CHEQUER Global, Inc. and our owned subsidiary, QueryPie, Inc.(hereinafter referred to as "Company"), are committed to protecting the rights and interests of our users by complying with the personal information protection regulations and by setting personal information processing policies in accordance with relevant laws and regulations. Company will protect the valuable personal information of the user, so that the user can safely use the service. Company will inform users of the purpose and manner of using the personal information provided by the users and the actions taken to protect that personal information. This policy applies to internet-related services (including mobile web / apps) provided by the Company's sites.

Effective from Jul 11, 2026

Article 1. Purpose of collection and use of personal information

The personal information from registered users will be used for the following purposes only, and if the purpose of use changes, necessary measures will be taken, such as obtaining a separate consent in accordance with Article 18 of the Personal Information Protection Act:

Category	Purpose of Processing
QueryPie Homepage - Content Gating Form - Whitepaper - Webinar - Product Brochure - Tutorial - Contact Us Form	- Personal information is processed to identify users and prevent misuse of services when accessing content on QueryPie's homepage. - Personal information is processed for the purpose of receiving general inquiries for QueryPie, including corporate quotation requests and service inquiries.
QueryPie AI Platform(AIP)	- Providing the QueryPie AIP service, which includes platform functionalities such as MCP server integration, AI agent creation, and LLM chat. - Behavioral logs (event data) are collected and analyzed only with the consent of the user, for the purposes of improving the quality of the AIP service, enhancing user experience, and analyzing technical errors.
QueryPie AIP-Based Services - “AIP-Based Services” means individual applications, features, or supplementary services provided based on the account, authentication, credit, payment, security, and operational systems of the QueryPie AI Platform (AIP).	- Providing individual applications or features based on the AIP account, authentication, credit, payment, security, and operational systems - Lingo: Providing real-time interpretation, translation, and voice/text conversion services - NotePie: Providing research and analysis services for content such as documents, audio, and video - Providing AI-based applications or features that the Company may additionally offer within AIP in the future
QueryPie AIP Payment (via Stripe)	- Provision of payment services for AIP subscription fees and recharges
Customer Portal	- We process personal information to respond to and address customer requests from QueryPie users.
Recruitment Management	- For recruitment purposes, personal information included in career descriptions are being used.
Marketing/Event	- The collection of information for marketing and event purposes is conducted only on an exceptional basis and solely with the consent of users who choose to participate. The collected personal information is processed for the following purposes: - Sending newsletters - Conducting survey events - Prize draws - Providing and enabling content downloads - Service trial applications (e.g., new services, beta testing, community version launches) - Notifications and invitations for QueryPie conferences and events

Article 2. Retention and usage period of personal information

When the Company collects personal information based on the user’s consent, the Company retains and uses such personal information until membership withdrawal or, in the case of marketing consent, for three years, unless otherwise required by applicable laws.

In addition, the Company retains and uses personal information within the retention and usage period prescribed by applicable laws or within the period agreed to by the information subject at the time of collection.

Purpose of collection	Retention period	Items collected
Homepage(Contents Gating)	Retained for 3 years Destroyed immediately upon request	First Name Last Name Business Email Company Name
Homepage(Contact Us)	Retained for 3 years Destroyed immediately upon request	First Name Last Name Business Email Phone Number Job Title Company Name
QueryPie AIP & QueryPie AIP-Based Services	Upon member withdrawal Destroyed immediately upon request	(Business) Email Profile Image(if a profile photo is available when you sign up with Google or GitHub) Country Job Title
QueryPie AIP (Credit/debit card information)	Upon member withdrawal or during the subscription period Destroyed immediately upon request	Card number, Expiration date, CVC, User ID, Country
Customer Portal	Until the duration of the QueryPie product contract (immediately destroyed upon contract termination)	Name, Company Name, E-Mail
Recruitment	Until the end of the recruitment process	Name, phone number, job history, educational background, qualifications, and other career-related information
Marketing/Event	Retained for 3 years Destroyed immediately upon request	Name, company name, department, email

Collected personal information is processed in accordance with the purpose of use notified at the time of collection and is not used for any other purposes.

Article 3. Provision & Entrustment of Personal Information

Company entrusts the following external services to provide convenient and better services and process personal information:

Entrustment of personal information - Cloud Service (SaaS)

Trustee	Entrusted Services
Atlassian Jira	CS(Customer Service) processing and operation, QueryPie AIP Report to Bug
Wanted	Recruitment management
Auth0	QueryPie AIP & AIP-Based Services User Registration Information, Partner Portal registration information
DataDog	QueryPie AIP User Behavior Logs (Encryption)
Amazon Web Service	QueryPie AIP & AIP-Based Services Operating Infrastructure, LLM Model, B2B Customer Management, Marketing & Events
Stripe	Provision of payment services for AIP subscription fees and recharges

Entrustment of personal information - QueryPie Partners

Category	Partners
Partners	KITT, CLOUD SECURE, Secure Point, Megazone, Persimmon Lab, IDENIT, Ahnlab, Softwide Security, KPCOUS, Bigidean

When concluding a contract to process personal information other than the use of cloud services, the Company will specify in contracts to prohibit processing of personal information for purposes other than the purpose of performing the entrusted operations in accordance with Article 26 of the Personal Information Protection Act, to implement technical and managerial protection measures, to limit re-entrustment, to manage and supervise the trustee, and to mention about liability issues such as compensation for damages. The Company will also supervise whether the trustee handles personal information safely.
In accordance with Article 26, Paragraph 6 of the Personal Information Protection Act, if the trustee re-entrusts the company with the processing of personal information, the trustee must obtain the company's consent.
If the details of the entrusted operations or the trustee changes, the Company will disclose it through updating this privacy policy without a delay.

Article 4. Rights and obligations of information subjects and legal representatives and methods of exercising them

The information subject can exercise his/her rights, such as requesting the company to view, correct, delete, or suspend processing of one’s personal information at any time.
The exercise of rights pursuant to Paragraph 1 may be made to the Company via phone, e-mail, etc. in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

[Processing Department]

Department	Responsibilities	Contact	Email
P&C	Receiving and processing requests to view personal information	+82-2-338-1876	legal@querypie.com

The exercise of rights under Paragraph 1 may be done through a 3rd-party agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney in the form of Annex No. 11 of the “Enforcement Rules to Personal Information Protection Act (No. 2020-7)”.
Requests to view and suspend personal information processing may limit the information subject's rights pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
Requests for correction or deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
The Company verifies whether the person making the request with the information subject's rights, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing, is the right person or a legitimate agent.

Article 5. Personal information collected and collection methods

The Company processes the following personal information items collected through the Contact Us page on the website for the purpose of providing information about all services offered by QueryPie.

Method of collection
- When users directly enter their personal information and provide consent for its collection through the Contact Us page on the website.

Personal information collected

Category	Personal information collection items	Purpose of collection and use	Retention period (preservation and destruction)
Required items ※ Legal basis: Article 15(1)4 of the Personal Information Protection Act (contract execution/performance)	First Name Last Name Business Email Company Name	1) Use of homepage content - Whitepaper - Product brochure - Tutorial	The Company preserves customer personal information held in a safe manner for 3 years based on Article 2 of the Privacy Policy, and destroys the personal information without delay when it becomes unnecessary due to the elapsed period or achievement of the purpose of processing. However, in cases where personal information must be preserved for a certain period of time in accordance with other laws, the personal information or personal information file is stored and managed separately from other personal information, and is destroyed after the retention period has elapsed. - Related laws: Article 6 of the Act on the Consumer Protection in Electronic Commerce and Article 6 of the Enforcement Decree of the same Act 1) Records of contracts or subscription withdrawals, etc.: 5 years 2) Records of payment and supply of goods, etc.: 5 years 3) Records of consumer complaints or disputes: 3 years
	First Name Last Name Business Email Phone Number Job Title Company Name	1) Contact Us

The company processes the following personal information items to review suitable talent recruitment.

Method of collection
When applying for a job at the Company through a recruitment management site (Wanted)
Personal information collected

Category	Personal information collection items	Purpose of collection and use	Retention period (preservation and destruction)
Required items ※ Legal basis: Article 15(1)4 of the Personal Information Protection Act (contract execution/performance)	Name, phone number, job history, educational background, qualifications, and other career-related information	1) Recruitment review	Based on Article 2 of the Privacy Policy, the Company destroys the personal information held without delay when it becomes unnecessary due to its elapsed period or achievement of the purpose of processing. However, if employment is confirmed, it will be processed according to the internal HR management process.

The company processes the following personal information items for Marketing & Event.

Method of collection
When consent for marketing use is given through the gating form on the website
- When participating in surveys via the Salesforce Form for emergency events, prize draws, or similar purposes
- Upon user consent to notifications about new and beta service launches
Personal information collected

Category	Personal information collection items	Purpose of collection and use	Retention period (preservation and destruction)
Required items ※ Legal basis: Article 15(1)4 of the Personal Information Protection Act (contract execution/performance)	Name, company name, department, email	1) Marketing/Event 2) Community License Downloads	Based on Article 2 of the Privacy Policy, the Company destroys customer personal information held in a safe manner for 3 years and destroys the personal information without delay when it becomes unnecessary due to the elapsed period or achievement of the purpose of processing. However, in cases where personal information must be preserved for a certain period of time in accordance with other laws, the personal information or personal information file is stored and managed separately from other personal information, and is destroyed after the retention period has elapsed. - Related laws: Article 6 of the Act on the Consumer Protection in Electronic Commerce and Article 6 of the Enforcement Decree of the same Act 1) Records of contracts or subscription withdrawals, etc.: 5 years 2) Records of payment and supply of goods, etc.: 5 years 3) Records of consumer complaints or disputes: 3 years

The Company processes the following personal information items for the QueryPie AIP Service.

Methods of Personal Information Collection for QueryPie AIP Service
When a user signs up for the service through the QueryPie AIP membership registration page.
- Collection of user behavior information during QueryPie AIP usage.
Details of Personal Information Collection and Use

Category	Personal information collection items	Purpose of collection and use	Retention period (preservation and destruction)
Required items ※ Legal basis: Article 15(1)4 of the Personal Information Protection Act (contract execution/performance)	Position, E-mail, Country	1) QueryPie AIP Service Provision 2) QueryPie AIP-Based Services Provision	QueryPie Inc. retains and destroys personal information collected under Article 2 of its Privacy Policy according to the following standards. 1) General Retention Period Personal information collected for membership registration and service use is retained until a member withdraws. Upon a withdrawal request or when the purpose of personal information collection and use has been achieved, the information is immediately destroyed. 2) Retention According to Relevant Laws The following information is retained for a certain period in accordance with relevant laws, and then immediately destroyed after that period. In such cases, the information is stored and managed separately from general personal information. - Related laws: Article 6 of the Act on the Consumer Protection in Electronic Commerce and Article 6 of the Enforcement Decree of the same Act 1) Records of contracts or subscription withdrawals, etc.: 5 years 2) Records of payment and supply of goods, etc.: 5 years 3) Records of consumer complaints or disputes: 3 years
	Google Sign-Up Position, E-mail, Country, Google Profile Image (if a profile photo is available)
	Github Sign-Up Position, E-mail, Country, GitHub Profile Image (if a profile photo is available)
	Files attached to AI prompts (stored in encrypted form) [When submitting a Bug Report - all personal information is encrypted.] - Datadog Session Identifier (datadog-session-id) - Session Replay Link (datadog-session-replay-url) - Page URL at the time of the error - User-provided error summary (issue-summary) - User's name, email, and other user information (if the user has consented) - AI chat content (chat, conversationId, messageId) - Information on the currently used screen and tools (tool, integrations)	2) Usability Improvement 3) Report to Bug
	Upon subscription payment Card number, Expiration date, CVC Country User ID	Payment service

The Company processes the following personal information items for the QueryPie AIP-Based Services.

Methods of collecting personal information for the QueryPie AIP-Based Services
When users consent to the collection of personal information and register for the service through the QueryPie AIP sign-up page
Details of personal information collected and used during service use

AIP-Based Service Name	Personal Information Items Collected within the Service	Purpose of collection and use	Retention Period (Storage and Destruction)
Lingo	Voice or audio input, speech recognition results, source text, translation and interpretation results, and interpretation session information	Recording voice meeting conversations and providing language interpretation	Until account withdrawal or deletion by the user
NotePie	Attachments, chat history, generated documents, and analysis results	Provision of the NotePie service	Until account withdrawal or deletion by the user

Article 6. Procedures and methods of destroying personal information

Based on Article 2 of the Personal Information Processing Policy, the Company destroys the personal information it holds without delay when it becomes unnecessary due to the elapse of the period or achievement of the purpose of processing. However, if personal information must be preserved for a certain period of time in accordance with other laws, it will be destroyed after the retention period has elapsed.

[Related Laws]

Act on the Consumer Protection in Electronic Commerce	Protection of Communications Secrets Act
Records of consumer complaints or disputes: 3 years Records on payment and supply of goods, etc.: 5 years Records of contracts or subscription withdrawals, etc.: 5 years	Record of communication: 3 months

The procedures and methods for destroying personal information are as follows:
Destruction Procedure:
- The Company selects personal information that may require destruction and destroys personal information in a safe manner in accordance with internal procedures approved by the Chief Privacy Officer.
Destruction Method:

- Digital personal information is deleted using secure and irreversible technical measures. Personal information printed on paper will be shredded by paper shredder or be incinerated.

Article 7. Company's information protection efforts

The Company is taking the following measures to ensure the safety of personal information.

Conduct regular self-audits

The Company conducts regular self-audits to ensure stability in handling personal information.

Minimization and training of employees handling personal information

The Company is implementing measures to manage personal information by designating and limiting employees in charge of handling personal information.

Establishment and implementation of internal management plan

To ensure safe processing of personal information, the Company has established and implemented an internal management plan.

Technical measures against attacks and hacking

In order to prevent leakage and damage of personal information due to hacking or computer viruses, the Company installs security programs, periodically updates and inspects them, and installs systems in areas where access from the outside must be controlled, and monitors and blocks them technically and physically.

Encryption of personal information

User's personal information is encrypted and stored and managed, so only the user can know it. Separate security features such as encrypting or locking files and transmission data are used for important data.

Management of access record storage and prevention of forgery and falsification

The Company stores and manages access records to the personal information processing system for at least two years, and it uses security features to prevent access records from being forged, altered, stolen, or lost.

Restrictions on access to personal information

Necessary measures are taken to control access to personal information by granting, changing, and revoking access rights to the database system that processes personal information, and unauthorized access from outside is being controlled using an intrusion prevention system.

Use of lock for document security

Documents and auxiliary storage media containing personal information are stored in a safe place with a lock.

Access control for unauthorized persons

The Company has a separate physical storage location where personal information is stored and has established and operated access control procedures for it.

Article 8. Installation, operation and rejection of cookies

Definition and Purpose of Cookies

Our company uses cookies to provide personalized services to users and to ensure the smooth operation of our website. Cookies are small pieces of data that may be stored on a user's browser or device, enabling multilingual support, tracking visit history, and more. Additionally, cookies are utilized for purposes such as website performance analysis, providing personalized content and advertisements, and maintaining security. We comply with applicable laws (e.g., GDPR, ePrivacy Directive), and users can manage or reject cookie settings directly.

Types and Purposes of Cookies Collected

We use the following types of cookies, each serving specific purposes:

Strictly Necessary Cookies
Purpose: Essential for ensuring the basic functionality of the website.
- Features: Operate without user consent and are indispensable for website use.
Functional Cookies
- Purpose: Enhance user experience and provide personalized features, such as multilingual settings.
- Features: Non-essential cookies that require user consent.
Analytics/Performance Cookies
- Purpose: To analyze website visitor traffic and optimize performance, including user behavior analysis on QueryPie AIP and QueryPie Community Edition.
Google Analytics (QueryPie AIP, QueryPie Community & Enterprise Edition), DataDog (QueryPie AIP)
- Features: Non-essential cookies that require user consent.
Marketing Cookies
- Purpose: To plan and execute effective advertising, we identify whether users accessed our site through specific advertisements and measure the performance of those campaigns. For example, Google Ads
- Features: Non-essential cookies that require user consent. The company does not use the collected marketing cookie information to identify specific individuals.

Cookie Consent Procedure

To use non-essential cookies, such as functional cookies and analytics/performance cookies, the company obtains prior consent from users. Consent is gathered through a cookie banner displayed during the user’s first visit to the website, offering the following options:

[Allow All Cookies]
[Allow Strictly Necessary Cookies Only]
[Manage Cookie Settings] – Individual cookie settings [Consent]

How to Change or Reject Cookie Settings

Users can change or reject cookie settings at any time. The following explains how to refuse cookie storage through browser settings:

Allow/Block Cookies in Web Browsers
Chrome: Select the "⁝" menu at the top right > New Incognito window (shortcut: Ctrl+Shift+N)
- Edge: Select the "…" menu at the top right > New InPrivate window (shortcut: Ctrl+Shift+N)
Allow/Block Cookies in Mobile Browsers.
- Chrome: Tap the "⁝" menu at the top right > New incognito tab
- Safari: Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Tap the Tabs icon at the bottom > Turn on Secret mode > Start

Cookie Retention Period

The storage duration of each cookie depends on its purpose:

Strictly Necessary Cookies: Deleted upon session termination.
Non-Essential Cookies: Stored for the period specified at the time of user consent (e.g., two years).

Article 9. Chief Privacy Officer

The Company is responsible for the overall management of personal information processing and has designated a personal information protection manager as follows to handle complaints from information subjects related to personal information processing and to provide damage remedies.

Name	Position	Contact	Email
Jake Im	Chief Privacy Officer (CPO)	+82-2-338-1876	legal@querypie.com

Article 10. Request to view personal information

The information subject may request access to one’s personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. In addition, the company will strive to promptly process the information subject's request to view one’s personal information.

[Processing Department]

Department	Responsibilities	Contact	Email
P&C	Receiving and processing requests to view personal information	+82-2-338-1876	legal@querypie.com

Article 11. Method of redress for infringement of rights

In order to receive relief from personal information infringement, the information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Personal Information Infringement Report Center, or relevant. For other personal information infringement reports and consultations, please contact the organizations below.

[Organizations in Korea]

Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)

A person whose rights or interests have been infringed upon due to a disposition or omission by the head of a public institution in response to requests under Article 35 (view of personal information), Article 36 (correction/deletion of personal information), and Article 37 (suspension of processing of personal information, etc.) of the Personal Information Protection Act may request an administrative trial in accordance with the Administrative Appeals Act.

※ For more information about administrative trials, please refer to the Central Administrative Appeals Commission’s website (www.simpan.go.kr)

Article 12. Crossborder transfer/storage of personal information

The personal information of the information subject is managed using a cloud service with a server based in the United States. However, no other tasks other than the storage of information for customer management are entrusted, and the company is responsible for preventing information leaks and managing access rights.

※ Legal Basis for Overseas Transfer: Article 28-8 (1) 3 (a) of the Personal Information Protection Act (Entrustment or storage of overseas processing for contract fulfillment)

Personal information items transferred/stored overseas: Customer information collected for the use of content on the company website, marketing and events, Contact Us inquiries, and the QueryPie AIP service.

Category	Purpose of transfer/storage overseas	Transferred/stored items	Platform for transfer/storage
Personal Information Items Transferred/Stored	Homepage(Contents Gating)	First Name Last Name Business Email Company Name	AWS
	Homepage(Contact Us)	First Name Last Name Business Email Phone Number Job Title Company Name	AWS
	QueryPie AIP General Sign Up	(Business) Email Country Job Title	Auth0(AWS)
	QueryPie AIP Google Sign Up	(Business) Email Country Job Title Profile Image(if a profile photo is available when you sign up with Google)
	QueryPie AIP Github Sign Up	(Business) Email Country Job Title Profile Image(if a profile photo is available when you sign up with Github)
	Customer Portal	Name, Company Name, E-Mail	Atlassian JIRA(AWS)
	Marketing/Event	Name, Company Name, Department, E-mail	AWS
	QueryPie AIP User Behavior Information	Automatically Collected User Behavior Information User ID(E-mail)	DataDog (AWS) Atlassian JIRA (AWS) - for Error Reporting
	QueryPie AIP Payment	Card number, Expiration date, CVC, User ID(E-mail), Country	Stripe(AWS)
	QueryPie AIP Service Usage Information	Chat conversation history, User ID, E-mail, Job title, Country	AWS (Tokyo Region)
	QueryPie AIP-Based Services	Lingo - Voice or audio input, speech recognition results, source text, translation and interpretation results, and interpretation session information NotePie - Attachments, chat history, generated documents, and analysis results	AWS (Tokyo Region)
Retention period of transfer recipient	Based on Article 2 of the Personal Information Processing Policy, when the personal information held by the company becomes unnecessary due to the expiration of the three-year retention period, membership withdrawal, or the achievement of the purpose of processing, etc., the personal information is immediately destroyed in the cloud service to which it is transferred. However, in cases where personal information must be preserved for a certain period of time in accordance with other laws, the personal information or personal information file is stored and managed separately from other personal information, and is destroyed after the retention period has elapsed. • Related laws: Article 6 of the Act on the Consumer Protection in Electronic Commerce and Article 6 of the Enforcement Decree of the same Act 1) Records of contracts or subscription withdrawals, etc.: 5 years 2) Records of payment and supply of goods, etc.: 5 years 3) Records of consumer complaints or disputes: 3 years

Country where personal information is transferred/stored: United States cloud (AWS, Google Cloud) and Japan (AWS, Google Cloud)
Date and method of transfer/storage:

Stored in SaaS cloud when using content services, applying for promotions, or submitting Contact Us on the website.
SaaS Cloud Storage upon QueryPie AIP Service Membership Registration
Stored in the SaaS cloud upon agreeing to PR & Marketing.
Stored in the SaaS cloud when submitting requests via the Customer Portal application link.
Stored in the SaaS cloud upon payment for AIP subscriptions and recharges.
Stored in AWS (Tokyo Region) when using the QueryPie AIP service.

Name of corporation to which personal information is transferred and stored

QueryPie AIP & AIP-Based Services Membership Registration : Auth0(https://auth0.com/)
QueryPie AIP User Behavior Information : DataDog(https://www.datadoghq.com/)
QueryPie AIP Report to Bug : Atlassian Jira(https://www.atlassian.com/)
Customer Service Processing and Operation: Atlassian Jira (https://www.atlassian.com/)
QueryPie AIP Payment : Stripe(https://stripe.com/)
QueryPie AIP & AIP-Based Services Usage History : AWS(https://amazon.com)

Purpose of personal information transfer

Use of content, promotion applications, and Contact Us service : AWS platform
Marketing/Event service provision : AWS platform
Customer Service Processing and Operation : Atlassian Jira (SaaS)
QueryPie AIP : QueryPie AIP SaaS Service Provision, Behavior Information Analysis and Performance Improvement, Error Reporting
QueryPie AIP Payment : Stripe (SaaS)
Use of the QueryPie AIP service : AWS(Tokyo Region)

Personal information retention period: Until personal information is destroyed in accordance with Article 6 of the Privacy Policy.
Method, Procedure, and Effects of Refusing the Transfer of Personal Information

Email to Request Refusal of Overseas Transfer of Personal Information : legal@querypie.com
When a refusal request is made via the email address provided above, any personal information transferred overseas will be immediately destroyed. However, this may result in restrictions on accessing content, customer support services, and receiving newsletters associated with marketing information.

The Company uses cloud services after carefully reviewing the information protection and personal information protection compliance status of the cloud service provider, and the cloud service provider does not have access to the Company's customer personal information.

Article 13. Privacy rights under California, the EU, and other jurisdictions

We are committed to respecting and protecting your privacy rights in accordance with applicable laws and regulations, including but not limited to the California Consumer Privacy Act (CCPA) and the EU General Data Protection Regulation (GDPR). Below is a summary of your rights and the procedures to exercise them:

California Consumer Privacy Act (CCPA)

If you are a resident of California, you have the following rights under the CCPA:

Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, disclose, and sell.
Right to Delete: You can request the deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: You can opt out of the sale of your personal information to third parties.
Right to Non-Discrimination: You have the right not to be discriminated against for exercising your CCPA rights.

To exercise your rights under the CCPA:

Submit a request via email at legal@querypie.com

We will verify your identity before processing your request and respond within the timeframes outlined in the CCPA.

General Data Protection Regulation (GDPR)

If you are located in the European Union (EU) or European Economic Area (EEA), you have the following rights under the GDPR:

Right of Access: You can request a copy of your personal data and details about how it is processed.
Right to Rectification: You can request the correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): You have the right to request the erasure of your personal data in certain circumstances.
Right to Restrict Processing: You can request a limitation on the processing of your personal data under certain conditions.
Right to Data Portability: You can request a copy of your personal data in a machine-readable format or its transfer to another provider.
Right to Object: You can object to the processing of your personal data for direct marketing or other purposes.
Right to Withdraw Consent: You can withdraw your consent for data processing at any time, where the processing is based on consent.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

To exercise your rights under the GDPR:

Submit a request via email at legal@querypie.com

We will process your request in accordance with applicable laws and ensure the security and confidentiality of your personal data throughout the process.

Article 14. Provisions regarding the Collection and Analysis of User Behavior Information

The Company collects and analyzes user behavior information for the purposes of improving the quality of the QueryPie AIP service, enhancing user experience, ensuring service stability, and providing technical support. Through the user's voluntary error reporting function (Report to Bug), the Company may process the following information:

1. Purpose and Items of Collection

We collect and store the following user behavior information to improve the quality of the QueryPie AIP SaaS Service, handle user error reports, enhance user experience, ensure service stability, and perform statistical analysis.

Items Collected: User identification ID, in-service action event logs (like page navigation and feature usage history), error information, and prompt input history (stored in a de-identified format).
Collection Method: This information includes logs automatically generated during service use and prompts directly entered by the user.
Datadog Session Identifier(datadog-session-id)
- Session Replay Link(datadog-session-replay-url)
- Page URL at the time of error occurrence
- User-Provided Error Summary(issue-summary)
- User information, such as name and email
- AI Conversation Content(chat, conversationId, messageId)
- Information on the Currently Used Screen and Tools(tool, integrations)

2. Collection Tools and External Service Providers

Collected information may be processed and stored in an encrypted format using the following external analytics tools:

Datadog: For user behavior logs and performance monitoring.
LiteLLM: For recording AI prompt usage logs and analyzing responses.

3. Retention Period and Destruction

Behavioral information is retained for one year from the time of collection. It's immediately destroyed once the retention period expires or the processing purpose has been fulfilled. However, if there's a legal requirement for separate retention, the information will be kept for that period before being destroyed.

Additionally, collected information can be transmitted to our internal issue management system (Jira), used by the Company's technical support team upon the user's request, and is accessible only to authorized internal personnel.

Article 15. Amendment to the Privacy Policy

If there is any addition, deletion or modification of the contents of the privacy policy, the Company shall notify users through a notice on the website or the Privacy Policy page.

Announcement date: Jul 10, 2026
Effective date: Jul 10, 2026