Piki strictly complies with Korean laws and regulations on the protection of personal information, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Act, from service planning to completion. Additionally, Piki adheres to international standards such as the OECD Privacy Guidelines when providing services.

Article 1 Overview and Purpose of Privacy Policy

Piki collects, uses, and provides personal information based on the user's consent, and actively guarantees the user's rights (right to self-determination of personal information) by obtaining consent for SNS reception.
Piki also complies with Korean laws and regulations related to information and communication service providers and personal information protection, as well as guidelines.
The "Privacy Policy" means the guidelines that Piki must follow to protect the user's valuable personal information so that the user can use the service with peace of mind.
This privacy policy applies to all Piki services.

Article 2 Collection of Personal Information (Essential Information)

We collect the minimum amount of personal information necessary to provide our services.

1. ① Piki operates in conjunction with XTRION, and users can log in and use the service with the same XTRION integrated account ID and password (P/W). The company notifies users of the integrated operation at the time of membership registration, and provides services only to members who agree to it.
2. ② "Member" refers to a user who registers as a member by providing personal information to the company.
3. ③ Users can agree to the collection of their personal information by indicating their agreement through online or offline means, in accordance with the company's privacy policy. If the user indicates agreement to the collection of personal information, it is considered that the user has agreed to the collection.

Piki collects the minimum amount of personal information necessary to provide the following services through the website or individual applications or programs during membership registration or service use.

When a user signs up for an XTRION integrated membership or uses the Piki service, the following personal information is collected:

1) XTRION account

[Required] email, password, agreement to the terms of use, agreement to the privacy policy
[Upon verification of identity] user confirmation value (CI) sent to email, duplicate registration confirmation information (DI)

2) Piki service

[Required] user name (nickname), IMEI (safely converted unique information of the user's device)
[Optional] profile picture, brief introduction, personal location information (information about the location based on SIM card, GPS, and IP address)

For some services, additional personal information may be collected with user consent, in addition to the information collected in the "Piki account", to provide specialized functions.

*Required items refer to information necessary to perform the essential functions of the service, and optional items refer to information collected additionally to provide additional value to the user, which does not affect the use of the service itself.

Article 3. Methods of Collecting Information

When collecting personal information, we always inform and obtain consent from our members in advance, and collect personal information through the following methods:

1. 1) When a user agrees to the collection of personal information and inputs it directly during the membership registration or service usage process
2. 2) When personal information is provided by affiliated services or organizations
3. 3) During the consultation process through the customer center, web pages, email, fax, and telephone
4. 4) During the online and offline events/participation, etc
5. 5) Generated information such as device information is automatically generated and collected during the PC web, mobile web/app usage process

The personal information is collected during the execution or use of the program, or through a tool for collecting generated information, and some information is collected through telephone, 1:1 inquiries, and email.

Article 4. Use of Collected Personal Information (mandatory information)

We use personal information only for the following purposes: member management, service improvement, and development of new services. Members' personal information is used for identification within the service, inviting acquaintances, providing postings, and providing specific customized services.

In addition, it is used for personal identification and confirmation, preventing unauthorized or fraudulent use in all services provided by the company, verifying intent to join and preventing duplicate membership, preserving records for dispute resolution, handling complaints and other civil complaints, notifying important announcements, and managing members in various ways.

Furthermore, it can be used for developing new services related to all services provided by the company, providing customized services according to statistical characteristics, advertising, confirming the validity of services, providing opportunities to participate in events, providing promotional information, identifying access frequency, and providing various marketing and advertising based on members' service usage statistics.

XTRION shares your information with related group companies. Piki does not share your data with third parties without your prior consent, except for the purposes mentioned above.

Article 5 Scope and Application of Personal Information Protection Policy

You agree to the processing of your information in accordance with this personal information protection policy. This Piki service may include additional personal information-related provisions that you must agree to if you wish to use this service. This personal information protection policy does not apply to information that you choose to disclose or submit for the following:

1. 1) Services other than Piki that are not explicitly covered by this personal information protection policy
2. 2) Third-party services (including all third-party websites) accessible through Piki or companies or organizations advertising products or services on Piki

If you use Piki on behalf of a company, partnership, or other organization, you agree to notify the relevant individuals, including the personal owners, directors, executives, managers, employees, and other related persons of your organization, that we may collect or that you may provide their personal information to us from time to time, and agree to comply with this personal information protection policy in accordance with applicable laws and regulations to obtain the consent of your relevant individuals in processing their personal information. When this personal information protection policy refers to "you," it includes you and all related individuals.

Article 6 Disposal of Personal Information

The period during which your information is kept will be permanently stored on the blockchain. Once a record is stored in a block, it cannot be modified or deleted due to the characteristics of blockchain. If you request to delete your Piki account, your information will be permanently stored on a block after verification and initialization, and the company or others will not be able to access it on the block forever.

The company will dispose of the user's personal information without delay when the user withdraws from membership or the purpose of use is achieved. However, if the user has given separate consent for the retention period of personal information or if the law imposes an obligation to retain information for a certain period, the personal information will be safely stored during that period.

Even for information that is required to be retained by law, it will be disposed of in an irretrievable manner after the specified period has elapsed. In the case of electronic files, they will be safely deleted to prevent recovery and reproduction, and in the case of output materials, they will be destroyed by shredding or burning.

Article 7 Rights of Users and Legal Representatives and How to Exercise Them

Users can view, modify, or delete their personal information and request to access their personal information at any time through "My Account" for each service.

Users may also request the suspension of the processing of personal information, but in cases where there are special provisions in the law, the request for suspension may be refused. Users may revoke their consent to the collection and use of personal information at any time through "Withdrawal of Membership" or other means.

If a user requests correction of personal information errors, the information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will promptly notify the third party of the correction results so that the correction can be made.

Article 8 Efforts for Personal Information Protection

We are making every effort to securely manage users' personal information and are protecting personal information beyond the level required by the Personal Information Protection Act.

1. 1) We have established and implemented an internal management plan for personal information protection. This includes the appointment of a personal information protection officer, the organization and operation of the personal information protection organization, and the establishment of an internal management plan for personal information. We also regularly review the implementation of the internal management plan to ensure its effectiveness.
2. 2) We are implementing access control and access restriction measures for personal information. We have established and implemented standards for granting, changing, and revoking access permissions to the personal information processing system to prevent unauthorized access. We also install and operate intrusion prevention and detection systems, and limit the number of employees who handle personal information. For employees who have access to the personal information processing system and can download personal information, we separate the internal network and the external internet network to minimize the risk of personal information leakage.
3. 3) We are encrypting personal information to ensure secure storage and transmission. In addition to encrypting passwords and unique identifiers required by law, we also encrypt email addresses for storage. We use encrypted communication to securely transmit personal information over the network.
4. 4) We are taking measures to store and prevent forgery or alteration of personal information access logs. We store and manage records of personal information handlers who access the personal information processing system, and regularly check access logs to prevent misuse, loss, forgery, or alteration of personal information. We also securely store access logs to prevent tampering, theft, or loss of personal information handlers' access logs.
5. 5) We have installed and updated security programs for personal information protection. We back up data regularly to prepare for personal information damage, and use the latest antivirus software to prevent leakage or damage to users' personal information or data.
6. 6) We are implementing physical measures to ensure the secure storage of personal information.

To prevent hacking or computer viruses that may cause personal information leakage or damage, we have installed systems in areas that are restricted from external access and have established and implemented access control procedures.

Article 9 Processing of Personal Location Information

We safely manage the user's personal location information in accordance with the law on protection and use of location information.

1. 1) Purpose and retention period for processing personal location information
   For most location-based services, personal location information is disposed of immediately after one-time or temporary use. However, in the case of services like "GeoTagging," where users post or store personal location information along with their posts or content on Piki service, the personal location information is stored during the storage period of the relevant post or content.
   The purposes of processing personal location information for providing location-based services are as follows:
1. 1. GeoTagging service: The location information of the personal location information subject or the mobile device with mobility, included in the post or content that the user saves, is stored along with the post or content. The stored location information may be retained without separate use, or it may be used to classify or search for posts based on location.
2. 2. Providing search results and posts based on location information: When a user requests information search or provides location information of the personal location information subject or mobile device with mobility, the search results using this location information are provided.
3. 3. Protection of users and prevention of unauthorized use: The location information of the personal location information subject or mobile device with mobility is used to block attempts by unauthorized users to use the service abnormally.
2. 2) Basis for retaining confirmation materials of personal location information collection, use, and provision, and retention period
   Based on Article 16, Paragraph 2 of the law on protection and use of location information, we automatically record the confirmation materials of the user's location information collection, use, and provision on the location information system and retain them for more than 6 months.
3. 3) Procedure and method for disposing of personal location information
   Once the purpose of processing personal location information is achieved, we safely dispose of it in an irreproducible manner. Electronic files are destroyed using technical methods that make recovery and reproduction impossible, while physical outputs are shredded or incinerated.
4. 4) Matters related to providing personal location information to third parties and notifying users
   We do not provide personal location information to third parties without the user's prior consent. If we provide personal location information to a third party designated by the user, we immediately notify the personal location information subject of the recipient, date, and purpose of the provision.

Article 10 Scope of Application of Privacy Policy

This Privacy Policy applies to Piki and related services, including mobile web/apps. If personal information is collected from other services, this Privacy Policy does not apply after the personal information is provided with the user's consent.

Article 11 Notice of Revision

If there are additions, deletions, or modifications to this Privacy Policy, we will provide prior notice through the "Notice" section at least 7 days before the revision. However, if there is a significant change in user rights, such as a change in the collection items of personal information or purpose of use, we will provide notice at least 30 days in advance and may obtain user consent again if necessary.
In order to provide a pleasant Piki service, we need the consideration, understanding, and cooperation of our members. In the future, within the scope of this agreement, Piki will support members to use our services stably and smoothly by setting up feed operating policies, terms and conditions or operating policies for each individual service, and providing guidance, notices, and customer service help on each service.

Supplementary Provisions

1. ① This agreement shall apply on the 07th day of the 04th month of 2023.
2. ② The previous terms and conditions that were in effect on the 07th day of the 04th month of 2023 shall be replaced by this agreement.