ALTIRA LLC PRIVACY POLICY Effective Date: August 6, 2026 ยท Version 2 This Privacy Policy explains what information Altira LLC ("Altira," "we," "us") collects across the Altira ecosystem and the Zooby network (the "Services"), how we use and retain it, and the choices available to you. By creating an account or otherwise using the Services, you acknowledge that you have read and agree to this Privacy Policy, in the same way and at the same time you agree to our Terms of Service. We may update this Policy from time to time - see "Changes to This Policy" below - and reserve the right to do so at our discretion, consistent with applicable law. 1. INFORMATION WE COLLECT - Account information: email address, username, display name, password hash (we never store your plaintext password), and, if you use it, your Google account identifier. - Contact & verification information: secondary emails or phone numbers you add, and the verification status of each. - Security information: TOTP/passkey enrollment metadata used to secure your account (never the underlying secret key in a recoverable form). - Content you provide: anything you upload, post, or send through the Services - media files, chat/support messages, wiki pages, issues, and similar user-generated content. - Billing information: if you subscribe to a paid plan, our payment processor (Stripe) handles your payment details directly; we retain only your Stripe customer reference and subscription status, never your card number. - Usage & device information: IP address, browser/device identifiers, and interaction logs, collected automatically to operate, secure, and improve the Services and to serve advertising as described below. - Moderation records: if content or an account is reported or actioned, we retain the report, the decision, and any staff notes as part of that record. 2. HOW WE USE INFORMATION - To provide, maintain, and secure the Services, including authenticating you and preventing abuse. - To communicate with you about your account, support requests, and changes to our policies. - To enforce our Terms of Service, investigate reports, and take moderation action when necessary. - To process payments and manage subscriptions through our payment processor. - To serve advertising on ad-supported properties (currently media.zooby.tech) via Google AdSense - see "Advertising" below. - To comply with legal obligations, including responding to lawful requests from authorities and, where required, reporting child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC). 3. ADVERTISING media.zooby.tech displays ads served by Google AdSense. Google may use cookies and similar technologies to serve ads based on your prior visits to this and other websites. You can learn more about how Google uses this data, and opt out of personalized advertising, at google.com/settings/ads and policies.google.com/technologies/partner-sites. We do not control Google's own data practices and are not responsible for them. 4. HOW WE SHARE INFORMATION We do not sell your personal information. We share it only with: - Service providers who help us operate the Services under contract (cloud infrastructure, payment processing, email/SMS delivery), bound to use it only for that purpose. - Other users, to the extent you choose to make information public (a profile, a public upload, a public support-adjacent interaction). - Law enforcement or regulators, when required by law, to protect the rights and safety of Altira or others, or as described in our CSAM-reporting obligation above. - A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Policy continuing to govern your information. 5. DATA RETENTION We retain account information for as long as your account is active. Content removed by moderation action (banned, rejected, or deleted) is held in quarantine - inaccessible to the public and to you - for 90 days before it is permanently deleted from our servers, a legal-hold window that lets us respond to disputes, appeals, and legal process before data is gone for good. We may retain limited records of moderation decisions and account-level actions (warnings, suspensions, terminations) indefinitely as part of our trust-and-safety history, even after associated content is purged. 6. YOUR CHOICES & RIGHTS - You can review and update most of your account information from your account settings at any time. - You can request deletion of your account by contacting support@altira.llc, subject to the retention terms above and any content we're legally required to keep. - Depending on where you live, you may have additional rights (access, correction, portability, or objection) under laws such as the GDPR or CCPA/CPRA. Contact us to exercise them. 7. SECURITY We use industry-standard safeguards - encrypted transport, hashed passwords, optional two-factor authentication and passkeys - to protect your information. No system is perfectly secure, and we cannot guarantee absolute security. 8. CHILDREN'S PRIVACY The Services are not directed to children under 18 (see our Terms of Service's age requirement). We do not knowingly collect personal information from anyone under 13. If we learn we have, we will delete it. 9. CHANGES TO THIS POLICY We reserve the right to modify this Privacy Policy at any time. When we do, its version number changes together with the Terms of Service's, and accounts that previously agreed to an earlier version will be asked to review and accept the current Policy before continuing to use accounts-gated features - the same mechanism described in the Terms of Service's "Modifications" clause. This page will always reflect the current version and effective date. 10. CONTACT Questions about this Privacy Policy can be sent to support@altira.llc.