braindrop Co., Ltd. (hereinafter, the “Company”) values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.

This Privacy Policy explains what personal information you provide, how and for what purposes it is used, and what measures we take to protect it.

If we revise this Privacy Policy, we will notify you through website announcements (or individual notices, as applicable).

Effective date: April 3, 2026

1. Personal information we collect

For consultation and related purposes, we may collect the following personal information.

Online inquiries
- Items collected: name, contact information, email address, inquiry details, etc.

2. Purposes of collection and use

We use the collected personal information for the following purposes:
performing contracts related to the provision of services and responding to inquiries in connection with those services

3. Retention and use period

In principle, once the purpose of collection and use has been fulfilled, we destroy the information without undue delay. However, if applicable laws require retention, we may retain certain information for the periods prescribed by those laws, as summarized below.

Retention items and legal basis

• - Records concerning contracts or withdrawal of offers, etc.: 3 years
• - Records concerning contracts or withdrawal of offers, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc.)
• - Records on payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc.)
• - Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, Etc.)

4. Procedures and methods of destruction

In principle, after the purposes of collection and use are achieved, we destroy the information without undue delay. Procedures and methods are as follows.

Destruction procedure
Information you provide for membership registration or similar purposes is transferred to a separate database after the purposes are achieved (or stored in a separate filing cabinet if in paper form), retained for a certain period in accordance with our internal policies and other applicable laws (see “Retention and use period”), and then destroyed.
Personal information transferred to a separate database will not be used for any purpose other than retention unless required by law.

Destruction method
Personal information stored in electronic file format is deleted using technical methods that make recovery or reproduction of records impossible.

5. Provision of personal information to third parties

We do not, in principle, provide users’ personal information to external parties. Exceptions apply only in the following cases:
when users have given prior consent, or when required by law or upon a lawful request from an investigative agency in accordance with procedures and methods prescribed by law for investigative purposes.

6. Hosting and maintenance

To operate our services, we entrust certain tasks to external specialists as follows.

• - Entrusted party: Three Any I&C Co., Ltd. (Korean legal name: (주)쓰리애니아이앤시)
• - Scope of entrusted work: website and system management (hosting / maintenance)

7. Rights of users and legal representatives and how to exercise them

Users may at any time view or correct their registered personal information, or request withdrawal of membership.
To view or correct personal information, use the “Privacy settings” or “Edit profile” (or equivalent) functions; to withdraw consent or membership, click “Withdraw membership,” complete identity verification, and then you may directly view, correct, or withdraw.
Alternatively, you may contact the data protection officer in writing, by phone, or by email, and we will take action without undue delay.
If you request correction of inaccurate personal information, we will not use or provide that information until the correction is completed.
If incorrect information has already been provided to a third party, we will notify the third party without undue delay so that correction can be made.
Personal information deleted or destroyed at your request is handled in accordance with “Retention and use period” above and is not viewed or used for any other purpose.
For children under 14, the legal representative has the right to view or correct the child’s personal information and to withdraw consent to collection.

8. Cookies and similar technologies

We may use cookies and similar technologies that store and retrieve information on your device. A cookie is a small text file sent by the server operating the website to your browser and stored on your computer’s hard disk.

We use cookies for the following purposes.

Purposes of using cookies
We analyze visit frequency and time for members and non-members, understand preferences and interests, track activity for service improvement, and measure participation in events and number of visits to support targeted marketing and personalized services. You may choose whether to allow cookies.
Therefore, you may set your web browser to allow all cookies, confirm each time a cookie is stored, or refuse all cookies.

How to refuse cookies
You can refuse cookie storage by selecting the appropriate options in your web browser—allow all cookies, confirm each time, or refuse all cookies.

How to configure settings
Example (Internet Explorer): Tools > Internet Options > Privacy.
For other browsers, use the privacy or cookie section in Settings. If you refuse cookies, some services may be difficult to use.

9. Privacy inquiries and complaints

To protect customers’ personal information and handle related complaints, we designate the following department and data protection officer.

If you need to report a privacy infringement or seek consultation, you may contact the following institutions.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / dial 118 without area code)
• - Cyber Investigation Department, Supreme Prosecutors’ Office (www.spo.go.kr / dial 1301 without area code)
• - Cyber Bureau, National Police Agency (police.go.kr / dial 182 without area code)