KORTV Inc. ("Company") values the personal information of its users and has established and published this Privacy Policy in order to comply with applicable law. This Policy explains the categories of personal information the Company collects, the purposes of collection, the periods of use and retention, third-party disclosure and outsourced processing, and users' rights, in connection with the use of the live broadcast and VOD streaming service "KORTV" (including the web, mobile apps, Smart TVs, and OTT devices, collectively the "Service").

Article 2 (Categories of Personal Information Collected and Methods of Collection)

1. Collected at membership registration and in account management

• Email address (required; the common identifier across devices)
• Login-method linkage information (identifying information from any linked Apple, Google, Amazon, or Roku account)
• Device information (device unique identifier (UUID), platform type, initial registration date, last access date)
• Region/language settings

2. Automatically generated and collected while using the Service

• IP address at time of access (used to determine the Member's region for geo-blocking purposes; this is determined by the server based on the access IP, not entered by the user)
• Service access records (session-level access logs)
• Content viewing records (playback start, progress, and end; watch duration; content runtime)
• Search queries and search history
• Records of attempts blocked by regional restrictions (geo-blocking)
• Advertising impression and interaction records (see Article 9)
• Error and fault information arising during use of the Service

3. Collected at subscription and payment

• Payment Source (the payment channel selected by the Member: Company Web, Apple, Google, Amazon, or Roku)
• Subscription plan, payment amount, payment date, payment status, refund history
• Note: The Company does not directly collect or store credit card numbers or other payment instrument details. These are processed directly by the applicable payment processor or app marketplace (Apple, Google, Amazon, Roku) (see Article 6).

4. Collected when a Member contacts customer support

• The content of the inquiry, a reply email address, and any other information the user provides directly

5. Methods of collection

• Information is collected either by direct user input or automatically generated in the course of registration, linking a login method, using the Service, making payments, and contacting customer support.
• Payment- and refund-related information is collected by receiving payment results from the applicable payment processor or app marketplace.

Article 3 (Purposes of Collection and Use of Personal Information)

The Company uses collected personal information for the following purposes:

1. Member identification and account management (including cross-device login and identity verification)
2. Providing Content and determining the Member's region for use of the Service (geo-blocking)
3. Processing subscriptions, payments, refunds, and credits, and responding to related inquiries
4. Applying service options configured by the Member, such as parental controls (Kids Lock)
5. Operating and improving the Service, and statistical analysis (aggregating viewing data, determining popular content, etc.)
6. Serving and measuring advertising (excluding channels/Content classified as directed to children — see Article 9)
7. Responding to customer inquiries
8. Preventing fraudulent use and securing the Service (such as detecting attempts to circumvent regional restrictions)

Article 4 (Period of Retention and Use of Personal Information)

1. As a general rule, the Company destroys personal information without delay once the purpose of its collection and use has been achieved.
2. When a Member withdraws, the Member's account-identifying information (such as their email address) is immediately anonymized, linked login methods and device information are deleted, and all login sessions are immediately terminated.
3. Notwithstanding the foregoing, the following information is retained separately as follows:
   • Payment, subscription, and credit ledger history: retained separately for three (3) years following withdrawal, after which it is destroyed.
   • Service access, viewing, and search records: the link to identifying account information is severed upon withdrawal; thereafter, this data may be retained only in a form from which no specific individual can be identified, for statistical purposes.

Article 5 (Provision of Personal Information to Third Parties)

The Company uses Members' personal information only within the scope of the purposes described in Article 1 and does not provide it to third parties without the Member's consent, except in the following cases:

1. Where the Member has given separate advance consent; or
2. Where required by law, or where a law enforcement agency requests the information for investigative purposes in accordance with the procedures and methods prescribed by law.

Article 6 (Outsourcing of Personal Information Processing)

The Company outsources part of its personal information processing to the following external providers in order to operate the Service:

Providers to whom processing is outsourced handle personal information only within the scope of the outsourced function, and the Company oversees them to ensure compliance with applicable law. 

Article 7 (Overseas Transfer of Personal Information)

The Company's service infrastructure and servers are located in the United States. Accordingly, users' personal information is processed and stored in the United States.

Article 8 (User Rights and How to Exercise Them)

1. Members may request access to, correction of, deletion of, or suspension of processing of their personal information at any time, through the "My Account" menu within the Service or through the contact point described in Article 13.
2. Members may terminate their service agreement and request that processing of their personal information stop by withdrawing as a Member (handled as described in Article 4).

Article 9 (Advertising and Protection of Children's Personal Information)

1. The Company displays advertising within certain Content on the Service and may, through its ad server (such as Google Ad Manager), collect information about ad impressions and interactions.
2. For channels and Content classified as directed to children, the Company removes identifiers used for personalized advertising (such as advertising IDs and custom targeting parameters) and serves only non-personalized advertising. This measure is taken in consideration of the U.S. Children's Online Privacy Protection Act (COPPA).
3. The Service does not accept membership registration from children under the age of 14 (see Article 5 of the Terms of Service). Children under 14 may view Content only through a parent's or guardian's Account, using the parental control feature (Kids Lock). The Company does not directly collect a separate Account or personal information for children.

Article 10 (Procedures and Methods for Destroying Personal Information)

1. The Company destroys personal information without delay once the purpose of its collection and use has been achieved or the retention period has elapsed.
2. Personal information in electronic file form is deleted using a technical method that prevents its recovery; personal information recorded on paper is shredded or incinerated.

Article 11 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to process personal information securely:

1. Access to personal information is restricted and managed to the minimum scope necessary.
2. Personal information such as email addresses is stored in encrypted form.
3. When an administrator accesses personal information, an access record is kept and managed.

Article 12 (Right to Refuse Automatic Collection Devices)

Users may refuse the storage of cookies and other automatic collection devices through their browser or device settings. Doing so, however, may cause difficulty in using the Service.

Article 13 (Privacy Contact Point)

The Company maintains the following contact point to oversee matters relating to the processing of personal information and to handle user complaints and remedy any resulting harm:

• Contact: support@kortv.com

---

Addendum

This Privacy Policy is effective as of October 1, 2026.