Privacy Policy

Effective Date: May 18, 2026

WIM Inc. ("the Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1. Items Collected and Methods of Collection

The Company collects the following personal information for inquiry processing and customer support. 1. Items Collected (Contact Form) • Required: name, email, inquiry content, consent to collection and use • Optional: phone number (with country code), company name, referral source 2. Methods of Collection • Submission through the contact form on our website • Voluntary provision via email, phone, or other written contact 3. Information Collected Automatically • During service use, IP address, cookies, access logs, and browser information may be generated and collected automatically.

Article 2. Purpose of Collection and Use

The Company uses the collected personal information only for the following purposes and will not use it for any other purpose. • Receiving, verifying, and responding to inquiries • Product and service consultations and technical support • Pre-contractual sales activities and communications • Service usage analytics and user experience improvement (processed in de-identified or aggregated form)

Article 3. Retention and Use Period

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled. • Personal information collected through the contact form: destroyed within 6 months after inquiry resolution • Where retention is required by law, information will be kept for the period specified by that law: - Records of contracts or withdrawal of subscription: 5 years (Act on E-Commerce) - Records of consumer complaints or dispute resolution: 3 years (Act on E-Commerce)

Article 4. Provision of Personal Information to Third Parties

The Company does not provide personal information to third parties as a rule. Exceptions apply only in the following cases: • When the data subject has consented in advance • When there is a specific provision in applicable law, or when an investigative authority requests information through the procedures and methods prescribed by law

Article 5. Outsourcing & Overseas Transfer of Personal Information

The Company outsources the following personal information processing to overseas providers for service operation and usage analytics. • Processors: Google LLC (Google Analytics, Google Tag Manager), Microsoft Corporation (Microsoft Clarity) • Tasks: website usage and user-behavior analytics (page views, clicks, scrolls, session recording/heatmaps) • Items transferred: cookies, IP address (de-identified), device/browser information, page-usage records, screen-interaction records • Country of transfer: United States • Timing and method: transmitted over the network at the time of service use • Retention and use period: per each processor's policy, or until the analytics purpose is fulfilled • Opt-out: users may refuse collection via browser cookie settings, the Google Analytics opt-out browser add-on, and the Microsoft Clarity opt-out The Company establishes the necessary terms to ensure personal information is managed securely, and discloses any changes through this Policy.

Article 6. Rights of the Data Subject and How to Exercise Them

Data subjects may exercise the following rights with respect to the Company at any time: • Request access to their personal information • Request correction in case of errors • Request deletion • Request suspension of processing These rights may be exercised in writing, by email, or otherwise, and the Company will act on such requests without delay.

Article 7. Procedures and Methods for Destruction

When personal information is no longer necessary — such as upon expiration of the retention period or fulfillment of the processing purpose — the Company destroys it without delay. • Electronic files: permanently deleted using methods that prevent recovery • Paper documents: destroyed by shredding or incineration

Article 8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information. • Administrative measures: establishment and implementation of an internal management plan, staff training • Technical measures: access control for personal information systems, encryption, installation of security software • Physical measures: access control for server rooms, data storage areas, etc.

Article 9. Personal Information Protection Officer

The Company designates the following Personal Information Protection Officer to oversee personal information processing and to handle complaints and remedies from data subjects. • Officer: CEO, WIM Inc. • Contact: william@wimcorp.co.kr / +82-10-9844-2434 • Address: 501, Venture Office, Daegu Samsung Creative Campus, 51, Hoam-ro, Buk-gu, Daegu, Republic of Korea

Article 10. Remedies for Infringement of Rights

Data subjects may apply for dispute resolution or consultation regarding personal information infringement through the following institutions: • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr) • Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr) • National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

Article 11. Changes to this Privacy Policy

This Privacy Policy takes effect on the effective date stated above. Any additions, deletions, or amendments due to changes in applicable laws or Company policy will be announced on this page at least 7 days before they take effect.

Wimmy

Hi, I'm Wimmy, WIM's AI assistant. Ask me anything about WIM's products and technology.