Article 1 Consent to Collection of Personal Information and Collection Method StyleAI Inc. ("Company") provides information about the collection and processing of personal information during the membership registration and login process. By signing up for membership, users are deemed to have agreed to the collection and use of their personal information in accordance with this Privacy Policy.

Article 2 Personal Information Items Collected and Purpose of Using Personal Information “Personal Information” means information on living persons and refers to their names, resident registration numbers, or any other information that identifies such persons. (Even if such information alone cannot identify a certain person, such information that can be easily combined with other information and be used to identify such a person.)

The Company has the following purposes for collecting and using customers’ personal information:

Personal information of general members

• Time of collection: During membership registration and service use
• Mandatory collection items: E-mails
• Purpose of using personal information: Customer consulting for the use of services
• Retention period: Immediately deleted upon withdrawal of membership or retained for three (3) years for purchasing members

Order information (including members and non-members)

• Time of collection: Upon placing orders
• Mandatory collection items: Information of customers placing orders (name, e-mail), payment approval information
• Optional collection items: Delivery of messages
• Purpose of using personal information: Payment processing via Stripe
• Retention period: Retained for three (3) years

Article 3 Collection of Personal Information via Cookies The Company may install and operate cookies that store and frequently retrieve customers’ information. A cookie means a small amount of text files that a website sends to users’ computer browsers.

Purposes of using cookies:

• Providing differentiated information, depending on individuals’ interests
• Analyzing the access frequency or staying time of users, identifying users’ tastes and interests, and using them for target marketing and as a measure for service improvement
• Tracing the information on items purchased and items to which users pay attention, and providing tailor-made services

Operation of cookies and rejection of cookies Cookies are stored at the hard disk of users’ computers. Cookies identify users’ computers but do not personally identify users. In addition, customers may accept or reject all cookies, or go through checks whenever cookies are stored by changing settings on their web browser. However, if customers refuse to store cookies, they may not use some services that require them.

Method for changing settings to reject cookies

• Internet Explorer: Tools > Internet Options > Personal Information tab
• Chrome: Menu icon > Settings > Advanced Settings > Contents Setting button > Cookies section

Article 4 Periods of Retaining and Using Personal Information and Destruction of Personal Information Customers’ personal information shall be destroyed without any delay after the purposes of collection and use of their personal information have been fulfilled. However, if customers’ personal information needs to be retained for a certain period of time for legal obligations, it shall be retained for the specified period:

• Records on contracts or withdrawal of offers: Retained for three (3) years
• Records on payments and the supply of goods: Retained for three (3) years
• Records on the resolution of customers’ complaints or disputes: Retained for three (3) years

Destruction Procedure:

• The information entered for membership sign-up shall be transferred to a separate database, stored for a certain period in accordance with internal guidelines and legal requirements, and then destroyed.
• Personal information printed on paper shall be shredded or burned.
• Personal information in electronic file format shall be permanently deleted using technological methods.

The Company shall give dormant members (who have not used services for the last twelve (12) months) a notice on the forfeiture of membership. If such members fail to reply, their personal information may be stored separately and destroyed after the statutory retention period.

Article 5 Provision of Personal Information for Third Parties The Company shall neither use customers’ personal information nor provide such information for other persons, companies, and institutions beyond the scope of Article 2.

Exceptions:

• When customers’ personal information is required by relevant institutions for investigative purposes in accordance with relevant statutes.
• When personal information is provided in a form that cannot identify individuals for advertisers, suppliers, or research organizations.
• When required by law or legal procedures.

Article 6 Outsourcing of Personal Information Processing

• Hosting: Amazon Web Services
• Payment Processing: Stripe

Article 7 Access and Modification of Personal Information Customers may access or modify their personal information registered on the website at any time. If an error is found, personal information shall neither be used nor provided until it is corrected. If incorrect personal information has already been provided to a third party, the Company shall notify them of the correction.

Article 8 Withdrawal of Consent to Collection, Use, and Provision of Personal Information Customers may withdraw their consent to the collection, use, and provision of their personal information at any time. Withdrawal requests can be made via the Personal Information Management Menu on the website or by contacting the Chief Privacy Officer. Upon withdrawal, personal information will be deleted, and the Company will notify the customer of such actions.

Article 9 Measures for Ensuring the Security of Personal Information The Company takes technological, administrative, and physical measures required to ensure the security of personal information.

Encryption: User passwords and important data are encrypted and stored securely.

Security Measures: Regular updates and security checks are performed to prevent hacking and unauthorized access.

Article 10 Protection of Personal Information of Children Under Fourteen Years of Age The Company does not allow children under fourteen years of age to apply for membership. If a child under this age provides personal information, their legal guardian may request removal.

Article 11 Chief Privacy Officer The Company appoints the following Chief Privacy Officer responsible for handling personal information and addressing complaints:

▶ Chief Privacy Officer

Name: Hajeong Baek

Title: CEO

Contact: jake@styleai.io

Article 12 Modification of the Guideline on Personal Information Processing This Privacy Policy shall take effect on its effective date. Any additions, deletions, or corrections will be announced via notices seven (7) days prior to effectuation.

Addendum This Privacy Policy shall take effect on 01-01-2025

‍