Consent to Collection and Use of Personal Information

SEOULCon (hereinafter referred to as the “App”) is a service provided and operated by Vanilla Company (hereinafter the “Company”).
This consent form explains how the Company collects, uses, stores, and provides personal information during the use of the SEOULCon app,
as well as the rights granted to users. This service is provided to users worldwide.
The app is available globally with no nationality restrictions.

⸻

1. Items Collected

(1) Required Information

The Company collects the following information as essential for service use:
• Email, name, unique user ID
• Type of participation in SEOULCon
• Profile image, date of birth (Google / Apple account)
• Authentication information provided during social login
• Device information: device model, OS/app version, language and region settings
• Access information: IP address, login time, service usage logs
• Error data: logs and exception records generated during app usage
• QR scan logs (e.g., booth visits, check-in history)

⸻

2. Purpose of Use

The Company processes collected personal information within the following scope:
• Account creation, login, user identification, and authentication
• Providing and operating app features (including content, programs, and location-based guidance)
• Personalized services based on user environment (language, region, interests)
• Ensuring service stability and responding to errors or malfunctions
• QR-based participation verification and event/program operation (including attendance and entry logs)
• Analysis of service usage and quality improvement
• Customer support, notifications, and announcements
• Prevention of fraudulent use and enhancement of security
• Statistical analysis and policy development

⸻

3. Retention and Usage Period

The Company retains and deletes personal information based on the criteria below:
• Account information: Deleted immediately upon membership withdrawal (except where legally required to retain data)
• Service usage and device logs: Retained for up to 12 months from collection, then deleted
• Customer inquiries and service requests: Retained for 3 years for consumer protection
• Event, survey, and QR participation records: Destroyed once the purpose is fulfilled or upon deletion request

⸻

4. Provision to Third Parties

The Company does not provide personal information to third parties by default.
However, exceptions apply in the following cases:
1. When the user has given explicit prior consent
2. When required by applicable laws
3. When data is provided to the organization below for event operation purposes

[Recipient Organization]
• Organization: Seoul Business Agency (SBA)
• Purpose: SEOULCon event operation, participant verification, QR-based participation tracking, performance reporting
• Data Provided: Name, email, unique user ID, participation type, event participation records, QR scan logs
• Timing: Provided collectively after the event ends
• Retention Period: Destroyed immediately after purpose is fulfilled

⸻

5. Outsourcing of Personal Information Processing

The Company may outsource personal information processing to the following service providers:
If subcontractors change, users will be notified via the app.
• Cloud and server hosting: AWS, Google Cloud
• Data analytics and error tracking: Firebase, Google Analytics, Sentry
• Email and notification delivery systems

⸻

6. Overseas Data Processing

Personal information is stored on AWS and Google Cloud servers (located in the U.S., Singapore, etc.),
and appropriate protective measures are applied in accordance with Article 28-3 of the Personal Information Protection Act.

⸻

7. Security Measures

The Company applies the following security measures in accordance with applicable data protection laws:
• Encryption during transmission via HTTPS/TLS
• Access control and access log management
• Minimum-privilege access policy
• Data encryption and masking of identifiable information when necessary
• Regular security audits and vulnerability management

⸻

8. User Rights

Users may exercise the following rights:
• Request to view personal information
• Request correction of personal information
• Request deletion or suspension of processing
• Withdraw consent to collection and use
• View the privacy policy

Users may view this Privacy Policy at any time
through the Privacy Policy section on the website (https://seoul-conapp.com).

• Request account deletion

Requests may be submitted via email,
and will be processed without delay unless restricted by law.

⸻

9. Children’s Personal Information

The Company does not knowingly collect personal information from children below the legally defined age.
• In Korea: Users under 14 years old may not use the service.
• In the United States and COPPA-regulated regions: Users under 13 years old may not use the service.
• If it is confirmed that information was collected from users below the applicable age threshold, it will be deleted immediately.

⸻

10. Amendments to This Policy

This Privacy Policy may be modified due to legal or service updates,
and significant changes will be announced through the app.
The date of the latest update will be displayed at the top of the policy.

⸻

11. Contact Information
• Company Name: Vanilla Company
• Service Name: SEOULCon
• Contact Email: biz@hanypick.com

⸻

SEOULCon Terms of Use

These Terms of Use (the “Terms”) govern the conditions and procedures for using the SEOULCon app and related services (collectively, the “Service”) provided by Vanilla Company (the “Company”), as well as the rights and obligations of the Company and users.

⸻

Article 1 (Purpose)
The purpose of these Terms is to set forth the rights, obligations, and responsibilities between the Company and users in connection with the use of the Service.

⸻

Article 2 (Definitions)
1. “App” means the SEOULCon mobile application provided by the Company.
2. “User” means any person who agrees to these Terms and uses the Service.
3. “Account” means the set of identifiers created for a User to access and use the Service.
4. “Content” means all information, images, guidance, and other materials provided within the Service.

⸻

Article 3 (Effect and Amendment of the Terms)
1. These Terms become effective when they are posted within the App or otherwise notified to Users.
2. The Company may amend these Terms to the extent permitted by applicable laws.
3. When the Terms are amended, the Company will provide prior notice of the effective date and reasons for the amendment within the App.
4. If a User does not agree to the amended Terms, the User may stop using the Service.

⸻

Article 4 (Provision and Changes of the Service)
1. The Company provides the following Services.
• Event and program information
• Event participation verification and QR check-in
• Notices, alerts, and customer support
2. The Company may change part or all of the Service as necessary for operational or technical reasons.
3. Some or all features of the Service may be limited or terminated after the event period ends.

⸻

Article 5 (Conditions of Use)
1. The Service is available to users worldwide.
2. Users may use the Service after creating an account, including through social login.
3. Users under the age of 14 are not permitted to use the Service.

⸻

Article 6 (User Obligations)
Users must not engage in any of the following acts.
• Using another person’s personal information or account without authorization
• Copying, modifying, distributing, or transmitting information from the Service without permission
• Interfering with the operation of the Service or providing false information
• Attempting to apply for programs or perform QR authentication by fraudulent means
• Any other act that violates applicable laws

⸻

Article 7 (Restrictions on Use)
The Company may restrict the use of the Service or delete a User’s account in the following cases.
• Violation of these Terms
• Fraudulent use of the Service or manipulation of QR authentication
• Infringement of the rights of others
• Interference with the operation of the App
• Violation of applicable laws

⸻

Article 8 (Protection of Personal Information)
1. The Company processes personal information of Users in accordance with its Privacy Policy.
2. The Privacy Policy can be viewed on a separate screen within the App.

⸻

Article 9 (Intellectual Property Rights)
1. All Content provided by the Company is protected by copyright laws.
2. Users may not reproduce, distribute, transmit, or create derivative works from such Content without authorization.

⸻

Article 10 (Limitation of Liability)
1. The Company is not liable for the following.
• Issues arising from a User’s own device environment or network conditions
• Disadvantages caused by the event organizer or venue management
• Indirect damages arising from service interruptions, errors, or failures
2. However, this does not apply in cases of willful misconduct or gross negligence by the Company.

⸻

Article 11 (Termination of the Service)
1. The Company may discontinue the Service when necessary for operational reasons.
2. In the event of termination, the Company will provide prior notice, and Users’ right to use the Service will cease.

⸻

Article 12 (Governing Law and Dispute Resolution)
These Terms are governed by the laws of the Republic of Korea.
Any disputes arising in connection with the use of the Service shall be submitted to the court having jurisdiction over the location of the Company as the court of first instance.

⸻

Supplementary Provision
These Terms shall take effect on November 17, 2025.