PRIVACY NOTICE

---

PRIVACY NOTICE Effective Date: March 20, 2026

1. Introduction and Scope IQON AI Limited ("we", "us", "our"), operating the commercial brand and website naiian.ai, is committed to protecting your privacy. This Privacy Notice explains how we collect, process, and protect personal data when you visit our informational product website. We operate in strict compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Irish Data Protection Act 2018.

2. Data Controller Identity For the purposes of the GDPR, the Data Controller is the parent holding company: IQON AI Limited Company Registration Number (CRO): 802875 Registered Office: Venture Hub, 136 Capel Street, Dublin, D01 T2C9, Republic of Ireland. Contact Email: legal@naiian.ai (Nota para Antonio: Puedes usar legal@iqonai.ie si prefieres centralizarlo).

3. Data We Process Our website currently operates as a static, informational portal. We do not require visitors to register, nor do we deploy contact forms or collect personal data directly. However, to ensure the secure and stable operation of this website, our hosting servers automatically collect necessary technical data, which may be classified as personal data under the GDPR. This includes:

• Log Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and the date and time of your visit.

4. Cookies and Tracking Technologies This website utilizes "Strictly Necessary Cookies" by default. These are essential technical files required for the website to function, route traffic efficiently, and prevent security threats. Under the European ePrivacy Directive and Irish regulations (S.I. No. 336/2011), consent is not required for these strictly necessary cookies. Analytical Cookies: Only if you provide your explicit consent via our Cookie Banner, we may deploy non-essential analytical cookies to measure aggregated site traffic and optimize our platform's performance. You can withdraw your consent or modify your preferences at any time.

5. Purpose and Legal Basis for Processing

• Technical Data & Essential Cookies: Processed under Article 6(1)(f) of the GDPR - Our Legitimate Interest in maintaining the technical integrity, security, and operational capability of our infrastructure.
• Analytical Cookies: Processed under Article 6(1)(a) of the GDPR - Your explicit consent.

6. Data Retention and Sharing We do not sell, rent, or trade any technical or analytical data. Server log data is retained temporarily (typically between 14 to 30 days) solely for security monitoring, after which it is automatically deleted. This data is processed by our secure hosting provider, acting as a Data Processor under a strict Data Processing Agreement (DPA), with servers located within the European Economic Area (EEA).

7. Your Data Protection Rights Under the GDPR, you possess the following rights regarding your personal data:

• The right to access, rectify, or request the erasure of your data.
• The right to withdraw consent for non-essential cookies.
• The right to restrict or object to our processing of your data. To exercise these rights, please contact us at the email provided in Section 2.

8. Right to Lodge a Complaint If you believe our processing of your data violates data protection laws, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC): Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland. Website: www.dataprotection.ie