Privacy Policy

Welcome to XClause! Formally, we are SaaS AI, LLC, a Delaware limited liability company ("XClause", "we", "us" and "our").

We provide our services online (the "Services"), including via the website at XClause.com (the "XClause Site").

Each person or entity who uses our Services is referred to as a "user" or "you" or "your."

This Privacy Statement and our Terms of Service ("Terms") apply to each user.

This document is our statement of our privacy practices ("Privacy Statement").

User Content may include personally-identifiable information, including without limitation name, address, telephone numbers, electronic mail and postal addresses, and other sensitive information that identifies or is uniquely associated with an individual (collectively, "Personal Data").

Any Content that is not Personal Data is referred to as "Non-Personal Data."

Non-Personal Data may include without limitation information about how users use the Services, what Services users select, how users respond to service offerings, how users share information with others, what users say they like and dislike, all of which we aggregate into larger data sets that do not identify individuals (collectively, "Behavioral Data" which is a type of Non-Personal Data).

XClause may connect users with our Partners. Please note that this Privacy Statement does not apply to any other websites, mobile applications, or businesses, including those of our Partners.

By using our Services, you consent to the collection, transfer, analysis, transformation, storage, disclosure and other uses of your Content, including your Personal Data, as described in this Privacy Statement.

For the purpose of any privacy laws which use the terms "controller" and "processor" with regard to Personal Data, XClause is the "Data Controller", meaning that XClause is the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data. Our service providers and other third parties with whom we have contractual or affiliate relationships are each a "Partner". Each Partner who processes Personal Data is a "Data Processor," meaning that they process Personal Data at our direction.

We collect Content from you while providing the Services. Some of the Content is Personal Data that we may use to provide the Services. Other Content we collect from you includes Behavioral Data and other Non-Personal Data that we aggregate, share, and use to improve our Services, and the services of others.

We collect many different types of information from you, both directly and indirectly.

Information you provide us directly:

• Profile information. You may provide us with your name, address and other profile information that you choose to make public or share with other users.

• Communications between you and XClause: We may send you emails, SMS or text messages, and other electronic communications for sales and delivery, notices of changes/updates to features of the Services, technical and security notices, and for other purposes. We may collect and store these communications. For more information regarding 10DLC, visit www.xclause.com/terms

Information we gather from your use of our Services:

• Emails. We may save private emails sent to us by users, and we may share your emails with any third parties or other users. Any public posts on Services may be viewed by any user and is public to anyone who visits the Services. You may elect to disclose certain Personal Data and Non-Personal Data. The information you submit in any public forums is not confidential or private, and XClause does not protect it. All information you choose to provide publicly, including information that identifies you or others, can be read, collected, or used by other users and by other third parties, and could be used to send you unsolicited messages and for other purposes.

• Log Data. Our servers automatically record information ("log data") created by your use of the Services. Log Data may include information such as your Internet Protocol ("IP") address, browser type, operating system, the referring web page, pages visited, location, your mobile carrier, device identifier, application identifier, and advertising identifier, search terms, and cookie information. We receive log data when you interact with our Services, for example, when you visit our website, sign into our Services or interact with our email notifications. XClause uses log data to review how we provide our Services and to measure, customize, and improve the Services.

We currently provide the Services from within the United States, and we store all User Content, including Personal Data, that we currently collect and retain on servers inside the United States.

By using our Services, or by submitting your personal information to us, you consent to the collection, storage, processing and onward transfer of your personal information as stated in the current version of this Privacy Statement and the current version of our other online documents, including the Terms of Service.

We share and use your Personal Data in the following circumstances. Unless specifically stated below, these do not include the use of Biometric Information:

• To provide and maintain the Services, including to monitor the usage of our Services. This use includes Biometric Information which we may use to, for example, identify and authenticate individual users of the Services.

• Opt-in with Your Consent. We may ask for your permission to share your Personal Data with other people and organizations outside of XClause, including to provide you with Services. As with any opt-in procedure, you are under no duty to agree to a request that you opt-in.

• Partners and Affiliates of XClause. We may share your Personal Data with Partners to sell and provide the Services.

• Cookies:

- General. Cookies are unique identifiers that we transfer to your device to enable our systems to recognize your device and to provide features and remember your personalization choices. We use cookies to make it easier to access and use our Services. Cookies are also used to display particular Content and to set session identifiers for visitors who voluntarily join user areas.

- Advertising. If your device permits analytics and advertising cookies, these identifiers can then be used to create a profile of your interests, which allows advertisers to display targeted ads that are more likely to be of interest to the individual. They are also used to limit the number of times an ad is shown and to help measure the effectiveness of advertising campaigns. Targeting cookies can also be used for retargeting, where ads for previously viewed products or services follow the user across different websites. The purpose of targeting cookies is to improve the effectiveness of online advertising by showing users ads that are more aligned with their preferences and interests.

• Required by Law. We may access, preserve and share your Personal Data in response to a legal request (like a search warrant, court order or subpoena). We may also access, preserve and share Personal Data when we have a good faith belief that it is necessary to help to ensure security and integrity generally to the extent that your Personal Data is reasonably necessary and proportionate for those purposes; detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; and to prevent death or imminent bodily harm. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

• Change of Control. If we sell or otherwise transfer part or the whole of XClause or our assets to another organization (e.g., a merger, acquisition, or reorganization), your Personal Data such as user name and email address, User Content and any other information collected through the Services may be among the items sold or transferred. You will continue to own your User Content, but the license you grant to us in the Terms may be transferred to others at XClause's sole discretion.

• Non-Personal Data. We may share Non-Personal Data publicly and with publishers, researchers or connected sites. For example, we may share aggregated Non-Personal Data publicly to show trends about the general use of our Services. Non-Personal Data includes aggregated or collective information about multiple users that does not reflect or reference an individually-identifiable user.

When we or our Partners store, transmit, or protect your Biometric Data:

• We use no less than a reasonable and industry-standard level of care; and

• We use measures that offer the same or greater level of protection as that which we use to protect other confidential and sensitive information (personal information that can be used to uniquely identify an individual or an individual's account or property) from disclosure.

Where required by applicable laws and regulations, each user may inspect and receive a copy of their Personal Data as stored in the Services. In rare circumstances, we may deny a request, and we may provide you with an explanation. If we deny your request, you may request a review by another professional, who will be chosen by XClause, and we will comply with the outcome of the review.

Subject to applicable laws and regulations, the Personal Data you provide to us remains completely under your control. If you believe the Personal Data we have is incorrect or incomplete, you may in writing request an amendment to your Personal Data. We will approve or deny each request, and notify you of our decision. If approved, we will amend the Personal Data. We will also make a reasonable effort to notify people to whom the Personal Data was released. In the case of a denial, we will provide the reason for the denial and instructions on how to appeal.

Any information or User Content that you voluntarily disclose for use of the Services, such as your user name, your Personal Data or other User Content, may become available to the public if you release it to other users or to the general public. Once you have shared your Personal Data or your User Content with other people, or otherwise made it public, that Personal Data and your User Content may be re-shared by others.

We may modify our Privacy Statement from time to time on prior written notice sent to the email address we have for you. For any user who has not provided us with an email address, the revised Privacy Statement will become effective ten (10) calendar days after posting on the Services. If you choose not to be subject to a revised version of this Privacy Statement, then you may terminate your use of our Services.

The laws and regulations that address privacy rights and responsibilities (collectively, "Laws") are different from one to another. Indeed, some of the Laws do or do not apply depending on different factors, including:

• Location or residence of the user.

• Location or residence of the individual that is the subject of the Personal Data ("Data Subject").

• Location or residence of the person or organization that employs or contracts with the Data Subject.

• Location of each server or other machine where the Personal Data is received, stored, processed or forwarded to.

• Location of the relevant office of XClause or any company that processes Personal Data.

Several of the Laws that concern users and XClause are discussed in this Section, but these are not all of the Laws that may apply. In addition, if there is any conflict or ambiguity between the statements made in this Privacy Statement and an applicable Law, then the Law will control.

All Personal Data and other data provided by users will be stored in the United States under United States law. Accordingly, United States law will apply to all users. All users consent to the application of the law of the United States in connection with the Services.

Several of the federal Laws in the United States may apply to the Personal Data collected by us. Congress has implemented several federal information privacy and security laws, while each state in the United States has passed and enforces information privacy and security laws that apply to data subjects, data, and businesses resident in that state.

Currently, all Personal Data of XClause users is stored on servers and other machines physically located within the United States. From time to time, Personal Data may be moved between servers in the same location or may be moved to a different location. When we receive a verified request by a user, we will provide the user with information required by applicable laws regarding the location and storage of their Personal Data.

Currently, COPPA should not apply to the Services. Each user must be 18 years of age or older. As noted in this Privacy Statement, if we learn any user is under the age of 18 ("Minor User"), or if any parent or guardian contacts us, we will delete all information provided by the individual from our Services. Moreover, users of the Services are responsible and liable for compliance under COPPA and are prohibited from collecting, using, and/or disclosing personal information from and about children in connection with the use of the Services, or assisting any third party in doing so.

If you are the parent or guardian of a Minor User, and you become aware that your Minor User has provided us with Personal Data or User Content, please contact us at Support@XClause.com and we will delete the information or User Content.

As stated in the section titled "Children's Online Privacy Protection Act ("COPPA")", minors are not permitted to register to use our site. However, if you are under the age of 18, and a registered user of any site where this Privacy Statement is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. Also, if you are a minor 16 years of age or older (whether you're a registered user or not), you have the right to opt-out from the collection and sale of your Personal Data. To make such a request, please send an email or letter with a detailed description of the specific content or information to the addresses provided in the section below titled "How to Exercise Your Rights." Please be aware that such a request does not ensure complete or comprehensive removal of the Content or information you have posted and that there may be circumstances in which the law does not require or allow removal, even if requested.

Under several state privacy and data protection laws, residents of those states may have one or more of the following rights and may exercise these rights free of charge. Since these state laws are generally modeled on the European Union's General Data Privacy Regulations ("GDPR"), the following list mirrors the GDPR section below:

• Right to lawfulness, fairness and transparency. Requires that we follow these principles when processing your personal information

• Right to Access. Access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address

• Right to Rectification. Require us to correct any mistakes in your information which we hold

• Right to Be Forgotten: Require the erasure of personal information concerning you in certain situations

• Right to Data Portability: Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations

• Right to Object to Direct Marketing: Object at any time to processing of personal information concerning you for direct marketing

• Right to Object to Automated Individual Decision Making: Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you

• Right to Restriction of Processing: Object in certain other situations to our continued processing of your personal information. Otherwise restrict our processing of your personal information in certain circumstances

You may also have the right to claim compensation for damages caused by our breach of any data protection laws.

Under state laws, you may have the right to opt-out of our processing Sensitive Personal Data, or the right to prevent our processing your Sensitive Personal Data without your affirmative consent. "Sensitive Personal Data" is defined differently by each state, but generally includes Personal Data relating to one or more of the following categories:

• Social security, driver's license, state identification card, or passport number.

• Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

• Precise geolocation.

• Racial or ethnic origin, religious or philosophical beliefs, or union membership.

• Genetic data.

• Biometric and health information.

• Information regarding a consumer's sex life or sexual orientation.

• Citizenship or immigration status

• Personal Data regarding a known Minor User.

We collect the email addresses of those who voluntarily provide them to us. You may receive subscription, editorial and other messages from the Services or from us. If you do not want to receive email from us in the future, please let us know at support@xclause.com.

If you would like to exercise any of your rights as described in this Privacy Statement, please:

• Complete a data subject request form available on our website;

• Call us toll-free at (855) 623-8022

• Email us at support@xclause.com; or

• Write to us at "Attn: XClause Privacy, 838 Walker Rd. Suite 21-2, Dover, DE 19904

If you choose to contact us directly, you will need to provide us with:

• Enough information to identify you (e.g., your full name, address and customer or matter reference number);

• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and

• A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person's behalf.

Any Personal Data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

If you have questions or concerns about this Privacy Statement, please contact us online at support@xclause.com or by postal mail addressed to:

Attn: XClause Privacy, 838 Walker Rd. Suite 21-2, Dover, DE 19904

This Privacy Statement was last revised: July 1, 2025.