Piki Market strictly complies with Korean laws and regulations on the protection of personal information, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Act, from service planning to completion. Additionally, Piki Market adheres to international standards such as the OECD Privacy Guidelines when providing services.

Article 1 Overview and Purpose of Privacy Policy

Piki Market collects, uses, and provides personal information based on the user's consent, and actively guarantees the user's rights (right to self-determination of personal information) by obtaining consent for SNS reception.
Piki Market also complies with Korean laws and regulations related to information and communication service providers and personal information protection, as well as guidelines.
The "Privacy Policy" means the guidelines that Piki Market must follow to protect the user's valuable personal information so that the user can use the service with peace of mind.
This privacy policy applies to all Piki Market services.

Article 2 Collection of Personal Information (Essential Information)

1. ① Piki Market operates in conjunction with XTRION, and users can log in and use the service with the same XTRION integrated account ID and password (P/W). The company notifies users of the integrated operation at the time of membership registration, and provides services only to members who agree to it.
2. ② "Member" refers to a user who registers as a member by providing personal information to the company.
3. ③ Users can agree to the collection of their personal information by indicating their agreement through online or offline means, in accordance with the company's privacy policy. If the user indicates agreement to the collection of personal information, it is considered that the user has agreed to the collection.

Piki Market collects the minimum amount of personal information necessary to provide the following services through the website or individual applications or programs during membership registration or service use.

1) XTRION account

[Required] email, password, agreement to the terms of use, agreement to the privacy policy
[Upon verification of identity] user confirmation value (CI) sent to email, duplicate registration confirmation information (DI)

2) Piki service

[Required] Email (ID), user name (nickname), Contact information (mobile phone number),IMEI (safely converted unique information of the user's device), Service usage history, purchase and payment history within the service
[Optional] profile picture, brief introduction, personal location information (information about the location based on SIM card, GPS, and IP address), Phone number registered in the address book of the terminal device (phone numbers in the address book are used only for automatic addition of friends, friend recommendation suggestions, and prevention of unauthorized use), delivery address information (recipient name, delivery address, phone number)

3) Upon consent of legal representative

Legal representative information (name, gender, date of birth, mobile phone number, communication service provider, domestic/foreigner status, encrypted user confirmation value (CI), duplicate subscription confirmation information (DI)

4) Use of paid services

[When paying by credit card] Card number (partially), card company name, etc.

During the process of using PC web and mobile web/app, information such as terminal information (OS, screen size, device ID, phone model, terminal model name), IP address, cookie, visit date and time, illegal use record, service use record, etc. is automatically generated. and can be collected.

*Required items refer to information necessary to perform the essential functions of the service, and optional items refer to information collected additionally to provide additional value to the user, which does not affect the use of the service itself.

For some services, additional personal information may be collected with user consent, in addition to the information collected in the "Piki account", to provide specialized functions.

Article 3. Methods of Collecting Information

When collecting personal information, we always inform and obtain consent from our members in advance, and collect personal information through the following methods:

1. 1) When a user agrees to the collection of personal information and inputs it directly during the membership registration or service usage process
2. 2) When personal information is provided by affiliated services or organizations
3. 3) During the consultation process through the customer center, web pages, email, fax, and telephone
4. 4) During the online and offline events/participation, etc
5. 5) Generated information such as device information is automatically generated and collected during the PC web, mobile web/app usage process

The personal information is collected during the execution or use of the program, or through a tool for collecting generated information, and some information is collected through telephone, 1:1 inquiries, and email.

Article 4. Use of Collected Personal Information (mandatory information)

We use personal information only for the following purposes: member management, service improvement, and development of new services. Members' personal information is used for identification within the service, inviting acquaintances, providing postings, and providing specific customized services.

1. - Member identification/confirmation of intent to join, identity/age verification
2. - When collecting personal information of children under the age of 14, confirm whether the legal representative consents, and confirm the identity when exercising the legal representative right.
3. - Providing user-to-user message sending, friend registration, and friend recommendation functions
4. - Provides functions such as informing friends of activity details or user search and registration
5. - Transmission of content, delivery, and settlement of fees when using paid services
6. - Prevention and sanctions against actions that interfere with the smooth operation of the service (including account theft and fraudulent use)
7. - Developing new services and improving service functions, providing personalized services, and establishing a service environment to protect privacy

In addition, it is used for personal identification and confirmation, preventing unauthorized or fraudulent use in all services provided by the company, verifying intent to join and preventing duplicate membership, preserving records for dispute resolution, handling complaints and other civil complaints, notifying important announcements, and managing members in various ways.

Furthermore, it can be used for developing new services related to all services provided by the company, providing customized services according to statistical characteristics, advertising, confirming the validity of services, providing opportunities to participate in events, providing promotional information, identifying access frequency, and providing various marketing and advertising based on members' service usage statistics.

XTRION shares your information with related group companies. Piki Market does not share your data with third parties without your prior consent, except for the purposes mentioned above.

Article 5 Scope and Application of Personal Information Protection Policy

You agree to the processing of your information in accordance with this personal information protection policy. This Piki Market service may include additional personal information-related provisions that you must agree to if you wish to use this service. This personal information protection policy does not apply to information that you choose to disclose or submit for the following:

1. 1) Services other than Piki Market that are not explicitly covered by this personal information protection policy
2. 2) Third-party services (including all third-party websites) accessible through Piki Market or companies or organizations advertising products or services on Piki Market

If you use Piki Market on behalf of a company, partnership, or other organization, you agree to notify the relevant individuals, including the personal owners, directors, executives, managers, employees, and other related persons of your organization, that we may collect or that you may provide their personal information to us from time to time, and agree to comply with this personal information protection policy in accordance with applicable laws and regulations to obtain the consent of your relevant individuals in processing their personal information. When this personal information protection policy refers to "you," it includes you and all related individuals.

Article 6 Disposal of Personal Information

Your personal information is permanently stored in the blockchain as encrypted information. However, if you request Piki Market account deletion, after verification of your identity, any personal information matching the encrypted information will be securely deleted so that it cannot be recovered or reproduced. Only encrypted information is stored in the blockchain, making it impossible for companies or third parties to verify personal information.

The company will dispose of the user's personal information without delay when the user withdraws from membership or the purpose of use is achieved. However, if the user has given separate consent for the retention period of personal information or if the law imposes an obligation to retain information for a certain period, the personal information will be safely stored during that period.

Even for information that is required to be retained by law, it will be disposed of in an irretrievable manner after the specified period has elapsed. In the case of electronic files, they will be safely deleted to prevent recovery and reproduction, and in the case of output materials, they will be destroyed by shredding or burning.

Article 7 Rights of Users and Legal Representatives and How to Exercise Them

Users can view, modify, or delete their personal information and request to access their personal information at any time through "My Account" for each service.

Users may also request the suspension of the processing of personal information, but in cases where there are special provisions in the law, the request for suspension may be refused. Users may revoke their consent to the collection and use of personal information at any time through "Withdrawal of Membership" or other means.

If a user requests correction of personal information errors, the information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will promptly notify the third party of the correction results so that the correction can be made.

When processing personal information of children under 14 years of age, we obtain the consent of their legal representative. The legal representative can exercise rights such as viewing, modifying and deleting the child's personal information, suspending processing, and withdrawing consent. In order to obtain the consent of the legal representative, the child may be asked to provide minimum information such as the legal representative's name and contact information, and the legal representative's consent can be confirmed using the method below.

1. - How to confirm your identity through legal representative’s mobile phone identity verification
2. - A method of providing a document containing the consent to the legal representative and having the legal representative sign and seal the document and then submit it.
3. - In addition, a method similar to the above is used to notify the legal representative of the consent and confirm the expression of intent to consent.

Article 8 Efforts for Personal Information Protection

We are making every effort to securely manage users' personal information and are protecting personal information beyond the level required by the Personal Information Protection Act.

1. 1) We have established and implemented an internal management plan for personal information protection. This includes the appointment of a personal information protection officer, the organization and operation of the personal information protection organization, and the establishment of an internal management plan for personal information. We also regularly review the implementation of the internal management plan to ensure its effectiveness.
2. 2) We are implementing access control and access restriction measures for personal information. We have established and implemented standards for granting, changing, and revoking access permissions to the personal information processing system to prevent unauthorized access. We also install and operate intrusion prevention and detection systems, and limit the number of employees who handle personal information. For employees who have access to the personal information processing system and can download personal information, we separate the internal network and the external internet network to minimize the risk of personal information leakage.
3. 3) We are encrypting personal information to ensure secure storage and transmission. In addition to encrypting passwords and unique identifiers required by law, we also encrypt email addresses for storage. We use encrypted communication to securely transmit personal information over the network.
4. 4) We are taking measures to store and prevent forgery or alteration of personal information access logs. We store and manage records of personal information handlers who access the personal information processing system, and regularly check access logs to prevent misuse, loss, forgery, or alteration of personal information. We also securely store access logs to prevent tampering, theft, or loss of personal information handlers' access logs.
5. 5) We have installed and updated security programs for personal information protection. We back up data regularly to prepare for personal information damage, and use the latest antivirus software to prevent leakage or damage to users' personal information or data.
6. 6) We are implementing physical measures to ensure the secure storage of personal information.

To prevent hacking or computer viruses that may cause personal information leakage or damage, we have installed systems in areas that are restricted from external access and have established and implemented access control procedures.

Article 9 Scope of Application of Privacy Policy

This Privacy Policy applies to Piki Market and related services, including mobile web/apps. If personal information is collected from other services, this Privacy Policy does not apply after the personal information is provided with the user's consent.

Article 10 Notice of Revision

If there are additions, deletions, or modifications to this Privacy Policy, we will provide prior notice through the "Notice" section at least 7 days before the revision. However, if there is a significant change in user rights, such as a change in the collection items of personal information or purpose of use, we will provide notice at least 30 days in advance and may obtain user consent again if necessary.
In order to provide a pleasant Piki service, we need the consideration, understanding, and cooperation of our members. In the future, within the scope of this agreement, Piki Market will support members to use our services stably and smoothly by setting up feed operating policies, terms and conditions or operating policies for each individual service, and providing guidance, notices, and customer service help on each service.

Supplementary Provisions

1. ① This Agreement shall apply on December 11, 2023.