Privacy Policy

1.1 Commitment to Data Protection XSOLAI ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website xsol.ai (the "Site") or engage our services. 1.2 Data Controller For the purposes of applicable data protection laws, XSOLAI acts as the data controller for personal information collected through the Site and in connection with our services. 1.3 Security Measures We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including: • Encryption of personal data in transit and at rest using industry-standard protocols (TLS 1.3, AES-256) • Regular security assessments and penetration testing • Access controls limiting data access to authorized personnel only • Secure development practices and code review processes • Regular backup procedures and disaster recovery planning • Employee training on data protection and security best practices 1.4 Data Breach Notification In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

2.1 Information You Provide Directly We collect information that you voluntarily provide to us, including but not limited to: • Identity Data: Full name, job title, company name, and professional credentials • Contact Data: Email address, telephone number, postal address, and social media handles • Project Data: Project requirements, specifications, briefs, and related documentation • Financial Data: Billing address, payment card details (processed securely through third-party payment processors), and transaction history • Communication Data: Correspondence records, meeting notes, and feedback provided through any communication channel 2.2 Information Collected Automatically When you access our Site, we automatically collect certain information, including: • Technical Data: Internet Protocol (IP) address, browser type and version, operating system, device identifiers, and platform information • Usage Data: Pages visited, time and date of visit, time spent on pages, click-through data, and navigation paths • Location Data: Approximate geographic location derived from IP address • Referral Data: The website or source that directed you to our Site 2.3 Information from Third Parties We may receive information about you from third parties, including: • Business partners and service providers • Analytics providers and advertising networks • Credit reference agencies (for business clients) • Publicly available sources and professional networking platforms 2.4 Legal Basis for Processing We process your personal data on the following legal bases: • Contract Performance: Processing necessary for the performance of a contract with you • Legitimate Interests: Processing necessary for our legitimate business interests • Legal Obligation: Processing necessary for compliance with legal obligations • Consent: Processing based on your explicit consent, which may be withdrawn at any time

3.1 What Are Cookies Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners. 3.2 Categories of Cookies We Use Strictly Necessary Cookies: These cookies are essential for the operation of our Site. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies as the Site cannot function properly without them. Performance and Analytics Cookies: These cookies collect information about how visitors use our Site, including which pages are visited most often and any error messages received. We use this information to improve our Site and user experience. All information collected is aggregated and anonymous. Functionality Cookies: These cookies allow our Site to remember choices you make (such as your preferred language or region) and provide enhanced, personalized features. Targeting and Advertising Cookies: These cookies are used to deliver advertisements relevant to you and your interests. They also limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns. 3.3 Third-Party Cookies Some cookies are placed by third-party services that appear on our pages. We do not control these third-party cookies, and you should refer to the respective third party's privacy policy for more information. 3.4 Managing Cookies Most web browsers allow you to control cookies through their settings. You can set your browser to: • Block all cookies • Accept only first-party cookies • Delete cookies when you close your browser • Browse in "private" or "incognito" mode Please note that restricting cookies may impact the functionality of our Site. 3.5 Cookie Retention Cookies have varying lifespans. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you delete them manually.

4.1 Categories of Recipients We may share your personal information with the following categories of recipients: Service Providers: Third-party vendors who perform services on our behalf, including: • Cloud hosting and infrastructure providers • Payment processing services • Email and communication platforms • Analytics and performance monitoring services • Customer relationship management systems Professional Advisors: Lawyers, accountants, auditors, and insurers who provide professional services to us. Business Partners: Trusted partners with whom we collaborate to provide services, subject to appropriate contractual safeguards. 4.2 Legal Disclosures We may disclose your personal information where required or permitted by law, including: • To comply with legal process, such as a court order or subpoena • To respond to lawful requests from public authorities, including law enforcement • To protect our rights, privacy, safety, or property, or that of our users or others • To enforce our terms and conditions • In connection with any legal proceedings or prospective legal proceedings 4.3 Business Transfers In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information. 4.4 International Transfers Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. When we transfer personal information internationally, we implement appropriate safeguards, including: • Standard Contractual Clauses approved by relevant authorities • Binding Corporate Rules where applicable • Certification schemes and codes of conduct 4.5 No Sale of Personal Information We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

5.1 Your Consent By using our Site and services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. 5.2 Your Data Protection Rights Subject to applicable law, you have the following rights regarding your personal information: Right of Access: You have the right to request a copy of the personal information we hold about you and to verify the lawfulness of our processing. Right to Rectification: You have the right to request correction of any inaccurate personal information we hold about you and to have incomplete data completed. Right to Erasure: You have the right to request deletion of your personal information in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected. Right to Restriction: You have the right to request that we restrict processing of your personal information in certain circumstances, such as when you contest the accuracy of the data. Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller. Right to Object: You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. 5.3 Exercising Your Rights To exercise any of these rights, please contact us at: Email: we@xsol.ai Subject Line: Data Protection Request We will respond to your request within 30 days. We may request specific information from you to confirm your identity and ensure your right to access your personal information. 5.4 Right to Lodge a Complaint If you believe that we have violated your data protection rights, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. 5.5 Updates to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our Site with a new effective date. Your continued use of our Site and services after such modifications constitutes your acknowledgment of the modified Privacy Policy. 5.6 Contact Information For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: XSOLAI Data Protection Email: we@xsol.ai Effective Date: January 1, 2025 Last Updated: January 7, 2025