Privacy Policy

In accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, the Job Propensity Test service establishes and discloses this Privacy Policy to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

This English version is a translation provided for convenience. In the event of any discrepancy between this translation and the Korean original, the Korean version shall prevail.

Article 1 (Purposes of Processing Personal Information)

The Job Propensity Test service (the "Service") processes personal information for the following purposes. 1. Distinguishing respondents with the same name and matching each respondent to their own results 2. Analyzing and providing Job Propensity Test results 3. Comparing job propensity similarity with other respondents and providing the results 4. Checking test reliability and improving test items 5. Managing test history 6. Sending the HR Insight newsletter on job propensity and organizational culture, if you consent to receive it (optional)

Article 2 (Personal Information Processed)

The Service collects and processes the following personal information. [Required] · Entered by you Name, email address, organization, current/desired job, position (employed respondents only), gender, age group, respondent type (employed / job seeker) · Generated during the test Test responses (item scores per section), response time per item (Response times are used to check test reliability and improve the items.) · Classified by the administrator for analysis Organization type, organization characteristics, country, organization ID code, respondent ID code (Statistical categories derived from your organization; ID codes are generated automatically.) [Optional — if you consent to the HR Insight newsletter] Email address, name, organization

Article 2-2 (Provision of Similarity Comparison Results)

The Service includes a "Job Similarity Analysis" in each respondent's results. This feature finds other respondents whose response patterns are similar to yours and shows the organizations and jobs they belong to. Because of the nature of this feature, your information may also appear in other respondents' reports. Items shown to other respondents: organization type, organization characteristics, job, age group Items never shown: name, email address, organization name Your organization is shown only as a classified organization type (e.g., public institution, small or medium-sized enterprise); the organization name itself is never shown. The comparison group includes, in addition to respondents of this Service, job propensity survey data collected in advance.

Article 3 (Processing and Retention Period)

The Service processes and retains personal information within the retention period prescribed by law or the retention period consented to by the data subject at the time of collection. Test information (including responses and response times): 5 years from the test date (If there is a separate contract with the school or company operating the group, the period in that contract applies.) HR Insight newsletter consent: until you unsubscribe Test information whose retention period has expired is checked automatically once a day and handled as follows. 1. Information that can identify the respondent is deleted in an irreversible manner. Deleted: name, email address, organization name, test date and time, report editing history, response time per item 2. Statistical data processed so that the respondent cannot be identified is retained. Retained: organization type, organization characteristics, job, gender, age group, test responses, factor and type scores The data in item 2 no longer constitutes personal information under Article 58-2 of the Personal Information Protection Act and is therefore excluded from destruction. It continues to be used to improve test quality and as reference data for similarity comparison. No specific individual can be identified from this data alone. (Gender is included in the retained data but is not shown in the similarity comparison results described in Article 2-2.)

Article 4 (Provision of Personal Information to Third Parties)

The Service does not provide personal information to third parties, except in the following cases. - When the data subject has given prior consent - When required by law, or when an investigative agency requests it in accordance with the procedures and methods prescribed by law for investigative purposes

Article 5 (Outsourcing of Personal Information Processing)

To provide the Service smoothly, the Service outsources personal information processing as follows. · Vercel Inc. — Service hosting and application execution (location of processing: Republic of Korea (Seoul region)) · Supabase Inc. — Database operation and data storage (location of processing: Republic of Korea (Seoul region)) · Resend Inc. — Newsletter email delivery (location of processing: United States) When concluding outsourcing contracts, the Service specifies in writing, in accordance with Article 26 of the Personal Information Protection Act, the prohibition of processing beyond the outsourced purpose, technical and administrative safeguards, restrictions on re-outsourcing, management and supervision of the contractor, and liability such as compensation for damages. Any change in the outsourced work or contractors will be disclosed through this Privacy Policy.

Article 5-2 (Overseas Transfer of Personal Information)

The Service's database and application servers are located in the Republic of Korea (Seoul), and test responses and results are stored in Korea. Personal information is transferred overseas only as follows. · Recipient: Resend Inc. (contact: support@resend.com) Country: United States Time and method of transfer: Transmitted over the network at the time each newsletter is sent Items transferred: Email address Purpose of use: Delivery of the HR Insight newsletter on our behalf Retention and use period: Until the purpose of delivery is achieved or the outsourcing contract ends How to refuse and effect of refusal: No transfer occurs if you do not consent to the newsletter or if you unsubscribe via the "Unsubscribe" link at the bottom of any newsletter. Refusing does not restrict your test or access to your results in any way. This transfer is necessary to perform the contract concluded with the data subject. In accordance with Article 28-8(1)(3) of the Personal Information Protection Act, disclosing the above in this Privacy Policy replaces separate consent.

Article 6 (Destruction of Personal Information)

When personal information is no longer necessary, such as when its retention period has expired or the purpose of processing has been achieved, the Service destroys it without delay. Test information whose retention period has expired is checked by an automated job once a day; identifying information is destroyed in accordance with Article 3, and only statistical data is retained in anonymized form. Personal information stored as electronic files is permanently deleted in a manner that makes recovery and reproduction impossible.

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following rights at any time. 1. Request access to personal information 2. Request correction of errors 3. Request deletion 4. Request suspension of processing You may exercise these rights by email to the Chief Privacy Officer below. Requests are handled within 10 days of receipt.

Article 8 (Installation, Operation and Refusal of Automatic Collection Devices)

The Service uses session cookies to maintain login sessions. These cookies are deleted automatically when you close your browser. You can refuse cookies through your browser settings, but the administrator login may not work properly.

Article 9 (Chief Privacy Officer)

The Service designates the following Chief Privacy Officer, who is responsible for overall personal information processing and for handling complaints and remedies of data subjects related to personal information processing.

Article 10 (Changes to this Privacy Policy)

This Privacy Policy applies from its effective date. Any additions, deletions or corrections due to changes in laws or policies will be announced within the Service at least 7 days before the changes take effect. Policy version: 2026-10-03 Effective date: 2026-10-10 [Revision note] In the 2026-10-03 revision, the actual contractors were specified in Article 5 (Outsourcing of Personal Information Processing), and Article 5-2 (Overseas Transfer of Personal Information) was added. No collected items or purposes of use were added; the services already in use were disclosed accurately.

Chief Privacy Officer

Name: Jaehong Yoo
Version: 2026-10-03 | Effective date: 2026-10-10