AGREEMENT TO OUR LEGAL TERMS

Effective August 14, 2026

Organization Edition — for personnel of Cheil Worldwide and its affiliates.

We are Draph, Inc. ("Company," "we," "us," "our"), a company registered in the Republic of Korea at 551 Seolleung-ro, Gangnam-gu, Seoul 06145, Republic of Korea. Our business registration number is 541-88-02453.

We operate VariAid, a generative AI solution that creates and varies banner and marketing creative assets, accessible at https://variaid.com/cheil (the "Site"), together with the related features and functionality that refer or link to these legal terms (the "Legal Terms") (collectively, the "Services").

You can contact us by email at hi@draph.ai, by phone at +82-2-2039-7454, or by mail at 551 Seolleung-ro, Gangnam-gu, Seoul 06145, Republic of Korea.

The Services are developed and operated by the Company and are made available to Cheil Worldwide Inc. and its affiliated corporations and overseas subsidiaries (collectively, the "Organization") for the Organization's internal business use, under a separate written agreement between the Company and the Organization (the "Master Agreement").

You are granted access to the Services as an employee or other authorized personnel of the Organization holding a valid email account on a domain approved by the Company and the Organization (an "Organization Email Account"), and only for the Organization's internal business purposes. The list of approved domains is maintained under the Master Agreement and may be updated from time to time without amendment of these Legal Terms.

By accessing or using the Services, you ("you," "User") confirm that you hold a valid Organization Email Account and agree to be bound by these Legal Terms. IF YOU DO NOT AGREE, YOU ARE NOT PERMITTED TO USE THE SERVICES AND MUST DISCONTINUE USE IMMEDIATELY.

Your right to use the Services is provided through the Organization and depends on your continued affiliation with the Organization, the validity of your Organization Email Account, and the Master Agreement remaining in effect. Access may be modified, suspended, or withdrawn in accordance with the Organization's policies, the Master Agreement, or these Legal Terms.

These Legal Terms govern the relationship between you and the Company. They supplement, and do not replace, the Master Agreement. As between the Company and the Organization, the Master Agreement prevails in the event of any conflict with these Legal Terms.

We may update these Legal Terms from time to time. We will give notice of material changes through the Services or to the Organization at least fourteen (14) days before they take effect, except where a shorter period is required for legal, regulatory, or security reasons. By continuing to use the Services after the effective date of any changes, you agree to be bound by the updated Legal Terms.

We recommend that you save or print a copy of these Legal Terms for your records.

•OUR SERVICES

•ELIGIBILITY AND USER REPRESENTATIONS

•ACCOUNT REGISTRATION AND ACCESS

•NO FEES

•INTELLECTUAL PROPERTY RIGHTS

•AI-GENERATED OUTPUT

•PROHIBITED ACTIVITIES

•THIRD-PARTY WEBSITES AND CONTENT

•SERVICES MANAGEMENT

•PRIVACY AND DATA PROTECTION

•TERM AND TERMINATION

•MODIFICATIONS AND INTERRUPTIONS

•CORRECTIONS

•DISCLAIMER

•LIMITATION OF LIABILITY

•RESPONSIBILITY AND HOLD HARMLESS

•USER DATA AND BACKUPS

•ELECTRONIC COMMUNICATIONS, TRANSACTIONS, AND SIGNATURES

•EXPORT CONTROL AND SANCTIONS

•GOVERNING LAW

•DISPUTE RESOLUTION

•MISCELLANEOUS

•CONTACT US

1. OUR SERVICES

The Services allow authorized personnel of the Organization to generate, resize, and vary banner and marketing creative assets using generative AI, based on reference materials that they provide.

The Services are made available for the Organization's internal business use. The information provided when using the Services is not intended for distribution to or use by any person or entity in any jurisdiction or country where such distribution or use would be contrary to law or regulation, or which would subject us to any registration requirement within such jurisdiction or country. Where personnel of the Organization access the Services from different locations, they are responsible for compliance with applicable local laws, to the extent such laws are applicable.

We may set, modify, and enforce reasonable limits on use of the Services, including limits on the number of generations, storage capacity, file sizes, resolution, and concurrent sessions, as set out in the Master Agreement or as notified through the Services.

Third-party service providers

The Company uses third-party service providers to provide the Services, including cloud infrastructure providers and providers of artificial intelligence models, some of which are located outside the Republic of Korea. Providing the Services therefore involves transmitting User Materials to, and receiving Outputs from, such providers. The Company may add, replace, or discontinue the use of any such provider from time to time.

Requirements applicable to the Organization's User Materials in this context — including the confidentiality obligations of such providers, restrictions on the use of particular providers or regions, and notification of changes — are set out in the Master Agreement, which prevails in respect of the Organization's materials.

2. ELIGIBILITY AND USER REPRESENTATIONS

By using the Services, you represent and warrant that: (1) all registration information you submit, including your Organization Email Account, will be true, accurate, current, and complete; (2) you will maintain the accuracy of such information and promptly update it as necessary; (3) you have the legal capacity and you agree to comply with these Legal Terms; (4) you are an employee or other personnel of the Organization authorized to use the Services and you hold a valid Organization Email Account; (5) you will not access the Services through automated or non-human means, whether through a bot, script, or otherwise; (6) you will not use the Services for any illegal or unauthorized purpose; and (7) your use of the Services will not violate any applicable law or regulation.

If you provide any information that is untrue, inaccurate, not current, or incomplete, or if you cease to meet the eligibility requirements above, we have the right to suspend or terminate your account and refuse any and all current or future use of the Services (or any portion thereof).

3. ACCOUNT REGISTRATION AND ACCESS

To use the Services, you must register with a valid Organization Email Account. You agree to keep your account credentials confidential and you will be responsible for all activity that occurs under your account. You must promptly notify us and the Organization if you become aware of any unauthorized use of your account.

Your access to the Services is tied to your Organization Email Account and your continued affiliation with the Organization. If your Organization Email Account becomes invalid, your affiliation with the Organization ends, or the Organization requests removal of your access, your access to the Services may be suspended or terminated.

Accounts are individual. You may not share your account credentials with, or permit your account to be used by, any other person, and you may not use the account of another person.

We reserve the right to remove, reclaim, or change a username if we determine, in our sole discretion, that it is inappropriate or otherwise objectionable.

4. NO FEES

No fees are payable by you personally for access to or use of the Services. Any fees, subscription terms, usage entitlements, credits, or payment obligations relating to the Services are governed exclusively by the Master Agreement between the Company and the Organization.

5. INTELLECTUAL PROPERTY RIGHTS

Our intellectual property

We are the owner or the licensee of all intellectual property rights in the Services, including all source code, databases, functionality, software, models, website designs, audio, video, text, photographs, and graphics in the Services (collectively, the "Content"), as well as the trademarks, service marks, and logos contained therein (the "Marks").

Our Content and Marks are protected by copyright and trademark laws (and various other intellectual property rights and unfair competition laws) and treaties around the world.

The Content and Marks are provided in or through the Services "AS IS" for the Organization's internal business use only.

Your license to use the Services

Subject to your compliance with these Legal Terms, including the "PROHIBITED ACTIVITIES" section below, and subject to the Master Agreement, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to (a) access the Services, and (b) download or print a copy of any portion of the Content to which you have properly gained access, in each case solely for the Organization's internal business purposes.

Except as set out in this section or elsewhere in these Legal Terms, no part of the Services and no Content or Marks may be copied, reproduced, aggregated, republished, uploaded, posted, publicly displayed, encoded, translated, transmitted, distributed, sold, licensed, or otherwise exploited without our express prior written permission. We reserve all rights not expressly granted to you in and to the Services, Content, and Marks.

Any breach of this section will constitute a material breach of these Legal Terms and your right to use the Services may terminate immediately.

Your User Materials

"User Materials" means any files, images, text, prompts, URLs, brand assets, or other materials that you upload to, input into, or otherwise provide through the Services.

As between you, the Organization, and the Company, the Organization (or its clients, as applicable) retains all right, title, and interest in and to the User Materials. We claim no ownership of the User Materials.

You grant us a non-exclusive, worldwide, royalty-free license to host, store, reproduce, process, transmit, adapt, and display the User Materials, and to authorize our third-party service providers to do the same on our behalf, solely to the extent necessary to operate, maintain, secure, and support the Services and to generate and deliver the Outputs to you and to the Organization. This license ends when the User Materials are deleted from the Services, except to the extent copies are retained in routine backups or as required by applicable law.

We will not sell, license, or publish the User Materials or the Outputs, and we will not use them for marketing or promotional purposes, without the Organization's prior written consent. Our use of the User Materials and the Outputs is further described in the "PRIVACY AND DATA PROTECTION" section below.

Your warranties regarding User Materials

You represent and warrant that, for all User Materials you provide:

•you have all rights, licenses, consents, releases, and permissions necessary to upload them and to grant the license set out above;

•they do not and will not infringe or misappropriate the intellectual property rights, privacy rights, publicity rights, or moral rights of any third party;

•where they include the name, image, likeness, or voice of an identifiable individual, you have obtained all consents and releases required for use through the Services and in the resulting Outputs;

•they do not disclose the confidential information of any third party in breach of any obligation owed to that third party; and

•they are not illegal, obscene, sexually explicit, hateful, defamatory, harassing, discriminatory, or otherwise unlawful, and do not depict minors in any sexualized manner.

Outputs

"Outputs" means the banner and marketing creative assets and other materials generated by the Services from the User Materials.

Subject to your compliance with these Legal Terms and subject to the Master Agreement, the Company hereby assigns to the Organization all right, title, and interest (if any) that the Company may hold in the Outputs generated from the User Materials, so that the Organization may use the Outputs for its internal business purposes and for its clients' campaigns. The Company retains all rights in the Services, the underlying models, the Content, and the Marks, and nothing in this section transfers any right in them.

Because the Services are generative, the Company does not represent that any Output is unique, original, or eligible for intellectual property protection.

Feedback

If you send us any question, comment, suggestion, idea, feedback, or other information about the Services ("Feedback"), you grant us a perpetual, irrevocable, worldwide, royalty-free, sublicensable license to use, copy, modify, and incorporate the Feedback into the Services and into our other products and services, without compensation or attribution to you. We claim no ownership of the Feedback itself, and any confidential information of the Organization or its clients contained in Feedback will continue to be handled in accordance with the confidentiality obligations in the Master Agreement. You should not send us Feedback that you or the Organization consider confidential.

6. AI-GENERATED OUTPUT

The Services use generative AI. You acknowledge and agree that:

•Outputs are generated automatically and may be inaccurate, incomplete, or unsuitable for your intended purpose;

•due to the nature of AI technology, we do not guarantee the originality, novelty, or uniqueness of Outputs, and similar or identical Outputs may be generated for other users;

•we do not guarantee that Outputs will not infringe the intellectual property rights or other rights of third parties;

•you are responsible for reviewing, verifying, and clearing all Outputs before any external use, publication, or distribution, including any clearance required under applicable advertising, intellectual property, publicity, competition, and consumer protection laws; and

•you are responsible for making any disclosure of AI generation required by applicable law, platform policy, or the policies of the Organization or its clients.

The Company assumes no liability for disputes arising from User Materials or Outputs, except to the extent caused by the Company's willful misconduct or gross negligence.

7. PROHIBITED ACTIVITIES

You may not access or use the Services for any purpose other than the Organization's internal business use for which the Services are made available.

As a user of the Services, you agree not to:

•Systematically retrieve data or other content from the Services to create or compile, directly or indirectly, a collection, compilation, database, or directory without written permission from us.

•Trick, defraud, or mislead us or other users, especially in any attempt to learn sensitive account information such as user passwords.

•Circumvent, disable, or otherwise interfere with security-related features of the Services, including features that prevent or restrict the use or copying of any Content or that enforce limitations on the use of the Services and/or the Content contained therein.

•Use any information obtained from the Services in order to harass, abuse, or harm another person.

•Make improper use of our support services or submit false reports of abuse or misconduct.

•Use the Services in a manner inconsistent with any applicable laws or regulations.

•Engage in unauthorized framing of or linking to the Services.

•Upload or transmit (or attempt to upload or transmit) viruses, Trojan horses, or other material, including excessive use of capital letters and spamming (continuous posting of repetitive text), that interferes with any party’s uninterrupted use and enjoyment of the Services or modifies, impairs, disrupts, alters, or interferes with the use, features, functions, operation, or maintenance of the Services.

•Engage in any automated use of the system, such as using scripts to send comments or messages, or using any data mining, robots, or similar data gathering and extraction tools.

•Delete the copyright or other proprietary rights notice from any Content.

•Attempt to impersonate another user or person, or use the username of another user.

•Upload or transmit (or attempt to upload or transmit) any material that acts as a passive or active information collection or transmission mechanism, including without limitation clear graphics interchange formats ("gifs"), 1x1 pixels, web bugs, cookies, or other similar devices (sometimes referred to as "spyware," "passive collection mechanisms," or "pcms").

•Interfere with, disrupt, or create an undue burden on the Services or the networks or services connected to the Services.

•Harass, annoy, intimidate, or threaten any of our employees or agents engaged in providing any portion of the Services to you.

•Attempt to bypass any measures of the Services designed to prevent or restrict access to the Services, or any portion of the Services.

•Copy or adapt the Services software, including but not limited to Flash, PHP, HTML, JavaScript, or other code.

•Except as permitted by applicable law, decipher, decompile, disassemble, or reverse engineer any of the software comprising or in any way making up a part of the Services.

•Except as may be the result of standard search engine or Internet browser usage, use, launch, develop, or distribute any automated system, including without limitation any spider, robot, cheat utility, scraper, or offline reader that accesses the Services, or use or launch any unauthorized script or other software.

•Make any unauthorized use of the Services, including collecting usernames and/or email addresses of users by electronic or other means, or creating user accounts by automated means or under false pretenses.

•Use the Services, the Content, or any Outputs to develop, train, fine-tune, evaluate, or improve any machine learning or artificial intelligence model, or any product or service that competes with the Services.

•Conduct benchmarking, competitive analysis, or performance testing of the Services, or publish or disclose the results of any such activity, without our prior written consent.

•Disparage, tarnish, or otherwise harm, in our reasonable opinion, us and/or the Services.

The Organization may authorize its contractors, production partners, or agency personnel to use the Services under the Organization's own responsibility, provided that each such person registers an individual account with an approved Organization Email Account and complies with these Legal Terms. The Organization remains responsible for their use of the Services.

8. THIRD-PARTY WEBSITES AND CONTENT

The Services may contain links to third-party websites or resources ("Third-Party Websites"), and third-party content such as reference materials, guidelines, or documentation ("Third-Party Content"). Such Third-Party Websites and Third-Party Content are not investigated, monitored, or checked for accuracy, appropriateness, or completeness by us, and we are not responsible for them. Inclusion of, or linking to, any Third-Party Websites or Third-Party Content does not imply approval or endorsement by us. If you access any Third-Party Websites or Third-Party Content, you do so at your own risk, and you should be aware that these Legal Terms no longer govern. You should review the applicable terms and policies, including privacy and data gathering practices, of any website to which you navigate from the Services. You agree that we do not endorse the content offered on Third-Party Websites, and you shall hold us blameless from any harm caused by your access to or use of such Third-Party Websites or Third-Party Content.

9. SERVICES MANAGEMENT

We reserve the right, but not the obligation, to: (1) monitor the Services for violations of these Legal Terms, to the extent necessary for the security and proper operation of the Services; (2) take appropriate action against anyone who, in our reasonable discretion, violates the law or these Legal Terms, including without limitation reporting such user to the Organization and, where legally required, to the competent authorities; (3) in our sole discretion, restrict access to, limit the availability of, or disable (to the extent technologically feasible) any files or content you upload to or generate through the Services; (4) in our sole discretion, remove from the Services or otherwise disable files and content that are excessive in size or are in any way burdensome to our systems, as reasonably necessary to protect the security and proper operation of the Services; and (5) otherwise manage the Services in a manner designed to protect our rights and property and to facilitate the proper functioning of the Services.

10. PRIVACY AND DATA PROTECTION

We care about data privacy and security. Our processing of personal information is described in the Draph, Inc. Privacy Policy published on the Services, which is incorporated into these Legal Terms by reference.

Account data

To provide the Services we collect and process your Organization Email Account address, an encrypted (hashed) password, and service usage records. Where fraudulent or unauthorized use is detected, we also process fraud-flagged email addresses and related records. Account data is retained for ninety (90) days following termination of your account, and fraud records for one hundred eighty (180) days, in each case for fraud prevention and dispute resolution, after which it is destroyed.

Storage, processing, and cross-border transfer

Account data, User Materials, and Outputs are stored in the Seoul Region (ap-northeast-2) of the Republic of Korea. The Company's databases holding this data are located in the Republic of Korea.

Processing of User Materials and Outputs, including the generation and transformation of Outputs, may take place on compute infrastructure located outside the Republic of Korea, including in North America, and may involve third-party providers of artificial intelligence models located outside the Republic of Korea. The User Materials and Outputs processed in this way consist of advertising and marketing creative assets; as set out under "Permitted inputs" below, personal data of third parties must not be input into the Services except as expressly permitted by the Organization and the Master Agreement. Remote access by overseas personnel of the Company's cloud provider may also occur to the extent necessary for infrastructure operation, maintenance, and security management.

The Company may engage sub-processors to provide the Services, and may change them from time to time. The recipients of any cross-border transfer, the countries concerned, the categories of data transferred, the purposes and periods of transfer, and the means of transfer are described in the Privacy Policy and in any sub-processor list published on or linked from the Services. Requirements applicable to the Organization's data — including the approval of and notification of changes to sub-processors, cross-border transfer mechanisms, and any restriction on the use of particular providers or regions — are set out in the Master Agreement, which prevails in respect of the Organization's data.

Roles of the parties

Where the Organization determines the purposes and means of processing personal information through the Services, the Organization acts as the data controller (or the equivalent role under applicable law) and the Company acts as a processor, processing such personal information only on the Organization's documented instructions and in accordance with the data protection terms of the Master Agreement. Where the Company processes personal information for its own operational purposes, such as account management, security, fraud prevention, and service analytics, it does so as described in the Privacy Policy. The Organization is responsible for providing its personnel with any privacy notice, legal basis, or consent required under the laws applicable to them. In the event of any conflict between the Privacy Policy and the data protection terms of the Master Agreement, the Master Agreement prevails in respect of the Organization's data.

Use of User Materials and Outputs

Data you provide to or generate through the Services may be used only for limited purposes such as operating, maintaining, securing, and improving the Services.

The Company does not sell, license, or publish User Materials or Outputs, and does not use them for marketing or promotional purposes, without the Organization's prior written consent.

Access to User Materials and Outputs within the Company is limited to authorized personnel, and only where necessary for the purposes described above, including the investigation of errors, abuse, or security incidents. The Company may also use aggregated and de-identified technical and usage data (such as feature usage counts, error rates, and performance metrics) that does not identify you, the Organization, or any client.

You and the Organization may request deletion of User Materials and Outputs at any time. Retention periods applicable to the Organization's User Materials and Outputs are set out in the Master Agreement; in the absence of such terms, they are retained for as long as the Organization's account remains active.

Analytics and communications

The Services use cookies and third-party web analytics tools, including Google Analytics, to measure service usage and to maintain, secure, and improve the Services. The categories of information collected through these tools, the providers involved, the purposes of collection, and the choices available to you are described in the Privacy Policy.

Marketing and promotional communications are sent only with your separate prior consent, which you may withdraw at any time.

Permitted inputs

You must not input into the Services any personal data of third parties (including special categories of personal data such as health, biometric, or similar data), payment card data, government identification numbers, or authentication credentials, except as expressly permitted by the Organization and the Master Agreement.

Responsibility for determining which of the Organization's or its clients' materials — including trade secrets, client confidential information, and pre-release product information — may be input into the Services rests with the Organization, in accordance with the Organization's own policies and its obligations to its clients.

The Company does not monitor, screen, or filter User Materials for confidentiality, sensitivity, or compliance with the Organization's internal policies, and has no obligation to do so. The Company's obligations with respect to User Materials are limited to the security and confidentiality measures set out in the Privacy Policy and the Master Agreement.

11. TERM AND TERMINATION

These Legal Terms shall remain in full force and effect while you use the Services.

We may suspend or terminate your access to the Services, in our sole discretion, if (a) you breach these Legal Terms or any applicable law or regulation; (b) it is necessary for the security and proper operation of the Services; (c) the Organization requests it, or your affiliation with the Organization or the validity of your Organization Email Account ends; or (d) the Master Agreement expires or is terminated.

Upon termination of your access, your right to use the Services ceases immediately. The handling, retention, export, and deletion of User Materials and Outputs following termination are governed by the Master Agreement. We have no obligation to retain any User Materials or Outputs after termination, except as required by applicable law or by the Master Agreement.

The sections that by their nature should survive termination — including INTELLECTUAL PROPERTY RIGHTS, AI-GENERATED OUTPUT, DISCLAIMER, LIMITATION OF LIABILITY, RESPONSIBILITY AND HOLD HARMLESS, GOVERNING LAW, and DISPUTE RESOLUTION — will survive.

12. MODIFICATIONS AND INTERRUPTIONS

We reserve the right to change, modify, or remove the contents of the Services at any time or for any reason at our sole discretion without notice. However, we have no obligation to update any information on the Services. We will not be liable to you or any third party for any modification, suspension, or discontinuance of the Services.

We cannot guarantee the Services will be available at all times. We may experience hardware, software, or other problems, or need to perform maintenance related to the Services, resulting in interruptions, delays, or errors. We reserve the right to change, revise, update, suspend, discontinue, or otherwise modify the Services at any time or for any reason without notice to you. You agree that we have no liability whatsoever for any loss, damage, or inconvenience caused by your inability to access or use the Services during any downtime or discontinuance of the Services. Nothing in these Legal Terms will be construed to obligate us to maintain and support the Services or to supply any corrections, updates, or releases in connection therewith. Any maintenance windows, service levels, or support commitments owed to the Organization are set out exclusively in the Master Agreement.

13. CORRECTIONS

There may be information on the Services that contains typographical errors, inaccuracies, or omissions, including descriptions, availability, and various other information. We reserve the right to correct any errors, inaccuracies, or omissions and to change or update the information on the Services at any time, without prior notice.

14. DISCLAIMER

THE SERVICES ARE PROVIDED ON AN AS-IS AND AS-AVAILABLE BASIS. YOU AGREE THAT YOUR USE OF THE SERVICES WILL BE AT YOUR SOLE RISK. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, IN CONNECTION WITH THE SERVICES AND YOUR USE THEREOF, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE, OR THAT ANY OUTPUT WILL BE ACCURATE, COMPLETE, ORIGINAL, OR RELIABLE.

DUE TO THE NATURE OF AI TECHNOLOGY, THE COMPANY DOES NOT GUARANTEE THE ORIGINALITY OF OUTPUTS OR THEIR NON-INFRINGEMENT OF THIRD-PARTY INTELLECTUAL PROPERTY RIGHTS. THE COMPANY ASSUMES NO LIABILITY FOR DISPUTES ARISING FROM USER MATERIALS OR OUTPUTS, EXCEPT TO THE EXTENT CAUSED BY THE COMPANY’S WILLFUL MISCONDUCT OR GROSS NEGLIGENCE.

Any warranties, service levels, or support commitments owed to the Organization are set out exclusively in the Master Agreement, and nothing in this section limits them.

15. LIMITATION OF LIABILITY

IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, BUSINESS, OR GOODWILL, ARISING FROM OR RELATING TO YOUR USE OF THE SERVICES.

BECAUSE NO FEES ARE PAYABLE BY YOU PERSONALLY, OUR TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICES OR THESE LEGAL TERMS WILL NOT EXCEED ONE HUNDRED US DOLLARS (USD 100).

The Company's liability to the Organization is governed exclusively by the Master Agreement, and nothing in these Legal Terms increases, extends, or duplicates that liability.

Nothing in these Legal Terms excludes or limits any liability that cannot be excluded or limited under applicable law.

16. RESPONSIBILITY AND HOLD HARMLESS

You agree to hold us harmless from and against any loss, damage, liability, or claim made by any third party arising out of: (1) User Materials you upload to, or Outputs you generate through, the Services; (2) your use of the Services; or (3) your breach of these Legal Terms or of any applicable law, in each case to the extent caused by your willful misconduct or gross negligence.

This section applies to you personally and does not limit, reduce, or replace any indemnity, defense, or other obligation of the Organization under the Master Agreement.

17. USER DATA AND BACKUPS

We will maintain certain data that you transmit to the Services for the purpose of managing the performance of the Services. You are responsible for the data that you transmit in connection with your use of the Services.

Although we perform routine backups of data, we do not guarantee that any particular data will be preserved, and you should maintain your own copies of any User Materials and Outputs that are important to you. To the fullest extent permitted by law, we will have no liability to you for any loss or corruption of such data.

18. ELECTRONIC COMMUNICATIONS, TRANSACTIONS, AND SIGNATURES

Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive electronic communications, and you agree that all agreements, notices, disclosures, and other communications we provide to you electronically satisfy any legal requirement that such communication be in writing. YOU HEREBY AGREE TO THE USE OF ELECTRONIC SIGNATURES, CONTRACTS, AND OTHER RECORDS.

19. EXPORT CONTROL AND SANCTIONS

You may not use or access the Services, or export or re-export any Content or Output, in violation of any applicable export control or economic sanctions laws and regulations. You represent that you are not located in, and are not a national or resident of, any country or territory, and are not a person, subject to comprehensive sanctions under such laws.

20. GOVERNING LAW

These Legal Terms and your use of the Services are governed by and construed in accordance with the laws of the Republic of Korea, without regard to its conflict of law principles. Nothing in this section deprives you of the protection of any mandatory provisions of the law of the country in which you are habitually resident that cannot be derogated from by agreement.

21. DISPUTE RESOLUTION

Escalation through the Organization

Because your access to the Services is provided through the Organization, you agree to first raise any complaint, question, or dispute relating to the Services with the Organization's designated contact, so that it may be addressed between the Organization and the Company under the Master Agreement.

Informal negotiations

To expedite resolution and control the cost of any dispute, controversy, or claim related to these Legal Terms (each a "Dispute" and collectively, the "Disputes") brought by either you or us (individually, a "Party" and collectively, the "Parties"), the Parties agree to first attempt to negotiate any Dispute (except those Disputes expressly provided below) informally for at least thirty (30) days before initiating arbitration. Such informal negotiations commence upon written notice from one Party to the other Party.

Binding arbitration

Any Dispute arising out of or in connection with these Legal Terms, including any question regarding its existence, validity, or termination, that is not resolved under the preceding paragraphs shall be referred to and finally resolved by arbitration under the International Arbitration Rules of the Korean Commercial Arbitration Board (KCAB INTERNATIONAL). The seat of arbitration shall be Seoul, Republic of Korea. The tribunal shall consist of one (1) arbitrator. The language of the proceedings shall be English.

Restrictions

The Parties agree that any arbitration shall be limited to the Dispute between the Parties individually. To the full extent permitted by applicable law, (a) no arbitration shall be joined with any other proceeding; (b) there is no right or authority for any Dispute to be arbitrated on a class-action basis or to utilize class action procedures; and (c) there is no right or authority for any Dispute to be brought in a purported representative capacity on behalf of the general public or any other persons.

Exceptions

The Parties agree that the following Disputes are not subject to the above provisions concerning informal negotiations and binding arbitration: (a) any Disputes seeking to enforce or protect, or concerning the validity of, any of the intellectual property rights of a Party; (b) any Dispute related to, or arising from, allegations of theft, piracy, invasion of privacy, or unauthorized use; and (c) any claim for injunctive or other interim relief, which either Party may seek from any court of competent jurisdiction.

Mandatory local rights

If the law applicable to you prohibits mandatory arbitration or any of the restrictions above, those provisions do not apply to you to that extent, and any Dispute shall instead be brought before the courts having jurisdiction under that law.

22. MISCELLANEOUS

These Legal Terms and any policies or operating rules posted by us on the Services constitute the entire agreement and understanding between you and us regarding your use of the Services. Our failure to exercise or enforce any right or provision of these Legal Terms shall not operate as a waiver of such right or provision.

These Legal Terms supplement, and do not replace, the Master Agreement. As between the Company and the Organization, the Master Agreement prevails in the event of any conflict with these Legal Terms.

We may assign our rights and obligations under these Legal Terms at any time. You may not assign or transfer any of your rights or obligations under these Legal Terms.

We shall not be responsible or liable for any loss, damage, delay, or failure to act caused by any cause beyond our reasonable control.

If any provision or part of a provision of these Legal Terms is determined to be unlawful, void, or unenforceable, that provision or part is deemed severable from these Legal Terms and does not affect the validity and enforceability of any remaining provisions.

No joint venture, partnership, employment, or agency relationship is created between you and us as a result of these Legal Terms or your use of the Services.

These Legal Terms are drafted in English. Any translation is provided for convenience only; in the event of any inconsistency, the English version prevails.

23. CONTACT US

For questions about your access, account, or permitted use, please contact the Organization's designated administrator for the Services.

To resolve a complaint regarding the Services, or for any other question about these Legal Terms, please contact us at:

Draph, Inc. 551 Seolleung-ro, Gangnam-gu, Seoul 06145, Republic of Korea Phone: +82-2-2039-7454 Email: hi@draph.ai

These Legal Terms take effect on August 14, 2026.