SUMMARY OF KEY POINTS

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.
• Sensitive information: We do not process sensitive personal information.
• Third-party information: We do not receive any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.
• Your rights: Depending on where you are located, applicable privacy law may grant you certain rights regarding your personal information. The easiest way to exercise your rights is by contacting us at support@lensmagic.com.

1. WHAT INFORMATION DO WE COLLECT?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in our products, participate in activities on the Services, or otherwise contact us. The personal information we may collect includes:

• Names, phone numbers, email addresses
• Job titles, mailing addresses
• Contact preferences, contact or authentication data
• Billing addresses, debit/credit card numbers

We do not process sensitive personal information. All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

We also automatically collect certain information when you visit, use, or navigate the Services, including:

• Log and Usage Data: IP address, device information, browser type, activity timestamps, pages viewed, searches, and other actions you take.
• Device Data: Information about your computer, phone, tablet, or other device, including IP address, device identifiers, location, browser type, hardware model, and operating system.
• Location Data: We collect location data from your device, which may be precise or imprecise. You can opt out by refusing location access or disabling Location settings on your device. Opting out may limit certain features of the Services.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons depending on how you interact with our Services, including:

• Account creation & authentication — to allow you to create and log in to your account and keep it in working order.
• Delivery of services — to provide you with the services you request.
• User support — to respond to your inquiries and resolve any issues.
• Administrative communications — to send details about products, services, and policy changes.
• User-to-user communications — to enable communication between users where applicable.
• Feedback — to request feedback and contact you about your use of our Services.
• Marketing — to send marketing communications in line with your preferences. You may opt out at any time.
• Targeted advertising — to develop and display personalised content and advertising tailored to your interests.
• Service improvement — to identify usage trends, evaluate promotional effectiveness, and improve our Services.
• Legal compliance — to comply with our legal obligations and respond to legal requests.

3. LEGAL BASES FOR PROCESSING

We only process your personal information when we have a valid legal reason to do so — such as your consent, to comply with laws, to fulfil contractual obligations, to protect your rights, or to fulfil our legitimate business interests.

If you are located in Canada: We may process your information if you have given us specific permission (express consent) or where permission can be inferred (implied consent). You may withdraw consent at any time. In exceptional cases we may process your information without consent as permitted by law, including:

• Where collection is clearly in an individual's interests and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• For insurance claim assessment or settlement
• For identifying injured, ill, or deceased persons and communicating with next of kin
• Where we have reasonable grounds to believe an individual is a victim of financial abuse
• Where disclosure is required to comply with a subpoena, warrant, or court order
• Where the information is produced in the course of employment, business, or profession
• For solely journalistic, artistic, or literary purposes
• Where the information is publicly available as specified by regulations

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We may need to share your personal information in the following situations:

Business Transfers: We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

Google Analytics: We may share your information with Google Analytics to track and analyse use of the Services. We may use Google Analytics Advertising Features including Remarketing and Google Display Network Impressions Reporting.

• Opt out of Google Analytics tracking: tools.google.com/dlpage/gaoptout
• Opt out of Advertising Features via Ads Settings
• Network Advertising Initiative opt-out: optout.networkadvertising.org

5. COOKIES & TRACKING

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice. Most web browsers accept cookies by default. You can usually choose to set your browser to remove or reject cookies, though this may affect certain features of our Services.

6. DATA RETENTION

We keep your personal information only for as long as it is necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

No purpose in this notice will require us to keep your personal information for longer than three (3) months past the termination of your account.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it, or — where that is not possible (e.g., information stored in backup archives) — securely store it and isolate it from further processing until deletion is possible.

7. INFORMATION SAFETY

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. MINORS

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to such minor's use of the Services.

If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at support@lensmagic.com.

9. PRIVACY RIGHTS

In some regions (such as Canada), you have certain rights under applicable data protection laws, including the right to:

• Request access and obtain a copy of your personal information
• Request rectification or erasure of your personal information
• Restrict the processing of your personal information
• Data portability (where applicable)
• Not be subject to automated decision-making
• Object to the processing of your personal information

You can make such a request by contacting us using the details in Section 13 below. We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent: If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time by contacting us. Please note that withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Opting out of marketing: You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in any email, replying "STOP" or "UNSUBSCRIBE" to any SMS, or by contacting us directly. You may still receive service-related messages necessary for the administration of your account.

Account information: To review, change, or terminate your account, contact us using the information provided in Section 13. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information in our files to prevent fraud, assist with investigations, or comply with legal requirements.

10. DO-NOT-TRACK

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference not to have your online browsing activities monitored. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised.

As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

11. U.S. RESIDENTS

If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you are granted specific rights regarding access to your personal information. We have collected the following categories of personal information in the past twelve (12) months:

• A — Identifiers (contact details, name, alias, postal address, phone, IP address, email, account name): YES
• B — Personal info / CA Customer Records (name, contact info, education, employment history, financial information): YES
• C — Protected classification characteristics (gender and date of birth): YES
• D — Commercial information (transaction information, purchase history, financial details, payment information): NO
• E — Biometric information (fingerprints and voiceprints): NO
• F — Internet or network activity (browsing history, search history, online behaviour): NO
• G — Geolocation data (device location): YES
• H–L — Biometric, audio/visual, professional, education, inferences, sensitive personal information: NO

Categories A, B, C, and G are retained as long as the user has an account with us. We will not sell or share personal information belonging to website visitors, users, and other consumers.

California "Shine The Light" Law: California Civil Code Section 1798.83 permits California resident users to request, once a year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes. Submit your request in writing using the contact information in Section 13.

CCPA Rights: Right to deletion, right to be informed, right to non-discrimination, and right to limit use of sensitive personal information (which we do not process).

Colorado, Connecticut, Utah & Virginia Residents: You have the right to be informed about our processing, access your personal data, correct inaccuracies, request deletion, obtain a portable copy, and opt out of targeted advertising or the sale of personal data. Colorado and Virginia residents may appeal declined requests by email; we will respond within 45 days (Colorado) or 45 days with a possible extension (Virginia). Connecticut appeals receive a response within 60 days.

To exercise any of these rights, contact us at support@lensmagic.com.

12. UPDATES

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible.

If we make material changes, we may notify you by prominently posting a notice on our website or by sending you a notification directly. We encourage you to review this privacy notice frequently.

13. CONTACT US

If you have questions or comments about this notice, you may contact us by email or post:

14. REVIEW/DELETE DATA

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please contact us at support@lensmagic.com or visit lensmagic.ai.