Article 1 (Purpose of Collection and Use of Personal Information)

The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, we will take necessary measures such as obtaining separate consent.

1. Member Registration and Management

   Confirming intent to sign up as a Member, identifying and authenticating identity for membership-based services, maintaining and managing Member status, preventing fraudulent use of services, etc.

2. Service Provision

   Showcase and Recipe registration and sharing, community board usage, Profile management, Follow/Follower features, Notifications service, and more

3. Service Improvements

   New service development and personalized service provision, service usage statistics and analysis

Article 2 (Categories of Personal Information Collected)

1. Information Collected During Member Registration

2. Information Collected During Service Use (Optional)

3. Information Automatically Collected During Service Use

• Access IP address, browser type, access date and time
• Service usage history, access logs
• Cookie and Local Storage Information

Article 3 (Retention and Use Period of Personal Information)

1. The Company processes and retains personal information within the retention and use period required by law or the retention and use period consented to by the data subject at the time of personal information collection.
2. Upon withdrawal of membership, account information is immediately destroyed or anonymized so that a specific individual cannot be identified or the information restored. Posts and comments written by the member are not deleted, but the author display is changed to anonymous. However, where retention is required under relevant laws, the information is retained for the period prescribed by such laws.
   • Records related to contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Records of payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Website visit records: 3 months (Telecommunications Privacy Act)

Article 4 (Provision of Personal Information to Third Parties)

1. As a rule, the Company processes users' personal information within the scope of purposes specified in Article 1, and does not process it beyond the original scope or provide it to third parties without the prior consent of the data subject.
2. However, we may provide personal information to third parties in the following cases.
   • When we have obtained separate consent from the data subject
   • When there are special provisions in applicable laws and regulations
   • When the data subject or their legal representative is unable to express their intent or prior consent cannot be obtained due to unknown address or similar reasons, and it is clearly recognized as necessary for the urgent benefit of the life, body, or property of the data subject or a third party

Article 5 (Entrustment of Personal Information Processing)

To ensure smooth processing of personal information, we entrust the following personal information processing tasks as follows.

When entering into an outsourcing agreement, the Company stipulates in the contract that the outsourced company shall process personal information securely, and supervises the outsourced company's handling of personal information. The outsourcing period lasts until the outsourcing agreement terminates or the member withdraws.

Article 5-2 (Overseas Transfer of Personal Information)

The Company stores service data on servers located in the Republic of Korea (Seoul). However, in the following cases, personal information is processed outside the country.

Time and method of transfer: Transferred through the information and communications network at the time the member uses the service.

Members may refuse the overseas transfer of their personal information. To refuse, please contact the Personal Information Protection Officer below. However, the above processing is necessary for providing the service, and refusal may result in restricted use of the service.

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

1. Data subjects may exercise the following personal information protection rights with the Company at any time.
   • Request to Access Personal Information
   • Request corrections if there are errors
   • Request Deletion
   • Request to Stop Processing
   • 동의에 근거한 처리에 대한 동의 철회. 전체 회원탈퇴 없이 privacy@ww-w.ai로 해당 동의의 철회를 요청할 수 있습니다. 철회에 따른 영향과 법령상 계속 보관해야 하는 정보가 있으면 그 사유를 안내합니다.
2. You can exercise the above rights through the settings menu within the service, or via written request, phone, or email, and we will take action without delay.
3. If a data subject requests correction or deletion of errors in their personal information, the company will not use or provide that personal information until the correction or deletion is complete.
4. You may exercise your rights through a legal representative or an authorized agent, such as someone you've delegated. In this case, you must submit a power of attorney following the format specified in Annex No. 11 of the "Notice on Personal Information Processing Methods."

You may withdraw your membership directly from within the service under Settings > Account > Withdraw Membership. Upon withdrawal, account information is immediately anonymized and cannot be recovered.

Right to Automated Decisions

The Company does not make automated decisions using personal information that have a legal effect on, or otherwise significantly affect, data subjects. If the Company introduces such decisions in the future, it will disclose the criteria and procedures in advance through this Privacy Policy.

Article 7 (Destruction of Personal Information)

1. When personal information is no longer needed—such as when the retention period has expired or the purpose of processing has been achieved—the Company will promptly delete that personal information.
2. The procedures, timeframes, and methods for destruction are as follows.
   • Deletion Process: Personal information whose retention period has elapsed or whose processing purpose has been achieved is destroyed without delay. In the case of membership withdrawal, account identification information (email, username, social login identifier) is immediately replaced with irrecoverable values, and profile information is deleted.
   • Method of Destruction: Information in electronic file format is handled using technical methods that make records irreproducible.

Article 8 (Operation and Rejection of Cookies)

1. The Company uses "cookies" that store and retrieve usage information from time to time in order to provide users with individually customized services.
2. Cookies are small pieces of information that a website's server sends to your computer's browser and may be stored on your PC's storage device.
   • Purpose of Cookie Use: Providing optimized services by maintaining user login status, tracking visit history, and understanding usage patterns
   • Cookie Installation, Operation, and Rejection: You may refuse to allow cookies to be stored through the privacy or security settings menu of your browser. The location of these settings varies by browser.
   • If you refuse to store cookies, you may experience difficulties using personalized services.

Article 9 (Security Measures for Personal Information)

We take the following measures to ensure the security of your personal information.

1. Administrative Measures: Establishing and implementing internal management plans, minimizing staff handling personal information, and providing training
2. Technical Measures: Access control management for personal information processing systems, encryption of Unique Identification Information, and installation of security programs
3. Physical Measures: Access control for server rooms, data storage facilities, etc.

Article 10 (Privacy Officer)

The Company has designated a Privacy Officer as shown below to oversee all matters related to personal information processing and to handle complaints and provide remedies for data subjects regarding personal information processing.

Article 11 (Remedies for Rights Infringement)

If your personal information has been violated, you can file for dispute resolution or request consultation with organizations like the Personal Information Dispute Mediation Committee or the KISA Personal Information Infringement Report Center.

• Personal Information Dispute Mediation Committee: 1833-6972 (toll-free) (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (toll-free) (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 (without area code) (www.spo.go.kr)
• National Police Agency: 182 (toll-free) (ecrm.cyber.go.kr)

Article 12 (Changes to the Privacy Policy)

This Privacy Policy applies from __ __, 2026. If there are changes to the contents of this Privacy Policy, the changes will be posted, and the amended Privacy Policy shall take effect 7 days after the date of posting. However, in the event of a material change to users' rights, such as a change in the items of personal information collected or the purpose of use, we will provide notice at least 30 days in advance. However, if the data controller changes due to a transfer of business, merger, or similar event, we will notify you without delay in accordance with the relevant laws.

Supplementary Provisions

This Privacy Policy shall take effect from __ __, 2026.

Where the notice procedures under the previous Policy apply to this amendment, the Company complies with them and does not retroactively apply the new amended provisions. The scheduled effective date of the amendment does not indicate the date on which personal information was transferred in the past.