Jedo Partners

Jedo Partners Privacy Policy

Effective: July 15, 2026

Jedo Partners (the "Company") establishes and discloses this privacy policy in accordance with Article 30 of the Personal Information Protection Act of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information will not be used for any purpose other than those listed below, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act. 1. Receiving and responding to website inquiries: confirming inquiries such as advisory requests, partnership proposals, and demo requests; providing answers and consultation; and notifying the results

Article 2 (Items of Personal Information Collected and Collection Method)

1. Items collected The Company collects the following personal information through the "Contact" form on the website. - Required: name, email - Optional: organization, area of interest (inquiry details) - Legal basis: Article 15(1) of the Personal Information Protection Act 2. Collection method - Voluntary entry and submission by users through the contact form on the website

Article 3 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention and use period prescribed by law or the period consented to by the data subject at the time of collection. ② The specific processing and retention periods are as follows. - Website inquiry handling: until the purpose of use is achieved or the customer withdraws consent. However, if a dispute, investigation, or inquiry related to a violation of relevant laws is in progress, the information is retained until the relevant procedure is concluded.

Article 4 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope specified in Article 1 (Purposes of Processing), and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under special legal provisions. The Company currently does not provide personal information to any third party.

Article 5 (Outsourcing and Overseas Transfer of Personal Information Processing)

① The Company outsources the following personal information processing tasks to handle its work smoothly. - Contractor: Notion Labs, Inc. - Outsourced task: storage and management of personal information collected through the contact form (database operation) - Retention and use period: until the outsourcing contract ends or the retention period under Article 3 expires ② The above contractor is located overseas (United States), so personal information collected by the Company is transferred abroad for processing. In accordance with Article 28-8 of the Personal Information Protection Act, the following information is provided. - Items transferred: name, email, organization, area of interest (inquiry details) - Destination country: United States - Time and method of transfer: transmission over the network when the contact form is submitted - Recipient: Notion Labs, Inc. - Recipient's purpose of use and retention period: storage and management of inquiry data, until the outsourcing contract ends ③ When concluding outsourcing contracts, the Company specifies in the contract, pursuant to Article 26 of the Personal Information Protection Act, matters such as the prohibition of processing personal information beyond the outsourced purpose, technical and managerial safeguards, restrictions on re-outsourcing, management and supervision of the contractor, and liability for damages, and supervises whether the contractor processes personal information safely. ④ Data subjects may refuse the overseas transfer of their personal information by withholding consent to the transfer. If you refuse the overseas transfer, storage and processing of your data will not be possible, and all or part of the service may inevitably be unavailable.

Article 6 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)

① Data subjects may exercise the following privacy-related rights against the Company at any time. 1. Request access to personal information 2. Request correction of errors 3. Request deletion 4. Request suspension of processing ② The rights under paragraph ① may be exercised in writing or by email, and the Company will act on such requests without delay. ③ The rights may be exercised through an agent, such as the data subject's legal representative or an authorized person. In this case, a power of attorney in the form of Annex Form No. 11 of the Notification on the Method of Disclosing Privacy Policies must be submitted.

Article 7 (Procedure and Method of Destroying Personal Information)

① The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the purpose of processing. ② Destruction procedure: information entered by users is, after the purpose has been achieved, moved to a separate database (or a separate filing cabinet) and stored for a certain period in accordance with internal policy and relevant laws, or destroyed immediately. ③ Destruction method: personal information recorded and stored in electronic file format is deleted using technical methods that make the records unrecoverable.

Article 8 (Measures to Ensure the Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information. 1. Managerial measures: minimizing and training staff who handle personal information 2. Technical measures: managing access rights to personal information processing systems, installing access control systems, and encrypting unique identification information 3. Physical measures: access control devices for areas where personal information processing systems are installed

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

The website currently does not use cookies or visitor analytics tools (e.g., Google Analytics). If such tools are introduced in the future, this article will be revised and notice will be given.

Article 10 (Privacy Officer)

The Company designates the following privacy officer to take overall responsibility for personal information processing and to handle complaints and provide remedies for data subjects in relation to personal information processing. ▶ Privacy Officer - Name: Daejin Hwang - Title: CEO - Email: djhwang@jedo.kr Data subjects may contact the privacy officer regarding any privacy-related inquiries, complaints, or requests for remedy arising from the use of the Company's services (or business). The Company will respond to and handle such inquiries without delay. For other reports or consultations regarding privacy infringements, please contact the following organizations. 1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) 2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr) 3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr) 4. National Police Agency: 182 (ecrm.police.go.kr)

Article 11 (Changes to the Privacy Policy)

This privacy policy applies from its effective date. When there are additions, deletions, or corrections in accordance with laws or internal policy, notice will be given through announcements at least 7 days before the changes take effect.

Announced: July 15, 2026

Effective: July 15, 2026