This Privacy Policy consists of the following sections.

Nurilab collects only the minimum personal information necessary for membership registration and service provision.

The Company collects only the minimum personal information necessary for membership registration and the provision of its services. Personal information collected from users is categorized as required or optional, and user consent is obtained accordingly. The personal information collected and used by the Company is as follows.

During the use of the service, device information, IP address, cookies, service usage history*, and similar information may be generated and collected automatically.

*Service usage history refers to information that may be automatically generated or recorded and collected on servers operated by the Company while users use the service or while user-entered information is transmitted and received. Depending on how such information is processed and whether it is combined with other information, it may or may not constitute personal information.

When using AskURL’s SMS scanning feature, personal information contained in the message being scanned may be collected.

When using the SMS scanning feature in AskURL, the message to be scanned may contain personal information. In such cases, please remove any personal information before submitting the message.

If an SMS message contains personal information, the user will be deemed to have consented to the collection and use of such information. Collected SMS messages are deleted in bulk one year after the date of collection.

Personal information that must be retained for a certain period under applicable laws and regulations is stored separately for the required period and then destroyed.

Even after the purpose of processing personal information has been fulfilled or a member has withdrawn, if retention is required under applicable laws and regulations, the personal information will be securely retained for the period prescribed by such laws and regulations.

Users may exercise the following rights regarding the processing of their personal information.

• Users may access, correct, or delete their personal information at any time and may request access to their personal information.

• Users may request suspension of the processing of their personal information at any time. Such requests may be denied where permitted by applicable law.

• Users may withdraw their consent to the collection and use of personal information at any time, including by withdrawing their membership.

The Company will process user requests without delay. If a user requests correction of inaccurate personal information, the Company will not use or provide the relevant information until the correction has been completed.

Cookies may be installed and used to provide web-based services.

Cookies are used to provide a faster and more convenient website experience and personalized services.

• What are cookies?

  • Cookies are small text files sent by a website to a user’s browser when the user visits the website and are stored on the user’s device.

• Purpose of Use

  • Cookies are used to store and retrieve user information in order to provide personalized services. When a user visits the website, the server may read cookies stored on the user’s device to maintain user preferences and provide customized services. Cookies also help users access and use the website according to their settings and may be used to provide customized information, including optimized advertising, based on website visit records and usage patterns.

• How to Refuse Cookies

  • Users may choose whether to allow cookies. Cookie permissions can be managed through the browser settings, such as “Settings > Privacy > Cookies and other site data.” However, refusing cookies may make the website less convenient to use and may limit access to certain services that require login.

When using AskURL, the IP address of the user’s device may be collected automatically.

When using AskURL, a phishing detection and blocking service, the IP address of the user’s device (such as a mobile phone or PC) may be collected automatically to provide a reliable and seamless service.

Nurilab takes the following measures in accordance with applicable laws and regulations to protect users’ personal information.

• We encrypt users’ personal information.

  • Users’ personal information is transmitted through encrypted communication channels, and important information such as passwords is stored in encrypted form.

• We work to protect personal information from hacking and computer viruses.

  • To prevent users’ personal information from being leaked or damaged by hacking or computer viruses, systems are installed in areas where external access is controlled. Intrusion detection and blocking systems are operated and monitored around the clock, and antivirus software is used to protect systems from the latest malware and viruses. The Company also continuously researches new security technologies and applies them to its services.

• We minimize the number of personnel who can access personal information.

  • The number of employees authorized to process personal information is kept to a minimum. The Company also maintains systematic standards for password creation and changes and for access rights to personal information processing systems, and conducts ongoing audits.

• We provide regular privacy protection training to personnel who handle personal information.

  • Regular training and awareness campaigns on privacy obligations and security are provided to all personnel who handle personal information.

Nurilab has designated a Chief Privacy Officer and a privacy inquiry department to handle inquiries and complaints regarding users’ personal information.

If you have any privacy-related inquiries, complaints, or comments, please contact us using the information below. We will review and respond promptly.

For additional reporting or consultation regarding personal information, you may also contact the following organizations.

If this Privacy Policy is amended to reflect changes in applicable laws or services, notice will be provided at least 7 days in advance. However, if there is a material change affecting users’ rights, such as a change to the categories of personal information collected or the purposes of use, notice will be provided at least 30 days in advance, and user consent may be obtained again where necessary.

Nurilab values users’ personal information and will continue to work to ensure that users can use our services safely and conveniently.

• Announcement Date: July 1, 2026

• Effective Date: August 13, 2026