Our Privacy Policy

CLOUDGENTIC AI, INC. (hereinafter referred to as “we”, “us”, “our”, or “the Company”) recognizes that your privacy is of great importance to you. This Privacy Policy is designed to clearly explain how we collect, use, store, share and protect your personal information when you visit and use our official website (hereinafter the “Website”) and related services. It also informs you of your privacy‑related rights and how you may exercise them.

Please read and understand this Privacy Policy carefully before using our Website and services. By continuing to access or use our services, you fully understand and consent to our processing of your personal information in accordance with this Policy. If you have any questions, comments or suggestions regarding this Policy, you may contact us via the contact information provided at the end of this document.

1. Scope of Application

This Privacy Policy applies to all users (including individual users and enterprise users) who access, browse and use our website and related services. Whether you are located inside or outside the United States, this Policy is binding on you when you use our services.

For residents of the European Economic Area (EEA) and California, this Policy includes specific provisions aligned with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and its subsequent amendments (such as the CPRA), to safeguard your special privacy rights granted under applicable law.

Please note that this Policy applies only to information collected and processed by us, and does not apply to any third‑party websites, services or applications. Our Website may contain links to third‑party platforms. We assume no liability for any information‑processing activities of third parties. You are advised to carefully review the privacy policies of third parties before providing personal information to them.

2. Information Collection and Acquisition

We collect and obtain your information only to the extent necessary to achieve the purposes set forth in this Policy. There are three main categories: information you provide actively, information we collect automatically, and information lawfully obtained from third parties.

2.1 Information You Provide Actively

When you interact with us, you may need to provide personal information voluntarily so that we can deliver corresponding services to you:

Business inquiry and service‑request information: When you make business inquiries, apply for services, or seek technical support via website forms, email, online customer service and other channels, you may provide your name, contact details, problem descriptions, relevant screenshots, files and other information to help us accurately understand and respond to your needs.

Feedback and interaction information: If you participate in our questionnaires, feedback activities, online events and similar initiatives, we will collect the feedback content, questionnaire responses and event‑participation information you submit to improve the quality of our products and services.

2.2 Information We Collect Automatically

When you visit our Website, our servers automatically record certain information through technical means. Such information generally does not directly identify an individual, but may be used to optimize user experience and ensure service security:

Device and technical information: including your device model, operating‑system version, browser type and version, browser language, device identifier, Internet service provider, and network‑connection type (Wi‑Fi, mobile data, etc.).

Access‑behavior information: including the date and time of your Website visit, webpages browsed, links you click, dwell time, navigation paths, referring pages and exit pages, as well as other click‑stream data. This information helps us analyze user‑behavior patterns and optimize Website structure and content layout.

Server‑log information: We store your access records in server logs, including request timestamps, requested resources (such as webpage URLs and filenames), server‑response status, etc., for Website operation and maintenance, security monitoring and fault diagnosis.

2.3 Information Obtained from Third Parties

To the extent permitted by law and subject to your authorization (where applicable), we may obtain relevant information about you from cooperating third parties. Such information shall be used solely for purposes related to our services:

Information shared by partners: Information obtained from third‑party partners such as advertising partners, data‑analytics service providers and payment‑service providers. Examples include ad‑click behavioral data provided by advertising partners (for evaluating advertising performance) and transaction‑verification information provided by payment‑service providers (for confirming payment status).

Publicly available information: Within the scope permitted by law, we may collect information related to you from public sources including government public datasets, news reports and public social‑media content for market analysis, brand protection and corporate‑compliance reviews.

3. Purposes of Information Use

We use collected information strictly in compliance with this Policy and applicable laws and regulations, mainly for the following purposes:

Service optimization and improvement: Analyze user‑behavior data and feedback to understand your usage habits and needs, optimize Website design, enhance service performance, develop new product features, and deliver more personalized experiences.

Security assurance: Monitor and prevent fraud and malicious attacks, detect Website vulnerabilities, safeguard network and data security for our services, and protect the safety of personal information.

Marketing and promotions: Subject to your consent, send you marketing communications related to our products and services, including product‑update notifications, promotional offers and industry news. In addition, we may cooperate with third parties to serve personalized advertisements based on your interests and preferences, in compliance with applicable privacy‑protection laws and regulations.

Legal compliance and rights protection: Use your information where necessary to comply with applicable laws and regulations, respond to legal processes such as court subpoenas and government investigations, enforce our Terms of Service, investigate potential violations, and protect the legitimate rights, interests, property and personal safety of us, you and the public.

Internal administrative purposes: Support internal audits, data analysis, market research and similar activities to optimize business workflows and improve operational efficiency. For such uses, information will be anonymized or de‑identified to prevent individual identification.

4. Information Sharing and Disclosure

We attach great importance to the security of your information and strictly control the scope of information sharing. Except in the special circumstances set out below, we will not disclose, sell, lease or transfer your personal information to any third party:

Legal requirements and rights protection: We may disclose your information as required by law when we deem it necessary to comply with applicable laws and regulations, respond to legal procedures, enforce our Terms of Service, investigate violations, prevent security risks, or protect the legitimate rights, interests, property and personal safety of us, you and the public.

Business‑transfer scenarios: In the event of corporate merger, acquisition, asset sale, reorganization or liquidation or other business transactions, your personal information may be transferred to a transferee as part of the transaction assets. We will require the transferee to adhere to this Privacy Policy or implement equally stringent privacy‑protection measures, and notify you in a timely manner prior to completion of the transaction (if changes to the purposes or subjects of data processing are involved).

5. Information Storage and Security

5.1 Information Storage

Storage location: Your personal information is stored on servers located in the United States. Depending on service requirements, some data may be stored on cloud servers operated by cooperating third parties (all data are hosted within the United States). Where personal information of EEA residents is transferred to jurisdictions outside the EU / European Economic Area, we will adopt cross‑border data‑transfer safeguards compliant with the GDPR, such as Standard Contractual Clauses (SCCs), to ensure lawful data processing.

Retention period: We retain your personal information only for the period necessary to fulfill the purposes set forth in this Policy and to satisfy applicable legal requirements (including tax, accounting and audit rules). When information is no longer needed for the purposes for which it was collected and statutory retention periods have expired, we will delete or anonymize your information by secure means (such as cryptographic erasure or physical destruction) to render it non‑recoverable.

5.2 Security Protection Measures

We implement a range of reasonable technical and organizational measures to protect your personal information against unauthorized access, use, disclosure, alteration, damage or loss:

Access control: Strict access‑control mechanisms are enforced. Only personnel with business necessity may access personal information, with granular permissions assigned according to job functions. Employee access requires identity authentication.

Security management: We conduct regular security vulnerability scanning, system detection and remediation, and promptly apply security patches and anti‑malware updates to mitigate risks of malicious attacks and data breaches. A data‑breach emergency‑response plan is in place. In the event of a data‑security incident, we will take prompt remedial action in accordance with legal requirements and notify affected users and relevant regulatory authorities.

Employee management: Regular information‑security and privacy‑protection training is provided to employees to strengthen compliance awareness. Confidentiality agreements are signed with staff members who have access to personal information. Disciplinary measures will be imposed for breaches, and legal action pursued in serious cases.

Please note that no method of data transmission or storage can guarantee absolute 100% security. While we make every reasonable effort to protect your information, we assume no liability for information‑disclosure risks arising from factors beyond our control, including force‑majeure events, third‑party attacks and your own operational errors.

6. User Privacy Rights

We uphold your statutory rights over your personal information. You may exercise the following rights in accordance with this Policy:

Right of Access: You have the right to access personal information we hold about you, including collection purposes, retention periods and categories of shared parties.

Right of Rectification: If you find that personal information we hold is inaccurate or incomplete, you have the right to request correction or supplementation. For information that you cannot modify yourself, you may contact us to submit a rectification request, which we will verify and process in a timely manner.

Right of Erasure: Under circumstances specified by law (for example, when information is no longer needed for its collection purposes, or you withdraw consent and no other legal basis supports ongoing processing), you have the right to request deletion of your personal information. We will process your request promptly once erasure conditions are satisfied, except for information we are required to retain by law.

Right to Restriction of Processing: In specific circumstances (such as where you contest the accuracy of information pending verification, or processing is unlawful but you do not wish the information to be erased), you may request restriction of processing of your personal information. We will assess and implement such requests on a case‑by‑case basis.

Right to Data Portability (for European Economic Area residents): You have the right to obtain personal information you have provided to us in a structured, commonly used and machine‑readable format, and to have such information transmitted to another data controller where technically feasible; we will provide reasonable assistance.

Right to Object: You have the right to object to our processing of your personal information carried out on the basis of legitimate interests (e.g., for marketing or data‑analytics purposes). If you lodge an objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

When you exercise the above rights, we may require you to provide identity‑verification information to confirm the validity and security of your request. We will respond within the time limits prescribed by applicable law (generally no more than 30 calendar days). Complex requests may be reasonably extended, and we will keep you informed of progress.

7. Protection for Special Groups

We strictly comply with the Children’s Online Privacy Protection Act (COPPA) and relevant regulations. We do not knowingly collect personal information from children under the age of 13 without verifiable consent from a parent or guardian. If we discover that personal information of a child under 13 has been collected without parental or guardian consent, we will take immediate steps to delete such information and notify the parent or guardian.

If you are a minor under 18 years of age, please obtain consent from your parent or guardian before using our services and use them under their supervision. Parents or guardians may contact us via the details at the end of this Policy to inquire about, correct or delete personal information relating to minors.

8. Special Rights for California Residents (CCPA / CPRA)

In addition to the rights set out in Section 6 above, California residents enjoy the following additional rights:

Right to Know: You have the right to request disclosure of the categories, sources, uses, shared‑with parties and sharing purposes of your personal information collected over the preceding 12‑month period.

Right to Opt‑Out of Sale: We do not currently “sell” your personal information as defined under the CCPA. Should future business‑model changes involve the sale of personal information, we will notify you in advance and provide convenient opt‑out mechanisms so you may refuse sale of your information at any time.

Right against Discrimination: You are protected from discrimination for exercising your rights under the CCPA / CPRA, including unfair treatment with respect to pricing, service quality or product functionality. We will treat all users equally.

Right to Use an Authorized Agent: You may authorize an agent to exercise your rights under the CCPA / CPRA on your behalf. Agents submitting requests must furnish proof of your authorization and identity‑verification materials, which we will verify prior to processing.

9. Special Rights for EEA Residents (GDPR)

In addition to the rights set out in Section 6 above, residents of the European Economic Area have the following additional rights:

Right to Withdraw Consent: You may withdraw your consent to the processing of your personal information at any time. Withdrawal of consent shall not affect the lawfulness of processing performed prior to such withdrawal.

Right to Lodge a Complaint: If you believe our processing of your personal information violates the GDPR, you have the right to file a complaint with us or with the data‑protection authority in your member state of residence.

Sensitive‑Personal‑Information Protection: For sensitive personal information such as racial origin, political opinions, religious beliefs and health data, we process such information only upon your explicit consent or where permitted by applicable law.

10. Policy Revisions and Notices

We may revise or update this Privacy Policy in response to business developments, changes in laws and regulations, technological advances and other factors. In the event of material changes (such as substantive modifications to information‑collection purposes, usage scope or sharing rules), we will notify you via announcements on our Website homepage and emails sent to your registered email address. Revisions take effect on the effective date specified in such notifications.

Your continued use of our services after the effective date of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to revisit this page periodically to review the latest version.

Last Revised Date: January 20, 2026

11. Contact Us

If you have any questions, comments or suggestions regarding this Privacy Policy, wish to exercise your privacy rights, or submit a complaint, you may reach us through the following channels:

Company Name: CLOUDGENTIC AI, INC.

Email: [email protected]

Telephone: (870) 781‑7264

Mailing Address: 7344 Austin St APT 5V, Forest Hills, NY 11375, United States