use agreed upon when collecting personal information from the information subject (user).

1. Period of personal information retention and use for service provision

※ If preservation is necessary according to the provisions of the relevant laws and regulations, it shall be used and stored until the relevant period.

2. Personal information validity system (dormant account policy)

• Membership information of users who have not used the service for more than a year is stored and managed separately from general users' membership information pursuant to Article 396 of the Personal Information Protection Act. (Transition to a dormant account)
• The company shall destroy the personal information of a member that is not reused for a period (1 year) defined by the law or store and manage it separately from other members' personal information unless a separate period is set in other laws or requested by a customer.
• The company will inform the user by email, written, vocal transmission, telephone, or a similar way that his personal information will be destroyed or separated and stored 30 days before the expiration of the storage period.

Article 4 (Provision of Personal Information to a Third Party)

The company does not provide personal information to third parties.

Article 5 (Destruction of Personal Information)

The company destroys the personal information without delay when personal information becomes unnecessary, such as the lapse of the personal information retention period or the achievement of the purpose of processing.

1. If the personal information retention period agreed by the information subject has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or stored at a different location.

2. The procedures and methods for destroying personal information are as follows.

• Destruction procedure: The company selects personal information in which the reason for destruction occurs, and destroys personal information with the approval of the company's personal information protection manager.
• Destruction method: Personal information recorded and stored in the form of electronic files is destroyed so that records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by crushing or incinerating with a grinder.

Article 6 (Rights, Obligations, and Methods of Exercise of Data Subjects)

1. The information subject (user) may exercise the following rights related to personal information protection against the company at any time.

• Request for personal information access
• Request for corrections in case of errors, etc.
• Request for deletion
• Request to stop processing

2. The exercise of rights under paragraph 1 can be done by writing, telephone, e-mail, or faxing the company pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.

3. If the data subject requests correction or deletion of errors in personal information, the company will not use or provide the personal information until the correction or deletion is completed.

4. The exercise of the right under paragraph 1 may be conducted through a legal representative of the data subject or a person delegated by it. In such cases, a power of attorney shall be submitted in attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.

5. The right of the information subject may be restricted under Article 35 (5) and Article 37 (2) of the Personal Information Protection Act to request the suspension of personal information access and processing

6. Request for correction and deletion of personal information cannot be requested if the personal information is specified as a target for collection in other statutes.

7. The company checks whether the person who made the request is himself or a legitimate agent, such as a request for reading, a request for correction or deletion, or a request for suspension of processing.

Article 7 (Measures to ensure the safety of personal information)

The company is taking the following measures to ensure the safety of personal information.

1. Management measures: Establishment and implementation of internal management plans, regular employee training, etc.

2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.

3. Physical measures: Access control of computer rooms, data storage rooms, etc.

Article 8 (Personal Information Protection Officer and Department in Charge)

The company is responsible for personal information processing, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages of the information subject related to personal information processing.We are taking the following measures to secure the safety of personal information.

1. Person in charge of personal information protection and department in charge

2. The information subject can contact the personal information protection manager and the department in charge of all personal information protection inquiries, complaints, and damage relief that occurred while using the company's service (or business). The company will answer and process the information subject's inquiries without delay.

Article 9 (Personal Information Protection Officer and Department in Charge)

Article 10 (Method of remedy for infringement of rights)

The information subject can inquire about damage relief and counseling for personal information infringement from the institution below. The following institution is separate from the company, so please contact us if you are not satisfied with the company's own personal information complaint handling, damage relief results, or if you need more detailed help.

Article 11 (Liability to Link Sites)

The company can provide users with links to other companies' websites or materials. In this case, the Company has no control over external sites and materials, and cannot be responsible for the usage, integrity, or legality of the services or materials provided therefrom and cannot be guaranteed. If you click the link included in the company to go to the page of another site, please check the policy of the newly visited site because the policy of handling personal information on the site is irrelevant to the company.

Article 12 (Change of Personal Information Processing Policy)

If the contents of the current personal information processing policy are added, deleted, or modified, it will be notified at least 7 days before the revision. However, if there is an important change in user rights, such as the collection and utilization of personal information or the provision of third parties, it shall be notified at least 30 days in advance.

This personal information processing policy will be applied from May the 1st 2025.