1. Scope of Application and Responsibilities

This policy applies to all information assets handled by Timee, Inc. in the course of business, as well as to officers, employees, contractors, and other relevant parties who use them. Individuals subject to this policy bear information security responsibilities in accordance with their respective roles and duties.

2. Compliance with Laws, Regulations, and Internal Rules

Timee, Inc., along with our officers and employees, complies with laws, regulations, contractual obligations, and internal rules regarding information security.

3. Development of an Information Security Management System

To appropriately manage information assets, Timee, Inc. establishes a management system and designates personnel responsible for information security, identifies information security risks, and examines and implements necessary countermeasures. In addition, we define and communicate the authority and responsibilities of our officers and employees in accordance with their respective roles.

4. Implementation of Information Security Measures

Timee, Inc. implements necessary organizational, human, physical, and technical measures—including access management—to prevent unauthorized access, leakage, falsification, loss, destruction, and interference with the use of information assets, thereby ensuring their confidentiality, integrity, and availability. Officers and employees comply with the established measures in their daily duties.

5. Secure Service Development

To appropriately protect information assets and the services it provides, Timee, Inc. strives to develop technologies and operate its business with due consideration for information security.

6. Inspection and Review

Timee, Inc. verifies compliance with information security regulations and measures as necessary, and reviews the information security management system in light of changes in the business environment, social conditions, and risks.

7. Information Security Education

To maintain and improve the level of information security, Timee, Inc. conducts information security education and awareness-raising activities for officers, employees, and other  relevant parties. Officers and employees shall undergo such education and perform their duties with a full understanding of this policy and related regulations.

8. Monitoring of Information Security Threats and Incident Response

Timee, Inc. conducts necessary monitoring and recording of unauthorized access and other threats to information assets and the services the company provides, collects information on threats and vulnerabilities, and strives to improve its detection and response systems.

In the event of an information security incident or potential incident, the company promptly assesses the situation, strives to prevent the spread of damage, recovers from the incident, and prevents recurrence, while reporting and communicating with relevant parties in accordance with laws and regulations. Officers and employees shall promptly report to the designated contact point upon recognizing an incident or a potential incident.

9. Protection of Personal Information

Timee, Inc. treats personal information as a critical asset and strives to protect it appropriately in accordance with the company's Privacy Policy and applicable regulations.