Confidentiality Policy

1. Our Commitment to Confidentiality

At Obsidio Labs, confidentiality is a foundational principle of how we operate. We understand that the data, strategies, and insights shared with us by clients, partners, and users are sensitive and commercially valuable. We are committed to protecting all such information with the highest standards of care, discretion, and security.

2. Definition of Confidential Information

"Confidential Information" means any non-public information disclosed by one party to another in connection with the use of Obsidio Labs services, including but not limited to:

• —Business strategies, marketing plans, and campaign data.
• —Financial information, pricing structures, and commercial terms.
• —Technical data, software, algorithms, and system architectures.
• —Customer lists, audience data, and personally identifiable information.
• —Any information marked or reasonably understood to be confidential.

3. How We Protect Your Information

We implement robust technical and organizational measures to safeguard Confidential Information, including:

• —Encryption of data in transit and at rest using industry-standard protocols.
• —Strict access controls ensuring only authorized personnel can access sensitive data.
• —Regular security audits and vulnerability assessments of our infrastructure.
• —Mandatory confidentiality training for all Obsidio Labs employees and contractors.
• —Secure data deletion policies upon termination of services.

4. Data We Collect

In the course of providing our services, we may collect and process the following categories of data:

• —Contact Data: Name, email address, job title, and company name provided through our contact form or direct communications.
• —Usage Data: Information about how you interact with our platforms, including access logs, feature usage, and performance metrics.
• —Campaign Data: Media signals, audience segments, and performance data processed through SyncPulse and Lucid Neural Engine on behalf of clients.
• —Technical Data: IP addresses, browser type, device information, and cookies used for platform functionality and security.

5. Non-Disclosure Obligations

Obsidio Labs employees, contractors, and agents are bound by strict non-disclosure obligations. All staff with access to client data are required to sign confidentiality agreements as a condition of their engagement. We do not sell, rent, or trade Confidential Information to third parties under any circumstances. Client data is never used for purposes beyond the direct delivery of contracted services without explicit written consent.

6. Disclosure Exceptions

Confidential Information may be disclosed only in the following limited circumstances:

• —When required by applicable law, regulation, or court order, in which case we will provide advance notice to the affected party where legally permitted.
• —With the express prior written consent of the disclosing party.
• —To trusted sub-processors who are bound by equivalent confidentiality obligations and act solely on our instructions.
• —Where the information has become publicly available through no fault of Obsidio Labs.

7. Data Retention

We retain Confidential Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Upon termination of a service engagement, client data is either returned, securely deleted, or anonymized within 30 days, subject to any legal retention requirements. We maintain detailed records of our data retention schedules and make these available to clients upon request.

8. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• —The right to access and receive a copy of your personal data.
• —The right to request correction of inaccurate data.
• —The right to request deletion of your data ("right to be forgotten").
• —The right to object to or restrict processing of your data.
• —The right to data portability.

To exercise any of these rights, please contact us through the contact form on our website.

9. Breach Notification

In the event of a confirmed data breach that is likely to result in a risk to the rights and freedoms of individuals, Obsidio Labs will notify affected clients and relevant supervisory authorities as required by applicable law, and no later than 72 hours after becoming aware of the breach. We maintain an incident response plan and conduct regular drills to ensure readiness.

10. Contact

For any questions, concerns, or requests related to this Confidentiality Policy or the handling of your data, please contact our team through the contact form on our website. We are dedicated to responding to all privacy-related inquiries within five business days.