PRIVACY POLICY

Mediafiche.ai Inc.

Effective Date: April 1, 2026

Last Updated: April 1, 2026

---

This Privacy Policy describes how Mediafiche.ai Inc. ("we," "us," or "our") collects, uses, and protects information provided by our "Users" who access or use the Mediafiche website and applications (the "Platform"). This Policy applies to all Users, including Buyers, Sellers, and administrators.

We are committed to protecting your data. We do not sell, rent, or trade your personal or business information to any third party, under any circumstances.

1. Scope and Applicability

This Privacy Policy applies to information collected through www.mediafiche.ai website, our Marketplace application, APIs, and any related services (collectively, the "Services"). It does not apply to third-party websites linked from our Platform. We encourage you to review the privacy policies of any third-party sites you visit.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you register and onboard to our Platform, including:

• Business account information: company name, registered address, industry, company size, and tax identification numbers
• Authorized user details: name, business email address, job title, and phone number
• Listing data: ad descriptions, rates, circulation, audience demographics, and other media kit related information
• Transaction data: Offers, Counter-Offers, purchase price, and offer history
• Communications: Emails and messages sent through our in-platform messaging system, including notifications, and feedback
• Payment and billing information: billing contact details, Insertion Orders, and payment method metadata (Note: full payment card data is processed by our PCI-compliant payment processor and is not stored on our systems)

2.2 Information Collected Automatically

When you use the Platform, we automatically collect certain technical information:

• Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
• Device identifiers and session tokens used for authentication and security
• Usage analytics: features accessed, search queries, and interaction patterns used to improve the Platform
• Cookies and similar tracking technologies (see Section 8 for details)

2.3 Information from Third Parties

We may receive information from third-party sources to supplement our records, such as:

• Business verification and credit data from commercial data providers, solely to authenticate company identity and assess platform eligibility
• Integration partners (e.g., ERP, CRM systems) where you have authorized such connections

3. How We Use Your Information

We use the information collected solely for legitimate business purposes necessary to operate and improve the Platform:

• Account creation, authentication, and access management
• Facilitating transactions, including matching Buyers and Sellers, processing Offers and Counter-Offers, processing payments and generating transaction documentation
• Communicating with you about your account, transactions, updates, and support requests
• Enforcing our Terms of Service and detecting fraudulent or abusive activity
• Complying with applicable legal obligations, including tax reporting and regulatory requirements
• Analyzing aggregated, anonymized usage trends to improve Platform features and performance
• Sending product updates, security alerts, and administrative notices

We do not use your information for targeted advertising, behavioral profiling for commercial sale, or any purpose that conflicts with this Policy.

4. Our Commitment: We Do Not Sell Your Data

Mediafiche.ai Inc. will not sell, rent, license, or otherwise transfer your personal or business information to third parties for their own marketing or commercial purposes. This commitment applies universally — to all Users, in all jurisdictions, at all times.

Specifically, we will never:

• Sell your data to data brokers, advertisers, or any commercial third party
• Allow third parties to use your data for their own independent marketing or advertising
• Share a Seller's media kit data with other Sellers. Only registered Buyers are permitted to see multiple Sellers' media kit data
• Exchange your information for monetary compensation or other consideration

This commitment is a core part of our business model and will not change without explicit, advance notice and your affirmative consent.

5. How We Share Information

We share your information only in the following limited and necessary circumstances:

5.1 With Parties in Transactions

When you enter into a transaction on the Platform, relevant transaction details (such as business name, Offer/Counter-Offer specifications, creative content, and contact information) are shared with the other Party to fulfill the transaction. You consent to this sharing by initiating a transaction.

5.2 With Service Providers

We engage trusted third-party vendors to support our operations, including cloud hosting, payment processing, identity verification, software development and support, and analytics. These vendors:

• Access only the data necessary to perform their specific function
• Are contractually prohibited from using your data for any other purpose
• Are required to maintain appropriate security standards

5.3 Legal and Compliance Disclosures

We may disclose information if required by law, regulation, court order, or lawful government request, or where necessary to protect the rights, safety, or property of our users or the public. Where legally permitted, we will notify affected Users of such requests.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will notify Users via email and a prominent Platform notice at least 30 days before such a transfer, and you may request deletion of your data prior to the transfer.

6. Data Retention

We retain your information only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specifically:

• Active account data is retained for the duration of your account and for up to 36 months after account closure
• Transaction records may be retained for up to 7 years to meet tax and regulatory requirements
• Support and communication logs are retained for up to 24 months

You may request deletion of your data at any time, subject to legal retention obligations. See Section 7 for how to exercise this right.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your information:

• Access: Request a copy of the personal data we hold about you or your organization
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your data, subject to legal and contractual retention requirements
• Portability: Request your data in a commonly used, machine-readable format
• Restriction: Request that we limit the processing of your data in certain circumstances
• Objection: Object to the processing of your data for legitimate interests

To exercise any of these rights, please contact our Privacy Team at info@mediafiche.ai. We will respond within 30 days. We do not charge a fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and secure the Platform. Our cookies fall into the following categories:

• Strictly necessary cookies: required for authentication, session management, and security — these cannot be disabled
• Functional cookies: remember your preferences and settings to improve your experience
• Analytics cookies: help us understand how the Platform is used in aggregate, to improve performance and features

We do not use advertising or third-party tracking cookies. You can control functional and analytics cookies through your browser settings or our cookie preference center. Disabling strictly necessary cookies will impair website functionality.

9. Data Security

We implement industry-standard technical and organizational security measures to protect your information, including:

• Server-side and client-side AES-256 encryption of data both in transit and at rest
• Role-based access controls limiting access to data on a need-to-know basis
• Multi-factor authentication for Platform accounts and internal systems
• Regular security assessments, penetration testing, and vulnerability management
• Incident response procedures with defined notification timelines

No system is completely secure. In the event of a data breach affecting your information, we will notify you as required by applicable law, typically within 72 hours of becoming aware of the breach.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, disclose, and — though we do not sell data — the right to opt out of any such sale. You also have the right to non-discrimination for exercising your privacy rights.

To submit a California privacy request, contact us at info@mediafiche.ai. We will verify your identity before processing your request.

11. Children's Privacy

The Platform is designed for business use only and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided information through the Platform, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Post the updated Policy on this page with a new effective date
• Notify registered Users by email at least 14 days before the change takes effect
• Where required by law, seek your consent before applying material changes

Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:

We aim to respond to all privacy inquiries within 5 business days.

---

© 2026 Mediafiche.ai Inc. All rights reserved.