Effective Date: September 1, 2026

This Privacy Notice (“Notice”) describes the privacy practices of Barreleye Inc. and its subsidiaries, if applicable (collectively, “Barreleye,” “we,” “us,” or “our”), including how we collect, process, use, and disclose personal information in connection with our Services.

For purposes of this Notice, “Services” refers collectively to your interactions with Barreleye, including when you:

• visit or use any Barreleye website that references or links to this Notice, including any features, functionality, or services made available through such website;
• engage with us in connection with marketing, promotional, or business development activities, including webinars, conferences, events, and social media;
• submit an application or otherwise communicate with us regarding employment opportunities; or
• as a customer or customer representative, receive technical support, product support, or other services relating to our products.

This Notice applies to personal information processed in connection with these activities, except where a different privacy notice or other specific terms expressly apply.

Supplemental Privacy Disclosures

From time to time, we may provide additional privacy notices, including “just-in-time” disclosures, that describe our personal information processing practices in specific circumstances. These disclosures are intended to supplement this Notice, provide further details regarding how we handle personal information in a particular context, or inform you of additional rights or choices that may be available to you regarding our processing of your personal information.

Categories of Information We Collect

We may collect different categories of information depending on how you access, use, or otherwise interact with the Services. This information may include:

• Information you provide directly to us. When you communicate or interact with us, we may collect information such as your first and last name, organization or employer, job title or primary role, username, email address, and telephone number. For example, we may collect this information when you complete a “Contact Us” form, communicate with us by email, or register for a webinar, conference, or other event.
• Job applicant information. If you apply for an employment opportunity through our “Join Us” page or another application process, we and our service providers may collect personal and professional information relating to your application. This may include your name, email address, telephone number, resume or curriculum vitae, employment history, educational background, qualifications, and other information you choose to provide as part of your application.
• Customer and product support information. When we provide technical assistance, customer support, or other product-related services, we may collect information necessary to provide those services, including your name, job title, organization, primary role, email address, telephone number, and information relating to your support request or use of the applicable product or service.
• Technical and device information. When you access or use our Services electronically, certain technical information may be collected automatically. Depending on how you interact with the Services, this may include information about your device, browser, operating system, IP address, and other hardware, software, network, or usage information associated with your access to the Services.
• Website, cookie, and online activity information. When you visit or interact with our websites, we may collect certain information relating to your account and online activity, which may include sensitive personal information, such as account credentials or log-in information, where applicable. We and our service providers may use cookies, pixels, scripts, device identifiers, and similar technologies to operate and improve our websites, evaluate the effectiveness of our advertising and marketing activities, distinguish legitimate users from automated traffic or bots, enhance security, detect and prevent fraud or spam, and personalize or measure advertising and marketing communications. Additional information about our use of these technologies, the third parties with whom we work, and the choices available to you regarding tracking can be found in our Cookie Policy. In connection with these activities, we may disclose certain information to third parties, such as advertising partners, advertising networks, analytics providers, and social media platforms. Depending on your interaction with the Services and applicable law, this information may include online or other electronic network activity, device or other identifiers, approximate location information, and information or inferences regarding your preferences or interests. When you access the Services electronically, our systems may also automatically generate and retain log and usage information. Such information may include your IP address, browser type, operating system, device type, unique device identifiers, approximate geolocation, pages viewed or visited, dates and times of access, referring or exit pages, and other information concerning how you access, navigate, and interact with the Services.

How We Use Your Information

We may use the personal information we collect for the following purposes:

• Provide, operate, and administer our Services, including maintaining and managing the functionality and availability of the Services;
• Facilitate and support your use of the Services, including responding to inquiries, providing technical or customer support, and addressing requests relating to our products and Services;
• Communicate with you about our products and Services, including providing information, updates, notices, and other communications relevant to your relationship with Barreleye;
• Perform our contractual obligations, including fulfilling our obligations under agreements with you or the organization you represent and administering our business relationship with you;
• Process and evaluate employment applications, including assessing your qualifications, experience, and suitability for current or potential employment opportunities with Barreleye;
• Maintain usage and session information and conduct analytics, including analyzing how individuals access, navigate, and interact with our Services to evaluate and improve their functionality, performance, and user experience; and
• Pursue our legitimate business purposes and comply with applicable requirements, including maintaining the quality, integrity, availability, and security of our Services; detecting and preventing fraud, misuse, or security incidents; managing your communications and marketing preferences; providing marketing and promotional communications, such as newsletters, company or product announcements, and invitations to webinars or other events; understanding and analyzing the use of and interactions with our Services; improving our products, Services, and business operations; protecting our rights and the rights of others; and complying with applicable laws, regulations, legal processes, and other legal or regulatory obligations.

Use of Personal Information for Other Purposes

We generally use personal information for the purposes for which it was originally collected. We may also use personal information for another purpose where we reasonably determine that the additional purpose is compatible with the purpose for which the information was initially collected. If you would like additional information about how we determine whether a subsequent use is compatible with the original purpose, please contact us using the contact information provided in this Notice.

If we intend to use your personal information for a purpose that is materially different from, or unrelated to, the purpose for which it was originally collected, we will provide any notice required by applicable law and, where appropriate, explain the legal basis that permits us to process the information for that purpose.

How We Share Your Information

We may disclose or otherwise make personal information available to third parties in the circumstances described below:

• Service providers and business partners. We may share personal information with third parties that perform services for us or assist us in operating our business, including distributors, vendors, contractors, consultants, analytics providers, marketing providers, technology providers, and other service providers. These parties may process personal information as necessary to operate, maintain, support, develop, or improve our Services; provide analytics, marketing, consulting, or other business services; communicate with you in connection with our Services; respond to your requests; or otherwise perform services on our behalf for legitimate business purposes.
• With your consent or at your direction. We may disclose personal information where you have authorized or consented to the disclosure, or where you otherwise direct or request us to share the information.
• For processing and service delivery. We may provide personal information to third parties that process information on our behalf or provide services or functionality that support our business and the delivery of our Services. Where required by applicable law, such parties are subject to appropriate contractual or other obligations regarding their processing and protection of personal information.
• Legal, regulatory, security, and protection purposes. We may disclose personal information where we reasonably believe disclosure is necessary or appropriate to: (a) comply with applicable laws or regulations, legal proceedings, court orders, governmental requests, or requests from law enforcement or regulatory authorities; (b) investigate, prevent, detect, or address suspected fraud, security incidents, misuse, or technical issues; (c) enforce our agreements, policies, or legal rights; or (d) protect the rights, property, health, safety, or security of Barreleye, our users, other individuals, or the public.
• Aggregated or de-identified information. We may disclose information that has been aggregated, de-identified, anonymized, or otherwise processed so that it does not reasonably identify an individual. We may use or disclose such information for business, research, analytics, product development, or other lawful purposes, subject to applicable laws and regulations.
• Corporate transactions and affiliated companies. We may disclose personal information in connection with an actual or proposed corporate transaction, including a merger, acquisition, reorganization, financing, investment, sale or transfer of assets, joint venture, bankruptcy, or similar transaction, including during related negotiations and due diligence. We may also share personal information among Barreleye and our current or future subsidiaries, affiliates, and other entities under common ownership or control, where permitted by applicable law.

Do-Not-Track Signals

Certain web browsers offer “Do Not Track” (“DNT”) settings or similar mechanisms that allow users to indicate a preference regarding the tracking of their online activities. Because there is currently no universally accepted standard governing how websites should interpret or respond to these signals, our websites do not currently respond to DNT or similar automated browser signals. For additional information about the tracking technologies we use and the choices available to you, please review our Cookie Policy.

Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information within our possession or control against unauthorized access, acquisition, use, alteration, disclosure, loss, or destruction. These safeguards may include security technologies and tools, such as reCAPTCHA, where appropriate.

However, no method of transmitting information over the Internet or method of electronic storage can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect personal information, we cannot guarantee the absolute security of information transmitted to, from, or through our Services.

Links to Third-Party Websites and Services

Our websites and Services may contain links to websites, applications, software, or services operated by third parties. This Notice applies only to Barreleye's processing of personal information in connection with our Services and does not govern the privacy practices of third parties.

We are not responsible for the privacy practices of third-party websites, applications, software, or services. We encourage you to review the applicable privacy notices or policies of those third parties to understand how they collect, use, disclose, and otherwise process your personal information.

International Transfers of Personal Information

Barreleye operates across jurisdictions and may transfer personal information among Barreleye entities, affiliates, service providers, and other recipients located in countries other than the country in which the information was originally collected. As a result, your personal information may be processed in jurisdictions whose data protection laws differ from those applicable in your country of residence.

Where required by applicable law, we take appropriate measures designed to ensure that personal information transferred internationally receives an adequate level of protection. Depending on the circumstances, these measures may include one or more of the following:

• Adequacy decisions. We may transfer personal information to countries or jurisdictions that have been recognized by the relevant governmental or regulatory authority as providing an adequate level of protection for personal information; or
• Contractual safeguards. Where an adequacy determination does not apply, we may rely on appropriate contractual protections, including standard contractual clauses or other data transfer agreements approved or recognized by the relevant authorities, to provide appropriate safeguards for transferred personal information.

We may also implement additional technical, organizational, or contractual safeguards where appropriate or required by applicable law.

If you would like additional information regarding the safeguards or transfer mechanisms we use in connection with international transfers of your personal information, please contact us at contact@barreleye.co.kr

Additional Privacy Rights Based on Your Location

Depending on your place of residence, including the Republic of Korea, the European Economic Area (“EEA”), the United Kingdom, Switzerland, and certain jurisdictions within the United States, applicable privacy and data protection laws may provide you with additional rights regarding your personal information. If you are a resident of the Republic of Korea, additional terms describing rights and requirements under Korean data protection laws are available here.

The availability and scope of these rights vary by jurisdiction and may be subject to conditions, limitations, and exceptions under applicable law. Accordingly, we may not be required or permitted to fulfill a particular request in certain circumstances, including where retaining or otherwise processing personal information is necessary to comply with applicable legal or regulatory requirements.

We provide individuals with choices regarding the collection, use, and disclosure of their personal information where required by applicable law. We also take reasonable steps to maintain personal information in our possession or control so that it is accurate, complete, and current as appropriate for the purposes for which it is processed.

Depending on the privacy or data protection laws applicable in your state, country, or other jurisdiction of residence, you may have one or more of the following rights with respect to personal information that we maintain about you:

• Access and information. You may have the right to request access to personal information we maintain about you and to obtain information regarding how we collect, use, disclose, or otherwise process that information.
• Correction. You may have the right to request that we correct or update personal information that is inaccurate or incomplete.
• Deletion. You may have the right to request deletion of certain personal information we maintain about you, subject to applicable exceptions. In some circumstances, fulfilling a deletion request may require us to delete or deactivate your account. We may also retain certain information where necessary or permitted to comply with legal, regulatory, contractual, security, recordkeeping, or other legitimate business requirements.
• Data portability. Where provided by applicable law, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format or to request that it be transmitted to another entity where technically feasible.
• Objection or restriction. In certain jurisdictions, you may have the right to object to particular processing activities or request that we restrict the processing of your personal information.
• Sale, sharing, or targeted advertising choices. Where applicable, you may have the right to opt out of the sale or sharing of your personal information or its processing for targeted or cross-context behavioral advertising.
• Sensitive personal information. You may have the right to limit, withdraw consent to, or otherwise exercise control over certain uses or disclosures of sensitive personal information, where provided by applicable law.
• Withdrawal of consent. Where we rely on your consent to process personal information, you may have the right to withdraw that consent at any time, subject to applicable law. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.
• Complaints and remedies. Depending on your jurisdiction, you may have the right to submit a complaint to an applicable data protection or supervisory authority and, where provided by law, seek compensation or other remedies for damages resulting from unlawful processing of your personal information.

These rights are not exhaustive and do not limit or restrict any additional rights or remedies that may be available to you under applicable privacy or data protection laws.

De-Identified Data

We may create, collect, use, or disclose information that has been de-identified, anonymized, aggregated, or otherwise processed so that it cannot reasonably be used to identify or be linked to a particular individual. Where required by applicable law, we will maintain such information in de-identified form and will not attempt to re-identify it, except as permitted by law. If information does not qualify as de-identified or anonymous information under applicable law, we will treat it as personal information in accordance with this Notice and applicable legal requirements.

Exercising Your Privacy Rights

If you have questions about our privacy practices or would like to exercise any privacy rights available to you under applicable law, you may contact us at contact@barreleye.co.kr. We will not unlawfully discriminate against you, deny you services, or otherwise treat you adversely because you have exercised a privacy right available to you under applicable law.

To help protect the privacy and security of personal information, we may take reasonable steps to verify your identity before processing certain requests, including requests to access, correct, update, or delete personal information. We may request information reasonably necessary to verify your identity or authority to make the request. Any information collected for verification purposes will be used and retained only as permitted by applicable law.

Where our processing of your personal information is based on your consent, you may withdraw that consent at any time, subject to applicable law. Withdrawal of consent will not affect the lawfulness of any processing carried out before your consent was withdrawn.

You may also opt out of receiving promotional or marketing communications from us at any time by following the unsubscribe instructions included in the applicable communication or by contacting us at contact@barreleye.co.kr. Please note that even if you opt out of marketing communications, we may continue to send you non-promotional communications where appropriate, such as communications concerning your account, transactions, products, Services, or our ongoing business relationship with you.

We encourage you to contact us first if you have any questions or concerns regarding our processing of your personal information so that we can attempt to address them. Depending on your jurisdiction, you may also have the right to submit a complaint to the data protection, privacy, or other regulatory authority responsible for enforcing applicable privacy laws in your state, country, or region.

Your Right to Opt Out of Sharing

To the extent that Barreleye's disclosure of personal information constitutes “sharing,” “sale,” or a similar activity under applicable privacy laws, you may have the right to opt out of such disclosures.

If you would like to exercise an applicable opt-out right, please contact us at contact@barreleye.co.kr. Depending on the nature of your request and the information involved, exercising an opt-out right may affect our ability to provide certain features, functionality, or Services to you. We will not restrict our Services solely because you exercise a privacy right except to the extent permitted or necessary under applicable law.

Automated Decision-Making

Barreleye does not currently use automated decision-making technologies to make decisions that produce legal or similarly significant effects concerning individuals without meaningful human involvement.

Online Meeting Recordings

From time to time, Barreleye may conduct online meetings through platforms such as Zoom, Google Meet, Microsoft Teams, or similar communications services. Where a meeting is to be recorded, participants will be provided with notice and, where required by applicable law, an opportunity to consent to the audio and/or video recording.

Participants in recorded meetings must not disclose, display, transmit, or discuss protected health information (“PHI”), individually identifiable patient information, or other confidential patient information during the recording unless Barreleye has expressly authorized such disclosure and all applicable legal and contractual requirements have been satisfied.

If PHI or other confidential patient information is inadvertently disclosed during a recorded meeting, please notify Barreleye promptly so that we can evaluate the incident and take appropriate remedial measures.

Barreleye will maintain meeting recordings using reasonable administrative, technical, and organizational safeguards and will process and retain such recordings in accordance with applicable laws and our applicable retention practices.

Where your consent is the legal basis for recording, you may withdraw your consent at any time by requesting that the recording be stopped. Withdrawal of consent will not affect the lawfulness of processing that occurred before consent was withdrawn.

How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Notice or Barreleye's privacy practices, please contact us at:

Barreleye Inc.

Email: contact@barreleye.co.kr