ATMOSFY, INC.

PRIVACY POLICY

Effective Date: June 2026

Atmosfy, Inc., its brands, affiliates, and subsidiaries ("Atmosfy," "we," "our," or "us") values your privacy. This Privacy Policy ("Policy") describes how Atmosfy collects, uses, discloses, and otherwise processes personal information, as well as any rights and choices you may have regarding such personal information.

By using our Services (as defined below), you agree that your personal information will be handled as described in this Policy. Your use of our Services and any dispute over privacy is subject to this Policy and our Terms of Use, available at atmosfy.io/terms-of-service.html, including applicable terms governing limitations on damages and the resolution of disputes.

This Policy covers the following topics:

• 1. Scope of this Policy

• 2. Personal Information We Collect

• 3. How We May Use Personal Information

• 4. How We May Disclose Personal Information

• 5. Atlas Platform and Commercial Data Licensing

• 6. AI and Machine Learning Uses

• 7. Cookies and Other Tracking Mechanisms

• 8. Your Privacy Choices

• 9. Children's Information

• 10. Transfer of Personal Information to the U.S.

• 11. External Links and Features

• 12. Security

• 13. California Privacy Rights

• 14. Changes to this Policy

• 15. Contact Us

1. Scope of this Policy

Except as otherwise described below, this Policy applies to the personal information Atmosfy collects and processes related to:

• Visitors to our website at www.atmosfy.io (the "Site"), and individuals who download and use our mobile application or any other software, applications, or products we provide (the "App"). Collectively, we may refer to our Site and App as the "Services."

• Individuals who subscribe to receive news, information, and marketing communications from us.

• Individuals who register for or participate in our webinars, events, surveys, and research conducted by us.

• Individuals who use our Services on behalf of a business, including current, former, and prospective customers, agents, vendors, and business partners.

• Individuals that communicate with us or otherwise interact or engage with us, including through our social media channels.

This Policy does not apply to job applicants or to our employees, except as related to their use of the Services.

2. Personal Information We Collect

We collect personal information (1) directly from you, (2) automatically when you use the Services, and (3) from third-party sources.

Information We Collect Directly From You

• Account Information: When you register for an account, we collect your full name, username, email address, password, and profile photo. You may also provide your bio, website, and social media handles. If you claim a business location, we may collect your name, work email, and other details necessary to verify ownership.

• Service Usage Information: Videos, photos, or reviews you upload ("Content"), businesses or locations you post Content about, your saved Content, search history, bookmarks, lists, followers, and reservation or waitlist information.

• Communications Information: Your name, email address, phone number, the nature of your inquiry, and any other information you provide when communicating with us or other users via the Services.

• Responses and Feedback: Survey or questionnaire responses related to your use of our Services.

• Contacts: If you allow us to access your device contacts to invite others, we transmit that contact information to our servers long enough to process your invitations.

• Marketing and Promotions: Your email, name, phone number, and preferences if you agree to receive marketing communications from us.

• Events and Other Requests: Information related to your registration for or participation in events we host or sponsor.

• Business Development Information: Name, company information, contact details, and communications records related to current, former, and prospective vendors, business partners, and agents.

Information We Collect Automatically

• Device and Browsing Information: IP address, browser type, domain names, access times, operating system, device type, unique ID, Internet service provider, referring and exiting URLs, and clickstream data.

• Activities and Usage: Links clicked, searches, features used, businesses viewed, time spent within the Services, and your interactions with us, other users, or businesses.

• Location Information: We may collect or derive location information from your IP address. If you enable location-based sharing through your device settings, we may collect precise GPS coordinates to provide relevant local content. You may turn off location sharing through your device settings.

Information We Collect from Other Sources

We may collect and receive personal information from business partners, data analytics providers, Internet service providers, operating systems and platforms, public databases, and vendors and service providers. We may also receive personal information from our customers and clients for various purposes relating to our Services.

3. How We May Use Personal Information

Depending on how you use the Services, we may use the personal information we collect for the following purposes:

• Services and Support: To maintain your account, provide and operate our Services, communicate with you and other users, provide troubleshooting and technical support, and respond to your inquiries.

• Publicly Display Content: Your contributions to the Services may be publicly displayed, including your name, username, image, tagged location, reviews, ratings, and activity. We assume you have received permission to share the personal information of identifiable people in your Content.

• Provide Services to Businesses and Business Partners: To enable businesses to accept reservations, process information on behalf of business partners, and facilitate loyalty programs or other services.

• Analytics and Improvement: To better understand how users access and use the Services, evaluate and improve our Services and business operations, and for internal quality control and training purposes.

• Communicate With You: To respond to inquiries, send requested materials and newsletters, and send administrative information including changes to our terms and policies.

• Marketing and Promotions: To send information about our Services, events, new offerings, and offerings of our business partners.

• Research and Surveys: To administer surveys and questionnaires for market research or user satisfaction purposes.

• Planning and Managing Events: For event planning, registration, attendance, and connecting you with other event attendees.

• Security and Protection of Rights: To protect the Services and our business operations, prevent and detect fraud, and investigate potential threats to safety or legal rights.

• Compliance and Legal Process: To comply with applicable legal or regulatory obligations and respond to legal process.

• General Business and Operational Support: To assess and implement mergers, acquisitions, and other business transactions, and to administer our business, accounting, and legal functions.

4. How We May Disclose Personal Information

We may disclose the personal information we collect as follows:

• Affiliates, Subsidiaries, and Business Partners: We may disclose personal information to our corporate affiliates, subsidiaries, and business partners who offer services viewable within the Services.

• Vendors and Service Providers: We may disclose personal information to vendors and service providers who perform functions on our behalf, such as IT and website hosting, marketing providers, customer support, data storage, analytics, auditors, consultants, and legal counsel.

• Customers: In some circumstances, we may disclose personal information to our business customers and clients to facilitate use of our Services, including interconnection of our Services with their services.

• Marketing and Analytics Providers: We may disclose device and browsing information, and activity and usage information, to marketing and advertising networks and data analytics providers.

• In Support of Business Transfers: If we are acquired by, merged with, or invested in by another company, or if any of our assets are transferred to another company, we may disclose or transfer personal information we have collected.

• Compliance and Legal Obligations: To comply with legal and compliance obligations and respond to legal process, including subpoenas, court orders, and requests from law enforcement or government authorities.

• Security and Protection of Rights: Where necessary to protect the Services, our rights, or the rights, property, and safety of others.

• Aggregate and Deidentified Information: We may use, disclose, and otherwise process aggregate and deidentified information for quality control, analytics, research, development, and other purposes.

5. Atlas Platform and Commercial Data Licensing

Atmosfy operates the Atmosfy Atlas platform, a geo-tagged video content infrastructure and licensing engine. This section explains how your Content and related data may be used in connection with our commercial licensing activities.

5.1 Commercial Licensing of Content

As described in our Terms of Use, by submitting Content to the Services, you grant Atmosfy a broad license to use, reproduce, distribute, and sublicense your Content. In connection with the Atlas Platform, we may:

• License your Content, or curated collections that include your Content, to third-party brand partners, enterprise customers, hospitality and entertainment companies, and platform partners for commercial purposes including advertising, marketing, and promotional use.

• Make your Content available through the Atmosfy Atlas API or similar programmatic interfaces to third-party developers, enterprise licensees, and platform partners under separate commercial agreements.

• Include your Content in data products, content bundles, or curated packages made available to our commercial customers.

5.2 Derived Data and Metadata

We may derive metadata, embeddings, geo-tags, content classifications, engagement signals, and other structured data from your Content and usage patterns. This derived data may be:

• Used to operate, improve, and expand the Atlas Platform and our Services.

• Licensed to enterprise customers, technology platforms, and data partners independently of the underlying video content.

• Aggregated or anonymized for use in data products and analytics offerings.

5.3 Enterprise Customer Access

Third-party enterprise customers who access Content through the Atlas Platform are subject to separate commercial agreements with Atmosfy governing their permitted use of that Content. Atmosfy requires enterprise customers to use licensed Content only in accordance with those agreements. Nothing in this Policy creates direct rights or obligations between you and Atmosfy's enterprise customers.

5.4 No Additional Compensation

You acknowledge and agree that you are not entitled to any compensation, revenue share, or royalty in connection with Atmosfy's commercial licensing activities under this Section 5, except as may be separately agreed in writing in a creator partnership agreement or similar arrangement.

6. AI and Machine Learning Uses

Atmosfy uses and may license Content and derived data in connection with artificial intelligence and machine learning technologies. This section describes those uses.

6.1 Internal AI Development

We may use Content, derived data, and usage information to develop, train, evaluate, and improve AI and machine learning models that power features within our Services, including content recommendation, search, location matching, and content quality systems.

6.2 AI Corpus Licensing

We may license Content and derived data to third-party AI developers, foundation model providers, and research organizations for use in training, evaluating, fine-tuning, and deploying artificial intelligence and machine learning models. This includes use by large language model providers, multimodal AI systems, and visual or geospatial AI platforms.

6.3 Anonymization for AI Use

Where technically feasible, we apply anonymization and aggregation techniques prior to providing Content or derived data for AI training purposes to reduce the identifiability of individual users. However, video Content you post publicly on the Services may contain your image, voice, or likeness, which may be present in licensed Content.

6.4 Your Choices

If you do not wish for your publicly posted Content to be used for AI training purposes by third parties, you may delete your Content from the Services at any time. Note that Content already incorporated into a licensed dataset prior to deletion may not be retrievable from that dataset. For questions about AI licensing, contact us at legal@atmosfy.io.

7. Cookies and Other Tracking Mechanisms

We and our providers may use cookies, pixel tags, and other similar tracking mechanisms to automatically collect information about browsing activity, device type, and similar information within our Services. We use this information to analyze how you use our Services, identify and resolve bugs, assess and improve performance, and for marketing, advertising, and personalization purposes.

Cookies

Cookies are alphanumeric identifiers we transfer to your device through your web browser for tracking purposes. Some cookies make it easier to navigate our Services, while others enable faster log-in, support security and performance, or allow us to track activity and usage data.

Pixel Tags

Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier embedded invisibly within web pages and online content. We may use these to track user activities, manage content, and compile usage statistics. We may also use them in emails to track open and forward rates.

Third-Party Analytics

We use third-party tools such as Google Analytics to evaluate usage of our Services. To learn more about Google's privacy practices, visit https://www.google.com/policies/privacy/partners/. You can download the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Third-Party Advertising

We work with third-party ad networks, analytics providers, and marketing partners to personalize content and display advertising within our Services and on third-party sites. We and these partners may use cookies, pixel tags, and other tools to collect browsing and activity information to provide relevant ads and evaluate their effectiveness.

Do Not Track

Currently, our Site and Services do not recognize Do-Not-Track requests. You may disable certain tracking as discussed in Section 8 below.

8. Your Privacy Choices

• Cookie Settings: You can set your browser to block certain cookies or notify you when a cookie is set. Visitors who disable cookies will be able to browse the Site, but some features may not function.

• Industry Ad Choice Programs: You can opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). Opting out does not stop all advertising; you may continue to receive generic or contextual ads.

• Marketing Communications: You can opt out of marketing emails by using the unsubscribe feature in any such email, or by logging into your account and changing your communications preferences.

• Account and Profile Information: You may access, review, update, or delete your account and profile information by logging in and accessing your account settings directly.

• AI Licensing Opt-Out: As described in Section 6.4, you may delete your Content from the Services if you do not wish for it to be used for third-party AI training purposes going forward.

9. Children's Information

Our Services are not designed for children, and we do not knowingly collect personal information from children under the age of 13. If you are a parent or legal guardian and believe we have collected your child's information in violation of applicable law, please contact us using the information in Section 15.

10. Transfer of Personal Information to the U.S.

Atmosfy is located in the United States and our Services are intended for use by users in the United States. If you are located outside the United States and submit personal information to Atmosfy, your personal information may be processed in the United States, where privacy laws may be less stringent than the laws in your country. By submitting your personal information to us, you agree to the transfer, storage, and processing of your personal information in the United States.

11. External Links and Features

Our Services may contain links to third-party websites or features. Any access to and use of such linked websites or features is not governed by this Policy, but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties. You should review the privacy policies and terms for any third parties before proceeding to those websites or using those features.

12. Security

We have implemented safeguards intended to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security. You are responsible for keeping your account access credentials secure at all times and notifying us if your credentials are ever compromised.

13. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with specific rights regarding your personal information. This section describes those rights and how to exercise them.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address, device ID); commercial information (content interactions, saved locations); internet or other electronic network activity (browsing history, search history, interactions with our Services); geolocation data; audio, electronic, visual, or similar information (videos and photos you upload); and inferences drawn from the above to create a profile about your preferences and behavior.

Your California Rights

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.

• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.

• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. Atmosfy may share personal information with third parties for cross-context behavioral advertising, which may constitute "sharing" under the CPRA.

• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary to perform the Services.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

How to Exercise Your California Rights

To exercise your rights described above, please submit a verifiable consumer request to us by emailing legal@atmosfy.io or writing to us at the address in Section 15. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. We will respond to a verifiable consumer request within 45 days of its receipt.

Shine the Light

California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for direct marketing purposes. To make such a request, please contact us at legal@atmosfy.io.

14. Changes to this Policy

This Policy is current as of the date set forth above. We may change, update, or modify this Policy from time to time. We will post any updates here. If we make any changes that materially affect our practices regarding our use of previously collected personal information, we will endeavor to provide you with notice, such as by posting a prominent notice on our Services.

15. Contact Us

If you have any questions or concerns regarding this Policy or our privacy practices, you may contact us at:

Atmosfy, Inc.legal@atmosfy.io2261 Market Street STE 36975San Francisco, CA 94114United States