Effective: 18 August 2026 (Article 7(2) and Article 8(8) on add-on packs and permanent products: 11 September 2026) ※ Recurring payment does not apply unless the user selects it on the payment screen; the default is a one-time payment that does not auto-renew. (These Terms are based on a commonly used form of service terms. This English text is a translation provided for convenience; see Article 14.) Article 1 (Purpose) These Terms set out the rights, obligations and responsibilities of the Company and the user, and other necessary matters, in connection with the use of "PINBO" (the "Service"), an AI-based career management service operated by Ore&Co (business registration number 830-03-02579, mail-order business registration 2026-Seoul-Songpa-2424, representative Jeon Yeri; the "Company"). Article 2 (Definitions) 1. "Service" means the AI-based career archive, requirement-analysis and output-generation web service provided by the Company, including the creation of "project cards" (the "pins") that structure the project, work and business history and results entered by the user, management of "Pins" (the career archive), "Analyze" (finding the requirements in a submitted document), "Match" (selecting the pins related to those requirements and generating a purpose-specific draft), "Insights" (career insight reports) and "Share" (publishing a career page). Users may use what the Service produces for any purpose that fits — it is not limited to job applications, and includes freelance proposals, project introductions, business materials and portfolios. 2. "User" means a member or non-member who uses the Service under these Terms. 3. "Member" means a person who has signed up for the Service by a method the Company provides (such as Google account sign-in) and may use the Service on an ongoing basis. 4. "Project card" means content generated by AI that structures the career and project experience entered by the user. 5. "Plan" means the right to use the paid features of the Service for a fixed period (one week or one month). A plan is by default a one-time purchase that does not auto-renew; only the monthly plan may be used on a recurring basis, and only where the user separately chooses it. 6. "Recurring payment" means a method by which, only where the user has expressly chosen it, the plan renews automatically on a monthly basis and the amount is charged automatically to the registered payment method. 7. "Submitted document" means text or a file that the user enters into the Service for analysis — a job description, a request for proposal (RFP), a project brief, a planning document, a work request and the like. Article 3 (Posting and Amendment of these Terms) 1. The Company posts these Terms on the initial screen of the Service or on a linked screen. 2. The Company may amend these Terms within the limits of applicable law. When it does, it will state the effective date and the reasons for the amendment and give notice at least 7 days before the effective date (30 days in the case of a change unfavourable to users). 3. If a user continues to use the Service after notice of amended Terms without expressing refusal, the user is deemed to have agreed to the amended Terms. A user who does not agree may withdraw from membership. Article 4 (Formation of the Use Agreement) 1. The use agreement is formed when the user applies for membership by a method the Company provides (such as Google account sign-in) and agrees to these Terms and the Privacy Policy. 2. Persons under 14 years of age may not sign up. Article 5 (Content of the Service) The Company provides members with the following: 1. Entry of project experience and automatic AI structuring into project cards 2. Storage and management of Pins (the pin library) 3. Analysis of submitted documents (job postings, requests for proposal and the like) and information on how they match the user's experience 4. Match draft generation and document export (Word and similar formats) 5. Insights reports 6. Other services the Company develops or provides through partnerships Some features may be provided on a limited basis depending on whether a plan has been purchased (see Article 7). Article 6 (Nature of AI Output and Disclaimer) 1. Project cards, Insights, Match output and similar results provided by the Service are generated by artificial intelligence, and the relevant screens clearly indicate that the content is AI-generated. 2. Insights, project card analysis, Match output and other AI-based results are for reference only and do not guarantee hiring success or any particular outcome. AI may produce inaccurate or biased results, so the user must review and correct the output themselves before any final submission, and the user is responsible for how the output is used and for the consequences. 3. The Company does not warrant the accuracy or completeness of AI output. Article 7 (Paid Services and Payment) 1. The Service operates on a pass basis. The default is a one-time payment that does not auto-renew. Only the 1-month pass (the Archive membership) can auto-renew, and only where the user has chosen recurring payment on the payment screen; the renewal is charged each month on the same date as the first payment (in a month without that date, on the last day of that month). 2. Plans are divided into Free and paid passes. The paid passes are the 7-day focus pass, the 30-day pass and the Archive membership (recurring). The price, features and usage limits of each are set out on the pricing page. In addition, separately from passes, the Company offers add-on packs that add AI usage counts (the AI organize pack and the document-fit pack) and permanent products (removing the Pinbo logo from public pages). Add-on packs have no expiry date and are drawn down only after the pass limit has been fully used. 3. A pass purchased by one-time payment is valid for the stated period from the time of payment and ends automatically when the period expires, with no cancellation step required. Project cards, Pins records and saved outputs already created remain viewable after a pass expires or a membership is cancelled. 4. The AI feature counts included in a pass are valid only within that pass period (for recurring payment, within each billing cycle). Unused counts do not roll over to the next period or the next billing cycle. 5. Importing documents (PDF, DOCX) is available on paid passes, within the count set for each pass; downloading your outputs (PDF, DOCX, JSON backup) is available on every plan. There is no cap on how many public links you may create. 6. Prices are stated in Korean won and include value-added tax (VAT); the exact amount is shown on the pricing page. Overseas payment (shown and charged in US dollars) is available; the currency, tax and fee terms are set out in this Article and on the pricing page. 7. The payment methods are as follows. Payment processing is provided through Korea PortOne Inc. (PortOne) by the payment gateways below. - Credit and debit cards — NHN KCP - Overseas payment (one-time passes, in US dollars) — PayPal The name of the payment gateway may appear on your card slip or card statement, but the seller of the Service is the Company. 8. Where recurring payment has been selected, the following apply. - The Company will notify the user, at the email address they registered, of the upcoming charge and its amount at least 3 days before the scheduled renewal date. - The user may cancel at any time and with immediate effect from the account page, and the cancellation process will not be more complex than the sign-up process. - On cancellation, charging stops from the next renewal date, and the period already paid for remains usable until it expires. - If a renewal payment fails because the payment method has expired, a limit has been exceeded or for a similar reason, the plan will not renew and will expire, and the Company will inform the user. Article 8 (Withdrawal of Subscription and Refunds) 1. A user may request withdrawal of subscription and a full refund within 7 days of payment, provided the Service has not been used. 2. Once use of a plan has begun, the remaining period is not refunded on a pro-rata basis, and the plan remains usable for the remainder of the period. 3. A refund may be restricted where the user has downloaded AI output or generated a document draft and thereby made substantive use of the Service (mere viewing excluded). 4. For a plan renewed automatically under recurring payment, the user may request withdrawal of subscription and a full refund within 7 days of the renewal date if they have not used the paid features during that renewal period. 5. Refund requests are received through the Service's support channel (support@pinbo.today) and are processed within 3 to 7 business days of receipt. 6. Refunds of overseas payments are processed on the basis of the currency and amount applied at the time of payment; the Company does not make up any difference arising from exchange rate movements. 7. All other matters follow the Act on the Consumer Protection in Electronic Commerce, Etc. 8. An add-on pack may be withdrawn and fully refunded within 7 days of payment provided none of its counts has been used. A permanent product may be withdrawn within 7 days of payment; on withdrawal, its effect is removed. Article 9 (Obligations of the User) The user must not: 1. Register false information when applying or changing information; 2. Misappropriate another person's account information; 3. Enter into the Service confidential information, trade secrets, unpublished data or restricted material belonging to a current or former employer. The Company recommends that project experience be written at a level that can be disclosed externally (role, responsibilities, generalised outcomes), and is not responsible for disputes with third parties arising from information the user enters; 4. Resell output generated using the Service for commercial purposes without the Company's consent; 5. Infringe the intellectual property rights of the Company or a third party; 6. Interfere with the normal operation of the Service (abnormal automated access, bulk requests and the like). Article 10 (Intellectual Property) 1. Rights in the original text the user enters into the Service (career information and the like) belong to the user. 2. Intellectual property rights in the Service, the service name, the logo, the UI/UX design and the software belong to the Company. 3. Output generated by AI, such as project cards and drafts, may be used freely by the user for their own career management purposes. Article 11 (Suspension of the Service) 1. The Company may temporarily suspend the Service after prior notice where unavoidable, such as for system maintenance, expansion or replacement. In urgent cases it may suspend the Service without prior notice. 2. If the Company permanently discontinues the Service for its own reasons, it will give notice at least 30 days in advance. In that case, remaining plans will be handled in accordance with the refund policy. Article 12 (Withdrawal of Membership and Loss of Eligibility) 1. A member may request withdrawal at any time through the account page or the Service's support channel, and the account is deactivated immediately upon withdrawal. 2. Personal data is destroyed without delay (immediately), except for items subject to a statutory retention obligation (such as contract and payment records retained for 5 years under the electronic commerce legislation). 3. Where a member registers false information, misappropriates another person's information or otherwise breaches these Terms, the Company may restrict use or terminate membership after prior notice. Article 13 (Disclaimer) 1. The Company is released from liability where it cannot provide the Service due to force majeure, such as a natural disaster or a system failure. 2. The Company does not warrant the reliability or accuracy of information obtained through the Service (including AI output) and is not liable for loss arising from the user's judgment or actions based on it. 3. The Company is under no obligation to intervene in disputes between users or between a user and a third party and is not liable for loss arising from such disputes. Article 14 (Governing Law, Jurisdiction and Language) 1. Disputes relating to these Terms and to use of the Service are governed by the laws of the Republic of Korea, and any action will be brought before the court having jurisdiction under applicable law. 2. The Korean-language version of these Terms is the authoritative text. This English version is a translation provided for the user's convenience; if the two differ in meaning, the Korean version prevails. Addendum 1. These Terms take effect on 18 August 2026. 2. Recurring payment does not apply unless the user selects it on the payment screen. A plan without that selection is a one-time payment that does not auto-renew. 3. Even after that date, recurring payment does not apply unless the user selects it directly on the payment screen.

Effective: 18 August 2026 (This Policy is based on a commonly used form of privacy policy. This English text is a translation provided for convenience; see Article 13.) Ore&Co (business registration number 830-03-02579, representative Jeon Yeri; the "Company") takes the protection of users' personal data seriously and complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc., and other applicable law. Through this Privacy Policy the Company explains for what purposes and by what means the personal data provided by users is processed, and what measures are taken to protect it. Article 1 (Items of Personal Data Collected and Methods of Collection) 1) On sign-up (Google social login) - Items collected: [required] email address, name and profile image (information provided by the Google account) - Method: Google OAuth authentication (via Supabase) - Purpose: identifying members, providing the Service and responding to enquiries 2) Information generated during use of the Service - Project experience entered (career information) and data saved to Pins - Text pasted in as submitted documents (job postings, requests for proposal and the like) - Uploaded files (career statements and similar, in pdf/docx) and attached images and reference links 3) On payment - Items collected: payment method details are, in principle, collected and stored directly by the payment gateway; the Company retains only the payment approval result (date and time, amount, plan type). The Company does not collect card numbers, expiry dates or passwords; the user enters these directly into the payment gateway's own window. - Additional items where recurring payment is selected: the billing key issued by the payment gateway (a token used only to request payment, not a card number), and the card issuer name and last four digits for display. - Purpose: processing plan payments, providing payment records, handling refunds, charging recurring renewals - Retention: the billing key is destroyed without delay when the subscription is cancelled or the member withdraws, and the Company also requests its deletion at the payment gateway. 4) Information collected automatically through use of the Service - Access IP address, cookies, service usage records (date and time of visit, device and browser information), records used to prevent abuse 5) On enquiry or consultation - Email address, content of the enquiry Article 2 (Purposes of Collection and Use) 1. Providing the Service: core features such as project card generation, Pins management, submitted-document analysis (Match) and Insights 2. Member management: identifying members, preventing abuse, delivering notices, confirming intent to withdraw 3. Payment and settlement: processing plan payments, providing payment records, handling refunds, retaining records required by law 4. AI analysis: transmitting project experience and submitted-document text entered by the user to an AI model (Anthropic Claude API) to generate structured analysis Article 3 (Entrustment of Processing and Provision to Third Parties) The Company entrusts the processing of personal data as set out below in order to provide the Service, and its entrustment contracts stipulate what is necessary under applicable law to keep personal data safe. - Anthropic (Claude API) — entrusted work: AI structuring and analysis of text entered by the user (project experience, submitted documents) / data processed: career and submitted-document text entered by the user (payment details, passwords and the like are not transmitted) - Supabase — entrusted work: member authentication and storage of service data / data processed: account information, Pins data - Google — entrusted work: OAuth social login authentication / data processed: email address, profile information - Korea PortOne Inc. (PortOne) — entrusted work: payment integration and relay of payment information / data processed: payment method details, payment approval records - NHN KCP Corp. — entrusted work: domestic payment processing and payment approval / data processed: payment method details, payment approval records - PayPal Pte. Ltd. — entrusted work: overseas payment processing and payment approval / data processed: payment method details, payment approval records - Functional Software, Inc. (Sentry) — entrusted work: collection of service errors and root-cause analysis / data processed: error messages and where they occurred, the page address accessed, browser and device type, member identifier - Plus Five Five, Inc. (Resend) — entrusted work: sending notification emails (payment confirmation, plan expiry and advance notice of auto-renewal) / data processed: email address, plan type and the amount to be charged The Company does not provide personal data to third parties beyond the purposes above without the user's consent, except where required by law or upon a lawful request from an investigative authority. [Cross-border Transfer of Personal Data] All of the processors above operate servers outside Korea, so personal data is transferred abroad in the course of entrusted processing. - Recipient / Country / Items transferred / Time and method of transfer / Purpose / Retention period - Anthropic, PBC / United States / career and document text entered by the user / transmitted over the network when AI features are used / AI structuring and analysis / deleted within 30 days at the latest, in line with Anthropic's commercial API policy - Supabase, Inc. / United States / account information, Pins data / transmitted over the network when the Service is used / member authentication and data storage / until withdrawal of membership - Google LLC / United States / email address, profile information / transmitted over the network at social login / OAuth authentication / until withdrawal of membership - Functional Software, Inc. (Sentry) / United States / error records, page address accessed, browser and device type, member identifier / transmitted automatically over the network when an error occurs / identifying and fixing the cause of errors / 30 days from collection - Plus Five Five, Inc. (Resend) / United States (mail-sending servers in Tokyo, Japan) / email address, plan type and the amount to be charged / transmitted over the network when a notification email is sent / sending payment and renewal notification emails / until the entrusted purpose is fulfilled Users may refuse the cross-border transfer of their personal data. However, these transfers are essential to providing the Service, so refusal may limit use of the relevant features. ※ Note on error collection: when an error occurs in the Service, an error record is sent automatically to Sentry so the cause can be identified. Email addresses and phone numbers are masked before transmission, and body text such as project content entered by the user, together with the access IP address, is excluded. Collected error records are deleted automatically after 30 days. ※ Note on transmission to the AI API: project records and submitted-document text entered into the Service are transmitted to Anthropic's Claude API for AI analysis. Under Anthropic's commercial API policy, inputs and outputs are not used to train models, and unless the Company has a separate Zero Data Retention agreement, API data is deleted within 30 days at the latest. We recommend that you do not enter confidential information, trade secrets or sensitive information identifying a specific person belonging to a current or former employer. Article 4 (Retention and Use Period) 1. Personal data is destroyed without delay upon withdrawal of membership or once the purpose of collection and use has been achieved. 2. Where retention is required by law, however, data is kept for the following periods: - Records on contracts or withdrawal of subscription: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc.) - Records on payment and the supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc.) - Records on consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, Etc.) - Records of consent to the Terms and this Privacy Policy (time of consent, document version, IP address, device information): 5 years (treated as records on contracts) - Reports on public pages and their handling: 3 years (treated as records on dispute handling) - Website visit records (access logs): 3 months (Protection of Communications Secrets Act) Article 5 (Procedure and Method of Destruction) Personal data whose retention period has passed or whose processing purpose has been achieved is destroyed without delay. Data in electronic file form is deleted by technical means that make recovery or reproduction impossible; records in other forms are shredded or incinerated. Article 6 (Rights of Users and Legal Representatives, and How to Exercise Them) Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal data. You can check and edit it yourself on the account page, or make a request through the Service's support channel and we will act without delay. For children under 14, a legal representative may exercise the same rights. Article 7 (Withdrawal of Membership and Withdrawal of Consent) Members may request withdrawal of membership (withdrawal of consent) at any time through the account page or the Service's support channel. On withdrawal the account is deactivated immediately and personal data is destroyed immediately, except for items subject to statutory retention under Article 4. Service usage records such as the Pins are deleted immediately upon withdrawal as a matter of principle; payment records are kept separately for the statutory retention period (5 years). Article 8 (Use of Cookies) The Company may use cookies to make the Service easier to use and to analyse usage statistics. Users may refuse the storage of cookies through their web browser settings, in which case some parts of the Service may be restricted. Article 9 (Measures to Ensure Security) The Company applies access rights management, authentication-based access control (Google OAuth), and administrative and technical safeguards to protect personal data. However, data transmission over the internet cannot be guaranteed to be 100% secure, so users must keep their own account information safe. Article 10 (Personal Data Protection Officer) - Personal data protection officer: Jeon Yeri (representative of Ore&Co) - Contact: privacy@pinbo.today Requests to access, correct, delete or suspend the processing of personal data may be submitted to the contact above or through the Service's support channel; we will act on them and inform you of the outcome within 10 days of receipt. Article 11 (Remedies for Infringement of Rights) If you need to report or discuss an infringement of your personal data rights, you may contact the following bodies in Korea: - Personal Information Infringement Report Centre: 118 (no area code), privacy.kisa.or.kr - Personal Information Dispute Mediation Committee: 1833-6972, kopico.go.kr - Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3571, spo.go.kr - National Police Agency Cyber Bureau: 182 (no area code), ecrm.police.go.kr Article 12 (Duty of Notification) If this Policy is changed, the reasons for the change and the effective date will be posted on the initial screen of the Service from 10 days before the effective date (30 days for material changes). Article 13 (Language) The Korean-language version of this Policy is the authoritative text. This English version is a translation provided for the user's convenience; if the two differ in meaning, the Korean version prevails. Addendum This Policy takes effect on 18 August 2026.