SSausage (hereinafter referred to as “the Company”) complies with relevant laws such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Act, and establishes and discloses this Privacy Policy to protect users’ personal information and handle related grievances promptly and smoothly.

1. Purpose of Collection and Use of Personal Information

The Company processes personal information for the following purposes:

Membership Registration and Management

• Verification of membership registration intent, identification and authentication for member services
• Verification of whether the user is under 14 years of age and confirmation of legal guardian consent
• Maintenance and management of membership qualifications, prevention of unauthorized use of services
• Various notices and notifications, handling of grievances

Service Provision

• Provision of event group and event creation/publishing services
• Provision of bookmark and user menu functions
• Provision of user menu link sharing function
• Provision of personalized services

Provision of Goods/Services and Payment Settlement

• Payment for coin purchases and verification of payment
• Management of coin grant/deduction records and purchase history
• Verification and handling of withdrawal (cooling-off), refunds, and fraudulent payments
• Notices, inquiries, and dispute handling related to purchases and payments
• Payment for Business Center advertising products (ad-free, ad slots, and ad auctions), verification of payment, and placement and fulfillment of advertisements
• Management of ad auction bids and restriction of participation due to non-payment after a winning bid
• Retention of transaction records in accordance with relevant laws

Provision of Corporate Member Services

• Review, approval, and re-examination of corporate member qualifications
• Management of member affiliation (application, invitation, approval, removal) and of workspace access rights
• Billing and settlement of corporate subscription fees, aggregation of usage, and management of billing records
• Notification of subscription status (payment failure, suspension of use, scheduled termination, etc.)
• Provision of access statistics to the organizers of public event groups (limited to statistical values such as the number of visits and the distribution of age group, gender, and language; never provided in a form that can identify an individual)

Service Improvement and Analysis

• Statistical analysis of service usage and service improvement

2. Items of Personal Information Collected

Items Collected Upon Membership Registration

• Required Items: ID, password, username (nickname), email, date of birth
• Optional Items: Gender, profile photo
• For users under 14: Email address of the legal guardian (to confirm the legal guardian’s consent)

Items Collected When Registering with a Google Account

• Items provided by Google: Email, name, profile photo, Google account identifier
• Items entered by the member: Date of birth (required), gender (optional), and, for users under 14, the email address of the legal guardian

Items Automatically Collected During Service Use

• Service usage records, access logs, cookies, access IP information, device information

Items Collected When Purchasing Paid Services (Coins)

• Required Items: App marketplace used for the purchase (Google Play or App Store), product type, payment amount and currency, purchase country provided by the app marketplace, order number, payment identification information (app marketplace transaction ID and purchase token), payment date and time, payment processing status, and purchase and refund history — coins can be purchased only through app marketplace in-app payment
• When Processing Refunds: Refund account information (account holder, bank name, account number), only to the extent necessary for the refund

Important: Authentication information for payment methods, such as card numbers, expiration dates, and account passwords, is collected and processed directly by the payment gateway or app market operator, and the Company does not collect or store such information. The Company receives and processes only the transaction identification and amount information necessary to confirm payment results.

Items Collected When Purchasing Business Center Advertising Products

• Required Items: Order number, product type and the event group to which the advertisement applies, payment amount and currency, payment method (credit card or bank transfer), payment identification information (payment gateway payment ID), and the status and date/time of payment, fulfillment, and refund processing
• When Participating in Ad Auctions: Bid amount and bid date/time, and history of participation restrictions due to non-payment after a winning bid
• When Paying by Card: The Company passes the buyer’s name (the company name for corporate members) and email address to the payment window, and the member enters the buyer’s phone number directly in the payment window. The payment gateway uses this information to process the payment, and the Company neither receives nor stores the buyer’s phone number.

Items Collected When Registering as or Converting to a Corporate Member

• Required Items: Company name, country, and one of the following
  • Domestic businesses: Business registration number, business registration certificate file
  • Overseas companies/organizations: DUNS number and supporting documents verifying it
• If the business registration certificate you submit contains the representative’s name, address, etc., such information is also collected.

Note: In the course of reviewing corporate member qualifications, the Company transmits the submitted business registration number to the business registration status lookup service provided by the National Tax Service through the Public Data Portal in order to verify the business registration status (active, suspended, or closed). The information transmitted is limited to the business registration number; no other information, such as the representative’s name, is transmitted. The lookup result is merely displayed on the reviewer’s screen and is not separately stored.

Items Collected When Using a Corporate Subscription

• Required Items: Payment method identification information (payment method identifier issued by the payment gateway), billing amount and currency, invoice number, billing and payment processing status, billing and settlement history
• When Registering a Card: Billing contact phone number — the payment gateway requires a buyer phone number to register the card and process charges
• Usage Records: Date and time, type, and quantity of paid features used, and the account identifier of the member who used them
• When Inviting Members: Email address of the invitee

Important: For corporate subscriptions as well, authentication information for payment methods, such as card numbers and expiration dates, is collected and processed directly by the payment gateway, and the Company does not collect or store such information.

Note: Event content created by members (event description, time, media materials, location information, etc.) and service settings (event group public settings, etc.) are user-generated content and service usage settings, and do not fall under personal information collection items. However, if an event group is set to public, the content may be disclosed to other members.

3. Processing and Retention Period of Personal Information

The Company processes and retains personal information within the period of retention and use of personal information according to laws or the period of retention and use of personal information agreed upon when collecting personal information from the data subject.

Member Information

• Retention Period: Until membership withdrawal
• After Withdrawal: Destroyed without delay (however, if there is a need to preserve according to relevant laws, it will be kept for the period below)

Payment and Purchase Information

• Retention Period: 5 years from the transaction date in accordance with the Act on Consumer Protection in Electronic Commerce
• Even if a member withdraws, such information is stored separately from other personal information during the statutory retention period above and then destroyed.
• Order and payment records for Business Center advertising products, and bid and participation-restriction records for ad auctions, are also retained for the same period.

Corporate Member and Corporate Subscription Information

• Corporate verification documents (business registration certificate, DUNS supporting documents, etc.): Retained while the corporate membership is maintained, and destroyed without delay upon loss of qualification or withdrawal
• Subscription contracts and billing/settlement records: 5 years from the transaction date in accordance with the Act on Consumer Protection in Electronic Commerce
• Billing contact phone number: Retained together with the registered payment method, and destroyed without delay when the payment method is discarded due to subscription cancellation or similar reasons
• Usage records (including the account identifier of the member who used the feature): 2 years, as the basis for billing and as audit material
• Member invitation records: 1 year from the invitation date, in order to verify whether the invitation was accepted or expired and to respond to disputes

Retention According to Laws

• Records on contracts or withdrawal of offers: 5 years (E-Commerce Act)
• Records on payment and supply of goods: 5 years (E-Commerce Act)
• Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
• Records on labeling and advertising: 6 months (E-Commerce Act)
• Service visit records: 3 months (Protection of Communications Secrets Act)

4. Provision of Personal Information to Third Parties

The Company does not provide users’ personal information to third parties in principle. However, the following cases are exceptions:

• When the user has consented in advance
• In cases required by law or when there is a request from investigative agencies according to procedures and methods prescribed by law for investigation purposes

When Becoming a Member of a Corporate Member

When a user applies for affiliation with a corporate member or accepts an invitation from a corporate member, personal information is provided to that corporate member as set out below. The act of applying or accepting is deemed to constitute consent thereto; if you do not consent, you may choose not to join as a member (in which case other use of the service is not affected).

• If you withdraw from the affiliation or are removed, the above information provided to that corporate member is deleted. However, content created by the member in the name of the corporate member remains with the corporate member pursuant to Article 7(5) and Article 16-2 of the Terms of Service.
• If a user is affiliated with two or more corporate members, the above provision is made separately for each corporate member.

Provision of Information for App Store Refund Reviews (Optional Consent)

For this provision, the Company obtains consent to the provision of personal information to a third party and consent to the overseas transfer of personal information separately on the app’s refund screen when the member requests an App Store refund. Only for members who have given both, when the member requests a coin refund from the App Store and Apple asks for information about that purchase, the following information is provided to Apple. Each consent is optional and may be withdrawn at any time on the coin management screen or the refund screen.

• The Company’s opinion on the refund: If the coins from that purchase have already been refunded through an in-app refund, the Company tells Apple that it prefers the refund be declined; in that case, consenting may make it more likely that the App Store refund is declined. In all other cases, no opinion is provided.
• Declining or withdrawing consent does not disadvantage coin purchases, in-app refunds, or App Store refund requests. In that case, Apple reviews the refund without information from the Company.
• This information is transferred overseas (United States); matters concerning the transfer follow “10. Overseas Transfer of Personal Information”.
• This consent is not obtained from members under 14, and their information is not provided to Apple.

Note: When a user sets an event group to public or shares a user menu link, user-generated content (event description, time, media materials, location information, etc.) may be displayed to other members, but this is not third-party provision of personal information but rather use of service features.

5. Consignment of Personal Information Processing

The Company consigns personal information processing tasks as follows in order to provide its services smoothly.

• When concluding a consignment agreement, the Company specifies in documents such as the contract, pursuant to Article 26 of the Personal Information Protection Act, matters concerning the prohibition of processing personal information for purposes other than performing the consigned work, technical and administrative protection measures, restrictions on re-consignment, and liability for damages, and supervises whether the consignee processes personal information safely.
• If the details of the consigned work or the consignee changes, the Company will disclose this without delay through this Privacy Policy.
• No personal information processing tasks other than those listed in the table above are consigned externally.

6. Rights and Obligations of Data Subjects and Methods of Exercise

Data subjects (users) may exercise the following rights:

Exercisable Rights

• Request to view personal information
• Request to correct errors in personal information
• Request to delete personal information
• Request to stop processing personal information

Methods of Exercising Rights

• Direct modification through service settings menu
• Request to the Personal Information Protection Officer by mail, phone, email, etc.
• The Company will take action without delay and notify the results

7. Procedures and Methods for Destruction of Personal Information

The Company destroys personal information without delay when personal information becomes unnecessary, such as when the retention period of personal information has elapsed or the purpose of processing has been achieved.

Destruction Procedure

• Unnecessary personal information is destroyed according to internal policies and relevant laws.

Destruction Method

• Electronic Files: Complete deletion using technical methods that make recovery and regeneration impossible
• Paper Documents: Shredding or incineration

8. Measures to Ensure the Safety of Personal Information

The Company takes the following measures to ensure the safety of personal information:

• Minimization of staff handling personal information and training
• Encrypted storage and management of passwords
• Technical countermeasures against hacking
• Access restrictions to personal information
• Retention and prevention of forgery/alteration of access records

9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses ‘cookies’ that store and retrieve usage information from time to time to provide individualized customized services to users.

Purpose of Cookie Use

• Service usage statistics and analysis
• Provision of personalized services

Method of Refusing Cookie Installation and Operation

Users can refuse cookie storage by setting options through Tools > Internet Options > Privacy menu at the top of the web browser. However, if you refuse to store cookies, you may have difficulties using customized services.

10. Overseas Transfer of Personal Information

The Company transfers personal information overseas as follows for the processing and verification of in-app purchases in the mobile app.

• The above entry regarding Paddle applies from the service commencement date of overseas corporate subscriptions.
• Data subjects may refuse the overseas transfer of personal information. However, in that case, coin purchases through the app market or overseas corporate subscriptions cannot be used; other service use is not affected.
• Refusal of overseas transfer may be requested from the Personal Information Protection Officer.

11. Personal Information Protection Officer

The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing by data subjects.

Personal Information Protection Officer

• Name: HO YEOL LEE (이호열)
• Position: Representative
• Phone: +82-50-5007-5484 (Korea, Business hours: KST 09:00-18:00)
• Customer Support: https://www.ssausage.com/#/support

Data subjects may contact the Personal Information Protection Officer for all inquiries, complaints, and damage remedies related to personal information protection that occur while using the Company’s services.

12. Request for Inspection of Personal Information

Data subjects may request inspection of personal information pursuant to Article 35 of the Personal Information Protection Act to the following department.

• Name: HO YEOL LEE (이호열)
• Position: Representative
• Phone: +82-50-5007-5484

13. Methods of Remedy for Rights Infringement

Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc. to receive relief from personal information infringement.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office Cyber Crime Investigation Division: (without area code) 1301 (www.spo.go.kr)
• National Police Agency Cyber Safety Bureau: (without area code) 182 (cyberbureau.police.go.kr)

14. Changes to Privacy Policy

This Privacy Policy shall be effective from October 1, 2026, and if there are additions, deletions, or corrections to changes in accordance with laws and policies, changes will be announced through the notice board at least 7 days prior to the implementation of the changes. However, when significant changes to user rights occur, such as changes to the items of personal information collected or changes to the purpose of use, we will notify at least 30 days in advance.

---

Announcement Date: October 1, 2026 Effective Date: October 1, 2026

---

Revision History

View Previous Versions: Not Applicable (Initial Version)