Privacy Policy.

1 / Personal data we collect

"Personal Data" means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked to, directly or indirectly, a particular individual. We collect Personal Data about Users and Consumers by source, for the purposes described below. We may also collect other Personal Data not specifically listed here, used as described in this policy or as disclosed at the time of collection.

• Account information — full name, organisation, job title, phone number, email address, business type, general location. Used to provide, maintain and support the platform, for research and development, and for direct marketing.
• Payment information — full name, payment card information, billing address (via third-party processors). Used to provide the platform, comply with laws, and prevent fraud.
• Service-related communications — name, email, phone number, customer service recordings, survey responses.
• Usage data — event logs such as inquiries and login frequency.
• Contact information — name, email, phone, social handles, mailing address.
• Internet or network activity — interactions with our site or ads, browsing history, IP address, device ID and general location, used for interest-based advertising as well as the purposes above.
• Prospect contact information from lead generators — name, company, job title, email, used for direct marketing and interest-based advertising.
• Authentication data submitted to our Your Privacy Choices portal — name, email, mailing address, phone number, access code — used solely to process your request.
• Public profile data collected from public sources — name, email, social profile URLs, company, job title — used for identity resolution, verification, enrichment, and R&D.

2 / How we use personal data

We primarily use, store, and process Personal Data to provide, understand, improve, and develop our platform, maintain a trusted and safer environment, and comply with our legal obligations, including:

• Provide, maintain and support the platform — creating and securing your account, identifying you as a User, sending verification, support and security messages.
• Research and development — studying and improving the platform, understanding usage trends, and developing new features. We may aggregate or de-identify data for these purposes and share anonymous data with third parties for lawful business purposes.
• Direct marketing — offering products or services that may interest you, running referral programs, surveys or promotions. You can opt out via unsubscribe links or your account notification settings.
• Interest-based advertising — working with advertising and social media partners who may use cookies and hashed contact lists to serve relevant ads.
• Compliance with laws and regulations, and for compliance, fraud prevention and safety — including responding to legal process and protecting the security of the platform.
• With your consent, and to combine contacts for contact enrichment services (Enrich), which may return a subset of contact information linked to an individual, for example to support features like caller ID.

3 / How we share personal data

In addition to situations described elsewhere in this policy, we may share Personal Data with:

• Parties you direct us to share with — for example when you connect a third-party app to your account.
• Professional advisors providing accounting, legal, tax, financial or debt-collection services.
• Sweepstakes and joint marketing partners, who may contact you about products or services of potential interest.
• Authorities and courts, where necessary to comply with law or respond to legal requests, or to prevent harm and protect rights.
• Service providers who support hosting, analytics, marketing and customer relationship management, including payment processors.
• Corporate affiliates and subsidiaries, to support the platform's technical infrastructure, product development and customer support.
• Advertising partners, for the interest-based advertising purposes described above.
• Parties involved in a business transaction such as a merger, acquisition or sale of assets.
• Clients of inBiogen Data Services, to support our Resolve, Verify and Enrich offerings.

4 / Personal data retention

We retain Personal Data, including sensitive Personal Data, for as long as necessary to fulfil the purpose of collection — including legal, accounting or reporting requirements, establishing or defending legal claims, fraud prevention, or meeting our legal obligations. Because we maintain backups to protect the platform from accidental or malicious loss, residual copies may remain in backup systems even after removal elsewhere. Retention periods take into account the amount, nature and sensitivity of the data, the risk of harm from unauthorised use, and applicable legal requirements.

5 / Third-party websites and services

The platform may link to websites or services operated by third parties. These links are not an endorsement of, or a representation that we are affiliated with, that third party, and we do not control or take responsibility for their practices. We encourage you to read the privacy policies of any other site or service you use.

6 / Personal data protection

Security. We use reasonable administrative, technical, organisational and physical safeguards — including firewalls, encryption and access controls — to help protect your Personal Data, though no method of transmission or storage is completely secure. If you believe your account has been compromised, please contact us using the details below.

International operations and data transfers. inBiogen is based in India but operates globally, and we may transfer, store and process Personal Data with affiliates or service providers in other countries, where privacy laws may differ from your home jurisdiction. Where applicable law permits, providing your Personal Data constitutes consent to such transfer and processing.

EU–US and Swiss–US data transfer frameworks. Following the invalidation of the EU–US and Swiss–US Privacy Shield frameworks by European and Swiss authorities, inBiogen uses alternate appropriate safeguards for such transfers while continuing to honour its prior Privacy Shield commitments. Questions about these transfers can be sent to privacy@inbiogen.com.

7 / Your rights

We offer choices regarding the collection, use and sharing of your Personal Data:

• Marketing emails can be opted out of at any time via the unsubscribe link or by contacting us directly. Service-related communications will still be sent.
• Cookies can usually be managed or blocked through your browser settings; blocking cookies may affect site functionality. See allaboutcookies.org for more.
• Analytics — we use Google Analytics; you can opt out using Google's official opt-out browser add-on.
• Advertising choices can be limited via browser or device settings and industry opt-out programs.
• Do Not Track signals are not currently modified for, though we do honour the Global Privacy Control (GPC) signal for opt-outs described below.
• Access, correction, deletion and opt-out requests. Regardless of residency, you may request that we confirm what data we hold, provide access or a portable copy, correct inaccurate data, delete your data, opt out of sales or targeted advertising, or limit the use of sensitive data. These rights are not absolute and may be subject to legal exemptions or identity verification. Requests can be made via our Your Privacy Choices portal or by emailing privacy@inbiogen.com. You may also revoke consent, restrict or object to processing, or appoint an authorised agent to act on your behalf.

We aim to respond to legitimate requests within 30 days, and to appeals within 45 days, notifying you if more time is needed. There is no fee to exercise these rights, though we may decline or charge a reasonable fee for requests that are unfounded, repetitive or excessive. You will not be discriminated against for exercising any of these rights.

8 / Notice to California residents

This section describes our practices under California privacy law when we act as a "business," including how we collect, use, disclose, sell and share Personal Data of California residents, and applies in place of the general sections above where relevant. Under California law, "sale" includes disclosing personal information to a third party for monetary or other valuable consideration; disclosure for cross-context behavioural advertising is defined as "sharing," regardless of consideration. The categories of data collected, the sources, and the purposes are set out in Sections 1 and 2 above; the third parties to whom data is disclosed, sold or shared are set out in Section 3. We do not knowingly sell or share the Personal Data of California residents under 16. California residents may opt out of sale or sharing, and exercise the other rights in Section 7, via our Your Privacy Choices portal. Under the "Shine the Light" law, we maintain a policy of not disclosing customer information to third parties for their direct marketing purposes without an opt-out mechanism in place, and respond to one such request per California customer per calendar year.

9 / Notice to Nevada residents

Nevada Revised Statutes Chapter 603A allows Nevada residents to opt out of the "sale" of certain categories of personal information, defined as the exchange of specified personal information for monetary consideration, subject to exceptions. Nevada residents who wish to exercise this right may contact us using the details at the end of this policy.

10 / Notice to European residents

This section applies to individuals in the European Economic Area and the United Kingdom ("Europe"). The controller of your Personal Data for European data protection purposes is inBiogen (a division of InBiogen Technologies (India) Pvt. Ltd.), TC 64/700(4), Panthope Lane, Edagramom, Karumom P.O, Trivandrum – 695 002.

Data Protection Officer: Dr. Priya R S — priya@inbiogen.com · +91 96050 44554

The legal bases for our processing purposes (set out in Section 2) are our legitimate interests in delivering, improving and marketing the platform, performance of our contract with Users, and — for direct marketing and interest-based advertising — Users' explicit consent. Recipients of data are detailed in Section 3. You have the right to lodge a complaint with your national data protection authority, including the ICO in the United Kingdom. Where we transfer Personal Data outside Europe in a way that requires additional safeguards under European law, we apply them — contact privacy@inbiogen.com for details.

11 / Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you would like to access it in an alternative format, please contact us using the details below.

12 / Changes to this policy

This policy is subject to revision. If we make material changes to how we use your Personal Data, we will notify you by email to the address associated with your account, or by prominently posting notice on our site. Continued use of the platform after such notice indicates your acknowledgement of, and agreement to, the updated terms.

13 / How to contact us

If you have questions or complaints about this Privacy Policy, please contact us at privacy@inbiogen.com.