PRIVACY POLICY

1. Introduction

Voxvertex Solutions Private Limited ("Voxvertex," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, how we protect it, and the rights you have over it.

This Policy applies to information collected through our website at voxvertexsolutions.com (the "Website"), our predictive intelligence platform and related services (collectively, the "Services"), and other interactions you have with us, including communications by email, phone, or in person.

Voxvertex provides a business to business platform that helps industrial, space, and defense organizations monitor and optimize the performance of their physical assets. Most of our customer relationships are governed by separately executed agreements that may specify additional or different terms relating to information handling. Where such an agreement exists, it controls over this Policy in the event of a conflict, except where this Policy is required by applicable law.

Please read this Policy carefully. By using our Website or Services, you acknowledge that you have read and understood this Policy.

2. Who We Are

For the purposes of applicable data protection law, the data fiduciary (or data controller) responsible for personal information collected under this Policy is:

If you have any questions about this Policy or about how we handle information, you can contact us using the details above or as further described in Section 13.

3. Information We Collect

We collect information in three broad categories: information you give us directly, information we collect automatically when you use our Website or Services, and information we receive from third parties.

3.1 Information you provide to us

We collect information you choose to provide, such as when you fill out a contact form, request a demo, sign up for our Services, communicate with us by email, or otherwise interact with us. This may include:

• ► Identifiers such as your name, job title, company name, email address, and phone number.
• ► Account information, including login credentials and authentication details when you register for the Services.
• ► Communications and correspondence, including the content of messages you send us and any attachments.
• ► Information you provide during pilot programs, evaluations, or commercial engagements.
• ► Any other information you choose to share with us in the course of doing business.

3.2 Information collected automatically

When you visit our Website or use our Services, we and our service providers may automatically collect certain information about your device and interaction, including:

• ► Device and connection information such as IP address, browser type and version, operating system, and time zone setting.
• ► Usage information such as the pages you view, the links you click, the time and duration of visits, and referring URLs.
• ► Cookies and similar technologies as described in Section 8.
• ► Service telemetry such as session identifiers, error logs, and performance metrics relating to your use of the Services.

3.3 Industrial and operational data

While delivering the Services to our customers, we process operational data generated by industrial machines, sensors, equipment, telemetry feeds, and connected devices owned or operated by our customers ("Operational Data"). Operational Data typically includes engineering and machine state signals such as vibration measurements, electrical signatures, thermal readings, telemetry values, run time metadata, and diagnostic outputs.

Operational Data is not personal information in the ordinary case, but it may, in some circumstances, contain or be linked to personal information (for example, the identity of an operator logged in to a machine). Where Operational Data contains personal information, we handle that personal information in accordance with this Policy and the relevant customer agreement.

When we process Operational Data on behalf of a customer, we generally act as a data processor (or, under applicable Indian law, as a data processor for the customer who is the data fiduciary). The customer is responsible for determining the lawful basis for collecting Operational Data and for informing the individuals whose information may be present in it.

3.4 Information from third parties

We may receive information about you from third parties, including our partners, service providers, identity providers if you sign in using single sign on, business contacts who refer you to us, and public sources such as professional or social media profiles. We use this information for the purposes set out in Section 4 and combine it with information we collect directly only where doing so is consistent with this Policy and with applicable law.

4. How We Use Information

We use the information we collect for the following purposes:

• ► To provide, operate, maintain, and improve our Website and Services.
• ► To respond to your enquiries, fulfil your requests, and communicate with you about our Services.
• ► To deliver demonstrations, evaluations, pilots, and commercial engagements you participate in.
• ► To send you administrative, technical, security, and transactional communications relating to your use of the Services.
• ► To send you marketing communications about our products and services, where permitted by law and subject to your right to opt out.
• ► To analyse usage patterns and improve the performance, security, and functionality of our Website and Services.
• ► To detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity.
• ► To comply with applicable laws, regulations, court orders, and lawful requests from public authorities.
• ► To establish, exercise, or defend legal claims, and to enforce our agreements.
• ► To support the development and improvement of our predictive models and platform, including by analysing aggregated and anonymised Operational Data in a manner that does not identify any individual.

4.1 Lawful bases for processing

Where applicable data protection law requires us to identify a lawful basis for processing personal information, we rely on one or more of the following:

• ► your consent;
• ► the necessity of processing for the performance of a contract with you or to take steps at your request before entering into a contract;
• ► compliance with a legal obligation;
• ► the protection of vital interests;
• ► the performance of a task carried out in the public interest; and
• ► our legitimate interests, where these are not overridden by your rights.

5. How We Share Information

We do not sell personal information. We share information only as described in this Policy, including in the following circumstances:

• ► Service providers: We share information with vendors and contractors who perform services on our behalf, including hosting (such as Amazon Web Services), analytics, email delivery, customer support tools, and payment processing. These service providers are bound by confidentiality and data protection obligations and are permitted to process information only as needed to provide their services.
• ► Affiliates: We may share information with our parent company, subsidiaries, and other affiliates for the purposes set out in this Policy.
• ► Customers: Where you interact with us in the course of an engagement with one of our customers (for example, as an employee of a customer using the Services), we may share information with that customer as required to provide the Services.
• ► Partners: We may share information with business partners involved in joint offerings, with appropriate safeguards in place.
• ► Legal and regulatory authorities: We may disclose information when we believe in good faith that disclosure is required by law, regulation, court order, or lawful request from a public authority, or where disclosure is necessary to protect our rights, the safety of any person, or the integrity of our Services.
• ► Corporate transactions: We may share or transfer information in connection with a merger, acquisition, reorganisation, financing, sale of assets, or similar transaction, in which case the recipient will be bound by terms that protect your information consistent with this Policy.
• ► With your consent: We may share information for any other purpose with your consent.

6. How We Protect Information

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect information against unauthorised access, disclosure, alteration, loss, or destruction. These measures include encryption in transit and at rest where appropriate, access controls based on the principle of least privilege, network and infrastructure security controls, monitoring and logging, secure development practices, and contractual obligations on our service providers.

Despite these measures, no system can be guaranteed to be perfectly secure. We cannot promise that information will be free from unauthorised access in all circumstances. If we become aware of a security incident that materially affects your personal information, we will notify you and the relevant authorities to the extent required by applicable law.

For deployments in defense, space, and other sensitive environments, additional and stricter safeguards may apply under the relevant customer agreement, including on premise or air gapped operation.

7. International Data Transfers

We are headquartered in India and primarily process information in India. In some cases, your information may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may have data protection laws different from those of your home country. Where such transfers occur, we take appropriate steps to ensure that your information receives a level of protection consistent with this Policy and applicable law, including by using standard contractual safeguards with our service providers and by limiting transfers to jurisdictions deemed appropriate under applicable rules.

8. Cookies and Similar Technologies

Our Website uses cookies and similar technologies (such as pixels, web beacons, and local storage) to operate, secure, and improve the Website and to understand how visitors interact with it. We use these technologies for the following purposes:

• ► Strictly necessary: cookies required for the Website to function, such as session and security cookies.
• ► Performance and analytics: cookies that help us understand how visitors use the Website so we can improve it.
• ► Functional: cookies that remember your preferences and settings.
• ► Marketing: cookies used, where applicable, to deliver relevant communications and measure their effectiveness.

You can control cookies through your browser settings and, where required by law, through a cookie preference banner provided on our Website. Disabling certain cookies may affect the functionality of the Website.

9. How Long We Keep Information

We keep personal information only for as long as is necessary for the purposes for which it was collected, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of information, the purpose for which it is processed, and any legal requirements that apply.

When we no longer need personal information, we delete it or anonymise it so that it can no longer be associated with you.

Operational Data and information processed on behalf of customers are retained in accordance with the relevant customer agreement.

10. Your Rights

Subject to applicable law and to verification of your identity, you may have the following rights in relation to your personal information:

• ► Access // the right to obtain confirmation of whether we process personal information about you and to obtain a copy of that information.
• ► Correction // the right to ask us to correct inaccurate or incomplete personal information.
• ► Erasure // the right to ask us to delete personal information in certain circumstances.
• ► Restriction // the right to ask us to limit the processing of your personal information in certain circumstances.
• ► Objection // the right to object to the processing of your personal information where it is based on our legitimate interests, including for direct marketing.
• ► Portability // the right, in certain circumstances, to receive your personal information in a structured, commonly used, and machine readable format.
• ► Withdrawal of consent // the right, where processing is based on consent, to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• ► Nomination // the right, under the Digital Personal Data Protection Act, 2023, to nominate another individual to exercise your rights in the event of your death or incapacity.
• ► Grievance redressal // the right to raise a grievance with us regarding our processing of your personal information.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law.

You also have the right to lodge a complaint with a relevant data protection authority, including, in India, the Data Protection Board established under the Digital Personal Data Protection Act, 2023.

11. Children

Our Website and Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children below the age of eighteen (or such other age as applicable law may require) without parental or guardian consent. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

12. Third Party Sites and Services

Our Website may contain links to third party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing information with them.

13. How to Contact Us

If you have any questions, concerns, requests, or complaints relating to this Policy or to our handling of personal information, please contact us at:

Under the Digital Personal Data Protection Act, 2023, we will respond to grievances within the timeframes prescribed by law. If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, our Services, applicable law, or for other operational reasons. When we make changes, we will update the "Last Updated" date at the top of this Policy and, where appropriate, provide additional notice (for example, by email or a prominent notice on our Website). We encourage you to review this Policy periodically to stay informed of how we handle information.

15. Governing Law and Jurisdiction

This Policy and any disputes arising out of or in connection with it are governed by the laws of India. The courts of New Delhi shall have exclusive jurisdiction over such disputes, subject to any applicable arbitration provisions in a separate agreement between you and Voxvertex.

// End of Policy -