Privacy Notice

Eyeeai is committed to respecting and protecting the privacy of your personal or sensitive data in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia, including but not limited to the Personal Data Protection Law (PDPL). We will only use your personal information to deliver the required services. This Privacy Notice applies to all visitors and users (hereinafter referred to as "You", "User", or "Data Subject") who access or use our website.

The intent of this Privacy Notice is to inform you about the following:

• —The type of information we may collect about you and the purpose for collecting it when you use our website.
• —The use of the information collected from you and who we share it with.
• —Your rights in regard to your personal data.

Eyeeai may generally collect and obtain the following types of information directly or indirectly when you interact with our website, other social media platforms, telephone, email, or writing to us:

Information you give us: we may collect the personal data directly from you as part of providing services on our website, such as email, phone number, first name, last name, nationality, or any other personal information you submit through our website.

Information collected automatically: we may automatically collect certain personal information that your browser sends whenever you visit our website such as information collected through cookies or other tracking technologies. We may also collect personal data that is mandatory for us to provide essential services and not providing these personal data may result in non-fulfillment of these services. Additionally, we may collect some personal data that is optional, and this data is used to improve the services and user experience and does not affect the services' fulfillment.

Eyeeai may use your data that was collected directly or indirectly from you to perform its duties and responsibilities as an organization. This may include:

• —Create an account, if required, whereby you can login through a username and password and access the various services provided on the website.
• —Data you have submitted during the registration process, messages that you have sent and received from this website or a third party.
• —Resolve any queries you submit that require making your personal data accessible to the authorized members of our support team.
• —Perform quality checks and enhance the services we provide.
• —Comply with legal and regulatory obligations.

Eyeeai will not share your information with third parties for marketing purposes. We reserve the right to disclose your personal information in any of the following cases:

• —You have agreed to disclose your personal data.
• —The personal data is collected from a publicly available source.
• —The entity requesting disclosure is a public entity and the request is for security purposes, to implement another law, or to meet judicial requirements in accordance with the provisions set out by the regulations.
• —The disclosure is necessary to protect public health or safety, or to protect the life or health of a particular individual(s).
• —The disclosure will not lead to your identification or any other individuals.
• —The disclosure is necessary to achieve legitimate interests of Eyeeai, without prejudice to your rights and interests.

No personal data submitted through our website is transferred outside the Kingdom of Saudi Arabia. Transfers of personal data outside the Kingdom of Saudi Arabia for purposes that are not part of this Privacy Notice will be in accordance with the PDPL, its implementing regulations, and other applicable laws and regulations.

Eyeeai makes reasonable efforts to guarantee your rights under the limits stipulated in the applicable laws and regulations of the Kingdom of Saudi Arabia, as follows:

• —Right to be Informed: You have the right to be informed about the collection and usage of your personal data including why and how we collect your personal data, the purposes for processing your data, and who it will be shared with.
• —Right to Request Access: You have the right to access your personal data with Eyeeai in a readable and clear format and are entitled to obtain a copy of it. Eyeeai may also restrict this request as per the cases stipulated in the PDPL.
• —Right to Update: You have the right to request data correction, completion, or update.
• —Right to Request Destruction: You have the right to request that your personal data be destroyed when you consider that we no longer require the information for the purposes for which it was obtained; you have validly objected to our use of your personal information; our use of your personal information is contrary to the Law or any other legal obligations; or you have revoked your consent to collect and process your personal data.
• —Right to Withdraw Consent: You have the right to revoke consent to collect and process your personal data unless statutory or judicial requirements require otherwise.
• —Right to File a Complaint: You have the right to file a complaint to the competent authority when you feel that your rights have not been respected.

The following are the lawful bases of processing personal data:

• —Your consent that you provide to process your personal information for a specific purpose that we communicate to you. However, we may process your personal data without obtaining your consent if the processing achieves a definite interest for the user and it is impossible or difficult to contact the user; if processing is according to an initial contractual agreement with you, or processing is in accordance with applicable laws; if processing is required for judicial and/or security purposes by a public entity; or if the personal data is publicly available or collected from a publicly available source.
• —Pursuing legitimate interest for us or for the user.
• —Compliance with regulations and royal decrees that are applicable to Eyeeai.
• —Protecting the vital interest of individuals.
• —Achieving public interest or serving an official request from an authority according to its roles.
• —Executing an agreement in which the user is a party.

Personal data is retained in accordance with Eyeeai's personal data retention schedule to fulfil the purposes for which it was collected and destroyed once the purpose has been fulfilled unless retention of personal data is required for a longer period to comply with another law or legal purpose such as compliance with a court order or under the rules and regulations to which we are subject.

In the case where we may collect personal data of a child under the age of 18 through our website, the purpose would solely be to directly respond to the user's request without using their personal data for any other purposes. The child's data will not be processed without notifying the child's guardian of the request except if there is a legal justification for Eyeeai to process the data specified by applicable law, regulations, or for security reasons.

Eyeeai will take appropriate measures to protect and safeguard your personal information against accidental, unlawful, unauthorized destruction, loss, alteration, access, disclosure, or use. However, please be aware that no method of transmission over the internet is completely secure. While we strive to use required standard measures to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach, Eyeeai is committed to following the data breach notification requirements in the applicable laws. The security measures are reviewed periodically by us to keep pace with security and regulatory changes.