Privacy Policy

Who We Are ClearPoint Nexus (“CPN”) is operated by ClearPointLogic LLC, a Tennessee limited liability company. We build and sell AI-powered workflow skills, bundles, Pro subscriptions, and agent products. Contact: ClearPointLogic LLC Tennessee, United States support@clearpointnexus.com

What Information We Collect We collect the following categories of information:

Account and Profile Data When you create a CPN account or complete a purchase, we collect: - Full name - Email address - Company or organization name (if applicable) - Billing address and payment information (processed by Stripe - see Section 5) - Account credentials

Purchase and License Records We retain records of all transactions, including: - Products purchased (skills, bundles, Pro subscription, agents) - Purchase date and price paid - License assignments and reassignments - Subscription renewal history These records are maintained in our CRM system (Attio) and are retained for compliance, legal, and business continuity purposes.

Usage Data We collect records of which skills and agents have been downloaded or accessed through your account. We do not collect session logs, prompt content, AI input/output data, or detailed interaction history.

Website and Technical Data When you visit the CPN website, we and our third-party analytics and marketing partners may collect: - IP address and approximate location - Browser type, operating system, and device information - Pages visited and time spent on site - Referral source - Cookie identifiers and tracking pixels (see Section 8 - Cookies)

How We Use Your Information We use the information we collect to: Process and fulfill purchases - manage your license, deliver product access, and handle billing Manage your account - authenticate your identity, handle license reassignments, and support account administration Communicate with you - send purchase receipts, license confirmations, renewal notices (including the 30-day advance renewal notice for Pro subscribers), and important policy updates Improve our products - using de-identified and aggregated usage data to understand how products are used and to guide product development Enforce our Terms - investigate and act on violations of our Customer Product Terms and Acceptable Use Policy Marketing and analytics - understand website traffic, measure campaign performance, and improve our marketing (using analytics and marketing cookies - see Section 8) Legal and compliance - meet our obligations under applicable law, respond to legal process, and maintain records required for tax and regulatory purposes

How We Handle AI Inputs and Outputs CPN skills and agents use third-party AI model APIs (such as those provided by Anthropic, OpenAI, or similar providers) to generate outputs. What CPN does not collect: CPN does not log, store, or retain the content of prompts you submit to CPN skills or agents, nor the AI-generated outputs produced in response. Your AI interactions are not stored by CPN. Third-party AI providers: When you use a CPN skill or agent, your inputs may be transmitted to a third- party AI model provider for processing. Those providers have their own privacy policies and data practices. CPN selects providers that maintain commercially reasonable data protection standards, but CPN is not responsible for third-party provider data handling. De-identified aggregated data: CPN may use de-identified, aggregated data derived from platform usage (such as which skill categories are most accessed) for internal product improvement purposes. This data does not identify individual customers or contain prompt content.

Sharing Your Information We do not sell your personal information for monetary consideration. We may share certain data (such as cookie identifiers and browsing behavior) with advertising and analytics partners for targeted marketing purposes, which may constitute “sharing” under the California Privacy Rights Act (CPRA). California residents may opt out of this sharing - see Section 7. We share your information only in the following circumstances:

Payment Processing All payment transactions are processed by Stripe, Inc. CPN transmits billing information to Stripe to process purchases and manage subscriptions. Stripe’s privacy policy governs their handling of your payment data. CPN does not store full payment card details.

Analytics Providers We use third-party analytics tools to understand website traffic and product usage. These providers may receive technical and usage data through cookies and similar tracking technologies. We take reasonable steps to ensure these providers handle data in accordance with applicable privacy standards.

Marketing and Advertising Platforms We use third-party marketing and advertising tools, which may receive data through cookies and tracking pixels to help us measure campaign performance and reach relevant audiences. See Section 8 for details on managing your cookie preferences.

CRM and Business Operations We use Attio as our customer relationship management system to store account, purchase, and license records.

Legal Compliance and Protection We may disclose your information when required by applicable law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of CPN, our customers, or others.

Business Transfers In the event of a merger, acquisition, or sale of all or substantially all of ClearPointLogic’s assets, customer information may be transferred as part of the transaction. We will notify you of any such change via email or prominent notice on our website.

Data Retention We retain your personal information for as long as your account is active and thereafter as necessary for legal, tax, compliance, and business continuity purposes. Account and purchase records (including your name, email, company, and transaction history) are retained indefinitely. These records are necessary to administer perpetual licenses, manage subscription renewal history, respond to disputes, and comply with financial recordkeeping requirements. Usage data (download and access records) is retained indefinitely as part of your account and license record. Website analytics data is retained in accordance with the retention policies of our analytics providers. We do not currently offer automated account deletion. If you wish to inquire about your data, please contact us at support@clearpointnexus.com. Note that certain records may be retained regardless of any deletion request where required by law or necessary to protect legitimate business interests, including records of purchases, licenses, and transactions.

Your Rights Depending on where you are located, you may have certain rights with respect to your personal information: Access: You may request a copy of the personal information we hold about you. Correction: You may request correction of inaccurate or incomplete personal information. Objection to marketing: You may opt out of marketing communications at any time by clicking “unsubscribe” in any email we send or by contacting us directly. To exercise any of these rights, contact us at support@clearpointnexus.com. We will respond within a commercially reasonable time. Note for California residents (CCPA/CPRA): California residents have the following additional rights: Right to Know: You may request a copy of the categories and specific pieces of personal information we have collected about you. Right to Delete: You may request deletion of your personal information. We will honor deletion requests for non-transactional data (such as marketing preferences and usage analytics) within 45 days. Note that we are required by law to retain financial and transaction records, license records, and data necessary to honor perpetual license rights - these cannot be deleted. Right to Correct: You may request correction of inaccurate personal information. Right to Opt Out of Sale or Sharing: You may opt out of the sharing of your personal information with advertising partners for targeted marketing purposes. To opt out, contact us at support@clearpointnexus.com with the subject line “CCPA Opt-Out” or use your browser’s cookie controls to disable marketing/retargeting cookies. Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. To submit a rights request, contact us at support@clearpointnexus.com. We will respond within 45 days. We may need to verify your identity before processing your request. Note for EU/UK residents: CPN is currently a US-focused business. If you are located in the EU or UK, please be aware that our data practices may not fully comply with GDPR or UK GDPR at this time. We are evaluating GDPR compliance requirements as we expand internationally.

Cookies and Tracking CPN uses cookies and similar tracking technologies on our website. We use three categories of cookies:

Essential Cookies Required for the website and account functionality to operate. These include session cookies, authentication tokens, and shopping cart state. These cannot be disabled without impairing site functionality.

Analytics Cookies Used to understand how visitors interact with our website - including pages visited, time on site, and traffic sources. These help us improve the site and our products. These cookies are set by our analytics providers.

Marketing and Retargeting Cookies Used to measure the effectiveness of our marketing campaigns and to serve relevant advertising to visitors on third-party platforms. These may include pixels from advertising networks. Managing cookies: You can control cookie preferences through your browser settings. Disabling analytics and marketing cookies will not affect your ability to purchase or use CPN products, but may limit our ability to personalize your experience.

How We Protect Your Data CPN uses industry-standard security measures to protect your personal information, including: - Encrypted transmission of data (HTTPS/TLS) - Secure third-party payment processing (Stripe) - Access controls limiting who within CPN can access customer data - Reliance on third-party providers (Attio, Stripe) who maintain their own security programs No method of data transmission or storage is completely secure. We cannot guarantee absolute security of your information. Breach Notification: In the event of a security breach affecting your personal information, we will notify you as required by applicable law.

Changes to This Policy We may update this Privacy Policy from time to time. When we do: Material changes (changes to what data we collect, how we use it, or who we share it with) will be communicated by email at least 30 days before taking effect. Non-material changes (clarifications, formatting, contact information updates) will be communicated by email at least 14 days before taking effect. Your continued use of CPN products after the effective date of any update constitutes acceptance of the revised Privacy Policy.

Children’s Privacy CPN products are intended for users who are at least 18 years of age. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from a person under 18, we will take steps to delete that information.

Governing Law This Privacy Policy is governed by and construed in accordance with the laws of the State of Tennessee, without regard to its conflict of laws principles. Any disputes arising under this Privacy Policy shall be subject to the dispute resolution provisions in the CPN Customer Product Terms.