Privacy Policy

Introduction

Cormint Data Systems, Inc. ("Cormint," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, process, transfer, and safeguard your information when you visit our website at https://www.cormint.com (the "Website"), communicate with us, submit information through our Website, apply for employment opportunities, or otherwise interact with our services. This Privacy Policy should be read together with our Terms of Use.

Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including but not limited to:

• Name and contact information (email address, phone number, mailing address)
• Company name, title, and business information
• Job application and recruiting information, including resumes, employment history, education, and professional qualifications
• Marketing and communication preferences
• Information you submit through contact forms, investor inquiry forms, newsletter subscriptions, or other Website interactions
• Communications and correspondence with us, including emails, messages, and inquiries

Automatically Collected Information

When you visit the Website, we may automatically collect information about your device and usage, including:

• IP address and approximate location data
• Browser type and version
• Operating system and device identifiers
• Internet activity information, including browsing behavior, interactions with pages and content, clickstream data, and referring URLs
• Information collected through cookies, analytics tools, pixels, session replay technologies, and similar tracking technologies (see "Cookies and Tracking Technologies" below)
• Pages visited, time spent on the Website, and other usage data

How We Use Your Information

We use the information we collect for various purposes, including to:

• Operate, maintain, and improve the Website's functionality and user experience
• Respond to your comments, questions, inquiries, and requests
• Evaluate employment applications and conduct recruiting activities
• Provide investor relations communications and respond to business inquiries
• Send technical notices, updates, security alerts, administrative messages, and other communications
• Conduct analytics, advertising, marketing, and remarketing activities, and measure the effectiveness of our communications and campaigns
• Monitor and analyze trends, usage, and activity in connection with the Website
• Detect, investigate, and prevent fraud, unauthorized activity, cybersecurity threats, abuse, and other misuse of the Website
• Develop aggregated, anonymized, or de-identified data and insights for business purposes
• Comply with legal obligations, enforce our Terms of Use and other agreements, and protect our legal rights

Information Sharing and Disclosure

We do not sell your personal information for monetary compensation. However, we may share certain information with service providers, analytics providers, advertising partners, and business partners as described in this Privacy Policy. The categories of recipients with whom we may share information include:

• Service Providers: Third-party vendors who perform services on our behalf. These service providers may include providers of cloud hosting, website analytics, customer relationship management, recruiting systems, marketing automation, cybersecurity, communications, and information-technology services.
• Advertising and Analytics Partners: Providers that help us deliver and measure advertising, marketing, and analytics, which may include partners whose tools constitute "sharing" of personal information for cross-context behavioral advertising under applicable law.
• Business Transfers: Counterparties in connection with any merger, acquisition, financing, reorganization, sale of company assets, or similar transaction.
• Legal Requirements: Government, regulatory, or law enforcement authorities, or other parties, when required by law or in response to valid legal requests.
• Protection of Rights: Where necessary to protect the rights, privacy, safety, or property of Cormint, our users, or others.
• With Your Consent: Other recipients, where you direct us or have otherwise consented.

Cookies and Tracking Technologies

We and our service providers use cookies and similar tracking technologies to collect information about your browsing activities on the Website. These technologies may include cookies, web beacons, pixels, tags, analytics tools, session tracking technologies, and software development kits.

We may use these technologies to:

• Maintain Website functionality and remember your preferences
• Analyze Website traffic and usage trends
• Improve user experience
• Support marketing, advertising, and remarketing activities
• Measure the effectiveness of our communications and campaigns

Cookies generally fall into the following categories: (i) strictly necessary cookies that are required for the Website to function; (ii) functional cookies that remember your preferences; (iii) analytics cookies that help us understand how visitors use the Website; and (iv) advertising and targeting cookies that may be used by us or our partners to deliver and measure advertising.

You can control cookies through your browser settings and other tools. Where required by applicable law, we will obtain your consent for non-essential cookies through a cookie consent tool on the Website. Disabling cookies may affect the functionality of the Website.

Do Not Track and Global Privacy Control Signals

Some web browsers may transmit "Do Not Track" signals to websites. Because there is not yet a universally accepted standard for responding to such signals, the Website may not currently respond to browser-based Do Not Track signals. Where required by applicable law, including the California Consumer Privacy Act, we will treat Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information for cross-context behavioral advertising for the browser or device transmitting the signal.

Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access to, and a copy or portability of, your personal information
• Correction of inaccurate or incomplete personal information
• Deletion of your personal information
• Objection to or restriction of certain processing of your personal information
• Withdrawal of consent where processing is based on consent
• Opt out of certain targeted advertising, profiling, or marketing activities
• Limit certain uses or disclosures of sensitive personal information, where applicable
• Request information regarding the categories of personal information we have collected, disclosed, or shared
• Appeal our decision on a privacy request, where applicable

To exercise any applicable privacy rights, please contact us at [email protected] or use the contact information at the end of this Privacy Policy. We may need to verify your identity before processing your request, and we will respond within the timeframes required by applicable law. We will not discriminate against you for exercising your privacy rights.

Texas Residents

Under the Texas Data Privacy and Security Act ("TDPSA"), Texas residents have the rights described in the "Your Rights and Choices" section, including the rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, contact us at [email protected]. If we deny your request, you may appeal by replying to our response within a reasonable period; we will respond to appeals within 60 days. If your appeal is denied, you may contact the Texas Attorney General to submit a complaint.

California Residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), California residents have the rights described in the "Your Rights and Choices" section, including the rights to know, access, correct, delete, and obtain a portable copy of their personal information, to opt out of the sale or sharing of personal information for cross-context behavioral advertising, and to limit the use and disclosure of sensitive personal information.

In the preceding twelve months, we may have collected the following categories of personal information about California residents (as defined by the CCPA): identifiers; commercial information; internet or other electronic network activity information; geolocation data (general); professional or employment-related information; education information; and inferences drawn from the foregoing. We collect this information from the sources described in "Information We Collect," use it for the business and commercial purposes described in "How We Use Your Information," and may disclose it to the categories of recipients described in "Information Sharing and Disclosure." We do not knowingly sell the personal information of California residents under 16. We do not offer financial incentives in exchange for personal information.

To exercise your CCPA rights, contact us at [email protected]. You may also designate an authorized agent to make requests on your behalf, subject to verification. If we deny your request, you may appeal by replying to our response. California residents may also have rights under California's "Shine the Light" law to request information about our disclosures of personal information to third parties for direct marketing purposes; such requests may be sent to the same email address.

Other U.S. State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Montana, Iowa, Delaware, Tennessee, New Jersey, New Hampshire, Rhode Island, Minnesota, and other states with comprehensive privacy laws may have rights similar to those described above, including the rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling. To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law, and you may appeal our decision where applicable law provides an appeal right.

Residents of the European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, the following additional disclosures apply. Cormint Data Systems, Inc. is the controller of personal information collected through the Website. We process personal information on the following legal bases: (i) your consent, which you may withdraw at any time; (ii) the performance of a contract with you or to take steps at your request prior to entering into a contract; (iii) compliance with our legal obligations; and (iv) our legitimate interests in operating, securing, and improving the Website and our business, where those interests are not overridden by your interests, rights, or freedoms.

In addition to the rights described in "Your Rights and Choices," you have the right to lodge a complaint with a supervisory authority in your country of residence. We will retain personal information for the periods described in "Data Retention." Where we transfer personal information outside the EEA, the United Kingdom, or Switzerland to countries that have not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum or UK International Data Transfer Agreement, as applicable.

International Data Transfers

Cormint is headquartered in the United States. By using the Website or providing information to us, you acknowledge and consent to the transfer, processing, and storage of your information in the United States and other jurisdictions where we or our service providers operate. These jurisdictions may have data protection laws that differ from the laws of your country of residence. Where required by applicable law, we implement safeguards designed to protect personal information during such transfers.

Data Security

We implement commercially reasonable technical, administrative, and organizational safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no Internet transmission or electronic storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and protect our legal rights. Retention periods depend on the type of information and the purpose for which it was collected. Examples include: contact form submissions, typically retained for up to 24 months; recruiting and applicant data, retained in accordance with applicable employment and recordkeeping requirements; cookie data, retained for the periods described in our cookie tool; and backups, retained in accordance with our backup and disaster-recovery schedule.

Security Incident Notification

If we learn of a security incident affecting your personal information, we will notify you and the appropriate authorities to the extent and within the timeframes required by applicable law.

Third-Party Links

The Website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies. Accessing third-party websites or services is at your own risk.

Children's Privacy

The Website is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. In addition, the Website is not directed to children under the age of 13, and Cormint does not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act ("COPPA"). If we learn that we have collected personal information from a child under 13 without verifiable parental consent, or from anyone under 18 in a manner inconsistent with this Privacy Policy, we will promptly delete that information.

Accessibility

Cormint is committed to making the Website accessible to users with disabilities. If you experience difficulty accessing any part of the Website or need an accommodation, please contact us at [email protected] or [email protected], and we will work to provide the information or service in an accessible format.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will provide reasonable notice by posting the revised Privacy Policy on the Website with an updated "Last Updated" date and, where appropriate, by other means such as email to a registered address on file. Material changes take effect on the stated effective date. Your continued use of the Website after the effective date constitutes your acknowledgment of the updated Privacy Policy. Non-material changes (such as clarifications or formatting updates) may take effect upon posting.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Cormint Data Systems, Inc.
1606 Headway Circle
Austin, Texas 78754

Email: [email protected] (privacy matters) or [email protected] (legal matters)