SYNCSFER CORP.

PRIVACY POLICY

Effective Date: January 19, 2026 | Last Updated: January 19, 2026

1. INTRODUCTION AND SCOPE

Syncsfer Corp. ("Syncsfer," "we," "us," or "our") is committed to protecting your privacy and ensuring transparency regarding how we collect, use, disclose, and safeguard your personal information. This Privacy Policy describes our practices concerning information collected through our platform, website, mobile applications, and related services (collectively, the "Platform" or "Services").

This Privacy Policy applies to all users of the Platform, including those who browse, register accounts, exchange services, or interact with the Platform in any capacity. By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

We collect information that you provide directly, information collected automatically through your use of the Platform, and information from third-party sources.

2.1 Personal Information You Provide

Information you voluntarily submit when creating an account, using services, or communicating with us:

• Account Registration Information: Full name, email address, phone number, date of birth, username, password, and account credentials;
• Profile Information: Profile photograph, biographical information, skills and expertise descriptions, professional background, education, certifications, work history, and service offerings;
• Identity Verification Information: Government-issued identification documents, social security number (if required), or other verification credentials;
• Payment Information: Credit card details, billing addresses, and payment transaction history for Boost Credit purchases (processed securely through third-party payment processors);
• Communications: Messages, correspondence, feedback, reviews, ratings, dispute reports, support inquiries, and any other content you submit through the Platform;
• Transaction Records: Time Credit history, service exchange details, transaction logs, booking information, and related metadata.

2.2 Information Collected Automatically

Information automatically collected when you access or use the Platform:

• Device Information: Device type, operating system, browser type and version, device identifiers (UDID, IDFA, Android ID), hardware model, and device settings;
• Log Data: IP address, access times, pages viewed, clickstream data, referring/exit pages, search queries, and interaction with Platform features;
• Location Information: Precise geolocation data (if you enable location services), approximate location based on IP address, and location preferences;
• Usage Analytics: Feature usage patterns, session duration, frequency of visits, user interactions, engagement metrics, and behavioral analytics;
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, local storage, and similar technologies (see our Cookies Policy for details).

2.3 Information from Third-Party Sources

Information obtained from external sources:

• Social Media Platforms: If you connect your account through social media services (Facebook, Google, LinkedIn), we receive information authorized by your privacy settings;
• Identity Verification Services: Background check results, identity verification reports, and related authentication data from third-party verification providers;
• Public Sources: Publicly available information, professional directories, and data aggregators to supplement profile information.

3. HOW WE USE YOUR INFORMATION

We use collected information for legitimate business purposes, including but not limited to:

3.1 Core Platform Operations

• Creating, maintaining, and managing user accounts;
• Facilitating service exchanges, matching users, and coordinating Time Credit transactions;
• Processing Boost Credit purchases and managing payment transactions;
• Enabling communication between users regarding service exchanges;
• Providing customer support, responding to inquiries, and resolving disputes.

3.2 Platform Improvement and Personalization

• Analyzing usage patterns to improve functionality, design, and user experience;
• Personalizing content, recommendations, and matching algorithms;
• Conducting research, analytics, and product development;
• Testing new features and evaluating platform performance.

3.3 Communications and Marketing

• Sending transactional emails, notifications, and service-related communications;
• Delivering promotional materials, newsletters, and marketing communications (with your consent);
• Conducting surveys and requesting feedback;
• Providing updates on Platform changes, policy modifications, and new features.

3.4 Security, Fraud Prevention, and Compliance

• Verifying user identities and authenticating accounts;
• Detecting, preventing, and investigating fraudulent activities, security threats, and policy violations;
• Enforcing Terms of Service and other legal agreements;
• Complying with legal obligations, responding to legal requests, and cooperating with law enforcement;
• Protecting rights, property, and safety of Syncsfer, users, and the public.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. However, we may share information in the following circumstances:

4.1 With Other Users

Your profile information, including name, photograph, skills, ratings, and service descriptions, is visible to other Platform users to facilitate service matching and exchanges. Transaction history and communications related to service exchanges may be visible to involved parties.

4.2 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment processors for secure transaction handling;
• Cloud hosting and infrastructure providers;
• Analytics and data processing services;
• Identity verification and background check services;
• Customer support and communication platforms;
• Marketing and advertising services.

These service providers are contractually obligated to protect your information and use it only for authorized purposes.

4.3 Legal Requirements and Protection of Rights

We may disclose information when we believe disclosure is necessary or appropriate to: (a) comply with applicable laws, regulations, court orders, subpoenas, or legal processes; (b) respond to requests from government authorities or law enforcement agencies; (c) enforce our Terms of Service or other agreements; (d) protect the rights, property, safety, or security of Syncsfer, our users, or the public; or (e) detect, prevent, or address fraud, security issues, or technical problems.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, your information may be transferred to the successor entity. We will provide notice before your information becomes subject to different privacy practices.

4.5 Aggregate and De-Identified Information

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, marketing, or other business purposes.

5. COOKIES AND TRACKING TECHNOLOGIES

We and our third-party partners use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your interactions with the Platform. These technologies help us authenticate users, remember preferences, analyze usage patterns, deliver targeted advertising, and improve services. For detailed information about the types of cookies we use, their purposes, and how to manage cookie preferences, please review our separate Cookies Policy.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. Specific retention periods vary based on data type and applicable legal requirements:

• Account Information: Retained while your account remains active and for a reasonable period thereafter to comply with legal obligations;
• Transaction Records: Retained for up to seven (7) years to comply with financial recordkeeping requirements;
• Communications: Retained for reasonable periods to resolve disputes and provide customer support;
• Backup Data: May persist in backup systems for thirty (30) to ninety (90) days following account deletion;
• Aggregated Data: De-identified and aggregated data may be retained indefinitely for analytics and research.

Upon account termination or deletion, we will delete or de-identify your personal information within a reasonable timeframe unless retention is required for legal, regulatory, or legitimate business purposes.

7. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: End-to-end encryption for sensitive data transmissions and storage using industry-standard protocols (TLS/SSL);
• Access Controls: Role-based access restrictions, multi-factor authentication, and principle of least privilege;
• Network Security: Firewalls, intrusion detection systems, and regular security audits;
• Secure Development: Security testing, vulnerability assessments, and adherence to secure coding practices;
• Employee Training: Regular privacy and security training for employees with access to personal information;
• Incident Response: Established procedures for detecting, responding to, and mitigating security incidents.

However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately of any unauthorized account activity.

8. CHILDREN'S PRIVACY

The Platform is not intended for children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. Users must be at least 18 years old or the age of majority in their jurisdiction to create accounts and use the Services. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly. Parents or guardians who believe we may have collected information from a child under 13 should contact us immediately at privacy@syncsfer.com.

9. INTERNATIONAL DATA TRANSFERS

Syncsfer is based in California, United States. Your information may be transferred to, processed, and stored in the United States or other countries where our service providers operate. These countries may have data protection laws different from those in your jurisdiction. By using the Platform, you consent to the transfer of your information to the United States and other countries as necessary to provide the Services. For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we implement appropriate safeguards such as Standard Contractual Clauses to protect your information when transferred internationally.

10. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites, services, or applications not owned or controlled by Syncsfer. This Privacy Policy does not apply to third-party sites or services. We are not responsible for the privacy practices, content, or activities of third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. YOUR PRIVACY RIGHTS AND CHOICES

Subject to applicable law, you have the following rights regarding your personal information:

11.1 Access and Portability

You have the right to request access to the personal information we hold about you and, in certain circumstances, receive a copy in a portable, machine-readable format.

11.2 Correction and Update

You may update, correct, or modify your account information at any time through your account settings or by contacting us at privacy@syncsfer.com.

11.3 Deletion

You may request deletion of your account and associated personal information, subject to certain exceptions for legal compliance, dispute resolution, and fraud prevention. To request deletion, contact privacy@syncsfer.com.

11.4 Objection and Restriction

You may object to certain processing activities or request restriction of processing under applicable law.

11.5 Marketing Communications

You may opt out of promotional emails by clicking unsubscribe links in emails or adjusting communication preferences in your account settings. Note that you cannot opt out of transactional or service-related communications.

11.6 Cookie Preferences

You may manage cookie preferences through your browser settings or our Cookie Consent Manager. However, disabling certain cookies may limit Platform functionality.

12. CALIFORNIA RESIDENTS – CCPA/CPRA PRIVACY RIGHTS

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California residents with specific privacy rights.

12.1 Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information from California residents:

• Identifiers: Name, email address, phone number, postal address, IP address, device identifiers, and account credentials;
• Commercial Information: Transaction history, Time Credit records, Boost Credit purchases, and service exchange details;
• Internet/Network Activity: Browsing history, search history, clickstream data, and interaction with Platform features;
• Geolocation Data: Precise or approximate location information;
• Professional Information: Skills, work history, education, and professional credentials;
• User-Generated Content: Profile information, photographs, reviews, ratings, and communications;
• Inferences: Preferences, characteristics, behaviors, and tendencies derived from collected information.

12.2 Business Purposes and Sources

We collect personal information from: (a) directly from you when you provide it; (b) automatically through your use of the Platform; (c) third-party service providers; (d) social media platforms; (e) identity verification services; and (f) public sources. We collect and use personal information for the business purposes described in Section 3 above.

12.3 Third-Party Sharing

We may share personal information with the categories of third parties described in Section 4 above, including other Platform users, service providers and vendors, payment processors, identity verification services, analytics providers, government authorities, and potential business transaction parties.

12.4 Sale and Sharing of Personal Information

12.5 Your California Privacy Rights

California residents have the following rights under the CCPA/CPRA:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom information is shared (up to twice per 12-month period);
• Right to Delete: Request deletion of personal information collected, subject to certain exceptions;
• Right to Correct: Request correction of inaccurate personal information;
• Right to Opt-Out: Opt out of the sale or sharing of personal information;
• Right to Limit Use of Sensitive Personal Information: Limit use of sensitive personal information to purposes necessary for service provision;
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights.

12.6 Exercising Your California Privacy Rights

To exercise your rights, submit a verifiable consumer request by emailing privacy@syncsfer.com, calling [Insert Toll-Free Number], or using our online form at [Insert Privacy Request Form URL]. Your request must provide sufficient information to verify your identity and specify which right you wish to exercise. We will respond within forty-five (45) days, with a possible extension of forty-five (45) additional days if necessary. You may designate an authorized agent to submit requests on your behalf by providing proof of authorization.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Platform with a revised "Last Updated" date and, where appropriate, by sending notification to your registered email address. Your continued use of the Platform following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.

14. CONTACT INFORMATION