Consent to Overseas Transfer of Personal Information

Effective date: [Registration in progress]

(개인정보 보호법 §28-8)

Article 1 (Purpose)

This consent is intended to obtain the data subject's consent under Article 28-8 of 「개인정보 보호법」 (Personal Information Protection Act) when the Company transfers the data subject's personal information overseas for the provision of the Service.

Article 2 (Categories of Personal Information Transferred Overseas)

Personal information necessary for service provision, including name, email, mobile phone number, nationality, status of stay, and service usage records.

Article 3 (Recipient)

1. Railway Corporation — API server operation (processing of service data such as members, applications and ledgers) · Singapore 2. Vercel Inc. — web delivery (processing of access logs) · United States and Vercel global network 3. Resend, Inc. — email delivery (email address and message content) · United States ※ The database and file storage (Supabase Inc.) are kept in the Republic of Korea (Seoul) region and are not an overseas transfer.

Article 4 (Country of Transfer)

Singapore (API server) · United States (web delivery, email)

Article 5 (Time and Method of Transfer)

Personal information is transferred via the information and communications network at the time of service use.

Article 6 (Recipient's Purpose of Use and Retention Period)

① Purpose of use: data storage and processing for service operation ② Retention period: until member withdrawal or termination of the delegation contract

Article 7 (Right to Refuse Consent and Disadvantages)

① The data subject has the right to refuse consent to the overseas transfer of personal information. ② However, given the nature of service operation using overseas cloud infrastructure, if consent is refused, use of the Service may be restricted.

□ I consent to the overseas transfer of personal information as above. (Agree / Disagree)