Privacy Policy

This is an English translation provided for reference only. The Korean version prevails in case of any discrepancy.

Article 1 (General Provisions)

Octoev Inc. (the "Company") complies with the Personal Information Protection Act and other applicable laws, and establishes and discloses this Privacy Policy to process users' personal information lawfully and securely.

Article 2 (Items of Personal Information Collected and Method of Collection)

The Company collects the following items through the inquiry and demo-request forms on its website.

• Required: company/organization name, contact name, phone, email, inquiry content
• Optional: solution of interest

Article 3 (Purpose of Collection and Use)

• Consultation and responses regarding adoption and demo inquiries
• Provision of guidance materials to support solution adoption review

Article 4 (Retention and Use Period)

Collected personal information is destroyed without delay after the inquiry is processed. However, where retention is required by applicable law, it is kept for the period specified by that law.

• Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

Article 5 (Provision to Third Parties)

The Company does not, in principle, provide users' personal information to external parties. Exceptions apply where required by law or where an investigative authority so requests in accordance with legally prescribed procedures for investigative purposes.

Article 6 (Outsourcing of Personal Information Processing)

To respond to inquiries smoothly, the Company outsources personal information processing as follows.

• Processor: Microsoft Corporation — Task: delivery of inquiry-receipt notifications (Microsoft Teams)

Article 7 (Rights of the Data Subject and How to Exercise Them)

Users may at any time request access to, correction, deletion, or suspension of processing of their personal information. Such requests may be made in writing, by phone, or by email using the contact below, and the Company will act without delay.

Article 8 (Procedure and Method of Destruction)

The Company destroys personal information without delay once the retention period has elapsed or the processing purpose has been achieved. Electronic files are deleted by technical means that make recovery impossible, and paper documents are shredded or incinerated.

Article 9 (Measures to Ensure Security)

• Minimization and management of access privileges to personal information
• Access control for systems that process personal information
• Security measures for the safe transmission of personal information

Article 10 (Personal Information Protection Officer)

• Personal Information Protection Officer: CEO Nakhyun Kong
• Contact: +82-2-6956-3312 / contact@octoev.com

Article 11 (Changes to this Policy)

Where the content of this policy is added to, deleted, or amended, notice will be given via the website at least 7 days before the change takes effect.

Effective date: July 3, 2026