Privacy Policy

Effective Date: May 12, 2026

Last Updated: May 12, 2026

1. Introduction

Stock Tagger Inc. (a wholly owned subsidiary of Vincit Global Inc.) ("Stock Tagger," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our website, applications, and services (collectively, the "Service").

This Privacy Policy is designed to comply with applicable privacy laws in the United States and Canada, including the Personal Information Protection and Electronic Documents Act ("PIPEDA") and state privacy laws such as the California Consumer Privacy Act and California Privacy Rights Act (collectively, "CCPA/CPRA").

This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Service, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Information" or "Personal Data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
• "Service" means the Stock Tagger platform, website, applications, and all related services.
• "User," "you," or "your" means any individual or entity that accesses or uses the Service.
• "Third-Party Processors" means service providers who process Personal Information on our behalf.
• "Sensitive Personal Information" means Personal Information that reveals certain characteristics such as government identifiers, financial account information, precise geolocation, or other categories defined under applicable law.
• "Sale" or "Sell" means the disclosure of Personal Information for monetary or other valuable consideration, as defined under applicable law.
• "Share" or "Sharing" means the disclosure of Personal Information for cross-context behavioral advertising purposes.
• "User Content" means all photographs, images, and associated files you upload, submit, or otherwise provide to the Service.
• "Technical Metadata" means non-personally-identifiable data extracted from the EXIF, IPTC, and XMP metadata embedded in your images, including but not limited to camera model, lens model, exposure settings, focal length, ISO, GPS coordinates, timestamps, and other technical parameters recorded by the camera at the time of capture.
• "Derived Metadata" means data generated by the Service through analysis of your images, including but not limited to quality scores, subject classifications, keyword suggestions, category assignments, location determinations, and crop recommendations.

3. Information We Collect

3.1 Information You Provide Directly

We collect information you voluntarily provide when using the Service, including:

• Account Information: Email address, password (stored in hashed form), and name (if provided).
• Payment Information: Payment details are collected and processed by our third-party payment processor. Stock Tagger does not store complete credit card numbers, bank account numbers, or other sensitive payment credentials on our systems.
• User Content: Photographs in various formats (including JPEG, RAW, TIFF, HEIF, PNG, and other image formats), including all embedded EXIF, IPTC, and XMP metadata contained within those files. This includes but is not limited to camera settings, GPS coordinates, timestamps, equipment information, and photographer-authored keywords and ratings.
• Communications: Emails or messages you send to our support team, feedback, survey responses, and other correspondence.

3.2 Information Extracted from Your Images

When you upload images to the Service, we extract and process:

• Technical Metadata: Camera model, lens model, serial numbers, exposure settings (aperture, shutter speed, ISO), focal length, white balance, metering mode, flash status, drive mode, image stabilization status, focus distance, color space, bit depth, and image dimensions.
• Location Data from Images: GPS coordinates, altitude, and timezone information embedded in your images by your camera or device.
• Derived Metadata: Quality scores, subject identification, keyword suggestions, category assignments, location determinations, editorial status, safety classifications, crop recommendations, burst and duplicate detection results, and other analytical outputs generated by the Service.

3.3 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device type, and device identifiers.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, navigation paths, and session information.
• Log Data: Access times, error logs, referring URLs, and pages viewed before and after using the Service.
• General Location Data: General geographic location derived from your IP address, which we use for tax calculation, compliance, and service delivery purposes.

3.4 Information from Third Parties

We may receive information about you from third parties, including:

• Authentication Providers: If you choose to sign in using a third-party service (such as Google or Apple), we receive your name and email address from that provider.
• Payment Processors: Transaction confirmations, payment status, and fraud prevention information.

3.5 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information and improve the Service. These include:

• Essential Cookies: Required for the Service to function, including session management and authentication.
• Analytics Cookies: Help us understand how users interact with the Service and identify areas for improvement.
• Functionality Cookies: Remember your preferences and settings.

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Service.

4. How We Use Your Information

4.1 To Provide and Operate the Service

• Process your account registration and maintain your account
• Analyze your uploaded images and generate metadata, quality scores, keywords, descriptions, and other analytical outputs
• Process payments and manage your credit balance and tier status
• Send transactional communications (such as receipts, account notifications, and service updates)
• Provide customer support and respond to your inquiries

4.2 To Improve and Develop the Service

• Analyze usage patterns and trends to improve the Service
• Develop new features, products, and services
• Conduct research and analytics using anonymized, aggregate data
• Test and troubleshoot new features
• Calibrate and improve the accuracy of our analytical models using anonymized Technical and Derived Metadata

4.3 To Generate Aggregate Analytics and Reports

• Generate aggregate, anonymized reports on equipment usage patterns, image quality trends, subject category analysis, and other statistical insights derived from platform-wide data
• Publish aggregate analytics and reports that contain no personally identifiable information and cannot be traced to individual users or specific images
• Provide personalized reports to users about their own portfolio patterns, equipment performance, and quality trends

4.4 To Protect the Service and Users

• Detect, prevent, and address fraud, abuse, and security issues
• Enforce our Terms of Service and other policies
• Protect the rights, property, and safety of Stock Tagger, our users, and others

4.5 To Communicate with You

• Send marketing communications (only with your consent, where required by law)
• Notify you of changes to our policies or Service
• Respond to your requests, questions, and feedback

4.6 To Comply with Legal Obligations

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from governmental authorities
• Establish, exercise, or defend legal claims

4.7 Lawful Basis for Processing

Purpose	Lawful Basis
Provide and operate the Service	Contract performance
Process payments	Contract performance
Analyze images and generate metadata	Contract performance
Send transactional emails	Contract performance
Improve and develop the Service	Legitimate interest
Generate aggregate analytics and reports	Legitimate interest
Calibrate analytical models	Legitimate interest
Detect and prevent fraud	Legitimate interest
Send marketing communications	Consent
Comply with legal obligations	Legal obligation

5. Third-Party AI Services

To analyze images and generate metadata, we transmit your uploaded images and associated data to third-party artificial intelligence service providers. These providers process your data as our sub-processors pursuant to data processing agreements that require them to:

• Use your data only for the purpose of providing services to Stock Tagger
• Implement appropriate security measures to protect your data
• Not use customer data submitted via API for training their AI models
• Delete or return your data upon termination of our agreement

Our AI service providers may temporarily retain data for abuse monitoring, safety, and legal compliance purposes in accordance with their published data retention policies.

Important: Images are transmitted to AI services for analysis only. AI providers do not retain your images after processing is complete, except for limited abuse monitoring and safety periods as required by their policies.

6. Face and People Detection

When images contain people, our system may detect the presence of faces using camera-embedded metadata (such as face count and position recorded by the camera at the time of capture) or third-party computer vision APIs for the purpose of quality scoring (such as expression detection and eye-open detection).

• Facial detection data is used for quality assessment purposes only
• No facial recognition or individual identification is performed
• No biometric templates, faceprints, or biometric identifiers are created, collected, or stored
• Face detection metadata (count and approximate position only) may be retained as part of Derived Metadata for quality scoring purposes
• We do not attempt to identify individuals depicted in your images

7. Information Sharing and Disclosure

7.1 Service Providers

We may share Personal Information with third-party service providers who perform services on our behalf, including:

• Cloud Hosting: Infrastructure providers that host and store data for the Service.
• Payment Processing: Stripe processes payments and stores payment credentials.
• AI Services: Third-party AI providers process uploaded images to generate metadata and analytical outputs.
• Analytics: Analytics providers help us understand how users interact with the Service.
• Email Services: Transactional email providers deliver account notifications and receipts.
• Error Monitoring: Error tracking services help us identify and fix technical issues.

These service providers are contractually obligated to use your Personal Information only for the purposes of providing services to us and are bound by data protection obligations consistent with this Privacy Policy and applicable law.

7.2 Legal and Safety Disclosures

We may disclose Personal Information if we believe it is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Stock Tagger, our users, or others
• Detect, prevent, or otherwise address fraud, security, or technical issues
• Respond to an emergency involving danger of death or serious physical injury

7.3 Business Transfers

In connection with a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding involving the sale or transfer of all or a portion of our business or assets, Personal Information may be among the assets transferred. In such an event, we will provide notice to affected users via email to the address associated with your account and/or by prominent notice on the Service prior to the transfer and before Personal Information becomes subject to a different privacy policy.

7.4 What We Do Not Do

• We do not sell Personal Information. We have not sold Personal Information in the preceding twelve (12) months and do not have plans to do so.
• We do not share Personal Information for cross-context behavioral advertising. We do not disclose Personal Information to third parties for targeted advertising purposes.
• We do not sell or share the Personal Information of users we know to be under 16 years of age.
• We do not use uploaded images to train AI models.
• We do not sell, license, distribute, or share your uploaded images with any third party other than AI service providers for the purpose of processing.
• We do not share your uploaded images with other users of the Service.

8. Data Retention

We retain Personal Information only as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Our retention practices are as follows:

• Account Data: Retained for the duration of your account. If you delete your account, we will delete your account data within thirty (30) days, except as required by law or for legitimate business purposes.
• User Content (Images): Images are processed during the active session and are deleted from our processing systems within seventy-two (72) hours of processing completion. Users may request immediate deletion of uploaded images at any time.
• Technical and Derived Metadata: Retained in anonymized, aggregate form indefinitely for platform improvement, analytical model calibration, and aggregate reporting purposes. This data cannot be used to reconstruct or identify your original images.
• Tier Status and Credit History: Retained for the duration of your account and for seven (7) years following account deletion as required by tax and accounting laws.
• Payment Records: Retained for seven (7) years as required by tax and accounting laws.
• Analytics Data: May be retained in aggregated, anonymized form indefinitely for research and improvement purposes.
• Legal and Compliance: We may retain certain information as required by law or for legitimate business purposes, including fraud prevention, dispute resolution, and enforcement of our agreements.

9. Data Security

We implement appropriate technical and organizational measures designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS protocols
• Encryption of data at rest
• Access controls and authentication requirements for systems containing Personal Information
• Regular security assessments and monitoring
• Employee access limited to those with a legitimate need to know
• Selection of third-party processors based on their security practices and contractual obligations

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

10. Your Privacy Rights

10.1 Rights for All Users

Regardless of your location, you have the following rights with respect to your Personal Information:

• Right to Access: You may request a copy of the Personal Information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete Personal Information.
• Right to Deletion: You may request that we delete your Personal Information, subject to certain exceptions required by law. Note that anonymized, aggregate Technical and Derived Metadata that cannot be traced to you individually is not considered Personal Information and is not subject to deletion requests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time.
• Right to Complain: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your applicable data protection authority.

10.2 Additional Rights for California Residents

If you are a California resident, you have the following additional rights under the CCPA/CPRA:

• Right to Know: You may request information about the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete Personal Information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate Personal Information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your Personal Information as defined under the CCPA/CPRA; therefore, this right does not apply.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not use Sensitive Personal Information for purposes beyond those necessary to provide the Service.

California residents may designate an authorized agent to make requests on their behalf. We may require verification that the agent is authorized to act on your behalf.

10.3 Additional Rights for Virginia, Colorado, Connecticut, and Utah Residents

If you are a resident of Virginia, Colorado, Connecticut, or Utah, you may have additional rights under applicable state privacy laws, including:

• Right to access your Personal Information
• Right to correct inaccuracies in your Personal Information
• Right to delete your Personal Information
• Right to opt-out of targeted advertising (we do not engage in targeted advertising)
• Right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to opt-out of the sale of Personal Information (we do not sell Personal Information)
• Right to appeal if your request is denied

10.4 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: privacy@stocktagger.com

We will respond to your request within the timeframes required by applicable law, generally within thirty (30) to forty-five (45) days. We may need to verify your identity before processing your request, which may require you to provide additional information.

11. International Data Transfers

11.1 For Canadian Users

Your Personal Information may be processed in the United States and other countries where our service providers operate. These countries may have different privacy laws than Canada. By using the Service, you consent to the transfer of your Personal Information to the United States and other countries.

We ensure that appropriate safeguards are in place when transferring Personal Information internationally, including contractual protections with our service providers.

11.2 For U.S. Users

Your Personal Information is primarily processed in the United States. It may also be transferred to other countries where our service providers operate, subject to appropriate contractual safeguards.

12. Children's Privacy

The Service is not directed to individuals under eighteen (18) years of age. We do not knowingly collect Personal Information from children under eighteen (18). If we learn that we have collected Personal Information from a child under eighteen (18), we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, please contact us at privacy@stocktagger.com.

13. Marketing Communications

We may send you transactional communications related to your account and use of the Service (such as receipts, account notifications, tier status updates, and service updates) without separate consent.

We will only send you marketing communications with your prior opt-in consent, where required by law. You may opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at support@stocktagger.com
• Updating your communication preferences in your account settings

Please note that opting out of marketing communications will not affect transactional communications related to your account.

14. Third-Party Links

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party sites.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least thirty (30) days' advance notice by email to the address associated with your account and/or by prominent notice on the Service before the changes take effect.

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you must stop using the Service before the effective date.

Non-material changes, such as clarifications or corrections, may be made at any time without advance notice. The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made.

16. Quebec Residents

If you are a resident of Quebec, you may have additional rights under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), including:

• The right to access your Personal Information
• The right to have your Personal Information corrected
• The right to withdraw consent to the processing of your Personal Information
• The right to data portability
• The right to be informed of automated decision-making

To exercise these rights, please contact us using the information provided in Section 17.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Stock Tagger Inc. A wholly owned subsidiary of Vincit Global Inc. 1395 Benvenuto Ave. Brentwood Bay, BC V8M 1J5

Email: support@stocktagger.com Privacy Inquiries: privacy@stocktagger.com

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS PRIVACY POLICY, UNDERSTAND IT, AND AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.