Wehome Co., Ltd. ("Company") processes personal information for the following purposes: 1. Member registration and management: Member service use, identity verification, fraud prevention 2. Provision of goods or services: Service delivery, content provision, personalized services, payment and settlement 3. Handling complaints: Identifying complainants, fact investigation, notification of results

① The Company retains and processes personal information within the period consented to by the data subject or as required by law. ② Retention periods: 1. Member registration and management: Until membership withdrawal (or until completion of any ongoing investigation) 2. Service provision: Until completion of service delivery and payment - E-commerce transaction records: 5 years - Consumer complaint/dispute records: 3 years

Required: - Name, email address, password, mobile phone number - Service usage records, access logs, cookies, IP address - Payment records Optional: - Profile photo, date of birth - Address (for host license application) - Bank account information (for host payouts) - ID copy (for host license application)

① The Company processes personal information only within the scope stated and discloses it to third parties only with the data subject's consent or as required by law. ② Third-party disclosures: - Recipient: Payment processor (NicePay, etc.) Purpose: Payment processing Items: Name, email, payment information Retention: 5 years after transaction - Recipient: Ministry of Land, Infrastructure and Transport Purpose: Verification of legal home-sharing operations Retention: During exemption period

① The Company outsources personal information processing as follows: - Contractor: Amazon Web Services (AWS) Task: Data storage and management Retention: Until contract termination - Contractor: NicePay Task: Payment processing Retention: 5 years after transaction

① Data subjects may exercise the following rights at any time: 1. Request to view personal information 2. Request to correct errors 3. Request to delete 4. Request to stop processing ② Rights can be exercised via written request, email, or fax, and the Company will respond without delay.

① When personal information is no longer necessary, the Company will destroy it without delay. ② Destruction methods: 1. Electronic files: Permanently deleted using non-recoverable methods 2. Paper documents: Shredded or incinerated

The Company takes the following measures to ensure the security of personal information: 1. Administrative: Internal management plans, regular employee training 2. Technical: Access control management, encryption of sensitive information, security software 3. Physical: Access control to server rooms and data storage facilities

Privacy Officer - Name: Lee Woo-seok - Title: CEO - Email: [email protected] Privacy Department - Department: Service Operations Team - Contact: [email protected] For any privacy-related inquiries, please contact us at the above.