Article 1 Purpose of Processing Personal Information

Automill ("Company") processes personal information for the following purposes. Personal information will not be used for any purpose other than the following, and if the purpose changes, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of the Personal Information Protection Act.

1. Membership registration and management: confirming membership intent, maintaining and managing membership, preventing fraudulent use, and various notifications

2. Service provision: providing content, services, and billing

Article 2 Processing and Retention Period

The Company processes and retains personal information within the retention period agreed upon when collecting personal information or as required by law. Each personal information processing and retention period is as follows.

1. Membership registration and management: until membership withdrawal, except when a certain period of retention is required by relevant laws

Article 3 Personal Information Items Processed

The Company processes the following personal information items. Required: ID, password, name, email. Optional: phone number

Article 4 Provision to Third Parties

The Company processes personal information only within the scope specified in Article 1, and provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of law.

Article 5 Rights and Obligations of Data Subjects

Data subjects may exercise rights such as requesting access, correction, deletion, and suspension of processing of personal information at any time. These rights may be exercised in writing, by phone, or by email, and the Company will take action without delay.

Article 6 Security Measures for Personal Information

The Company takes the following measures to ensure the safety of personal information. 1. Administrative measures: establishing and implementing internal management plans, regular employee training 2. Technical measures: access rights management, access control systems, encryption technology 3. Physical measures: access control for server rooms

Article 7 Personal Information Protection Officer

The Company has designated a Personal Information Protection Officer to oversee personal information processing and handle complaints and remedies for data subjects. Officer: Junki Kim (CEO), Contact: support@automill.co.kr

Announcement Date: September 18, 2026 · Effective Date: September 18, 2026