This Privacy Policy relates to FaceComply (www.facecomply.com) FaceComply is a website owned by Corsight AI Ltd. (“Corsight”, “we”, “FaceComply”) is committed to maintaining the privacy of its users (“user”, “you”). The following information describes how Corsight collects and processes information about you when you use this website (the “Website”).

 Our Privacy Policy explains: • What information we collect and why we collect it. • How we use that information. • Your rights with regard to the collection of such information. 

By using our Website, you agree to this Privacy Policy. The Website provides information regarding FaceComply and its service provision. It identifies the respective service offerings of Anekanta®AI, Advent IM and Corsight Ai.  Please note that the scope of this Privacy Policy is limited only to information collected by Corsight through your use of its Website. Some information may be automatically collected, and some is collected when you interact with our Website. The type of information that may be automatically collected is non-personal information, which includes your session durations, the content you accessed on the Website, the frequency and scope of your use of the Website and information about your computer and internet connection including the operating system you use and browser type. Information from which you can be personally identified may also be collected, including but not limited to your name, email address and the location of the computer through which you used the Website (hereinafter: “Personal Information”). Personal Information shall be collected only if received voluntarily from you, including, without limitation, by completing the contact form available through the Website. 

Use of Information . We use the Personal Information we collect from you for the purpose of delivering to you the services offered inherent within FaceComply. This information is offered by you to us so that you may take advantage of FaceComply service offerings.  We may use or process your Personal Information for the following purposes. One or more purposes may apply simultaneously. 1. Enabling You to Contact Us • We will collect your name, email address and the content of your inquiry when you contact us via the Website. • Such collection of information will enable us to provide you with technical and professional assistance, with regard to any questions you may have regarding FaceComply or the Platform. We process your Personal Information based on your consent which shall be inferred when you contact us for any reason you may find appropriate.

 2. Improvement and Development of the Services • We collect Personal Information for ongoing review and improvement of the information provided on our Website to ensure it is user friendly. • We collect Personal Information to improve the management and administration of our business and maintain compliancy with our internal policies and procedures. • We conduct surveys and research, test features in development, and analyze the information we have to evaluate and improve our Platform, develop new features, and conduct audits and troubleshooting activities. We process this information in light of our legitimate interest in improving the Website and the Platform, to allow our users to have the best experience. 

3. Maintain and Secure Environment We may use your information to detect and prevent fraud, abuse and security incidents in the following ways; • Verify and authenticate your identity and prevent unauthorized or illegal activity; • Enhance the safety and security of our Platform and Website; • Conduct security investigations and risk assessments; • Prevent or take action against activities that are, or may be, in breach of our terms of service or applicable law. 

We process this information in light of our legitimate interest in improving our Platform and Website while enabling our users to browse in a secure environment. 

4. Personalize Content, Advertising and Marketing • If you have used FaceComply services in the past, we have a legitimate business interest for matching the data we collect with other data we had already collected. • This enables us to understand your needs and interests, optimize the content we send you and make it more suitable and relevant to your needs. • This also enables us to improve your experience on the Website by providing you with personalized content, recommendations, and features. We process this information in light of our legitimate interest to personalize your experience and customize our content.

Disclosure of Information and Transfer of Data Except as otherwise provided in this Privacy Policy, we reasonably attempt to ensure that we never intentionally disclose any of your Personal Information, to any third party without having received your permission, except as provided for herein or otherwise as permitted or required under law. In order to perform our contractual and other legal responsibilities or purposes, we may, from time to time, need to share your Personal Information with third parties. We will share your Personal Information with our affiliates (FaceComply affiliates), subsidiaries or any third party service providers and individuals to facilitate our services or any portion thereof, such as marketing, data management or maintenance services. We may also share your information with analytics service providers for analytics services. Such analytics service providers set their own cookies or other identifiers on your computer, through which they can collect information about your usage of our Website. This helps us compile aggregated statistics about the effectiveness of our Website.

The above mentioned third parties may be located in countries other than your own, and we may send them information we receive. When such third party service providers process your Personal Information on our behalf, we will assure that they comply with obligations similar to those which are set forth in this Privacy Policy. We will also assure that they will abide by our data privacy and security requirements, and will be allowed to use the Personal Information solely for the purposes we set. We will transfer your Personal Information while using appropriate and suitable safeguards, while using a variety of legal mechanisms, including contracts, to ensure your rights and protections travel with your data. We may also transfer your information, including Personal Information, in connection with a corporate merger, consolidation, the sale of related assets or corporate division or other fundamental corporate changes. Furthermore, information about you may also be released in order to comply with any valid legal obligation or inquiry or process such as a search warrant, subpoena, statute or court order. We will also release specific information in special cases, such as if you use the Website to perform an unlawful act or omission or take any act or omission that may damage  Cosrsight Ai, its property and goodwill, or if there is an attempted breach of the security of the Website or a physical or property threat to you or others. The authority supervising such activities is the Israeli Privacy Protection Authority, and you have the right to file a complaint to it or any other relevant supervisory authority.

 Your Rights;  You have the right at any time to request to access or modify your information. To exercise these options, please contact us at info@corsight.ai. In some jurisdictions, in particular those located within the European Union (the “EU”) or within the European Economic Area (the “EEA”), you may be afforded specific rights regarding your Personal Information. Subject to such eligibility, you may have the following rights to: 1. Request a rectification of your Personal Information where the information we hold about you is incorrect or incomplete. 2. Object to the processing of your Personal Information for direct marketing purposes. 3. Object to the processing of your Personal Information where our legal basis for that processing is that such processing is necessary for our legitimate interests. 4. Object to an automated decision-making (including profiling) in certain circumstances. 5. Request the erasure of your Personal Information in certain circumstances, such as where processing is no longer necessary for the purpose it was originally collected for, and there is no compelling reason for us to continue to process or store it; 6. Receive your Personal Information, or ask us to transfer it to another organization that you have provided to us, which we process by automated means, where our processing is either based on your consent or is necessary for the performance of a contract with you. Generally, with regard to information collected on our Website, Corsight is a “Data Controller”. Therefore, if you wish to exercise the above mentioned rights, please contact us, and we will make our best efforts to fulfill your request. If you wish to file a request regarding any of the above, you may contact us at: info@corsight.ai. Note to Data Subjects in California: California Online Privacy Protection Act CalOPPA requires commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers, to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. See more at: http://consumercal.org/california-online-privacyprotectionact-caloppa/#sthash.0FdRbT51.dpuf. According to CalOPPA, FaceComply ( Corsight Ai) agrees to the following: • Once this Privacy Policy is created, we will add a link to it on our home page or on the first significant page after entering the Website. • FaceComply’s Privacy Policy link includes the word ‘Privacy’ and can easily be found on each page on the Website. You can request to change your Personal Information by emailing us at: info@corsight.ai. California Privacy Rights The California Consumer Privacy Act of 2018 (“CCPA”) permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their Personal Information (if any) in the prior calendar year, as well as the type of Personal Information disclosed to those third parties. Please note that we do not sell your Personal Information. If you choose to exercise your rights, we will not charge you different prices or provide different quality of our services, unless those differences are related to your provision of your Personal Information. Please note that you must verify your identity and request before further action is taken. As a part of this process, government identification may be required. Moreover, you may designate an authorized agent to make a request on your behalf. We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide, will only cover the 12 month period preceding your verifiable request’s receipt. If, for some reason, we cannot reply within such time frame, our response will include an explanation for our inability to comply. If you wish to exercise your CCPA rights, please contact us at: info@corsight.ai. We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not: 1. Deny you goods or services. 2. Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. 3. Provide you with a different level or quality of goods or services. 4. Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services Note to Data Subjects in the US: CAN SPAM Act The CAN-SPAM Act is a Federal US law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out strict penalties for violations. To be in accordance with CANSPAM, Corsight agrees to the following: • Not use false or misleading subjects or email addresses. • Identify the commercial message sent to you as an advertisement when required. • Include the physical address of our business or site headquarters. • Monitor third-party email marketing services for compliance, if one is used. • Honor opt-out/unsubscribe requests quickly. • Allow users to unsubscribe by using the link at the bottom of each email. If at any time you would like to unsubscribe from receiving future emails, you can email us at info@corsight.ai and we will promptly remove you from ALL correspondence.

 Note to Data Subjects in the UK: UK Data Protection Act (DPA) 2018 (UK GDPR) UK DPA requires commercial websites and online services to post a privacy policy. This Notice was last updated on 1st August 2023. However, the policy can change according to context for example to comply with legal requirements or to meet changing business needs. In the event of an important change in how we manage this Personal Information, we will inform you via website and any other appropriate way. 

UK DPA describes a Data Controller for the Processing of Personal Information A “Controller” is a person or organisation who alone or jointly determines the purposes for which, and the manner in which, any Personal Information is, or is likely to be, processed. This Privacy Notice is issued on behalf of Corsight Ai as the Data Controller and unless we notify you otherwise this company is the controller for your personal Information. Corsight AI has appointed its Chief Privacy Officer, Tony Porter QPM LLB, as its UK Data Protection Officer. You can contact the DPO by emailing info@corsight.ai or tony.porter@corsight.ai 

Legal Basis of Processing Personal Information UK DPA requires the legal basis for collecting and using your Personal Information to be described in this Policy. It will depend on the Personal Information concerned and the specific context in which we collect it. In general, we collect and process your Personal Information on one or more of the following basis: • Your consent, for example where we have obtained your consent to process your Personal Information for certain activities. If we do so, we will provide you with full details of the Personal Information that we would like to process and the reason, so that you can carefully consider whether you wish to consent. You are free to withdraw your consent at any time by contacting info@corsight.ai. If you withdraw your consent, it will not affect the lawfulness of any processing based on your consent before you withdrew it. Where applicable, we may ask for your consent to processing at the point where you provide your Personal Information. • To comply with a contractual obligation. We will advise you upon collection whether the provision of your Personal Information is mandatory and of the possible consequences if you do not provide us with your information. • For compliance with Corsight.ai legal obligations where other laws require the processing of your Personal Information or where we need your Personal Information to protect your vital interests or those of another person. • Corsight AI’s legitimate interests which include the provision of this Website and/or relevant products and Services, and/or the carrying out of marketing and profiling activities, we only rely on our legitimate interests to process your Personal Information when these interests are not overridden by your rights and interests. In addition to the above, you have the right to lodge a complaint about our handling of your Personal Information to the UK Information Commissioner’s Office. Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Cookies We may use “cookies” and/or other technologies or files (collectively, “cookies”) to identify how visitors make use of this Website. 

This aggregated tracking information may be used to help us improve and enhance the Website experience for all of our visitors. In addition, cookies are used for adjusting the Website to your personal preferences. Cookies contain information such as the pages you visited, the length of time you stayed on the Website, the location from which you accessed the Website and more. If you would prefer not to have cookies stored on your computer, you may modify your browser settings to reject most cookies, or manually remove cookies that have been placed on your computer. However, by rejecting the cookies, you may be unable to fully access the offerings on this Website. To find out more about cookies, visit www.allaboutcookies.org. Opt In or Opt Out You are always in control of your data, and if you choose to receive information from us, or others, you can change your mind later. If, at any time, you would like to stop receiving such information or opt out of a feature, you may notify us by writing to info@corsight.ai.

 You should be aware, however, that it is not always possible to completely remove or modify information in our databases and servers, although we will always make reasonable efforts to do so upon your request. Links to Other Websites This Website may provide links to other websites. Please be aware that these other websites are not covered by our Privacy Policy. This Privacy Policy does not cover the information practices exercised by other providers of products or services, advertisers or other websites, companies or individuals, which are not owned or controlled by Corsight. We suggest that when linking to another website, you always read that website’s privacy policy before volunteering any personally identifiable information.

 Data Security. We deploy industry standard measures to ensure the security, confidentiality, integrity and availability of Personal Information we process. We maintain physical, technical and administrative safeguards, and test and update these periodically and we endeavor to restrict access to Personal Information on a ‘need to know’ basis. Note, that such measures are never perfect or impenetrable. In the event of a security breach, we will take all reasonable action to minimize any harm. Although we will do our best to protect Personal Information, we cannot guarantee the security of data transmitted to our Website and transmission is at the users own risk.

 Data Retention. Generally, Corsight does not retain information longer than necessary to provide its Website and for its reasonable business and lawful needs. If you withdraw your consent to us processing your Personal Information, we will erase your Personal Information from our systems, unless the Personal Information is required for Corsight to establish, exercise or defend against legal claims or it is necessary for the performance of the requested services. Children’s Privacy The Website is not intended for children under the age of 16. We do not, knowingly or intentionally, collect information about children who are under 16 years of age. IF YOU ARE UNDER THE AGE OF 16 YOU MAY NOT USE THE WEBSITE, UNLESS PARENTAL CONSENT IS PROVIDED ACCORDINGLY Questions Regarding Our Privacy Policy If you have any questions regarding this Privacy Policy or the practices described above, you are always welcome to contact us at info@corsight.ai. Revisions and Modifications to our Privacy Policy We reserve the right to revise, amend, or modify this Privacy Policy at any time. When changing the policy, we will update this posting accordingly. Please review this Privacy Policy often so that you will remain updated regarding our current policies. Governing Law and Jurisdiction This Privacy Policy will be governed and interpreted pursuant to the laws of the State of Israel without giving effect to its choice of law rules. You expressly agree that the exclusive jurisdiction for any claim or action arising out of or relating to this Privacy Policy shall be to the competent courts in Tel Aviv, Israel, to the exclusion of any other jurisdiction. This page was last updated on 5 th April 2021