Privacy Statement

This Privacy Statement explains how Septilink Inc. and its affiliates (“Septilink”, “we”, or “us”) collect, use, share, and protect personal information. It applies to our monitoring and communications service, and our customer portal and mobile App (together, the “Services”), and to our public website at septilink.com (the “Website”). It covers Site Owners, Authorized Users, Dealers, and others who interact with the Services or the Website.

Terms not defined here have the meaning given in our Terms and Conditions at septilink.com/legal/terms. This Statement is written to be read together with those Terms.

1. Scope and Application

1.1 This Statement covers personal information handled by Septilink in the United States and Canada. The Services are intended for users in the United States and Canada and are not directed to residents of the province of Quebec or to individuals in the European Union; we do not design the Services to comply with Quebec's Law 25 or the EU General Data Protection Regulation.

1.2 Your rights and how this Statement applies to you may depend on where you live. Where a specific U.S. state law or Canadian federal law gives you particular rights, those sections below apply to you, and we comply with the mandatory law that applies to you.

2. Information We Collect

We collect personal information in two main ways: directly from you, and from a Dealer or installer who sets up or services your system. Because service is often arranged and activated through a Dealer, we may hold information about you even if you have not contacted us directly.

2.1 Information you provide. When you purchase, register, activate, or contact us about the Services, we may collect your name, service address, billing information, email address, phone number, and the details of your inquiries or support requests.

2.2 Information from your Dealer or installer. When a Dealer or installer sells, sets up, activates, or services your system, they may provide us with information needed to establish and run your service, such as your name, service address, and contact information, and the details of your Site and equipment. This is often how your information reaches us when you receive service through a Dealer.

2.3 Device and service data. Our equipment provides general-purpose monitoring inputs and records a range of device and sensor data, depending on how the equipment is configured and what is connected to it at your Site. This may include, for example, device status and operating condition, electrical or environmental readings from connected sensors, diagnostic and firmware information, connectivity and signal information, and the device's precise location (GPS). The specific data collected at a given Site depends on the equipment configuration and the connected inputs.

2.4 Location data. The Services collect the precise location (GPS) of the monitored device at your Site. Because this location is precise and can be associated with a Site and its owner, we treat it as personal information, and as sensitive personal information where applicable law so provides. Section 6 explains how you can ask us to limit its use.

2.5 Website and usage information. When you use our Website, Portal, or App, we may collect standard technical information such as device type, browser, IP address, and usage activity, through cookies and similar technologies. See Section 9 (Cookies and Tracking).

2.6 Other service providers. We may also receive information about you from service providers who help us deliver the Services.

3. How We Use Information

3.1 We use personal information to:

• provide, maintain, activate, and support the Services;

• monitor devices and deliver alerts, reports, and related functions;

• improve the Services and our products, as described in our Terms;

• process orders and payments and manage accounts;

• communicate with you about your service and send related messages;

• investigate device, safety, or security issues and meet warranty obligations;

• enable authorized Dealer service and support; and

• comply with legal obligations and enforce our Terms.

3.2 Location and improvement. We use precise location to provide and support your service, including plotting your Site, navigating to it for service, and diagnosing issues. We may also use device and service data, and coarse or aggregated location, to improve the Services for all customers. You may ask us to limit the use of your precise location to providing your service, as described in Section 6.

3.3 De-identified and aggregated data. We may create aggregated or de-identified data that does not identify any Site, customer, or individual, and may use it for any lawful business purpose. We will not attempt to re-identify data that we have de-identified, except as required by law.

4. How We Share Information

4.1 We do not sell your personal information, and we do not share it with third parties for their own independent purposes or for advertising.

4.2 Delivering the Services. To deliver the service you signed up for, your information is accessible to:

• your Dealer, where you receive service through a Dealer, so the Dealer can provide, support, and warrant your system;

• installers and other parties a Dealer engages to deliver, support, or warrant the system; and

• our service providers (for example, hosting, communications, and payment processors) that process information on our behalf under contract.

4.3 When you subscribe to and pay for monitoring service, you authorize the data sharing necessary to provide that service, including the access described above. This access is part of delivering the Services, not a sale or a disclosure to third parties for their own use.

4.4 When sharing ends. When a subscription or sharing authorization ends, we stop sharing new data with the affected Dealer or recipient. Information already shared remains with that recipient and is governed by the recipient's own obligations.

4.5 Legal and protective disclosures. We may disclose information where required by law, to respond to legal process, to protect the rights, safety, or property of Septilink or others, or in connection with a merger, acquisition, or sale of assets.

5. Access to Your Information

5.1 You can access the information and reports available through the Portal and App. If you request a copy of the personal information we hold about you, we will provide it in a usable form, together with the disclosures required by applicable law.

5.2 We provide your monitoring information in the form of reports and derived outputs. We do not provide the raw device messages themselves, which contain Septilink's proprietary formatting and protocol information; the personal information within them is made available to you in report form.

5.3 The location information we hold about you is the registered Site or service address associated with your account. The precise coordinate of your Site is available to you, as the verified Site Owner, on request.

6. Your Choices and Location Limit

6.1 Limiting use of precise location. We use your precise location by default to provide your service and to improve the Services. You may ask us to limit the use of your precise location to providing your service only. To make this request, contact us as described in Section 12. We will apply the limit going forward; it does not affect uses that already occurred.

6.2 Communications. We may send you two kinds of messages: service messages about the Services you use (such as alerts, status updates, and account notices), and marketing messages (such as reminders to renew or re-subscribe). You can opt out of our messages at any time — by replying STOP to a text, or through your notification preferences — and we will honor your request. Because some service messages contain important information about your system, opting out may mean you no longer receive those alerts.

6.3 Cookies. You can manage cookies as described in Section 9.

7. Data Retention and Deletion

7.1 Retention. We retain personal information for as long as needed to provide the Services, and thereafter as needed to meet legal, accounting, audit, and dispute-resolution obligations, after which we delete or de-identify it. We do not set a fixed retention period for every category; we retain information based on these criteria.

7.2 Deletion. You may ask us to delete your personal information. When we act on a verified deletion request, we delete the device data associated with your Site and your contact information, and we remove the precise location we hold. We keep a limited internal record needed for audit, and we keep financial records (such as invoices) where required by law. Deleting your information ends the monitoring service for that Site.

7.3 De-identified data. Information we have already de-identified or aggregated is not affected by a deletion request and is not restored to an identifiable form.

7.4 Backups. We delete information from our active systems promptly. Copies may remain in backups or archives for a period; we do not restore backup copies to bring deleted information back into active use, and such copies are overwritten or deleted in the ordinary course as backups are cycled.

7.5 Ending service. Discontinuing the Services stops the collection of new data going forward. It does not by itself delete information already collected; deletion is handled through the process described in this Section.

8. Security

8.1 We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and data transmitted over networks may be intercepted; we cannot guarantee absolute security.

8.2 The Services are administered from, and information is processed and stored in, the United States and Canada, and may be processed outside your jurisdiction.

9. Cookies and Tracking

9.1 Our Website and Portal use cookies and similar technologies for functionality, security, and to understand how they are used. This includes analytics tools such as Google Analytics, which we use to measure how the Website is used. We configure our analytics so that this data is used only to provide analytics to us and is not used for advertising.

9.2 We do not use advertising or cross-context behavioral advertising cookies, and we do not sell or share your personal information for advertising.

9.3 You can control cookies through your browser settings and, where offered, through our cookie-preferences tool. Where required by law, we honor recognized opt-out preference signals, such as Global Privacy Control (GPC).

10. Your U.S. State Privacy Rights

10.1 Depending on your state of residence, you may have rights to: know or access the personal information we hold about you; correct inaccurate information; delete your information; obtain a portable copy; and opt out of the sale or sharing of personal information or of certain uses of sensitive personal information. We do not sell personal information.

10.2 California. If you are a California resident, you have the rights described above under the California Consumer Privacy Act, as amended. Because we treat precise location as sensitive personal information, you may request that we limit its use to providing your service, as described in Section 6. We will not discriminate against you for exercising your rights.

10.3 Other states. If you reside in another U.S. state with a comprehensive privacy law, you may have similar rights. Contact us as described in Section 12 to exercise them, and we will honor the rights that apply to you.

10.4 How to exercise. Submit requests as described in Section 12. We will verify your identity before acting on a request, and we may decline or limit a request where permitted by law. You may use an authorized agent where the law allows.

10.5 Appeals. If we decline your request, you may appeal by contacting legal@septilink.com.

11. Canadian Privacy Rights

11.1 If you are in Canada, we handle your personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to, and correction of, the personal information we hold about you, and you may withdraw consent, subject to legal and contractual limits, by contacting us as described in Section 12.

11.2 We obtain consent for the collection, use, and disclosure of personal information as required by law. Where you subscribe to and pay for monitoring service, you consent to the data flows necessary to deliver that service. You may withdraw consent by cancelling the service, subject to the effects described in our Terms.

11.3 As noted in Section 1, the Services are not designed for residents of Quebec.

12. How to Contact Us and Exercise Your Rights

12.1 You can exercise your privacy rights by contacting us directly.

12.2 Use the mailbox that fits your request:

• support@septilink.com — to access, correct, or delete your information;

• optout@septilink.com — to opt out, or to limit the use of your precise location;

• legal@septilink.com — for general privacy questions, Canadian (PIPEDA) requests, and appeals.

12.3 You can also write to us at: Septilink Inc., Attn: Privacy Manager, 809 NE 2nd St, Kerens, TX 75144.

12.4 Our Privacy Manager is responsible for privacy at Septilink and can be reached at legal@septilink.com.

13. Children's Privacy

13.1 The Services are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

14. Changes to This Statement

14.1 We may update this Statement from time to time. The updated Statement is effective when posted, with a revised “Last Updated” date, and we may also provide notice through the Services. Your continued use of the Services after an updated Statement is posted means you accept it.

Version 1.1