1. Purpose of Personal Information Processing

TalkDa (the "Company") processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Service Provision: Providing services such as diary writing, storage, viewing, and searching
2. Member Management: Membership registration, identity verification, maintaining and managing membership, preventing fraudulent use of services
3. Service Improvement: Analyzing service usage statistics, developing new services, providing customized services

2. Processing and Retention Period of Personal Information

1. The Company processes and retains personal information within the period of retention and use of personal information pursuant to applicable laws or the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
2. The processing and retention period for each type of personal information is as follows:
   • Membership registration and management: Until membership withdrawal (However, if an investigation or inquiry is in progress due to violation of related laws, until the end of such investigation or inquiry)
   • Diary content: Until membership withdrawal (However, if preservation is required by law, it will be retained for the required period)

3. Items of Personal Information Processed

The Company processes the following personal information:

1. Required items: Email address, password, username
2. Automatically collected items: IP address, cookies, service usage records, access logs
3. Optional items: Diary content written by users (information directly entered by users)

4. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or special provisions of laws.

The Company currently does not provide personal information to third parties. However, if we use third-party services for service improvement in the future, we will notify users in advance and obtain consent.

5. Entrustment of Personal Information Processing

For the smooth processing of personal information, the Company entrusts personal information processing tasks as follows:

1. OpenAI API: Providing diary writing and summarization features through GPT services

If the content of the entrusted work or the trustee changes, we will disclose it through this Privacy Policy without delay.

6. Rights and Obligations of Data Subjects and How to Exercise Them

1. Data subjects may exercise the following rights related to personal information protection against the Company at any time:
   • Right to request suspension of personal information processing
   • Right to request access to personal information
   • Right to request correction or deletion of personal information
   • Right to request suspension of personal information processing
2. Rights may be exercised through written documents, email, facsimile transmission (FAX), etc., to the Company, and the Company will take action without delay.

7. Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of processing purposes.

1. Destruction procedure: Information entered by users is transferred to a separate database (or separate documents in the case of paper) after the purpose is achieved, stored for a certain period in accordance with internal policies and other related laws, or destroyed immediately.
2. Destruction method: Information in electronic file format is destroyed using technical methods that cannot reproduce records.

8. Personal Information Protection Officer

The Company is responsible for overseeing personal information processing tasks and has designated a personal information protection officer as follows to handle complaints and damage relief related to personal information processing.

• Personal Information Protection Officer: TalkDa Administrator
• Contact: Available through the inquiry function within the service

9. Measures to Ensure Personal Information Security

The Company takes the following measures to ensure the security of personal information:

1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

10. Changes to Privacy Policy

This Privacy Policy takes effect from January 1, 2025. If there are additions, deletions, or corrections to the content in accordance with laws and policies, we will notify users through a notice 7 days before the implementation of the changes.