DECISION ADVANTAGE AI INC PRIVACY AND DATA PROTECTION

POLICY AND NOTICE

Decision Advantage AI Inc and its affiliates (“DA”, “we”, and “our”) respects the privacy of its
customers, end-users, vendors and various websites visitors, and others of whom we collect
information. You shall not and will not include or upload any information which is classified as
“personal data,” “personal information,” “personally identifiable information” (or similar term)
under applicable privacy and security laws of any entity or person. If you nevertheless provide
any personal information, whether intentionally or inadvertently, this policy and note shall
govern such data (“Privacy Policy”) (these and any others with respect to whom we collect
personal data, shall collectively be referred to as “user”, “customer” or “you” or “Data
Subjects”).

This Privacy Policy together with the Company’s Terms of Service available at Company’s
website explains the types of information we may collect from you, that we may receive about
you or that you may provide in the course of your interest or others’ in our services, business
transactions, conferences or when you use our platform or visit our websites (“Services”).
You do not have any legal obligation to provide any information to DA, however, we require
certain information in order to perform contracts, or to provide any services. If you choose not to
provide us with certain information, then we may not be able to provide you or your organization
with some or all of the services.

1. WHICH INFORMATION MAY WE COLLECT?
Summary: Other than limited contact details (such as name and business email) and basic
communication metadata, we do not intentionally collect personal data and the Services are
designed to operate without requiring personal data, however you may provide us with certain
personal data inadvertently as described below.
We collect data non-identifiable and anonymous information about our website visitors.
Inevertally, Personal Data which is being gathered by us, as you uploaded or provided consists of
any details which are personally identifiable and which are provided consciously and voluntarily
by you, or by an organization you represent or are associated with or through your use of our
website and registration to and use of our Services, by email, or other ways in which you
communicate and interact with us.

By contacting us or submitting requests for information or support via the website, email etc.,
DA will collect details, including also your name and email address. We may track basic
engagement information, such as whether an email was opened or interacted with. This
information is used solely for operational, security, and communication purposes, including
improving the effectiveness of our communications. We do not use such data for advertising,
marketing, or profiling purposes.

This data is typically processed on behalf of our customers, where we act as a data processor.

​

2. HOW DO WE COLLECT PERSONAL DATA OF YOURS ON THE SERVICES?
Summary: we collect Personal Data if you or your organization send it to us, or when a vendor,
distributor or other business partner, sends it to us.
We collect Personal Data when you provide us such information by entering it whether directly
or inadvertently manually or automatically.

3. WHAT ARE THE PURPOSES OF PERSONAL DATA WE COLLECT?
Summary: Other than for communication purposes, we do not have any other purposes as we do
not collect Personal Data (other than limited contact details and basic communication
metadata).
We use the Personal Data for communication purposes.
We aggregate and de-identify Personal Data inadvertently uploaded (i.e., use your data in a way
which no longer allows to identify you) to analyze and improve our Services, and to conduct
research, and for other similar purposes. We may share non-personal aggregated information with
third parties, as described below.

4. SHARING DATA WITH THIRD PARTIES
Summary: Personal Data inadvertently or directly uploaded may be transferred to DA’s website
host and cloud providers. Non-personal, anonymized system information may be stored or
processed in the United States, Israel, or other jurisdictions where our infrastructure providers
operate.

Non-personal, anonymized system information may be stored or processed in the United States,
Israel, or other jurisdictions where our infrastructure providers operate.
For purposes of the California Consumer Privacy Act as amended by the CPRA (CCPA) or other
US privacy state laws, DA does not “sell” or “share” personal information, nor do we allow any
personal information to be used by third parties for their own marketing.
If you inadvertently upload Personal Data, it will be stores in databases owned or controlled by
us, or processed by third parties on our behalf, by reputable website providers and cloud-service
providers (i.e. Wix and AWS)

INTERNATIONAL DATA TRANSFERS
Summary: we transfer Personal Data within and to the EEA, USA, Israel and elsewhere, with
appropriate safeguards in place.
Personal Data may be transferred to, and stored and processed at, a destination outside its origin.
EU data may be transferred outside the European Economic Area (EEA). This includes transfer
to Israel, a jurisdiction deemed adequate by the EU Commission, and to the USA, which may be
deemed adequate under certain circumstances but not always. Where your Data is transferred
outside of the EEA, we will take all steps reasonably necessary to ensure that your Data is

subject to appropriate safeguards, including entering into contracts that require the recipients to
adhere to data protection standards that are considered satisfactory under EU law and other
applicable, and that it is treated securely and in accordance with this Privacy Policy. Transfers to
Israel are made based on an adequacy ruling by the EU Commission. Transfers to the USA are
made based either on an adequacy ruling to members of the data privacy framework, or based on
the Standard Contractual Clauses published by the EU Commission. For more information about
these safeguards, please contact us as set forth below.
We may transfer your Personal Data outside of the EEA, in order to store or backup the
information.

7. DATA RETENTION
We do not retain Personal Data. DA will retain Personal Data only for as long as required in our
view, as necessary to comply with our legal and other obligations. Data that is no longer retained
may be anonymized or deleted. Likewise, some metadata and statistical information concerning
the use of our services are not subject to the deletion procedures in this policy and will be
retained by DA. We will not be able to identify you from this data. Some data may also be
retained on our third-party service providers’ servers until deleted in accordance with their
privacy policy and their retention policy, and in our backups until overwritten.

8. SECURITY AND STORAGE OF INFORMATION

We implement commercially reasonable technical and organizational measures to prevent
unauthorized or accidental access to or destruction, loss, modification, use or disclosure of data.
Note however, that no data security measures are perfect or impenetrable, and we cannot
guarantee that unauthorized access, leaks, viruses and other data security breaches will never
occur and the measures stated above are not a substitute for customer compliance with personal-
data restrictions.

​

9. DATA SUBJECT RIGHTS
Summary: DA will provide you with the rights available to you under applicable law.
To the extent applicable under data protection laws, you have the right to:
Right to access: you may have the right to request a review of your Personal Data held by DA.
Right to rectification: if the Personal Data processed by DA is incorrect, incomplete or not
processed in compliance with applicable law or this privacy policy, you may have the right to
have your Personal Data rectified.

Right to erasure: under certain conditions, you may be entitled to require that DA will delete or
“block” your Personal Data (e.g. if the continued processing of those data is not justified).

Right to Portability: you may have the right to transfer your Personal Data between data
controllers (i.e. to transfer your Personal Information to another entity).

Right to object to or withdraw consent: where that lawful basis for processing your Personal Data
is either “public interest” or “legitimate interests”, those lawful bases are not absolute, and you
may have a right to object to such processing. If the processing of your Personal Data is based on
your consent, you have the right to withdraw your consent to such processing at any time.
The right to restrict processing: under certain circumstances, you may have the right to object to
the processing of your Personal Data due to your particular situation.
Right to lodge a complaint: you have the right to lodge a complaint before the relevant data
protection authority or supervisory authority of your jurisdiction.
Requests may be submitted at: karen@decisionadvantage.ai.

10. GENERAL
Minors. We do not knowingly collect or solicit information or data from or about children under
the age of 18 or knowingly allow children under the age of 18 to register for DA services. If you
are under 18, do not register or attempt to register for any of the DA service or send any
information about yourself to us. If we learn that we have collected or have been sent Personal
Data from a child under the age of 18 unlawfully, we will delete that Personal Data as soon as
reasonably practicable without any liability to DA.

Changes to this Privacy Policy. The terms of this Privacy Policy will govern the use of the
Services, websites, and any information collected in connection with them. DA may amend or
update this Privacy Policy from time to time. Your continued use of our services will constitute
your active acceptance of the changes to and terms of the Privacy Policy.
Contact. If you have any questions regarding this Privacy Policy please contact us at:

karen@decisionadvantage.ai.
Last Revised: January 15, 2026