PRIVACY POLICY

Last Updated: June 16, 2026

1. Introduction

This Privacy Policy describes how Ask2.ai Inc. ("Ask2.ai", "Company", "we", "us", or "our") collects, uses, stores, discloses, and protects information when customers and authorized users access or use our services, software, websites, APIs, and related offerings (collectively, the "Services").

This Privacy Policy applies to information processed in connection with the Services.

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

2. Scope

This Privacy Policy applies to:

• Customers that purchase or access the Services.
• Authorized users provisioned by customers.
• Visitors to our website.
• Prospective customers and business contacts.

This Privacy Policy does not apply to third-party services that may integrate with the Services.

3. Information We Collect

We may collect the following categories of information:

Account Information

• Name
• Business email address
• Employer or organization
• Job title
• Account identifiers
• Authentication credentials

Usage Information

• Login history
• Feature usage
• User interactions
• Device information
• Browser information
• IP address
• Session information
• Diagnostic information
• Audit logs

Customer Data

Customers may submit documents, datasets, files, records, reports, prompts, messages, and other content through the Services ("Customer Data").

Communications Information

We may collect information contained in communications with us, including support requests, emails, and feedback.

4. How We Use Information

We may use information to:

• Provide and operate the Services.
• Authenticate users.
• Provision and administer accounts.
• Process customer requests.
• Deliver support and maintenance.
• Monitor performance and reliability.
• Improve the Services.
• Detect fraud, abuse, or security incidents.
• Enforce agreements and policies.
• Comply with legal obligations.

5. Artificial Intelligence Processing

The Services may utilize artificial intelligence models, machine learning systems, retrieval technologies, and other automated processes to provide functionality and generate outputs.

Customer Data may be processed by such systems solely for the purpose of providing the Services.

Unless expressly agreed otherwise in writing, Ask2.ai does not use Customer Data to train general-purpose artificial intelligence models.

Ask2.ai may utilize third-party artificial intelligence providers in connection with delivering the Services. Such providers process Customer Data solely on behalf of Ask2.ai and subject to contractual confidentiality and data protection obligations.

6. Legal Bases for Processing

Where applicable, Ask2.ai processes information based on one or more of the following legal bases:

• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests.
• Consent, where required by law.

7. Disclosure of Information

We may disclose information to:

Service Providers and Subprocessors

Third-party vendors and subprocessors that assist in operating and delivering the Services, including providers of:

• Cloud infrastructure
• Authentication
• Monitoring and logging
• Analytics
• Customer support
• Artificial intelligence services

Ask2.ai remains responsible for its subprocessors to the extent required by applicable law and contractual obligations.

A current list of subprocessors may be made available upon request or through the Services.

Legal and Regulatory Authorities

Where required by law, regulation, subpoena, court order, or governmental request.

Business Transactions

In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar transaction.

Ask2.ai does not sell personal information to third parties and does not share personal information for cross-context behavioral advertising.

8. Data Retention

Ask2.ai retains personal information and Customer Data for as long as necessary to provide the Services, fulfill contractual obligations, comply with applicable laws, resolve disputes, and enforce agreements.

Retention periods for Customer Data are governed by applicable Order Forms, customer agreements, or written instructions from Customer.

Following termination or expiration of the Services, Customer Data may be retained, returned, or deleted in accordance with the applicable agreement between the parties and applicable law.

9. Security Practices

Ask2.ai maintains administrative, technical, and organizational safeguards designed to protect personal information and Customer Data from unauthorized access, disclosure, alteration, or destruction.

These safeguards may include access controls, encryption, monitoring, logging, vulnerability management, and other security measures appropriate to the nature of the Services.

However, no method of transmission or storage can be guaranteed to be completely secure.

10. Security Incidents

Ask2.ai maintains processes for identifying, investigating, and responding to security incidents.

Where required by applicable law or contractual obligations, Ask2.ai will notify affected customers of confirmed security incidents involving Customer Data without undue delay.

11. International Transfers and Data Location

The Services are hosted and operated primarily in the United States.

Customer acknowledges that information submitted to the Services may be stored and processed in the United States.

Where required by applicable law, Ask2.ai implements appropriate safeguards for international data transfers.

12. Customer Responsibilities

Customers are responsible for:

• Obtaining all rights and consents necessary to provide Customer Data.
• Ensuring compliance with applicable privacy and data protection laws.
• Managing access permissions for authorized users.
• Ensuring that authorized users comply with applicable laws and policies.

Customers remain responsible for the content they submit to the Services.

13. User Rights

Subject to applicable law, individuals may have rights to:

• Access personal information.
• Correct inaccurate information.
• Request deletion of personal information.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

Requests may be submitted using the contact information below.

14. Cookies and Similar Technologies

Ask2.ai may use cookies, local storage, and similar technologies to:

• Authenticate users.
• Maintain sessions.
• Improve functionality.
• Enhance security.
• Analyze usage and performance.

Users may manage cookies through browser settings; however, disabling certain cookies may affect Service functionality.

15. Business Use Only

The Services are intended solely for use by businesses and their authorized users in connection with professional activities.

The Services are not intended for personal, family, or household use.

16. Protected Health Information

The Services are not designed for, and are not intended to be used for, the storage, processing, or transmission of protected health information ("PHI") as defined under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") or other regulated healthcare information.

Customers shall not upload, submit, transmit, or otherwise make available any PHI or regulated healthcare information through the Services.

Ask2.ai does not provide HIPAA-compliant services and does not enter into Business Associate Agreements.

17. Third-Party Services

The Services may integrate with third-party services, APIs, data providers, cloud providers, or software platforms.

Ask2.ai is not responsible for the privacy practices, security practices, availability, or content of third-party services.

18. Changes to This Privacy Policy

Ask2.ai may modify this Privacy Policy from time to time.

Updated versions become effective upon posting unless otherwise stated.

Continued use of the Services after the effective date constitutes acceptance of the revised Privacy Policy.

19. Contact Information

Questions regarding this Privacy Policy or requests relating to personal information may be directed to the customer's designated account representative or through other support channels made available by Ask2.ai. Ask2.ai will take reasonable steps to respond to applicable requests in accordance with applicable law.

20. U.S. State Privacy Rights

Residents of certain U.S. states may have rights under applicable privacy laws, including rights to access, delete, correct, or obtain copies of personal information.

To exercise such rights, please contact us using the contact information above.

Ask2.ai will not discriminate against individuals for exercising applicable privacy rights.

21. California Privacy Notice

To the extent applicable, California residents may have rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

Ask2.ai does not sell personal information or share personal information for cross-context behavioral advertising.

California residents may submit requests regarding their personal information using the contact information provided above.