Last Updated: [September 1, 2025]

1. Scope and Who We Are

This Privacy Policy explains how Tamar AI Inc., a Delaware corporation that operates the Services under the TapNow brand ("TapNow," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use https://tapnow.ai, the TapTV community, and related website features, tools, models, and services that link to this Policy (collectively, the "Services").

This Policy applies to individual users, representatives of business customers, website visitors, community participants, and other people who interact with us in the United States. It does not apply to personal information we process solely on behalf of an organizational customer under that customer's instructions. In that situation, the customer controls the information, and you should direct privacy requests to that customer. We will assist the customer as required by applicable law.

2. Personal Information We Collect

The information we collect depends on how you use the Services.

2.1 Information You Provide

We may collect:

• Account and contact information, such as your name, email address, telephone number, username, organization, job title, profile information, and login credentials.
• Customer Content, such as prompts, instructions, uploaded images, video, audio, text, project files, comments, reference materials, generated content, and information contained in those materials.
• Transaction information, such as subscription type, purchases, Tapies or other credits, billing address, tax information, transaction status, and limited payment references. Payment-card details are processed by payment providers such as Stripe and Antom and are not stored by TapNow in full.
• Communications, including support requests, survey responses, reports, appeals, marketing preferences, and correspondence with us.
• Social login information, such as your name, email address, and profile information, when you choose to use a third-party authentication provider.

2.2 Information Collected Automatically

We may automatically collect:

• IP address and approximate location derived from IP address;
• device, browser, operating system, language, and network information;
• account activity, feature use, clicks, page views, referring pages, timestamps, logs, and diagnostic information;
• model and generation activity, including model selected, request status, usage volume, safety signals, and technical metadata; and
• cookies, pixels, local storage, and similar technologies used for authentication, preferences, analytics, fraud prevention, and service performance.

2.3 Information From Other Sources

We may receive information from:

• an organization that creates or administers your account;
• payment, authentication, cloud, model, analytics, security, and customer-support providers;
• other users who invite you to a workspace or share content with you;
• public sources and professional or business directories; and
• partners or event organizers when you request information or consent to the disclosure.

3. How We Use Personal Information

We use personal information to:

1. create and administer accounts and organization workspaces;
2. provide, personalize, and support the Services;
3. process prompts, uploads, generations, edits, exports, collaboration, and sharing at your direction;
4. process payments, subscriptions, Tapies, taxes, and transaction records;
5. communicate about accounts, purchases, service notices, support, security, and, where permitted, products or events;
6. monitor performance, troubleshoot, conduct controlled quality evaluation, and improve functionality, reliability, accessibility, and user experience;
7. detect, investigate, and prevent fraud, abuse, policy violations, harmful content, and security incidents;
8. enforce agreements, resolve disputes, protect rights and safety, and comply with legal obligations;
9. conduct internal analytics, forecasting, and business planning; and
10. create and use aggregated or de-identified datasets for technical research, business intelligence, security, service improvement, and industry analysis.

We will not attempt to reidentify information that we maintain as de-identified, except as permitted by law to test whether our de-identification processes are effective.

4. Customer Content and AI Processing

TapNow processes Customer Content to follow user instructions, provide requested features, support collaboration and sharing, perform content-safety and abuse review, troubleshoot, provide support, evaluate service quality, and comply with law.

Our Services may transmit prompts, files, or other necessary content to cloud providers, model providers, and other technical service providers that help us perform the requested operation. We contractually or operationally limit those providers' use of information as appropriate to their role and applicable law.

Unless you provide separate affirmative authorization, TapNow will not use non-public Customer Content to train or improve a general-purpose model offered to unrelated third parties. We may use aggregated or de-identified information and limited controlled evaluation data to improve the functionality, safety, and reliability of the Services, consistent with this Policy and applicable law.

Do not upload sensitive personal information, regulated data, or another person's confidential information unless it is necessary for your authorized use, you have a lawful basis to do so, and the Services expressly support that use.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

• Service providers and contractors that provide cloud hosting, content delivery, model inference, payments, authentication, analytics, communications, customer support, moderation, security, fraud prevention, and professional services.
• Organization administrators and collaborators when you use an organization-managed account, join a shared workspace, or choose to share content.
• Affiliates that help operate, maintain, secure, and improve the Services, subject to this Policy.
• Business transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections.
• Authorities and other parties for legal or safety reasons when we reasonably believe disclosure is required by law or necessary to protect users, TapNow, the public, or another person's rights, property, or safety.
• Other recipients at your direction or with your consent, including when you publish content or connect a third-party service.

We do not disclose personal information to third parties for their own unrelated purposes merely because they assist us. We require service providers and contractors to handle information consistently with their role and applicable contractual and legal requirements.

6. Sale, Sharing, and Targeted Advertising

TapNow does not sell personal information for money. Based on our current practices, we do not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined by the California Consumer Privacy Act, and we do not process personal information for targeted advertising as defined by applicable U.S. state privacy laws.

If these practices change, we will update this Policy, provide any required notice and opt-out mechanism, and honor legally recognized opt-out preference signals, including Global Privacy Control, where required by applicable law.

7. Cookies and Tracking Choices

We use cookies and similar technologies that are necessary for login, security, preferences, payments, service functionality, analytics, and performance. You can control many cookies through your browser settings. Blocking necessary cookies may prevent parts of the Services from functioning.

Some browsers offer a Do Not Track signal. Because no uniform legal or technical standard applies to all Do Not Track signals, the Services do not currently respond to them except where required by law. We process Global Privacy Control or other legally recognized opt-out preference signals where applicable to our practices and required by law.

8. U.S. State Privacy Disclosures

Depending on where you live and whether the relevant law applies to TapNow or the processing at issue, you may have the right to:

• confirm whether we process your personal information and access that information;
• request deletion of personal information;
• correct inaccurate personal information;
• obtain a portable copy of personal information you provided;
• opt out of a sale of personal information, targeted advertising, or qualifying profiling;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent where processing is based on consent;
• appeal our refusal of a privacy request; and
• receive equal service and not be discriminated against for exercising privacy rights.

These rights are subject to verification, exceptions, and limitations under applicable law.

8.1 Categories of Personal Information

The following table describes categories of personal information we may have collected and disclosed for business purposes during the preceding 12 months. We have not sold these categories or shared them for cross-context behavioral advertising based on our current practices.

| Category | Examples | Main Sources | Main Purposes | Categories of Recipients | |-|-|-|-|-| | Identifiers | Name, email, telephone number, username, IP address, account ID | You, organization administrators, authentication providers | Accounts, service delivery, communications, security | Hosting, authentication, communications, security, support providers | | Customer records and commercial information | Contact details, subscription, purchases, Tapies, transaction history | You, payment providers, organization | Billing, account administration, support, compliance | Payment, accounting, support, fraud-prevention providers | | Internet and device activity | Browser, device, operating system, logs, feature activity, diagnostics | Your browser or device, service providers | Security, analytics, troubleshooting, improvement | Hosting, analytics, monitoring, security providers | | Approximate geolocation | General location inferred from IP address | Your device or network | Security, localization, compliance | Hosting, security, fraud-prevention providers | | Audio, visual, and electronic content | Prompts, images, video, audio, text, project files, Output | You, collaborators, organization | Providing requested features, safety, support | Cloud, model, moderation, storage, support providers | | Professional information | Organization, role, business contact details | You, your organization, public business sources | Organization accounts, sales, support, communications | CRM, communications, support providers | | Inferences and security signals | Preferences, likely interests in features, abuse or fraud risk indicators | Service activity and technical systems | Personalization, safety, fraud prevention, improvement | Analytics, security, fraud-prevention providers | | Sensitive personal information | Account credentials; sensitive information voluntarily included in Customer Content | You, organization administrators | Authentication and providing requested features | Authentication, cloud, model, security providers as necessary |

We do not use sensitive personal information to infer characteristics about you for unrelated profiling. We process it only as reasonably necessary to provide requested Services, maintain security, comply with law, or for other purposes permitted by applicable law.

8.2 California Privacy Rights

California residents may have rights to know, access, delete, correct, and obtain information about personal information collected, used, disclosed, sold, or shared; to opt out of sale or sharing; to limit certain uses of sensitive personal information; and to receive non-discriminatory treatment.

Because TapNow does not currently sell personal information or share it for cross-context behavioral advertising, we do not presently offer a "Do Not Sell or Share My Personal Information" link. If our practices change in a way that requires such a link, we will provide it before engaging in the relevant activity.

California's "Shine the Light" law may allow residents to request information about certain disclosures for third parties' direct-marketing purposes. TapNow does not currently disclose personal information to third parties for their own direct marketing.

8.3 Exercising Privacy Rights

Submit a request by emailing contact@tapnow.ai with the subject line "Privacy Request." Describe the right you wish to exercise and the account or email address involved.

We may verify your identity or authority before completing a request and may request information reasonably necessary for verification. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the individual. We will use verification information only for verification and security purposes.

If we deny a request, residents of states that provide an appeal right may appeal by replying to our decision or emailing contact@tapnow.ai with the subject line "Privacy Appeal." We will respond within the period required by applicable law.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention depends on:

• how long an account or organization relationship remains active;
• user settings and deletion requests;
• the time needed to provide, secure, troubleshoot, and improve the Services;
• contractual, accounting, tax, payment, dispute, and recordkeeping requirements;
• fraud-prevention, abuse-prevention, and security needs;
• legal holds and applicable limitation periods; and
• the time required for information to cycle out of backups and disaster-recovery systems.

When information is no longer required, we delete it, de-identify it, or securely isolate it until deletion is reasonably possible. Content you intentionally made public may remain in copies made or shared by others before removal.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, logging, security monitoring, and service-provider management appropriate to the nature of the information and risk. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining appropriate credentials, administrator permissions, workspace access, and backups. If you believe your account or information has been compromised, contact contact@tapnow.ai promptly.

11. International Processing

TapNow and its service providers may process information in the United States and other countries where we or our providers operate. Those countries may have data-protection laws different from the laws where you live. Where required, we use contractual, organizational, or other lawful measures for cross-border transfers.

12. Third-Party Services

The Services may contain links to or integrate with third-party services. Their privacy practices are governed by their own policies, not this Policy, except to the extent TapNow is legally responsible for selecting and managing a service provider processing information on our behalf.

13. Children

The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

14. Changes to This Policy

We may update this Policy to reflect changes in law, technology, Services, or business practices. We will post the revised Policy and update the date above. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent where required by law.

15. Contact Us

Questions, complaints, and privacy requests may be sent to:

Tamar AI Inc. (TapNow)

Registered Office:

8 The Green, Suite A

Dover, Delaware 19901, United States

Email: contact@tapnow.ai

If you have an unresolved privacy concern, you may also contact the attorney general or privacy regulator in your state of residence where applicable.