// Legal Document

Privacy
Policy

Version 1.4 · Effective June 3, 2026

EGO Studio AI, Inc. ("Company," "us," "our," and "we") respects your privacy. This Privacy Policy (the "Privacy Policy") explains how Company collects, uses, shares, and protects information in connection with the website located at taann.ai (the "Site"). This Privacy Policy is incorporated by reference into Company's Website Terms of Use (the "Terms of Use").

Please read this Privacy Policy carefully. By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy.

// 01

Scope and Application

1.1  The Site.  This Privacy Policy applies to the Site only. The Site is an informational website. Company does not currently offer products, services, accounts, subscriptions, or other functionality through the Site beyond providing information about Company and an optional contact form.

1.2  Future Products and Services.  As Company launches products or services in the future, those products or services will be governed by their own terms and privacy disclosures, separate from this Privacy Policy. This Privacy Policy will be updated, or a separate privacy policy will be published, before any such product or service is made available.

1.3  Third-Party Sites.  This Privacy Policy does not apply to any third-party website, application, or service, even if accessed through a link on the Site.

1.4  Geographic Scope.  The Site is operated from the United States and is directed to users located in the United States. If you are located outside the United States, you should not submit personal information to Company through the Site until Company publishes additional disclosures applicable to your jurisdiction.

// 02

Information We Collect

2.1  No Cookies or Tracking Technologies.  The Site does not use cookies, web beacons, tracking pixels, browser fingerprinting, behavioral advertising identifiers, or analogous tracking technologies. Company does not engage in cross-application or cross-website tracking of visitors to the Site.

2.2  Server Logs.  Standard server logs automatically record information transmitted by your device or browser when you access the Site, including your IP address, browser type and version, operating system, referring URL, the pages you request, and the date and time of access. Company collects this information for security, diagnostic, and operational purposes — such as detecting and preventing abuse, troubleshooting service issues, and analyzing aggregate traffic patterns. Server log information is retained only for as long as reasonably necessary for these purposes, as set forth in Section 5.

2.3  Contact Form Submissions.  If you submit information to Company through a contact form, request-for-information form, or other inquiry mechanism on the Site (collectively, "Inquiry Information"), Company collects the information you provide. Inquiry Information may include your name, email address, organization name (if provided), and the substance of your inquiry. Company collects Inquiry Information only when you voluntarily provide it through the Site. Company does not purchase Inquiry Information from third-party data brokers or lead-generation providers.

2.4  No Other Collection.  Company does not collect personal information from visitors to the Site other than as described in this Section 2. The Site does not request, capture, or store voice recordings, biometric identifiers, location data, payment information, or any other category of personal information not described above. The Site does not require, and does not provide functionality for, account registration or login.

// 03

How We Use Information

3.1  Purposes of Use.  Company uses information collected through the Site to:

(a)operate, maintain, and secure the Site;
(b)respond to your inquiries submitted through the Site and communicate with you about the subject of your inquiry;
(c)detect, investigate, prevent, and respond to fraud, abuse, security incidents, and violations of the Terms of Use or applicable law;
(d)comply with applicable law, valid legal process, and lawful requests from governmental and regulatory authorities;
(e)enforce the Terms of Use and this Privacy Policy; and
(f)carry out other purposes as disclosed to you at the time of collection or to which you consent.

3.2  No AI Training.  Company does not use Inquiry Information or other information collected through the Site to train, fine-tune, retrain, evaluate, benchmark, or otherwise develop or improve any artificial intelligence model, machine learning system, neural network, foundation model, or algorithm.

3.3  No Profiling for Legally Significant Decisions.  Company does not use information collected through the Site for advertising, marketing communications other than as described in Section 3.4 below, sale or transfer to third parties for profiling or targeting, or any decision producing legal effects concerning you or similarly significantly affecting you (such as decisions about eligibility, pricing, employment, credit, insurance, housing, or access to any product or service).

3.4  Marketing Communications.  Subject to your express opt-in consent, Company may use your Inquiry Information to send you marketing or product communications, including information about Company, future product launches, newsletters, event invitations, and other commercial communications. Company will send marketing communications only to recipients who have affirmatively elected to receive them. You may withdraw your consent and opt out of marketing communications at any time by (a) clicking the "unsubscribe" link included in each marketing email; or (b) contacting Company at the address in Section 11 below. Withdrawal of consent for marketing communications does not affect Company's ability to send transactional or administrative communications in response to your inquiry. All marketing communications will comply with applicable law, including the CAN-SPAM Act of 2003.

// 04

How We Share Information

4.1  Categories of Recipients.  Company may share information with the following categories of recipients:

(a)service providers and infrastructure providers acting on Company's behalf, as identified in Section 4.3 below, subject to written obligations to protect the information consistent with this Privacy Policy and applicable law;
(b)governmental, regulatory, or law enforcement authorities, or other third parties, as required by applicable law, valid legal process (such as subpoenas, court orders, and warrants), or to protect the rights, property, or safety of Company, its users, or others;
(c)a successor entity in connection with a merger, acquisition, reorganization, sale of assets, financing, bankruptcy, or similar business transaction, in which case Company will require the successor to honor the commitments made in this Privacy Policy or provide notice and an opportunity to object to any material change; and
(d)third parties with your consent or at your direction.

4.2  No Sale; No Sharing for Cross-Context Behavioral Advertising.  Company does not sell personal information for monetary or other valuable consideration, and Company does not "share" personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA"), or under any other applicable State Privacy Law.

4.3  Service Providers.  Company engages the following service providers to operate the Site:

(a)Amazon Web Services, Inc. — hosting and database infrastructure (including EC2 compute, RDS PostgreSQL database for storing Inquiry Information, and Secrets Manager);
(b)GitHub, Inc. — source code repository and deployment workflow management;
(c)Let's Encrypt (operated by the Internet Security Research Group) — SSL/TLS certificate issuance for secure connections to the Site; and
(d)Sentry (Functional Software, Inc.) — error monitoring and diagnostic logging for the Site's server-side and client-side components, where applicable.

Each service provider is bound by contractual obligations to process information only as necessary to provide its services to Company and consistent with this Privacy Policy and applicable law. Company will update this Section 4.3 as service providers are added, removed, or changed.

// 05

Data Retention

5.1  Server Logs.  Server log information described in Section 2.2 is retained for up to thirty (30) days from the date of capture, after which it is deleted from active systems in the ordinary course, subject to routine backup rotation and retention required by applicable law or legal process.

5.2  Inquiry Information.  Inquiry Information described in Section 2.3 is retained for up to twenty-four (24) months from the date of your last engagement with Company. "Last engagement" means your most recent interaction with Company, such as a reply to a Company email, a click on a link in a Company email, a response to or submission of an inquiry, a request for information, or other affirmative interaction. If you opt out of marketing communications or request deletion of your Inquiry Information before the twenty-four (24) month period expires, Company will delete or de-identify your Inquiry Information within a reasonable period thereafter, and in any event within the time period required by applicable law, subject to (a) routine backup rotation; (b) retention required by applicable law, valid legal process, or a litigation hold; and (c) retention of suppression-list information necessary to honor your opt-out request.

// 06

Security

Company maintains reasonable technical, administrative, and organizational measures designed to protect information from unauthorized access, use, alteration, disclosure, or destruction. These measures include encryption of information in transit using TLS 1.2 or higher and encryption of information at rest using AES-256 or analogous industry-standard encryption. However, no method of transmission over the internet or method of electronic storage is one hundred percent secure, and Company cannot guarantee absolute security.

// 07

Children's Privacy

The Site is not directed to children under the age of thirteen (13). Company does not knowingly collect personal information from children under thirteen (13). If Company learns that it has collected personal information from a child under thirteen (13), Company will take reasonable steps to delete such information promptly. If you believe a child under thirteen (13) has provided personal information to Company through the Site, please contact Company at the address in Section 11.

// 08

State Privacy Rights

8.1  Coverage.  This Section 8 provides additional information to residents of states with privacy laws that provide rights to their residents, including the CCPA, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Personal Data Privacy and Online Monitoring Act, the Texas Data Privacy and Security Act, and other state privacy laws as they become applicable (collectively, the "State Privacy Laws"). Not all rights described in this Section 8 are available to residents of every state. If you are not a resident of one of these states, you may not be able to exercise these rights.

8.2  Your Rights.  Subject to the conditions and exceptions set forth in the applicable State Privacy Law, residents of states with applicable rights may have the right to:

(a)know what personal information Company has collected, used, sold, shared, or disclosed about you, and obtain a copy of such information;
(b)request correction of inaccurate personal information;
(c)request deletion of personal information that Company has collected from you, subject to applicable exceptions;
(d)opt out of the sale or sharing of personal information (Company does not sell or share personal information, as set forth in Section 4.2); and
(e)exercise the rights described above free from unlawful discrimination.

8.3  Affirmative Representations.  Company makes the following affirmative representations:

(a)Company does not sell personal information for monetary or other valuable consideration, and has not done so during the preceding twelve (12) months;
(b)Company does not share personal information for cross-context behavioral advertising, and has not done so during the preceding twelve (12) months;
(c)Company does not engage in Profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers; and
(d)Company does not knowingly sell or share personal information of consumers under sixteen (16) years of age.

8.4  How to Exercise Your Rights.  You may submit a request to exercise any of the rights described in this Section 8 by contacting Company at the email address designated for privacy requests in Section 11 below. Company may need to verify your identity in order to process your request and reserves the right to confirm your residency. Company will respond to your request within the period required by applicable law (generally within forty-five (45) days, with the possibility of extension where permitted).

8.5  California Complaint Authority.  California residents may report complaints to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by writing to 1625 North Market Boulevard, Suite N 112, Sacramento, CA 95834, or by calling (800) 952-5210.

// 09

International Users

The Site is operated from the United States and is currently directed to users located in the United States. If you access the Site from outside the United States, you understand and agree that information collected by Company may be transferred to, processed in, and stored in the United States. By accessing or using the Site from outside the United States, you consent to such transfer, processing, and storage in accordance with applicable law and this Privacy Policy. As set forth in Section 1.4, the Site is not currently configured to provide services to users in the European Economic Area, the United Kingdom, or other jurisdictions outside the United States in compliance with applicable local data protection laws, and you should not submit personal information to Company through the Site until Company publishes additional disclosures applicable to your jurisdiction.

// 10

Changes to This Privacy Policy

Company may update this Privacy Policy from time to time. If Company makes material changes, Company will (a) update the Effective date at the beginning of this Privacy Policy; and (b) post prominent notice on the Site. Where required by applicable law, Company will provide additional notice and, where applicable, obtain affirmative consent. Your continued use of the Site after the effective date of any update constitutes your acceptance of the updated Privacy Policy. If you do not agree with any update, you must discontinue use of the Site.

// 11

Contact Us

If you have questions about this Privacy Policy or Company's privacy practices, or if you wish to exercise any right described in this Privacy Policy, please contact Company at:

EGO Studio AI, Inc.

EGO Studio AI
2588 El Camino Real
Ste F PMB 1016
Carlsbad, CA 92008
United States

Privacy Email: privacy@egoinc.ai
Legal Email: legal@egoinc.ai