ALLGO Mobility Co., Ltd. (hereinafter the "Company") complies with relevant laws and regulations, including the "Personal Information Protection Act", the "Act on Promotion of Information and Communications Network Utilization and Information Protection", and the "Act on the Protection, Use, etc. of Location Information", and processes Users' personal information as follows.
Chapter 1 Personal Information Collected and Collection Methods
1) Personal Information Collected The Company collects the following information, divided into mandatory information required to provide the service and optional information for customized services. 【Customer Members】 Mandatory : Email, name, mobile phone number, password (for email sign-up) Optional : Marketing consent status, country, language When signing up via social login (Kakao, Google, Apple) : Identifier, email, and name received from the relevant provider ※ For social login, the Company identifies the Member by verifying the issued id_token and does not store a password. 【Driver Members】 Mandatory : Email, name, mobile phone number, driver's license number, license expiration date, insurance expiration date, vehicle information, settlement account information (bank, account number, account holder) Optional : Business registration number, trade name, and business address, languages spoken, profile photo Screening documents : Submitted images of driver's license, insurance certificate, business registration certificate, etc. ※ The business registration certificate is used to automatically recognize business information from the image (OCR). 【Booking-Related】 Names, addresses, and coordinates of the origin, stopovers, and destination, date and time of the ride, number of passengers, number of luggage items, flight number and arrival time, memo to the Driver, and, for bookings made on behalf of another person, the actual passenger's name and contact information 【Payment-Related】 Type of payment method, payment approval information, payment and refund history ※ Detailed payment method information such as card numbers is processed by the payment agency and is not stored by the Company. For registered cards, the billing key issued by the payment agency is stored in encrypted form, and only the card issuer's name and last 4 digits are retained for display purposes. 【Automatically Collected】 Access IP, device identification information, app push token, access date and time, service usage records, location information (Website) Date and time of visit, pages visited, referral path (search keywords and advertising information), browser and device information, completion of booking payment or sign-up and payment amount (personalized advertising) 【Location Information】 Current location (for setting the origin and automatically selecting the nearest airport), real-time location of the Driver's vehicle during the ride ※ Matters concerning the collection and use of location information are governed by the separate "Location-Based Services Terms of Use". 2) Collection Methods · Voluntary provision by the User, such as through member registration, booking requests, and customer inquiries · Automatic collection in the course of using the service (app launch and usage records) · Submission of Driver screening documents · Transfer from social login providers
Chapter 2 Purposes of Collection and Use of Personal Information
The Company uses the collected personal information only for the following purposes and will obtain prior consent if the purpose changes. 1. Member management — Confirmation of intent to sign up, identification and authentication, prevention of fraudulent use, processing of account deletion 2. Booking and dispatch brokerage — Receipt of bookings, assignment of Drivers, calculation of routes and fares, management of ride status 3. Payment and settlement — Payment of service fees, refunds, payment of settlement amounts to Drivers, issuance of tax invoices and cash receipts 4. Customer support — Response to inquiries, dispute handling, handling of no-shows and claims 5. Safety — Provision of real-time location during the ride, call connection via Safe Numbers 6. Service improvement — Analysis of usage statistics, development of new features 7. Sending notifications — Transaction-related notices such as booking receipt, payment completion, dispatch confirmation, and Driver arrival 8. Marketing — Notices of events and benefits only to Members who have given separate consent ※ Advertising information is not sent between 21:00 and 08:00 the following day. 9. Fulfillment of legal obligations
Chapter 3 Provision of Personal Information to Third Parties
In principle, the Company does not provide Users' personal information to outside parties. However, the following cases are exceptions. 1) Provision to the Driver upon dispatch Recipient : The assigned Driver Items provided : Customer name (display name), origin, stopovers, and destination, date and time of the ride, number of passengers and luggage, memo to the Driver, flight information Purpose of provision : Performance of the transportation contract Retention period : The period necessary for responding to disputes after completion of the ride ※ The Customer's actual phone number is not provided to the Driver. Calls between the Customer and the Driver are connected via a Safe Number (virtual number). 2) Where there is a basis in laws and regulations or a lawful request from an investigative agency 3) Where the User has given prior consent
Chapter 4 Entrustment of Personal Information Processing
The Company entrusts some of the tasks necessary to provide the service to outside parties. The Company manages and supervises the trustees so that they do not violate laws and regulations related to personal information protection, and will disclose any change in the entrusted tasks or trustees through this Policy without delay. Trustee : Toss Payments Co., Ltd. Entrusted tasks : Payment processing and refunds for credit cards, account transfers, simple payments, etc., verification of settlement account holders, payment of settlement amounts to Drivers (payment agency services) Retention and use period : Until termination of the entrustment contract Trustee : Delpicom Co., Ltd. Entrusted tasks : Call connection via Safe Numbers (050 Bizcall) Retention and use period : Until termination of the entrustment contract Trustee : Kakao Mobility Corp. Entrusted tasks : Calculation of routes and distances, place search, map display Retention and use period : Until termination of the entrustment contract Trustee : SOLAPI Co., Ltd. Entrusted tasks : Sending SMS and KakaoTalk notification messages (AlimTalk) Retention and use period : Until termination of the entrustment contract Trustee : Resend, Inc. Entrusted tasks : Sending emails Retention and use period : Until termination of the entrustment contract Trustee : Google LLC Entrusted tasks : Sending app push notifications (FCM), file storage (Google Cloud Storage), text recognition of business registration certificate images (Gemini) Retention and use period : Until termination of the entrustment contract Trustee : DeepL SE Entrusted tasks : Multilingual translation of text such as notices, terms, and memos Retention and use period : Until termination of the entrustment contract
Chapter 5 Overseas Transfer of Personal Information
The Company transfers personal information overseas as follows. Recipient : Google LLC — United States Items transferred : App push tokens, uploaded files (Driver screening documents, etc.), business registration certificate images Purpose of transfer : Sending push notifications, file storage, text recognition (OCR) Date, time, and method of transfer : Transmitted over the network when the service is used Retention period : Until termination of the entrustment contract Recipient : Resend, Inc. — United States Items transferred : Email address, name, message content Purpose of transfer : Sending emails Recipient : DeepL SE — Germany Items transferred : Text to be translated (memos to the Driver, etc.) Purpose of transfer : Multilingual translation Recipient : Apple Inc. — United States Items transferred : Social login identifier Purpose of transfer : Sign in with Apple authentication ※ Users may refuse the overseas transfer; however, if they refuse, the use of the relevant features (push notifications, receiving emails, automatic translation, Sign in with Apple, etc.) may be restricted.
Chapter 6 Retention and Use Period of Personal Information
Users' personal information is processed from the time of member registration and, in principle, is destroyed without delay upon account deletion. However, the following information is retained for the periods specified below for the reasons stated. 1) Retention under relevant laws and regulations <Records on contracts or withdrawal of subscription, etc.> Reason for retention : Act on the Consumer Protection in Electronic Commerce Retention period : 5 years <Records on payment and supply of goods, etc.> Reason for retention : Act on the Consumer Protection in Electronic Commerce Retention period : 5 years <Records on consumer complaints or dispute handling> Reason for retention : Act on the Consumer Protection in Electronic Commerce Retention period : 3 years <Records on identity verification> Reason for retention : Act on Promotion of Information and Communications Network Utilization and Information Protection Retention period : 6 months <Records on access> Reason for retention : Protection of Communications Secrets Act Retention period : 3 months <Data confirming the use and provision of location information> Reason for retention : Act on the Protection, Use, etc. of Location Information Retention period : 6 months <Transaction evidence such as tax invoices> Reason for retention : Value-Added Tax Act, Framework Act on National Taxes Retention period : 5 years <Mobile phone numbers of withdrawn members> Reason for retention : Act on the Consumer Protection in Electronic Commerce, etc. (identification of the parties to contract and payment records) Retention period : 5 years from the date of withdrawal Purpose of use : Limited to verifying transaction records for payment, refund, and dispute inquiries; not used for marketing, contact, or any other purpose. Stored separately from member information, accessible only to designated administrators, with access logged. It does not affect re-registration with the same number. 2) Exceptions to account deletion processing For Driver Members with unpaid settlement amounts or rides in progress, destruction is carried out after the settlement payment and the end of the ride have been completed. This is because settlement amounts cannot be paid if the account information is destroyed first.
Chapter 7 Procedures and Methods for Destruction of Personal Information
1) Destruction procedures Personal information whose retention period has expired or whose purpose of processing has been achieved is destroyed without delay. Upon account deletion, the Company immediately destroys or irreversibly anonymizes the following. · Email, name, mobile phone number (except where retained separately under Chapter 6), password, social login identifier · Drivers' settlement account information (bank, account number, account holder), driver's license number, business information · Uploaded files, notification sending records, app push tokens Records subject to statutory retention, such as payment, settlement, and tax records, are kept in a form that cannot identify individuals (internal identifiers only). 2) Destruction methods Personal information stored in the form of electronic files is deleted using technical methods that make recovery impossible, and personal information printed on paper is shredded or incinerated. 3) Protective measures during storage Sensitive items such as name, mobile phone number, account number, driver's license number, and billing key are stored in encrypted form. Passwords are stored using a method that cannot be decrypted.
Chapter 8 Rights of Users and Legal Representatives and How to Exercise Them
① Users may view and correct their personal information at any time and may request suspension of processing or deletion (account deletion). ② You may view and correct your information directly in the app under [Menu → Edit Profile], and delete your account under [Menu → Edit Profile → ⋮ (top right) → Delete Account]. If you have deleted the app or are unable to log in, you may request deletion at info@allgoair.com. ③ Consent to receive marketing information may be withdrawn at any time. However, transaction-related notices such as those concerning bookings, payments, and dispatch are sent regardless of opting out. ④ Consent to the collection and use of location information may be withdrawn at any time in the device settings or app settings. Upon withdrawal, the use of features based on current location will be restricted. ⑤ If you contact the Chief Privacy Officer in writing, by phone, or by email, we will take action without delay. ⑥ Where a User has requested the correction of an error in personal information, the Company will not use or provide such personal information until the correction is completed.
Chapter 9 Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information
① The Company's mobile app does not use web browser cookies. However, it stores device identification information and app push tokens in order to provide the service. ② App push notifications can be refused in the device settings or in the in-app notification settings. If refused, you may not receive real-time notifications such as dispatch confirmation and Driver arrival. ③ When using the Company's website, you may refuse the storage of cookies through your browser settings; in this case, the use of some services that require login may be restricted. ④ The Company's website (service.allgoair.com) uses Smartlog (smlog.co.kr), an external analytics tool, to prevent fraudulent clicks on search ads and to analyze visit statistics. This tool collects access IP, date and time of visit, referral path (search keywords and advertising information), and browser and device information through cookies and scripts. Users may refuse such collection by blocking the storage of cookies or the execution of JavaScript in their browser settings, and even in this case, there is no restriction on the use of the website. ⑤ The Company's website (service.allgoair.com) uses Widerplanet Co., Ltd.'s advertising service (Targeting Gates) for personalized advertising. This tool collects pages visited, whether a booking payment or sign-up was completed and the payment amount, and browser and device information through cookies and scripts, and Widerplanet uses this information to show personalized ads on other websites and apps. Information that directly identifies an individual, such as name or contact details, is not sent. The retention period of the collected information follows Widerplanet's privacy policy. Users may refuse collection by blocking cookies in their browser settings, and doing so does not restrict use of the website. ⑥ The Company's website (service.allgoair.com) uses the advertising service (Danggeun Business Ads) of Danggeun Market Inc. (Karrot) for personalized advertising. This tool collects pages visited, referral path, whether a conversion such as a completed booking occurred and the payment amount, and browser and device information through cookies or similar technologies (browser storage) and scripts, and Danggeun uses this information to show personalized ads on the Danggeun Market app and services. Information that directly identifies an individual, such as name or contact details, is not sent. The retention period of the collected information follows Danggeun's privacy policy. Users may refuse collection by blocking cookies in their browser settings, and doing so does not restrict use of the website. ⑦ The Company's website (service.allgoair.com) uses Naver Corporation's conversion tracking service (Premium Log Analysis) for conversion measurement of Naver search ads and personalized advertising. This tool collects pages visited, referral path, whether a conversion such as a completed booking occurred and the payment amount, and browser and device information through cookies and scripts, and Naver uses this information for search ad conversion measurement and personalized advertising. Information that directly identifies an individual, such as name or contact details, is not sent. The retention period of the collected information follows Naver's privacy policy. Users may refuse collection by blocking cookies in their browser settings, and doing so does not restrict use of the website. ⑧ The Company's website (service.allgoair.com) uses Google Ads of Google LLC for ad conversion measurement and personalized advertising. This tool collects pages visited, whether a conversion such as a completed booking occurred, the payment amount and order number, and browser and device information through cookies and scripts, and the collected information is transferred to Google LLC (United States) and used for ad conversion measurement and personalized advertising. Information that directly identifies an individual, such as name or contact details, is not sent. The retention period of the collected information follows Google's privacy policy. Users may refuse collection by blocking cookies in their browser settings, and doing so does not restrict use of the website.
Chapter 10 Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information. 1. Administrative measures — Establishment of an internal management plan, minimization of access rights, audit logging of administrator actions 2. Technical measures — Encrypted storage of personal information, encryption of data in transit (HTTPS), access control, role-based access control (RBAC) 3. Physical measures — Access control to the cloud provider's data centers
Chapter 11 Chief Privacy Officer and Contact Information
Users may report all inquiries, complaints, and requests for remedies related to personal information protection arising from the use of the service to the Chief Privacy Officer. <Chief Privacy Officer> Name : Park Cheon-seok Position : CEO Email : info@allgoair.com Inquiries : In-app [My → Contact Us] or AI chat support <Business Information> Trade name : ALLGO Mobility Co., Ltd. Business Registration No. : 165-88-04198 Address : Room 529, Yellow-dong, 34 Seouldaehak-ro 278beon-gil, Siheung-si, Gyeonggi-do, Republic of Korea (Postal code 15073) If you need to report or seek advice on any other personal information infringement, please contact the following organizations. Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code) Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972) Cyber Investigation Division, Supreme Prosecutors' Office (spo.go.kr / 1301 without area code) Cyber Investigation Bureau, Korean National Police Agency (ecrm.police.go.kr / 182 without area code)
Chapter 12 Duty of Notification
If there are any additions, deletions, or modifications to this Privacy Policy, notice will be given through the in-service announcements at least 3 days before the effective date. However, in the case of material changes to Users' rights, notice will be given at least 30 days in advance. Privacy Policy announcement date : October 27, 2026 (Chapter 9 ⑤ and Chapter 12: October 29, 2026; Chapter 9 ⑥: November 2, 2026; Chapter 9 ⑦ and ⑧: November 3, 2026) Privacy Policy effective date : November 26, 2026 (Chapter 9 ⑤: October 30, 2026; Chapter 9 ⑥: November 5, 2026; Chapter 9 ⑦ and ⑧: November 6, 2026; Chapter 12: November 5, 2026)