Article 1 (Purpose) This Agreement is intended to define the rights, duties, and responsibilities of the users of the economic type test service (hereinafter referred to as the "Service") operated by SMALL BIG Co., Ltd. (hereinafter referred to as the "Company"). Article 2 (Definitions) The terms used in this Agreement are defined as follows: "Service" refers to the service that the Company provides via the OKSoft website (URL), Google Store, and App Store, which allows businesses or individuals to register materials for recruitment or job-seeking purposes. These materials are classified, processed, and aggregated to provide information suitable for their purposes. It also refers to all related services provided through the web and the app. "User" refers to anyone who accesses the Service and receives information provided by the Service in accordance with this Agreement, whether they are a member or a non-member. "Member" refers to anyone who agrees to this Agreement and enters into a membership contract with the Company, receiving a member ID. This term encompasses various types of members such as "Live Commerce Agencies," "Job-seeking Companies," and "Advertising Companies," as well as "Job-seeking Members." "Live Commerce" refers to activities involving live broadcasts for sales purposes via mobile platforms. "Corporate Member" refers to a member who provides services related to live commerce such as planning, shooting, promoting, broadcasting, and offers information to hosts such as for plastic surgery, dermatology clinics, makeup shops, hair salons, etc. "Job-seeking Member" refers to an individual who performs tasks related to live commerce and broadcasting production, and who is registered with OKSoft to seek work as a show host. "Matching" refers to the process where a corporate member selects a job-seeking member after reviewing their information, resulting in the establishment of a service contract between the corporate member and the job-seeking member. "Card Payment" refers to the payment of fees by entering card information such as credit cards. "Reservation Cancellation" refers to the withdrawal of a reservation after matching and before the broadcast begins. "Coupon" refers to benefits that may be offered to members of OKSoft, such as those provided to new members or through various promotions/events. The terms not specifically defined in this section shall follow applicable laws and general practices. Article 3 (Display and Modification of the Agreement) The Company shall post the content of this Agreement, including its business name, business location, representative's name, business registration number, and contact details, in a manner accessible to the members, such as on the initial screen or by other means. The Company shall make the contents of this Agreement available to members during the membership registration process and on the service screen. This Agreement becomes effective once it is published and is binding on the members who agree to it during registration. If the Agreement is modified, the new terms will apply from the date of modification. The Company may modify this Agreement without violating relevant laws, provided that it does not unfairly infringe upon the members' legitimate rights. If the Agreement is modified, the Company shall promptly notify members of the changes, including the date of application and the main reasons for the modification. If a member does not agree to the modified Agreement, they may discontinue using the service and terminate the membership contract. Article 4 (Provision and Modification of the Service) The Company provides the following services to members: Matching of live commerce hosts or live commerce services, along with payment services. Other services that the Company develops or provides in partnership with other companies. Other tasks defined by the Company. The Company may add or modify the content of the Service if necessary. In such cases, the Company will notify members of the changes. The Service is available 24/7 throughout the year, unless maintenance or other issues arise that require specific scheduling. If a job-seeking member requests a host other than a live commerce host, the Company may guide the member through related partner companies. However, the Company only provides guidance, and any payments or issues must be resolved between the job-seeking and corporate members. Article 5 (Service Restrictions and Suspension) The Company may temporarily suspend the Service in the event of maintenance, repair, communication failures, or other issues related to its IT infrastructure. If service suspension results in damages to the members, the Company will compensate them unless it proves that the suspension was not due to its negligence or willful conduct. If the Company can no longer provide the Service due to reasons like a change of business, discontinuation, or company mergers, the Company will notify the members as defined in Article 10. In cases where prior notice is not possible, the Company may notify members afterward. Article 6 (Membership Registration and Service Contract) To use the Service, users must provide necessary information (such as name, email, etc.) during the registration process. The Company will register users as members unless they fall under the following conditions: They have previously lost their membership under Article 7, Section 3, unless they have been re-approved for membership after 3 years. The information provided is false, incomplete, or contains errors. There is a technical issue preventing the registration. Members cannot register multiple accounts under different IDs. The Company may delete duplicate registrations and their associated benefits. Members must use verified mobile numbers from services like NICE evaluation. Article 7 (Membership Withdrawal and Disqualification) Members may access and modify their personal information at any time via the Service. Members must update their information if it changes. Failure to do so may result in receiving communication from the Company that could lead to losses. If any of the member’s information is erroneous, the Company can correct it, and if any third party requests deletion of the information, the Company may delete it and notify the member.

SAMLL BIG Co., Ltd. (hereinafter referred to as "the Company") complies with privacy protection regulations as outlined in relevant laws, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, the Protection of Communications Secrets Act, and the Telecommunications Business Act. We have established a privacy policy based on these laws and are committed to protecting the rights and interests of users. This Privacy Policy applies to the services provided by the Company and includes the following contents: Items of Personal Information Collected and Collection Methods Purpose of Collection and Use of Personal Information Provision of Personal Information Outsourcing of Personal Information Processing Retention and Use Period of Personal Information Procedure and Method of Personal Information Destruction Rights of Users and Legal Representatives and How to Exercise Them Installation/Operation and Rejection of Automatic Personal Information Collection Devices Other Matters Contact Information of the Personal Information Manager and Relevant Department Obligation to Notify 1. Items of Personal Information Collected and Collection Methods The Company collects the minimum required personal information as essential items for the following purposes: membership registration, identity verification, smooth customer service, document verification, and provision of various services. The collected information may be shared with all members and utilized on the website. Name, address, phone number, gender, physical information, company information, history, and other company-related details Name, address, phone number, profile picture, self-introduction video, and resume for show hosts The following payment information may be collected during the service use process: Credit card payments: card company name, card number Bank transfers: bank name, account number Settlements: bank name, account number The following information may be automatically generated or additionally collected during the service use or business processing: IP address, cookies, access logs, visit timestamps, service usage records, and records of improper use Methods of Collecting Personal Information: The Company collects personal information through the following methods: Website, paper forms, faxes, phone calls, emails, and inquiries Collection through creation information collection tools 2. Purpose of Collection and Use of Personal Information Fulfillment of contracts related to service provision, providing content and personalized services Member management, use of membership services, personal identification, preventing misuse by malicious members and unauthorized use, confirming membership intent, limiting registration and frequency, preserving records for dispute resolution, handling complaints, and delivering notifications Development of new services and marketing, advertising, statistical-based service provision, ad display, service effectiveness verification, providing event information and participation opportunities, and measuring access frequency for personalized information 3. Provision of Personal Information The Company uses users' personal information within the scope of purposes outlined in "2. Purpose of Collection and Use of Personal Information," and does not use it beyond that scope or disclose it to external parties without the user's prior consent. However, exceptions include: If users have agreed in advance to public disclosure If required by law or in compliance with legal procedures and requests from investigative agencies 4. Outsourcing of Personal Information Processing To enhance service, the Company outsources certain tasks and ensures personal information is securely managed through outsourcing agreements as required by relevant laws. Outsourcing Company: Outsourced Task: Providing card payment services Retention and Usage Period: Until membership withdrawal or the end of the outsourcing contract Company providing card payment services: Outsourced Task: Providing card payment services Retention and Usage Period: Until membership withdrawal or the end of the outsourcing contract 5. Retention and Use Period of Personal Information User personal information will be destroyed without delay once the purpose of collection and use is achieved. However, the following information will be retained for the specified period for the reasons below: Internal Company Policies: Records of improper use: Retained for 1 year to prevent misuse Membership withdrawal records: Retained for 3 years for complaint processing Legal Retention Period: Records of contracts or withdrawal: Retained for 5 years in accordance with the Consumer Protection Act in Electronic Commerce Records of payment and supply of goods: Retained for 5 years under the Consumer Protection Act in Electronic Commerce Consumer complaint or dispute resolution records: Retained for 3 years under the Consumer Protection Act Records of advertisement/disclosure: Retained for 6 months under the Consumer Protection Act Transaction records and supporting documents per tax law: Retained for 5 years under the National Tax Basic Act and Corporate Tax Law Electronic financial transaction records: Retained for 5 years under the Electronic Financial Transactions Act Website visit records: Retained for 3 months under the Protection of Communications Secrets Act 6. Procedure and Method of Personal Information Destruction Once the purpose of collecting and using personal information is achieved, the information will be promptly destroyed. The destruction procedure and methods are as follows: A. Destruction Procedure Information entered by the user during membership registration is transferred to a separate database (or paper documents are stored in a separate file) and retained for a specified period according to internal policies or other legal requirements, after which it will be destroyed. B. Destruction Method Printed information will be shredded or incinerated. Electronic information stored in files will be deleted using methods that make it impossible to recover the data. 7. External Records of the Company (Non-Personal Information) Records such as name, address, phone number, and gender that are not classified as personal information are stored by the Company. 8. Installation/Operation of Automatic Personal Information Collection Devices and Rejection of Them A. What is a Cookie? A cookie is a small text file sent by the server operating the website to the user's browser and stored on the user's computer. B. Purpose of Using Cookies The Company uses cookies to provide personalized and customized services by storing and retrieving user information. When a user visits the website, the server reads the cookie stored on the user's device to maintain settings and provide customized services. Cookies help users easily access the website and use it as configured. They are also used for optimizing advertising and providing customized information based on the user's website visits and usage patterns. C. Refusal of Cookies Cookies do not collect personal identification information automatically, and users have the option to refuse cookie installation. Users can configure their web browser to accept all cookies, ask for confirmation each time a cookie is stored, or reject all cookies. However, rejecting cookies may make website use less convenient, and some services requiring login may become inaccessible. Example of Cookie Settings: For Internet Explorer: Tools menu > Internet Options > Privacy > Settings For Chrome: Settings menu > Advanced Settings at the bottom of the page > Content Settings > Cookies 9. Other Matters The Company protects users' rights as follows: Users can view and modify their personal information at any time. Users can withdraw their consent for the provision of personal information or request membership cancellation at any time. When requesting corrections to personal information, the user's personal information will not be used or provided until the modification is completed. If the information has already been provided to third parties, the Company will notify them to correct the information without delay. 10. Personal Information Protection Manager and Contact Information The Company designates a Personal Information Protection Officer and operates a contact point for inquiries and complaint resolution: Personal Information Protection Officer Officer: SMALL BIG Contact: nptiglobal@nate.com For any reports or consultations regarding privacy breaches, please contact the following organizations: Personal Information Infringement Report Center (118, no area code) Information Security Mark Certification Committee (02-580-0533~4) Supreme Prosecutors' Office Cyber Crime Investigation Team (02-3480-3571) National Police Agency Cyber Safety Bureau (1566-0112) 11. Obligation to Notify If there are any additions, deletions, or revisions to this Privacy Policy, the Company will notify users at least 7 days in advance through the website’s notice section. If there are any significant changes affecting user rights, such as the collection and use of personal information or third-party provision, users will be notified at least 30 days before the changes take effect. Effective Date: [Insert Date] (Date of Site Launch)