# Sardine Shield Privacy Policy Last Updated October 16, 2025 ## Introduction and Scope SardineAI Corp. (“**SardineAI**,” “**we**,” or “**us**”) respects your right to privacy and is committed to safeguarding personal information. This Privacy Policy (this “**Policy**”) explains how we collect, use, store, and disclose personal information collected from users (“**users**” or “**you**”) of our SardineShield app, our website (https://www.sardine.ai/shield), and any related services, including customer support (collectively, the “**Services**”), in accordance with India’s Digital Personal Data Protection Act 2023 (the “**DPDPA**”), and any other applicable data privacy laws or regulations. This Policy applies to all personal information we collect and process when you use the Services. For purposes of this policy, “**personal information**” means any information that identifies you or that can reasonably be used to identify you or relates to you. By ticking the “I agree/I accept” checkbox, you acknowledge that you have read, understood, and agreed to this Policy and consent to the processing of your personal information in the manner provided under this Policy. If you do not agree with any part of this Policy, please do not use the Services or provide personal information to us. ## Personal Information We Collect We collect personal information that is necessary for us to provide the Services and to operate our business. The types of personal information we collect, and how we collect it, include: - **Information You Provide Directly**: When you interact with the Services or Sardine, you may give us information such as: - **Identity and Contact Details:** For example, your name, email address, phone number, and other contact information. We collect these when you create an account, use the Services, or contact us for support. - **Customer Support and Communications:** The content of your communications with us (such as via email, chat, or phone) and any additional information you choose to provide when giving us feedback, responding to surveys, or participating in promotions. - **Information We Collect Automatically:** When you use the Services and grant the necessary permissions on your mobile phone or other device, we may automatically collect the following information: - **Call Logs:** The Services may collect phone numbers associated with incoming and outgoing calls. - **Text Messages:** The Services may collect information about incoming and outgoing text messages, including sender and recipient contact information and message contents. - **Notifications:** The Services may collect notifications, banners, and alerts displayed on your device, including the name of the app from which the notifications originated and the notification contents. - **Web Addresses:** When you click a hyperlink on your device, the Services may collect the web address (also known as a “URL”) that the hyperlink points to. - **Usage and Device Data:** This includes details about your visits and activity on our website or the SardineShield app, such as your IP address, browser type, operating system, referral website, pages or features you access, the dates/times of access, and other information about how you interact with our digital services. We use this information to understand user engagement and improve our Services. This data is generally collected via cookies, server logs, and similar tracking technologies. - **Cookies and Similar Technologies:** We use cookies (small text files stored on your browser or device) and related technologies to recognize you when you return to our website, remember your preferences, and gather analytics information. Cookies help us analyze website traffic and usage patterns so we can enhance user experience. - **Information from Other Sources:** In order to provide caller-ID features, detect potential scams and other types of fraud, we may obtain information about you from data vendors and other third parties. ## Processing of Third-Party Personal Information To the extent you choose to provide us access to any third-party personal information in relation to the provision of Services, you hereby represent that you are authorized to share such information with us. We use such information for providing and improving our Services in the manner explained in this Policy. ## How We Use Personal Information SardineAI uses the personal information we collect for the following purposes: | Personal Information | Purposes Enabled | | --- | --- | | Name, email address, phone number, other contact information | For enabling you to create an account, to provide you and for you to use the Services; For communicating with you; For marketing and promotional communications; For compliance with our legal obligations; To investigate data security incidents. | Call logs, phone books, messages, notifications, web addresses | For enabling us to provide Services including scam and fraud detection services; For improving our Services; Protect the rights, property, or safety of Sardine AI, our users, or the public; To investigate data security incidents. | Usage data, cookies, and device data | To understand user engagement and improve our Services; For assessing troubleshooting issues in relation to our Services. | Personal Information from communications | Responding to your communications, inquiries, and requests; For enabling us to provide Services; Compliance with our legal obligations where necessary. Where feasible, we use aggregated or de-identified data for carrying out analytics, to protect your privacy. **Other Purposes (with Notice or Consent):** - If we intend to use your personal information for a purpose not described in this Policy, we will provide you with additional notice and may request your consent. **No Selling of Personal Data:** - We do not sell, license, or trade your personal information to third parties for their own marketing or other purposes. ## How We Share Personal Information We understand the importance of keeping your personal information private. We may need to share certain personal information with others in the following circumstances: - **With Affiliated Companies and Contractors:** We may share personal information with our subsidiaries, affiliates, and contractors to provide our Services and operate our business. - **Service Providers and Data Processors:** We work with third-party service providers and data processors that assist us with the provision of our Services. - **Legal Requirements and Safety:** We may disclose personal information to courts, law enforcement, government authorities, or other third parties when legally required to do so. - **Business Transfers:** If SardineAI undergoes a business transition, personal information may be transferred to the successor or acquiring entity. - **With Your Consent or at Your Direction:** We will share your personal information with third parties only if you specifically request or consent to such sharing. **No Third-Party Advertising Trackers:** As stated in the Cookies section, we do not disclose your personal information to third-party ad networks. **International Data Access:** SardineAI is headquartered in the United States and operates internationally. Your personal information may be accessed from countries outside of your country of residence in relation to the provision of Services. ## Cookies and Tracking Technologies Like most online services, SardineAI uses cookies and similar technologies. Cookies allow the website to remember your actions or preferences over time. ### How We Use Cookies: - Some cookies are essential for the website to operate. - Other cookies help us remember your preferences to personalize your experience. ## Data Security We take steps to ensure that your information is treated securely. However, no system is 100% secure and we cannot ensure or warrant the security of any information you provide to us. ## Data Retention We retain personal information for as long as it is necessary to fulfill the purposes for which we collected it, including legal, accounting, or reporting requirements, which may be up to five years. ## Your Rights and Choices You have important rights regarding your personal information, including under DPDPA: - **Right to Access:** You have the right to request confirmation of whether we are processing your personal information. - **Right to Correction:** You have the right to request that we correct or update it. - **Right to Erasure:** You may have the right to request that we delete your personal information. - **Right to Withdraw Consent:** Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. ## Contact Us and Grievance Redressal We welcome any questions, concerns, or requests you may have regarding this Policy. **Contact Point:** The primary point of contact for privacy matters at SardineAI is our Privacy Team, contactable at: SardineAI Corp. Attn: Legal Department 382 NE 191st St, #58243 Miami, Florida 33179-3899 privacy@sardine.ai **Changes to this Policy** We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We encourage you to review this Policy periodically to stay informed.