CLASSUM Inc. (“Company,” or “we”) establishes and discloses the following Privacy Policy pursuant to Article 30 of the Personal Information Protection Act (the “PIPA”) to protect the personal information of data subject (“Member,” or “you”) and to handle grievances related thereto promptly and amicably. The Company’s Privacy Policy may change from time to time due to changes in relevant laws or internal policies. In the event of any revision to this Privacy Policy, we will post the changes on our website to ensure they are easily readily identifiable.

1. Purpose of Processing Personal Information

We collect the minimum amount of personal information necessary to provide our services and obtain your consent for such collection. The items of personal information we collect are listed below, and they are used only within the scope of the stated purposes. We process personal information for the following purposes and will not use it for any other purpose:

• Performance of Contracts and Service Provision: Fulfillment of contracts regarding service provision, settlement of fees, service delivery, processing of purchases and payments, and member management.
• Member Management: Identity verification for membership services, personal identification, prevention of unauthorized or illegal use, confirmation of intent to enter into a contract, age verification, handling of complaints and grievances, and delivery of notices.
• Marketing and Advertising: Development and improvement of new services (products), delivery of advertising information such as events, analysis of access frequency, and statistics on Members’ service usage.
• Service Environment and Statistics: Restriction on the number of sign-ups, preservation of records for dispute mediation, construction of a privacy-protective service environment, verification of Member satisfaction and goal achievement.
• Grievance Handling: Verification of Member identity, confirmation of grievance details, contact/notification for fact-finding, and notification of processing results.
• Service Inquiries: Management of history regarding service introduction inquiries, brochure requests, webinar applications, and newsletter subscriptions.
• Recruitment: Management of recruitment applications and talent pool registration.

2. INFORMATION We Process

A. We process the following personal information with your consent pursuant to Article 15(1)(1) of the PIPA:

[Institutional Sign-up] Mandatory: Name, email address, password, education history, affiliated institution information Optional: Profile picture, nickname, employee/student ID, department/major

[Sign-up via External Services] ① Google: Google ID, email address ② Apple: Apple ID, email address (collected only once upon selection) ③ Naver: Whale ID, email address | Until termination of service contract or membership withdrawal. (However, if claims or obligations remain, until such matters are settled) | | CLASSUM Service | Management of affiliate content user information | Mandatory: Name, email address Optional: Affiliated institution, profile picture, course name, progress rate (%), recipient name, shipping address, mobile phone number | Until termination of service contract or membership withdrawal. (However, if claims or obligations remain, until such matters are settled) | | CLASSUM Service | Collection of information necessary for textbook delivery within partner content | Mandatory: Recipient name, shipping address, mobile phone number | Until withdrawal from the content provider's service (Unless the content provider specifies a separate period in their privacy policy) | | Telta Service | Diagnosis/evaluation performance, result analysis, report generation | Optional: Name, employee ID number, email | Until termination of service contract or membership withdrawal. (However, if claims or obligations remain, until such matters are settled) | | Connect Service | Chat Consultation | [Non-linked Institutions] Mandatory: Name, contact information [Manager Sign-up] Mandatory: Name, email, password Optional: Department | Until termination of service contract or membership withdrawal. (However, if claims or obligations remain, until such matters are settled) | | Inquiries | Management of information for service introduction inquiries | Mandatory: Name, email address, mobile phone number, affiliation Optional: None | Destroyed 5 years after collection | | Brochure Request | Management of service brochure applicants | Mandatory: Name, email address, mobile phone number, affiliation, job title, company type Optional: None | Destroyed 5 years after collection | | Webinar Application | Management of attendees for webinars hosted by us | Mandatory: Name, email address, mobile phone number, affiliation, job title, company type Optional: None | Destroyed 5 years after collection | | Newsletter Subscription | Management of newsletter inquiry information | Mandatory: Email address | Until consent is withdrawn or service is terminated | | Recruitment | Applicant identification and registration, confirmation of intent to apply, notifications regarding the recruitment process, and response to inquiries | Mandatory: Name, date of birth, gender, contact information, address (up to town/dong), email, source of application, total years of experience, work history, education history, application documents (Resume, CV, etc.) Optional: Other supporting documents (Portfolio) | Retained for 3 years after submission, then destroyed | | Talent Pool Registration | Talent Pool (DB) registration for constant recruitment, applicant identification, notifications regarding future recruitment, and response to inquiries | Mandatory: Name, email, contact information, source of application, total years of experience, desired role, application documents Optional: Other supporting documents (Portfolio) | Retained for 3 years after submission, then destroyed | | Device Information | Service provision, statistics, and service quality improvement | Device ID, access IP information, Advertising ID (AAID, IDFA, etc.), cookies, visit date and time, service usage logs | Until membership withdrawal (However, communication confirmation data such as access logs are retained for 3 months in accordance with relevant laws) |

3. Processing and Retention Period of Personal Information

A. We process and retain personal information within the retention and usage period consented to by you upon collection, or within the retention and usage period prescribed by law.

B. Specific processing and retention periods are as follows:

• Prevention of Fraudulent Sign-up/Use: In the event of records indicating fraudulent use, such as fraudulent sign-up, leakage of posts, or ID sharing, authentication information (email or Facebook unique number; in the case of Members under 14, legal guardian's email and mobile phone number) will be destroyed within 5 days from the withdrawal date.