Date of last review: August 30, 2026

Version: 2.0

‍

1.0 Introduction

Future Secure AI Inc. and each of its direct or indirect subsidiaries and affiliated entities (collectively, “Future Secure AI”, “FSAI,” “we”, “us”, or “our”) is committed to safeguarding Personal Data and processing Personal Data in line with applicable privacy and data protection laws. For purposes of this Privacy Notice, Personal Data is collected by the FSAI operating entity in the jurisdiction where it is collected, which acts as the controller (or the organization accountable under applicable law) for that Personal Data: Future Secure AI USA Inc. for Personal Data collected in the United States, Future Secure AI Canada Inc. for Personal Data collected in Canada, Future Secure AI Pty Ltd for Personal Data collected in Australia. Other FSAI affiliates and subsidiaries that access or process that Personal Data, including Future Secure AI Inc., do so as service providers to the relevant operating entity. Where FSAI personnel access Personal Data in the course of building, configuring, or supporting a customer's AI Co-Worker deployment, that access and any associated processing is carried out on the customer's behalf and is governed by our agreement with that customer, including any applicable data processing terms describing FSAI's data handling practices as a service provider, rather than by this Privacy Notice.. The parties’ respective roles and responsibilities with respect to that Personal Data, including under applicable data protection law, are set out in that agreement.

This Privacy Notice sets out the purposes for which we collect, use and disclose (collectively "Processing", "Processed", "Process") Personal Data, how it is protected, and individuals' rights in relation to the processing of their Personal Data. Additional jurisdiction-specific disclosures are published on separate webpages that are expressly incorporated into and form part of this Privacy Notice and apply where indicated in those disclosures.

Our privacy practices relating to current employees, contractors, and other internal workforce members are addressed separately from this Privacy Notice. Data that is not subject to applicable data protection laws (such as deidentified information, depending on your jurisdiction) is not addressed by this Privacy Notice. This Privacy Notice is also not a contract and does not create legal rights or obligations beyond those provided by applicable law. Additional terms may apply to particular websites, portals, application processes or services. Where we rely on consent to process Personal Data, we will request that consent separately and in accordance with applicable law.

‍

2.0 Personal Data we collect

We collect various types of Personal Data to provide and improve our services, communicate with you, and enhance your user experience. The types of personal data we may collect include:

• Identity Data: Information that can be used to identify you, such as your name, title, gender, marital status, date of birth, passport number, driving license number, national identification number, tax number or signature.
• Contact Data: Personal address, telephone number and email address or any other information you provide through forms, information requests or registrations.
• Special Personal Data: In limited circumstances and where permitted by law, we may collect sensitive or special categories of personal data, such as government identification numbers, information about criminal convictions and offences, race or ethnicity (including through voluntary self-identification questions in our application process), citizenship or immigration status, health or disability information (including for accommodations or through voluntary self-identification questions in our application process), or other information you choose to include in materials you submit to us.
• Electronic Monitoring Data: To the extent permitted by law, we may record and monitor your electronic communications with us, including telephone conversations, emails, instant messaging and any other electronic communications. Where we record telephone conversations, we will provide notice at the beginning of the call, and any such monitoring will be conducted in a reasonable manner and in accordance with applicable law.
• Employment or Candidate Data: Curriculum vitae or résumé, cover letter, academic background and qualifications, languages spoken, positions held or job titles, work addresses and telephone numbers, employment history, professional experience, skills, references, interview notes, assessment results, recruitment status, compensation expectations, work authorization information, background check information where permitted by law, voluntary self-identification information (such as gender, race or ethnicity, veteran status, and disability status), which you are not required to provide and which does not affect your candidacy, and other information you provide or that is generated during the recruitment process.
• Customer Data: Where you purchase or use our services, we may collect business contact details, billing or payment information and account credentials.
• Investor Data: Where you engage with us as a current or prospective investor we may collect Know Your Customer (KYC) and Anti-Money Laundering (AML) information, accreditation status, financial information and tax or other government identification numbers.
• Usage Data: Information about how you use our website, including your IP address, browser type, device information and operating system.
• Cookies and Tracking Technologies: We may use cookies and similar technologies to collect information about your interactions with our website, enable website functionality, analyze website performance and store preferences. You can manage your cookie preferences through your browser settings.
• Third-Party Data: We may receive Personal Data from third-party sources, such as social media platforms, business partners, marketing platforms, recruitment agencies, referral sources, references, background check or identity verification providers, publicly available sources, or other sources when you interact with our content or apply for a role with us.

‍

In addition to the above, we may collect Personal Data:

• Directly from you, through our website, forms, information requests or registrations;
• When you apply for a role with us, including through our application portal or by submitting application materials;
• Through your communications with us, including email, telephone, and messaging;
• Automatically, through cookies and similar technologies when you visit our website;
• From third parties, as described in the Third-Party Data category above;
• While providing our products and services to our customers; or
• When you attend our events, webinars, or meetings, or interact with us at industry conferences.

‍

If you do not provide us with the Personal Data we need, some or all of the following may occur:

• We may not be able to provide you with our products or services, or respond to your inquiry;
• We may not be able to consider or progress your application for a role with us;
• We may not be able to comply with our legal and regulatory obligations; or
• We may not be able to process payments or administer our contractual relationship with you.

‍

3.0 Lawful basis for processing

We process your personal data under the following lawful bases, where available under applicable law:

• Consent: With your consent, such as where you have opted in to receive marketing communications or where consent is otherwise the applicable basis under law.
• Legal obligations: To comply with our legal obligations.
• Contractual necessity: To perform a contract with you, or to take steps you have requested prior to entering a contract, including assessing your application for employment or engagement with us.
• Legitimate interests: Pursuant to our legitimate interests, such as operating, securing, and improving our services and website, communicating with our customers, preventing fraud, and managing our recruitment processes, provided these interests do not override your interests or fundamental rights and freedoms.

Where we Process Special Personal Data, we do so only where permitted by applicable law, including where the Processing is necessary for compliance with legal obligations, employment or recruitment purposes, providing reasonable accommodations, the establishment, exercise or defense of legal claims, substantial public interest, with your consent where required, or another lawful basis recognized by applicable law. Where we Process Personal Data relating to criminal convictions or offenses, we do so only to the extent authorized by applicable law, including any additional conditions or safeguards that law requires for that category of data (including consent, where required by applicable law).

‍

4.0 How we use your personal data

We use your Personal Data for various purposes, including:

• Providing and improving our services and website;
• Communicating with you, including responding to your inquiries;
• Personalizing your experience on our website;
• Analyzing usage patterns and trends;
• Informing you about updates to our products and services, including where you have not yet become a customer, subject to your marketing preferences and applicable law;
• Protecting the security and integrity of our systems, and detecting, preventing and investigating fraud, security incidents and unlawful activity;
• Complying with legal obligations;
• Administering recruitment and hiring activities, including receiving and reviewing applications, verifying qualifications, communicating with candidates, scheduling interviews, evaluating suitability for roles, managing offers, onboarding, and maintaining candidate records; and
• Using AI-assisted tools to support recruitment workflows, such as parsing CVs or résumés, extracting or summarizing candidate information, identifying skills or experience relevant to a role, assisting with candidate ranking or prioritization, routing applications to appropriate reviewers, and improving efficiency of human review, subject to the safeguards described in the “Use of Artificial Intelligence (AI) systems” section below. Where required by applicable law, including in Quebec, additional notice will be provided where AI-assisted tools are used to make a decision based exclusively on automated processing.

‍

5.0 Use of Artificial Intelligence (AI) systems

We use certain AI technologies to support our internal business operations and recruitment processes. For recruitment, these tools may help parse CVs or résumés, extract or summarize candidate information, identify skills or experience relevant to a role, assist with candidate ranking or prioritization, route applications to appropriate reviewers, and improve the efficiency and consistency of human review.

We do not use AI systems to make solely automated hiring decisions or to reject a candidate, advance a candidate to interview, or make any other decision materially affecting a candidate's application, without meaningful human review. Human reviewers remain involved at multiple points in the recruitment process, including in connection with any AI-

assisted ranking or prioritization of candidates and retain responsibility for recruitment and hiring decisions. We do not use Personal Data submitted by candidates or other individuals to train or fine-tune underlying AI models.

Where AI systems temporarily process or store Personal Data to provide the relevant functionality, that Processing occurs in accordance with our data protection and security controls, contractual restrictions, and applicable law, and the Personal Data is not retained by the AI systems longer than necessary for the relevant functionality.

Where required by law, individuals may request information about, object to, opt out of, or seek human review of certain AI-assisted processing or profiling activities or correct personal information used for such activities by contacting us as described in the “Contact Us” section below.

‍

6.0 How we share your personal data

We may share your Personal Data with third parties in the following circumstances:

• With our affiliates and subsidiaries, for the purposes described in this Privacy Notice.
• To our service providers, business partners and professional advisors who help us with various aspects of our business.
• To comply with legal obligations, or to respond to lawful requests from courts, regulators, or government or law enforcement authorities in jurisdictions where we or our service providers operate.
• In connection with a proposed or completed business transfer, merger, financing, acquisition, or similar transaction, including due diligence conducted in connection with any such transaction.
• To protect our rights, privacy, safety, or property, or that of our users and others.

Our service providers may include our cloud and IT infrastructure providers, payment processors or other financial or professional advisors, recruitment and application tracking platforms, AI technology providers used to support recruitment or internal workflows, background check or identity verification providers (for candidates, contractors, advisors and investors), and other service providers that process Personal Data on our behalf. We require such recipients to handle Personal Data in accordance with applicable law and, where appropriate, contractual restrictions that limit their use of Personal Data to providing services to us.

We do not sell Personal Data, and we do not share Personal Data for cross-context behavioral advertising. We also do not knowingly collect, sell or share Personal Data of individuals under 16 years of age. If our practices change, we will provide any notices and choices required by applicable law before doing so.

‍

7.0 Data retention

We retain Personal Data only for as long as reasonably necessary to provide services, administer recruitment and hiring activities, meet legal or other reporting requirements, resolve disputes, enforce agreements, or satisfy another purpose described in this Privacy

Notice as permitted under applicable law. Candidate information is retained for the applicable recruitment process and, where permitted by law, for future opportunities, legal compliance, recordkeeping, audit, security, dispute resolution, and legitimate business purposes. Retention periods may differ and are determined by reference to the following criteria:

• The duration of our customer, employment, candidate or investor relationship;
• Any statutory retention requirements in each jurisdiction we operate;
• The limitation periods for bringing legal claims in the relevant jurisdiction; and
• Any ongoing legitimate business need such as accounting, audit and information security.

When Personal Data is no longer reasonably necessary for the purposes described above, it is deleted or securely destroyed, or, where permitted by applicable law, anonymized or de-identified such that it is no longer considered Personal Data under applicable law. The threshold for treating information as anonymized or de-identified, and the extent to which such information falls outside applicable data protection laws, varies by jurisdiction. We may also receive, or process Personal Data to create, anonymized or de-identified information outside the retention context described above; where we do, we will maintain and use that information in anonymized or de-identified form and will not attempt to re-identify it, except as required or permitted by law. If deletion, anonymization, de-identification, or destruction is not immediately possible, such as where information is stored in backup archives or subject to a legal hold, we will securely store the information and limit further active processing until deletion, anonymization, de-identification, or destruction is possible.

‍

8.0 International data transfers

Your information may be transferred to, stored, accessed or processed in countries outside of your own, including the United States, Australia, and Canada, where our group companies and service providers are located. When doing so, we rely on appropriate safeguards recognized under applicable law, such as Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, adequacy decisions, data transfer agreements, security measures, or other lawful transfer mechanisms. Where required by applicable law, you may request further information about, or a copy of, the relevant safeguard by contacting us as described in the “Contact Us” section below.

‍

9.0 Region-Specific Disclosures

Privacy laws may afford certain rights regarding your Personal Data, depending on where you live or interact with us. To exercise a privacy right, please contact us at privacy@futuresecure.ai. To withdraw your consent to our use of information to send you marketing communications, please click on the unsubscribe link in any marketing communication you receive or contact us as set out below. We may need to verify your identity using information already on file before we can fulfill any request. Where permitted by applicable law, you may use an authorized agent to submit a request on your behalf, and we may require the agent to provide proof of authorization. We will respond within the timeframes required by applicable law. There is generally no charge for exercising your

rights, although we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive as permitted by law. Where we decline to act on a request, we will tell you why, and you may appeal that decision where applicable law provides a right of appeal. You will not be discriminated against for exercising your privacy rights.

We may choose or be required by law to provide different or additional disclosures relating to the Processing of Personal Data about residents of certain countries, regions or states. The following jurisdiction-specific addenda are expressly incorporated into and form part of this Privacy Notice. Please refer below for disclosures that may be applicable to you.

• United States: If you are a resident of the United States, please see the “Additional United States Privacy Disclosures” at https://www.futuresecure.ai/privacy-policies/north-america#policies-link for additional information about our privacy practices and the rights that may apply to you.
• European Economic Area, United Kingdom and Switzerland: If you are located in the European Economic Area, United Kingdom or Switzerland, please see the “Additional EEA, UK and Switzerland Privacy Disclosures” at https://www.futuresecure.ai/privacy-policies/europe#policies-link for additional information about our privacy practices and the rights that may apply to you.
• Australia: If you are located in Australia, please see the “Additional Australia Privacy Disclosures” at https://www.futuresecure.ai/privacy-policies/asia-pacific#policies-link for additional information about our privacy practices and the rights that may be available to you.
• Canada: Under the Personal Information Protection and Electronic Documents Act and applicable provincial privacy laws, subject to limited exceptions, you may have rights to access your Personal Data, update and request corrections, and request information about how your Personal Data is used or shared. You also have the right to withdraw your consent to our collection, use and disclosure of personal information subject to reasonable notice and legal and contractual restrictionsIn Quebec, you may also request that we cease dissemination of your personal information or de-index your personal information where we are required to do so by applicable law and request to receive computerized personal information collected from you in a structured, commonly used technological format.
• Brazil: Under the Lei Geral de Proteção de Dados Pessoais, you may have rights in certain situations to access your Personal Data, rectify inaccurate Personal Data, request anonymization, blocking or deletion of Personal Data, know with whom Personal Data is shared, request data portability, and withdraw consent.

‍

10.0 Security

We take data security seriously and have implemented reasonable physical, technical and organizational safeguards designed to protect your Personal Data. In addition, we take steps designed to ensure any third party with whom we share Personal Data provides a similar level of protection. However, despite these controls, no method of transmission or storage is completely secure and we cannot guarantee the absolute security of your Personal Data. Where and to the extent required by applicable law, we will notify you and any relevant authority in the event of a breach affecting your Personal Data.

‍

11.0 Cookies and tracking technologies

Our website uses cookies and similar tracking technologies (such as pixels, tags and local storage) to enable site functionality, remember your preferences, analyze usage and tailor content. We classify cookies into the following categories:

• Strictly necessary cookies: required for the website to function and which cannot be switched off.
• Performance and analytics cookies: help us understand how visitors interact with our website.
• Functional cookies: remember choices you have made to provide a more personalized experience.
• Advertising and marketing cookies: used, where enabled and permitted by law, to measure the effectiveness of our marketing and deliver Future Secure AI content. We do not use these cookies to sell Personal Data or share Personal Data for cross-context behavioral advertising.

Where required by law, we will only set non-essential cookies after obtaining your opt-in consent. We are in the process of implementing a cookie consent banner and preference center. In the meantime, you may manage cookies by adjusting your browser settings. We honor Global Privacy Control (GPC) signals as an opt-out of the sale or sharing of Personal Data and of targeted advertising, where applicable.

We currently do not respond to Do Not Track (“DNT”) browser signals, as no uniform standard for responding to such signals has been adopted. However, we do honor Global Privacy Control (GPC) signals as described above.

‍

12.0 Children’s privacy

Our services are not intended for individuals under 13 years of age (or under 14 or 16 where required by applicable law), and we do not knowingly collect Personal Data from any such individuals. If you are under the applicable minimum age in your jurisdiction, you should not use our services or otherwise provide us with any Personal Data either directly or by other means. If a parent or guardian believes their child has provided Personal Data to us without appropriate consent, they may contact us at privacy@futuresecure.ai to request that we delete that Personal Data. If we become aware that we have collected Personal Data from an individual under the applicable minimum age without appropriate consent, we will take steps to delete that data, except where retention is required to comply with a legal obligation.

‍

13.0 Links to third-party websites

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Privacy Notice does not apply to those third-party sites and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site before providing your Personal Data.

‍

14.0 Changes to this privacy notice

We may update this Privacy Notice or any of its jurisdiction-specific disclosures from time to time to reflect changes in our practices or applicable legal requirements. We will post the updated Privacy Notice or disclosure on its applicable webpage and revise the applicable “Last Updated” date accordingly. Individual disclosures may be updated independently of the core notice. Where required by applicable law, we will provide additional notice of material changes, such as by email or a prominent notice on our website, before the changes take effect.

‍

15.0 Contact us

If you have any questions, concerns, or requests regarding this Privacy Notice or the manner in which we or our service providers (including our service providers outside of your jurisdiction of residence) treat your Personal Data, or wish to exercise your privacy rights, please contact our Privacy Office at:

Email: privacy@futuresecure.ai

Address: Future Secure AI Inc., 7001 Burnet Road, 2nd Floor, Austin, TX 78757, USA

‍