XIM.CITY

This Policy (the "Policy") explains the way of treatment of the information which is provided or collected in the web sites on which this Policy is posted. In addition the Policy also explains the information which is provided or collected in the course of using the applications of the Company which exist in the websites or platforms of other company.

The Company is the controller of the information provided or collected in the websites on which this Policy is posted and in the course of using the applications of the Company which exist in the websites or platforms of other company.

Through this Policy, the Company regards personal information of the users as important and inform them of the purpose and method of Company's using the personal information provided by the users and the measures taken by the Company for protection of those personal information.

This Policy will be effective on the 11th day of September, 2021 and, in case of modification thereof, the Company will make public notice of it through posting it on the bulletin board of Company's website or individual notice through sending e-mails. This Policy is based on GDPR and Korean Personal Information Protection Act.

We collect personal information when you provide it to us, when you use our Website or Services, and when other sources provide it to us, as further described below.

A. Information You Provide to Us

Account Creation: When you create an account or otherwise use the Services, we collect information such as your name, email address, and optional role within your team or enterprise.

Your Communications with Us: We collect personal information from you such as email address, phone number, or mailing address when you request information about our Services, register for our newsletter, request customer or technical support, or otherwise communicate with us. We also collect the contents of messages or attachments that you may send to us, as well as other information you choose to provide, and that may be associated with your communications.

Payment Information: When you choose to subscribe for Standard plan on the Services, we will collect payment information allowing you to pay us. We use third-party payment providers to process payments on the Services. We may receive information associated with your payment information, such as billing address and transaction information, but we do not directly store payment information on the Services.

Surveys & Onboarding & Feedback Sessions: We may contact you to participate in surveys, onboarding and feedback sessions. If you decide to participate, you may be asked to provide certain information which may include personal information.

Interactive Features: We may offer interactive features such as forums, blogs, chat and messaging services, and social media pages. We and others who use our Website or Services may collect the information you submit or make available through these interactive features. Any content you provide via the public sections of these features will be considered “public” and is not subject to the privacy protections referenced herein. By using these interactive features, you understand that the personal information provided by you may be viewed and used by third parties for their own purposes.

B. Information Collected Automatically

Automatic Data Collection: We keep track of certain information about you when you visit and interact with our Website or Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information (including inferred location based off of your IP address), Internet service provider, pages that you visit before, during and after using the Website or Services, information about the links you click, information about how you interact with the Website or Services, including the frequency and duration of your activities, and other information about how you use the Website or Services. Information we collect may be associated with accounts and other devices.

Cookies, Pixel Tags/Web Beacons, and Analytics Information: We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Website or Services. Technologies are essentially small data files placed on your devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.

We use your personal information for a variety of business purposes, including to:

Provide the Services or Requested Information, such as:

• - Fulfilling our contract with you;
• - Identifying and communicating with you, including providing newsletters and marketing materials;
• - Managing your information;
• - Processing your payments and otherwise servicing your purchase orders;
• - Responding to questions, comments, and other requests;
• - Providing access to certain areas, functionalities, and features of our Services; and
• - Answering requests for customer or technical support.

Serve Administrative and Communication Purposes, such as:

• - Pursuing legitimate interests, such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
• - Sending communications about new product features, promotions, and other news about oauth.network;
• - Measuring interest and engagement in our Services, including analyzing your usage of the Services;
• - Developing new products and services and improving the Services;
• - Ensuring internal quality control and safety;
• - Authenticating and verifying individual identities;
• - Carrying out audits;
• - Communicating with you about your account, activities on our Services and Privacy Policy changes;
• - Preventing and prosecuting potentially prohibited or illegal activities;
• - Enforcing our agreements;
• - Complying with our legal obligations; and
• - If you would like additional assistance, please contact [contact@oauth.network]

Marketing of Products and Services: We may use personal information to tailor and provide you with content and advertisements. If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may contact us as set forth below.

Consent: We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

De-identified and Aggregated Information Use: We may use personal information and other data about you to create de-identified and/or aggregated information. De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, and any other legally permissible purposes.

Process Information on Behalf of Our Customers: Our customers may choose to use our Services to process certain data of their own, which may contain personal information. Such personal information that is processed by us on behalf of our customers, and our privacy practices will be governed by the contracts that we have in place with our customers, not this Privacy Policy.

If you have any questions or concerns about how such personal information is handled or would like to exercise your rights, you should contact the person or entity (i.e., the data controller) who has contracted with us to use the Service to process this information. Our customers control the personal information in these cases and determine the security settings within the account, its access controls and credentials. We will, however, provide assistance to our customers to address any concerns you may have, in accordance with the terms of our contract with them.

We use the following sub-processors:

• - [Planetscale, Inc.](https://planetscale.com/) (USA, Singapore)
• - [Amazon Web Services, Inc.](https://aws.amazon.com/) (USA, Singapore, Ireland)

How We Use Automatic Collection Technologies:

Our uses of Technologies fall into the following general categories:

• - Operationally Necessary;
• - Performance Related;
• - Functionality Related; and
• - Targeting Related.

Cross-Device Tracking: Your browsing activity may be tracked across different websites and different devices or apps. For example, we may attempt to match your browsing activity on your mobile device with your browsing activity on your laptop. To do this our technology partners may share data, such as your browsing patterns, geo-location and device identifiers, and will match the information of the browser and devices that appear to be used by the same person.

We may share your personal information with the following categories of third parties:

Service Providers: We may share any personal information we collect about you with our third-party service providers. The categories of service providers to whom we entrust personal information include service providers for: (i) the provision of the Services; (ii) the provision of information, products, and other services you have requested; (iii) marketing and advertising; (iv) payment and transaction processing; (v) customer service activities; and (vi) the provision of IT and related services.

Business Partners: We may provide anonymized personal information to business partners to provide you with a product or service you have requested. We may also provide anonymized personal information to business partners with whom we jointly offer products or services.

Affiliates: We may share personal information with our affiliated entities.

Advertising: We may use and share your personal information with third-party advertising partners to market our own Services and grow our Services’user base, such as to provide targeted marketing about our own Services via third-party services. If you prefer not to share your personal information with third-party advertising partners, you may follow the instructions below.

We may share your personal information with other third parties, including other users, in the following circumstances:

Workspaces Accessible by Other Users: When you submit personal information in a workspace that can be accessed/viewsed by others, such personal information may be displayed to other users/viewers in the same or connected workspaces. For example, your personal information may be included in your notes or resources in a workspace which can be viewed by other users collaborating with you in that workspace. Further, your email address or name may be displayed with your workspace profile to other users collaborating with you in that workspace.

Share Content with Friends or Colleagues: Our Services may allow you to provide information about your friends, and may allow you to forward or share certain content with a friend or colleague, such as an invitation email.

Disclosures to Protect Us or Others: We may access, preserve, and disclose any information we store in association with you to external parties if we, in good faith, believe doing so is required or appropriate to: (i) comply with law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) protect your, our, or others’ rights, property, or safety; (iii) enforce our policies or contracts; (iv) collect amounts owed to us; or (v) assist with an investigation and prosecution of suspected or actual illegal activity.

All information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, South Korea or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of applicable laws.

General: You may have the right to object to or opt out of certain uses of your personal information. Where you have consented to the processing of your personal information, you may withdraw that consent at any time by contacting us as described below. Even if you opt out, we may still collect and use non-personal information regarding your activities on our Services and for other legal purposes as described above. By contacting us, you can withdraw your consent of personal data usage after you sign out.

Email Communications: If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to this Privacy Policy).

Mobile Devices: We may send you push notifications through our Apps. You may at any time opt out from receiving these types of communications by changing the settings on your mobile device.

“Do Not Track”: Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and Service that you do not wish such operators to track certain of your online activities over time and/or across different websites. If your browser is set to “Do Not Track” or “Secret Mode”, we cannot provide our service.

Cookies: You may stop or restrict the placement of Technologies on your device. oauth.network provides settings for you to update your preferences in our Services. These settings can be found in your personal browser.

Depending upon your location and in accordance with applicable laws, you may have the right to:

• - Access personal information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic personal information transferred to another party.
• - Request Correction of your personal information where it is inaccurate or incomplete.
• - Request Deletion of your personal information, subject to certain exceptions prescribed by law.
• - Request Restriction or Object to Processing of your personal information, including the right to opt in or opt out of the sale of your personal information to third parties.
• - Not be Discriminated Against by us for exercising your privacy rights.
• - Our Service checks whether the person who made the request is himself or a legitimate agent, such as reading the request for access, correction or deletion, and suspension of processing.

If you would like to exercise any of these rights, please contact us as set forth below. We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request, such as by requiring you to submit your request via your account.

We store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

By using the Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Services, by mail or by sending an email to you.

The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.

Personal information is deleted without delay when the purpose of collection and use is achieved, and the procedures and methods are as follows. In the case of electronic file types, it is safely deleted to prevent recovery and reproduction, and in the case of records, prints, documents, etc., it is pulverized or incinerated and destroyed. The user's personal information is destroyed within five days from the end of the retention period, and within five days from the date when personal information becomes unnecessary, such as achieving the purpose of processing personal information, abolishing the service, or termination of the business. If personal information must be preserved according to other laws and regulations even after the period of personal information retention agreed by the protection entity has elapsed or the purpose of processing has been achieved, the personal information will be moved to a separate database (DB) or preserved differently.

The table below shows the personal information that must be kept for a certain period of time according to the law (Republic of Korea):

Preserved Data	Applicable Provisions	Period
Records of contract or withdrawal of subscription, etc.	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	5years
Records of payment and supply of goods, etc.	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	5years
Records of consumer complaints or disputes	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	3years
Records of the collection/processing, use, etc. of credit information	CREDIT INFORMATION USE AND PROTECTION ACT	3years
Evidentiary documents for all transactions prescribed by the Tax Act	FRAMEWORK ACT ON NATIONAL TAX	5years
Records of Electronic Financial Transactions	ELECTRONIC FINANCIAL TRANSACTIONS ACT	5years
Service visit record	PROTECTION OF COMMUNICATIONS SECRETS ACT	3months

Please use one of the following methods to contact the Company should you have any queries in respect to this policy or wish to update your information:

Company Name: PopupLink

- CEO: SungU Che

- Tel: +82 10-2918-2768

- E-mail: contact@oauth.network

The Company designates the following Data Protection Officer (DPO) in order to protect personal information of customers and deal with complaints from customers.

DPO of the Company

- Name: SungU Che

- Tel: +82 10-2918-2768

- E-mail: contact@oauth.network

We may revise this Privacy Policy from time to time in our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use the Services after the new Privacy Policy takes effect.

Contact us:

If you have any questions about our privacy practices or this Privacy Policy, please contact us at:

01003

20, Samyang-ro 155na-gil, Gangbuk-gu, Seoul

Republic of Korea

contact@oauth.network