Privacy Policy

The Company processes the minimum personal information necessary for the following purposes. The personal information being processed shall not be used for any purpose other than those set out below, and where the purpose of use changes, the Company shall take necessary measures such as obtaining separate consent in accordance with the relevant statutes.

1. Receipt of Website Inquiries and Consultation

1. Verification of the inquirer and the person in charge
2. Confirmation of and response to the inquiry
3. Consultation on the adoption of AI services and solutions
4. Consultation on AI implementation for enterprises and public institutions
5. Handling of inquiries on customized AI solutions and on-premises implementation
6. Handling of inquiries on technical cooperation and business partnership
7. Handling of investment and investor relations inquiries
8. Handling of recruitment-related inquiries
9. Handling of inquiries relating to vouchers and government support programs
10. Handling of demo requests and technical meeting requests
11. Conducting consultations and follow-up contact
12. Handling of complaints and disputes

2. Website Operation and Security

1. Management of Website access and usage records
2. Prevention of abnormal access and improper use
3. Blocking of automated inquiries and spam
4. Response to system failures and security incidents
5. Improvement of Website functions and the user environment
6. Management of inquiry handling history and personal information consent records

3. Visitor Analytics and Website Improvement

Only where the data subject has consented to the use of optional analytics cookies, the Company may process information for the following purposes.

1. Analysis of the number of visitors and access paths
2. Review of usage status by page
3. Improvement of content and user experience
4. Analysis of promotional and campaign performance

1. Personal Information Processed upon Receipt of Inquiries

The Company does not require the entry of unique identifying information or sensitive information that is not necessary for handling inquiries, such as resident registration numbers, passport numbers, driver's license numbers, account numbers, passwords, or health information.

Data subjects shall not include in their inquiries or attachments any personal information of themselves or of third parties that is not necessary for business purposes.

2. Information That May Be Automatically Generated in the Course of Website Use

1. IP address
2. Date and time of access
3. Pages visited
4. Referral path
5. Browser and operating system information
6. Device type
7. Cookie information
8. Service usage records
9. Error and security logs
10. Records of abnormal access and spam blocking

3. Information Not Processed on the Website

Because the YEJIN official website does not directly provide membership registration, login, paid payment, or ZeliAi AI functions, the following information is not processed.

1. Member account and login information
2. Payment information for paid services
3. Subscription, withdrawal of subscription, and refund information
4. ZeliAi AI query and response records
5. AI prompts and generated results
6. Unique identifying information such as resident registration numbers
7. Personal location information

Personal information processed in the course of using the ZeliAi service is governed by the separate privacy policy of the ZeliAi service.

The Company processes and retains personal information within the retention period prescribed by statute or the period consented to by the data subject.

However, in any of the following cases, the Company may retain personal information until the relevant ground ceases to exist.

1. Where a separate retention period is prescribed by the relevant statutes
2. Where the handling of a contract, complaint, or dispute is in progress
3. Where there is a lawful request from an investigative agency, court, or administrative agency
4. Where a separate retention period has been agreed with the data subject

The Company's website is a corporate information site operated for personnel of enterprises and institutions and for adults in general.

The Company does not provide services to, or intentionally collect personal information from, children under the age of 14.

Where it is confirmed that a child under the age of 14 has provided personal information without the consent of a legal representative, the Company shall delete such personal information without delay.

As a general rule, the Company uses the personal information of data subjects only within the scope of the processing purposes specified in Article 1, and does not provide it to third parties without the consent of the data subject.

However, in any of the following cases, the Company may provide personal information in accordance with the relevant statutes.

1. Where the data subject has given separate prior consent
2. Where there is a special provision in the law or it is necessary to comply with a statutory obligation
3. Where a court, investigative agency, or administrative agency makes a request in accordance with lawful procedures
4. Where it is necessary to protect urgent interests relating to life, body, or property

Where a need arises in the future for the Company to provide personal information to partner companies, voucher operating agencies, or related institutions, the Company shall separately inform data subjects of the recipient, the purpose of provision, the items provided, the retention and use period, and the right to refuse consent, and shall obtain the necessary consent.

The Company currently does not transfer the personal information of data subjects abroad.

Where a cross-border transfer of personal information becomes necessary in the future, the Company shall, in accordance with the relevant statutes, inform data subjects in advance of the recipient, the country of transfer, the items transferred, the purpose of transfer, the timing and method of transfer, the retention and use period, and the method of refusing the transfer, and shall carry out the necessary procedures.

Where the retention period of personal information has elapsed or the purpose of processing has been achieved so that the personal information becomes unnecessary, the Company shall destroy such personal information without delay.

1. Destruction Procedure

1. Confirmation of whether the retention period has elapsed or the processing purpose has been achieved
2. Selection of the personal information to be destroyed
3. Approval by the Chief Privacy Officer
4. Destruction by a method that renders recovery or reproduction impossible
5. Recording and verification of the destruction results

Where personal information must continue to be preserved pursuant to other statutes, such personal information shall be separated and stored in a separate database or storage location.

2. Destruction Method

1. Electronic files: permanently deleted by a method that renders recovery or reproduction impossible
2. Database information: the relevant personal information is deleted or processed by a method that makes restoration difficult
3. Paper documents: shredded with a shredder or incinerated
4. Storage media: complete deletion of data or physical destruction

Backup data is deleted sequentially in accordance with the established backup cycle, and access is restricted until deletion.

Data subjects may exercise the following rights against the Company at any time.

1. Request to confirm whether personal information is being processed and to access it
2. Request for correction or deletion of personal information
3. Request to suspend the processing of personal information
4. Withdrawal of consent to the collection and use of personal information
5. Exercise of personal information–related rights recognized by the relevant statutes

Rights may be exercised by submitting a request in writing, by email, by telephone, or through a Website inquiry.

1. Website: www.yejinai.com/contact
2. Telephone: 070-4943-1803
3. Email: info@yejinai.com
4. Postal: Yejin B/D 2F, 54 Samhaksa-ro 1-gil, Songpa-gu, Seoul 05597, Republic of Korea

Upon receiving a request from a data subject to exercise their rights, the Company shall take the necessary measures within the period prescribed by the relevant statutes and shall inform the data subject of the results.

The Company may request identity verification materials or a power of attorney to the extent necessary to confirm whether the requester is the data subject or a duly authorized representative.

However, in any of the following cases, a request for access, correction, deletion, or suspension of processing may be restricted in accordance with the relevant statutes.

1. Where there is a special provision in the law
2. Where there is a risk of infringing the life, body, property, or rights of another person
3. Where the processing of personal information is necessary for the performance of a statutory obligation
4. Where deleting the personal information would result in a violation of an obligation under the relevant statutes

The Company implements the following protective measures to prevent personal information from being lost, stolen, leaked, forged, altered, or damaged.

1. Administrative Measures

1. Establishment and implementation of an internal management plan for personal information
2. Designation of a Chief Privacy Officer
3. Minimization of the number of personal information handlers
4. Training of personal information handlers
5. Management of the granting, modification, and revocation of access rights
6. Operation of a response system for personal information breach incidents
7. Regular inspection of the status of personal information processing

2. Technical Measures

1. Encryption of the personal information transmission section
2. Control of access rights to the personal information processing system
3. Administrator authentication and password protection
4. Retention of access records and prevention of forgery and alteration
5. Prevention of malicious code and security threats
6. Blocking of abnormal access and automated requests
7. Limitation on the number of calls to the inquiry function
8. Restriction on the output of logs containing personal information
9. Regular security updates and vulnerability inspections

3. Physical Measures

1. Access control to personal information storage areas
2. Secure storage of documents and storage media containing personal information
3. Secure disposal of unnecessary documents and storage media

The Company may use cookies to provide the normal functions of the Website and to improve the user environment.

Cookies are small pieces of information that a website sends to the user's browser; although they may be stored on the user's device, they are not used for the purpose of directly identifying the user.

1. Types of Cookies

2. Principles of Cookie Use

1. Essential cookies are used to the extent necessary to provide the Website.
2. Analytics and marketing cookies operate only where the user has consented.
3. Even if a user does not consent to analytics or marketing cookies, the user may still view the basic information of the Website and use the inquiry function.
4. The Company does not collect sensitive personal information such as resident registration numbers or health information through cookies.

3. How to Refuse the Storage of Cookies

Users may refuse or delete the storage of optional cookies through the cookie settings function of the Website or their browser settings.

1. Chrome: Settings → Privacy and security → Cookies
2. Edge: Settings → Cookies and site permissions
3. Safari: Settings → Privacy
4. Mobile browsers: the privacy or site settings of each browser

If the storage of cookies is refused, some convenience functions may be restricted.

Where the Company processes behavioral information to analyze users' online activities, it applies the following criteria.

The Company does not use behavioral information for the purpose of inferring sensitive characteristics such as a user's thoughts, beliefs, health, sex life, or political views.

The Company designates the following Chief Privacy Officer and department in charge to take overall responsibility for personal information processing and to handle the exercise of data subjects' rights, complaints, and remedies.

1. Chief Privacy Officer

1. Position: Chief Executive Officer
2. Telephone: 070-4943-1803
3. Email: info@yejinai.com

2. Personal Information Protection Department

1. Department: Management Support Office
2. Telephone: 070-4943-1803
3. Email: info@yejinai.com
4. Address: Yejin B/D 2F, 54 Samhaksa-ro 1-gil, Songpa-gu, Seoul 05597, Republic of Korea

Data subjects may direct to the Chief Privacy Officer or the department in charge any personal information–related inquiries, complaints, remedies, and exercise of rights arising in the course of using the Website.

For consultation or remedy regarding personal information infringement, data subjects may first contact the Company's Chief Privacy Officer.

If a data subject is not satisfied with the Company's handling, or requires separate consultation and remedy, the data subject may contact the following organizations.

1. Personal Information Infringement Report Center: 118 (no area code)
2. Personal Information Dispute Mediation Committee: 1833-6972
3. Supreme Prosecutors' Office: 1301 (no area code)
4. National Police Agency: 182 (no area code)

The organizations above are separate from the Company and are responsible for matters such as reporting personal information infringement, dispute mediation, and investigation consultation.

The Company may amend this Privacy Policy where there is a change in the relevant statutes, the details of personal information processing, or the manner of operating the Website.

Where this Privacy Policy is amended, the details of the amendment and the effective date shall be announced on the Website.

Changes that materially affect the rights or obligations of data subjects shall be announced with a reasonable period before the effective date.

1. Date of Announcement: July 23, 2026
2. Effective Date: July 23, 2026
3. Last Amended: July 23, 2026

The Company maintains a revision history so that previous versions of the Privacy Policy can be viewed on the Website.

This Privacy Policy shall take effect on July 23, 2026.

YEJIN Inc. collects and uses personal information for the receipt of inquiries and consultation as follows.

□ I consent to the collection and use of my personal information.

Where consent to receive marketing information is obtained, it must be operated as a separate optional consent item rather than being combined with the required consent above.