Snapiens Inc. ("Snapiens," "we," "us," or "our") is committed to protecting your privacy and the data you entrust to us.

This Privacy Policy explains how we collect, use, share, and safeguard personal information through our AI platform, mobile apps, and APIs (collectively, the "Services"). It also describes your rights and choices under applicable privacy laws, including GDPR, CCPA, and other global frameworks.

By using Snapiens, you agree to this Policy and our Terms of Service.

We collect only the data necessary to operate and improve Snapiens safely and effectively.

We use personal and usage data strictly to:

1. Provide, secure, and maintain the Services. 2. Authenticate accounts and manage subscriptions. 3. Improve AI model performance and reliability (without training on user content). 4. Communicate product updates, security alerts, and customer support. 5. Comply with legal obligations and prevent abuse or fraud.

We do not use Customer Content to train or fine-tune AI models. Aggregated, non-identifiable data may be analyzed for performance insights.

For users in the European Union, we rely on these legal bases:

• Contractual necessity: to provide the Services you request. • Legitimate interests: to improve and secure Snapiens. • Consent: for optional analytics, cookies, or marketing. • Legal obligation: to comply with tax, security, or regulatory requirements.

You may withdraw consent at any time by adjusting your account or emailing us at contact@snapiens.ai.

• All data is hosted on Amazon Web Services (AWS, US-East). • Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). • Access is restricted via least-privilege roles and monitored via internal audit logs. • Backups are encrypted and stored in compliance with SOC 2 controls.

We employ automated and manual monitoring to prevent unauthorized access or misuse.

Data is stored only as long as needed to deliver the Services or meet legal obligations.

• Customer Content is deleted within 30 days after workspace or account termination. • Payment and compliance records may be retained longer (up to 7 years) as required by law. • You may request deletion of your account or data at any time.

Once deleted, recovery is not possible.

Snapiens is headquartered in the United States and may transfer data internationally. Transfers outside your region are safeguarded by:

• Standard Contractual Clauses (for EU/UK transfers). • GDPR-compliant subprocessors (AWS, OpenAI, Stripe, Pinecone). • Security and confidentiality agreements with all partners.

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your data. • Correct inaccurate information. • Request deletion ("right to be forgotten"). • Restrict or object to processing. • Port data to another provider. • Lodge a complaint with your local data authority.

To exercise these rights, email contact@snapiens.ai. We will respond within 30 days (or sooner where required by law).

Snapiens is not directed to individuals under 16 years old. We do not knowingly collect data from minors. If you believe a minor has used our Services, contact us immediately for removal.

AI outputs may be inaccurate, incomplete, or inappropriate.

Snapiens:

• Does not monitor or control every response generated through user prompts. • Disclaims liability for harm, loss, or damages arising from reliance on AI-generated information. • May suspend or restrict accounts producing dangerous or illicit content.

Users are solely responsible for how they act on or distribute AI-generated outputs.

If an AI-generated interaction causes emotional distress or harm, users should not rely on Snapiens for crisis intervention and are encouraged to seek local emergency support immediately.

Snapiens uses reputable third parties to operate the Service:

Purpose Provider Data Processed Hosting & backend Amazon Web Services (AWS) Stored data, logs AI processing OpenAI Text queries and responses Database & vector storage Pinecone.io Encrypted embeddings Payments Stripe Payment tokens, billing details Email delivery Amazon SES Email address Analytics Google Analytics 4 Usage metrics Tag management Google Tag Manager Trackers Web platform WordPress.com Content hosting

Each partner complies with GDPR, CCPA, and security certifications such as SOC 2 or ISO 27001.

We may share information:

• With subprocessors (listed above). • With law enforcement if legally required. • To protect the safety, rights, or integrity of users or the platform. • During mergers or acquisitions, under confidentiality obligations.

We never sell or rent personal information.

Snapiens uses cookies and similar technologies for session management, analytics, and service improvement. You may disable non-essential cookies in your browser or through in-app settings.

We may update this Privacy Policy from time to time. Material changes will be announced on our website or via email. Your continued use of Snapiens after such updates constitutes acceptance.

Snapiens Inc. 251 Little Falls Drive, Wilmington, DE ,19808, USA contact@snapiens.com