Privacy Policy

ZTA Labs Privacy Policy Last Updated: October 8, 2026 Effective Date: October 8, 2026 This Privacy Policy describes how ZTA Labs LLC (“ZTA”, “we”, “us”, or “our”) collects, uses, discloses and protects Personal Data on the ZTA website (ztalabs.ai) (our “website”).

At ZTA, we take your privacy seriously. As we continually work to improve our website, we may need to change this Privacy Policy from time to time. We may modify this Privacy Policy at any time by posting a revised version on our website. By accessing our website, you agree to the latest version of this Privacy Policy.

What this Privacy Policy covers

This Privacy Policy applies only to how we treat Personal Data that we may gather when you access or use our website and not to Personal Data that we receive when you use our enterprise products and services. The privacy terms applicable to the use of our enterprise products and services are set forth in separate written agreements between us and the applicable enterprise customer. “Personal Data” means any information that identifies or relates to a particular individual and includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations. This Privacy Policy does not cover how we treat data that we gather in connection with our enterprise products and services, the practices of companies we don’t own or control, or people we don’t manage. Personal Data

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months, including inferences drawn on the information set forth below, such as aggregated metrics:

Sensitive Personal Information

We do not collect sensitive Personal Data (such as Social Security number, precise geolocation, account log-in credentials, or information revealing race, religion, health, or sexual orientation) through our website. We collect Personal Data about you from the following categories of sources: You

• When you provide such information directly to us.
• When you voluntarily provide information in free-form text boxes through the website or through responses to surveys or questionnaires.
• When you send us an e-mail or otherwise contact us.
• When you use the website, and such information is collected through methods you have consented to.
• When you use the website and such information is collected automatically.
• Through Cookies (defined below).
• If you use a location-enabled browser, we may receive information about your location.
• If you download and install certain applications and software that we make available, we may receive and collect information transmitted from your computing device for the purpose of providing you with the relevant website.

Purposes for Collecting or Sharing Personal Data

Providing the Website

• Providing you with the information you request.
• Meeting or fulfilling the reason you provided the information to us.
• Carrying out other business purposes stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws, such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (the “CCPA”). Corresponding with you
• Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about ZTA or the website. Meeting Legal Requirements and Enforcing Legal Terms
• Fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.
• Protecting the rights, property or safety of you, ZTA or another party.
• Enforcing any agreements with you.
• Responding to claims that any posting or other content violates third-party rights.
• Resolving disputes. We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.

Legal Bases for Processing

If you are located in the EU/EEA or UK, we process your Personal Data under the following legal bases:

• Contact form and inquiries: We process contact form data to respond to your inquiry based on our legitimate interests, your consent, or to take steps before entering a contract.
• Cookies and analytics: We process non-essential cookie data based on your consent, where required. We process essential cookie data based on our legitimate interests in operating and securing the website.
• Legal compliance: We process Personal Data as necessary to comply with legal obligations.
• Disputes and enforcement: We process Personal Data based on our legitimate interests in resolving disputes and enforcing our agreements. Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object as described in your data protection rights.

How we disclose your Personal Data

In certain circumstances, ZTA may share your Personal Data with the categories of parties listed in this section.

• Corporate Affiliates: We may share Personal Data with our corporate affiliates.
• Service Providers: We may share Personal Data with service providers who perform services on our behalf, such as hosting, analytics, customer relationship management, and email delivery.
• Legal and Law Enforcement: We may disclose Personal Data to comply with legal obligations, court orders, legal process, or to protect the rights, property, or safety of you, ZTA, or another party.
• Business Transfer Recipients: We may disclose Personal Data in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

Data protection rights

ZTA would like to make sure you are fully aware of all your data protection rights. Under the EU GDPR, UK DPA 2018, and several US state laws, users are entitled to the following:

• The right to access — You have the right to request that ZTA provide copies of your personal data. We provide the first copy free of charge as required by law; we may charge a reasonable fee for additional or excessive copies.
• The right to rectification — You have the right to request that ZTA corrects any information you believe is inaccurate. You also have the right to request that ZTA completes information you believe is incomplete.
• The right to erasure — You have the right to request that ZTA erase your personal data, under certain conditions.
• The right to restrict processing — You have the right to request that ZTA restrict the processing of your personal data, under certain conditions.
• The right to object to processing — You have the right to object to ZTA’s processing of your personal data, under certain conditions.
• The right to data portability — You have the right to request that ZTA transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to opt out — You have the right to opt out of the sale or sharing of your Personal Data, targeted advertising, and certain profiling, where applicable under your state’s law.
• The right to appeal — You may have the right to appeal our decision regarding your privacy rights request, depending on your state of residence. You may submit an appeal request by contacting us at [email protected]. We will respond according to the law applicable to your location. You may also use an authorized agent to submit a request on your behalf; we may require verification of your identity and the agent’s authority. We will not discriminate or retaliate against you for exercising your privacy rights. We will respond to requests within the time required by applicable law (generally one month under the GDPR/UK GDPR and 45 days under US state laws, in each case subject to permitted extensions). To exercise any of these rights, please contact us using the information below.

International Transfers

EU/UK personal data may be transferred to the US under the EU SCCs and UK IDTA. We may also use other lawful transfer mechanisms where applicable. Where required, we implement appropriate safeguards to protect your Personal Data.

Sale or Sharing of Personal Information

We do not sell or share personal information for targeted advertising. We do not sell personal information for money.

Sensitive Data

Please do not include sensitive personal information, such as health, financial, or government ID numbers, in free-form fields. If you submit sensitive personal information, you do so at your own risk, and we may process it as necessary to respond to your inquiry. We recommend that you do not submit sensitive personal information through the website.

Automated Decision-Making and Profiling

We do not use Personal Data collected through this website to make decisions solely by automated means that produce legal or similarly significant effects concerning you. We do not engage in automated decision-making as defined by applicable data privacy laws. We may use analytics cookies, which may involve profiling as described in the Cookies section. Where required, we obtain consent and provide opt-out mechanisms.

Tracking tools and cookies

The website uses cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our website, analyze trends, learn about our user base and operate and improve our website. Cookies are small pieces of data — usually text files — placed on your computer, tablet, phone or similar device when you use that device to access our website. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that our website does not currently recognize or respond to “Do Not Track” signals from browsers, and if this changes, we will update this Privacy Policy accordingly. We use the following types of Cookies:

• Essential Cookies. Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our website. Disabling these Cookies may make certain features and services unavailable.
• Functional Cookies. Functional Cookies enable enhanced functionality and personalization, such as remembering your preferences, language, or region. They may be set by us or by third-party providers whose services we have added to our pages. If you disable these Cookies, some or all of these features may not function properly.
• Analytics Cookies. These help us understand how visitors use our website so we can measure and improve it. You can decide whether to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the website and functionalities may not work. To find out more information about Cookies generally, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/. For visitors in the EU and UK, we obtain consent for non-essential Cookies through a consent banner before such Cookies are set.

Data security

We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. Although we work to protect the security of your data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

Data retention

We retain Personal Data about you for as long as necessary to provide you with our website or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally, if permitted or required by applicable law, rule, or regulation.

Shine the Light

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; to submit such a request, please contact us at [email protected].

Personal Data of children

As noted in the Terms of Use, we do not knowingly collect or solicit Personal Data from children under 16 years of age or the age required by local law. If you are a child under 16 years of age or the age required by local law, please do not attempt to register for or otherwise use the website or send us any Personal Data. If we learn we have collected Personal Data from a child under 16 years of age or the age required by local law, we will delete that information as quickly as possible. If you believe that a child under 16 years of age or the age required by local law may have provided Personal Data to us, please contact us at [email protected].

Other state law privacy rights

If you are a resident of a state with a comprehensive consumer privacy law, you may have the rights described in the “Data Protection Rights” section above, including the rights to access, correct, delete, opt out, and to appeal. To exercise these rights, contact us at [email protected].

Contact information

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us directly: ZTA Privacy Team [email protected] https://www.ztalabs.ai ZTA Labs LLC 971 US Highway 202N Ste N Branchburg, NJ 08876 For EU GDPR inquiries, please contact: ZTA Legal Team [email protected] ZTA Labs LLC 971 US Highway 202N Ste N Branchburg, NJ 08876 Attention: Legal https://www.ztalabs.ai For UK DPA 2018/UK GDPR inquiries, please contact: ZTA Legal Team [email protected] ZTA Labs LLC 971 US Highway 202N Ste N Branchburg, NJ 08876 Attention: Legal https://www.ztalabs.ai

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that ZTA has not addressed your concern in a satisfactory manner, you may contact the appropriate authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO). You may contact the ICO through its website at: ico.org.uk or call the ICO at: +44 0303 123 1113. For EU member states, information is available through the European Data Protection Board website at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. For US states, please contact your State Attorney General’s Office. Contact information is available through the United States government website at: https://www.usa.gov/state- attorney-general.

AI use

ZTA is committed to the secure, transparent, and responsible use of Artificial Intelligence. If you have questions, comments, or concerns about the company’s use of AI systems, please contact us at [email protected]. Use of Data for AI. We do not use Personal Data collected through this website (including free-form text inputs) to develop or train our artificial intelligence or machine- learning models, including large language models.