This is a translation for reference. The Korean version prevails in case of any discrepancy. View the Korean version

Terms of Service for Security Remediation Services

These Terms set out the rights and obligations of Global Vision Co., Ltd. (AI Division) (the “Company”) and the customer with respect to the web server security remediation services (the “Services”) provided by the Company.

Article 1 (Scope of Services)

The Services are limited to the scope of work stated in the quotation (such as emergency shield setup, PHP security patching and configuration, compromise inspection, and version migration or rebuilding) and to the target systems. Any work not stated therein will be performed only with the customer’s separate consent and under an additional agreement.

Article 2 (Delegation of Work and Consent to Access)

① The customer warrants that it holds legitimate administrative authority over the target systems, and delegates to and authorizes the Company to access, inspect and change the configuration of those systems within the scope of work.

② The customer bears any legal liability arising from designating as a target a system over which it has no administrative authority.

③ The Company will not access systems or view information beyond the delegated scope.

Article 3 (Customer’s Duty to Cooperate)

The customer shall provide the access details, hosting and domain management privileges, and available work windows needed for the work, and shall confirm whether its data has been backed up before work begins. The Company also backs up the items to be changed before starting work, but this does not replace the customer’s own backups.

Article 4 (Fees and Payment)

① Fees are the amount stated in the quotation (VAT excluded) and are payable by bank transfer or card. As a rule, emergency work begins after payment is confirmed.

② If the preliminary diagnosis shows that the scope of work differs, the Company will present an additional quotation and will not charge any additional fees without the customer’s consent.

Article 5 (Cancellation and Refunds)

① Cancellation before work begins: a full refund is provided.

② Cancellation after work begins: a refund is provided after deducting the amount corresponding to the work already performed.

③ No refund is provided after the work is completed. However, any portion of the work not performed due to reasons attributable to the Company will be refunded.

Article 6 (Warranty and Re-inspection)

For 30 days from the work completion date, the Company provides free re-inspection of the work items on the same target systems. Remediation required because the customer changed settings on its own or because a new vulnerability has been disclosed is subject to a separate agreement.

Article 7 (Limitation of Liability)

① Security remediation reduces the risk posed by known vulnerabilities; the Company does not guarantee that all hacking or breaches will be prevented.

② The Company is not liable for damages caused by defects or breaches that existed before the work, attacks by third parties, failures of hosting providers or software vendors, or errors in information provided by the customer.

③ Except where damage to the customer results from the Company’s willful misconduct or gross negligence, the Company’s liability for damages is limited to the fees paid for the relevant Services.

Article 8 (Confidentiality and Destruction of Materials)

The Company will not provide to any third party the customer’s information or data learned during the work, and will destroy the access details and analysis materials it received within 30 days after the work ends. The Company recommends that the customer change its passwords after the work ends.

Article 9 (Outsourced Processing of Personal Information)

Where the target systems contain personal information, the Company, as a processor (trustee) under the Personal Information Protection Act of Korea, will process it only within the scope of the purpose of the work and will take measures to ensure its security.

Article 10 (Dispute Resolution)

Disputes relating to the Services shall be resolved through mutual consultation; if no agreement is reached, the Seoul Southern District Court shall have jurisdiction.

Effective date: 2026-10-24