Handling International Transfers

1. Classification and Basis

   • Classification: Provided by a third party

   • Legal basis: Article 28(8)(1) of the Personal Information Protection Act (consent of the data subject)

2. Service name

   • Tomoarrow_Plaid

3. Name and country of the transfer recipient

   • Plaid Inc. (United States)

4. When and how transferred

   • Upon authentication request

   • Secure transfer via encrypted communication

5. Purpose of use

   • Identification and verification of subscribers using the authentication service

6. Previously

   • Customer number hashed in an undecipherable way

   • Payment information (payment result, payment number, payment time, payment amount, payment code, payment barcode information)

   • Refund information (refund result, refund number, refund time)

   • Billing key, merchant user identification value (when registering for automatic payment)

7. Retention and use period

   • Destroyed within 6 months after withdrawal from the service

8. Methods, procedures, and effects of refusal to transfer personal information

   • Tomoarrow Webpage [Settings] > [Terms and Conditions and Personal Information Processing Agreement] menu

   • As this is a service that requires consent to the overseas transfer of personal information (provided by a third party), if you do not agree, you may be restricted from using the service.