Privacy Policy

This Privacy Policy describes how ANVL Labs, Inc. ("ANVL," "we," "our," or "us") handles personal information in connection with:

• →The public anvllabs.io website (the "Website")
• →Public Website forms, demo requests, and contact and inquiry submissions
• →Business development, sales, and marketing activities
• →Vendor and partner communications
• →Events, referrals, and other direct business interactions with ANVL
• →ANVL-controlled corporate and operational activities

Please review this Privacy Policy to understand how ANVL handles personal information. This Privacy Policy is a disclosure of ANVL's practices and does not modify any executed Customer Agreement, Data Processing Addendum, or other written agreement between ANVL and an institutional customer.

Visitors should not submit sensitive, regulated, confidential, or customer-controlled information through public Website forms.

ANVL may act in different capacities depending on the context in which personal information is processed.

Website and Business Interactions

For information collected directly through the public Website, sales activities, business communications, events, vendor relationships, or other ANVL-controlled interactions, ANVL determines the purposes and means of processing and acts as the business or controller, as applicable under relevant law.

Platform Processing on Behalf of Institutional Customers

For information processed through the ANVL platform on behalf of an institutional customer, ANVL generally acts as a service provider or processor. The institutional customer determines the purposes and means of that platform processing. Platform processing is governed by the applicable Master Services Agreement, Order Form, Data Processing Addendum, customer instructions, and applicable law.

This Privacy Policy does not expand ANVL's rights to use customer-controlled data. If this Privacy Policy conflicts with an applicable executed Customer Agreement or Data Processing Addendum, the executed agreement controls.

ANVL may collect the following categories of information in connection with the Website and ANVL's business operations. These categories apply to ANVL's own collection activities; information processed on behalf of institutional customers is addressed separately in Section 7.

Identifiers and Contact Information

Including name, business email address, business telephone number, mailing address, company name, job title, and professional role.

Professional and Business Information

Including employer, industry, department, professional responsibilities, business interests, product interests, and relationship with ANVL.

Communications and Submission Information

Including contact-form submissions, demo requests, inquiry content, email communications, meeting notes, feedback, survey responses, and support or business-development communications.

Internet, Device, and Technical Information

Including IP address, browser type, device type, operating system, referring URLs, pages visited, date and time of access, Website interaction information, and cookie and similar technology identifiers.

Marketing and Engagement Information

Including communication preferences, email engagement, event participation, campaign interaction, referral source, and product or service interests.

Business Relationship Information

Including contract and account contacts, vendor contacts, partner contacts, meeting history, relationship-management notes, and due-diligence communications.

ANVL may collect personal information from the following sources:

• →Directly from the individual
• →From the individual's employer or organization
• →From public Website activity
• →From events, conferences, meetings, and demonstrations
• →From business partners, referrals, or service providers
• →From publicly available professional sources
• →From communications and correspondence
• →From institutional customers when ANVL acts as their service provider or processor

Information supplied by or collected on behalf of institutional customers in connection with platform processing is addressed separately in Section 7 and is governed by Customer Agreements.

ANVL may use information collected through the Website and business interactions to:

• →Operate, secure, maintain, and improve the public Website
• →Respond to contact, demo, partnership, and business inquiries
• →Schedule meetings and demonstrations
• →Communicate about ANVL’s products and services
• →Manage customer, prospect, vendor, and partner relationships
• →Provide requested information
• →Maintain business records
• →Conduct internal analytics and understand Website usage
• →Improve user experience
• →Develop and improve ANVL’s products and business operations
• →Detect, investigate, prevent, and respond to security incidents
• →Prevent fraud, abuse, and unauthorized activity
• →Comply with legal and regulatory obligations
• →Enforce agreements and protect legal rights
• →Complete business transactions such as financings, acquisitions, reorganizations, or asset sales
• →Send marketing communications as permitted by law
• →Honor communication preferences and opt-out requests

ANVL does not use customer-controlled platform information for unrelated research or product development. Use of customer-controlled platform data is governed by the applicable Customer Agreement, Data Processing Addendum, customer instructions, and applicable law.

ANVL may disclose personal information in the following circumstances:

Service Providers

ANVL may disclose personal information to vendors and service providers that perform services on ANVL's behalf, including cloud hosting providers, Website hosting providers, email and communication vendors, customer relationship management providers, security providers, professional advisors, and event and scheduling providers. ANVL engages service providers to process information on its behalf for specified business purposes and subject to applicable contractual restrictions.

Business and Transaction Partners

Where reasonably necessary in connection with a financing, merger, acquisition, reorganization, due diligence, sale of assets, or other corporate transaction, ANVL may disclose information to counterparties and their advisors subject to appropriate confidentiality obligations.

Professional Advisors

Including attorneys, accountants, auditors, insurers, and consultants, where necessary for their professional services to ANVL.

Governmental and Legal Authorities

Where required or permitted by law, legal process, regulatory request, or to protect ANVL's rights, safety, systems, customers, or others.

With the Individual's Direction or Consent

Where the individual requests or authorizes the disclosure.

Customer-Directed Processing

Where ANVL acts as a service provider or processor on behalf of an institutional customer under a Customer Agreement.

Important limitations:

• →ANVL does not sell personal information for monetary consideration.
• →ANVL does not rent personal information.
• →ANVL does not disclose customer-controlled platform information for unrelated commercial purposes.

ANVL will provide any required opt-out rights if its use of advertising or tracking technologies constitutes a sale or sharing under applicable law.

ANVL may process information supplied by or collected on behalf of institutional customers through the ANVL platform. Depending on the customer's use of the platform, that information may relate to platform users, dealer personnel, borrowers, guarantors, vendor personnel, and other individuals, as well as related commercial relationships, inventory, collateral, transactions, and operational records.

ANVL processes that information only as permitted by the applicable Customer Agreement, Data Processing Addendum, customer instructions, and applicable law.

Individuals seeking to exercise rights concerning customer-controlled data should generally contact the applicable institutional customer first. ANVL will support customers with verified privacy requests as required by contract and applicable law.

This Privacy Policy does not independently grant ANVL rights to sell, commercialize, or use customer-controlled data for unrelated purposes.

ANVL may use Website and business-interaction information to understand how the Website is used, improve Website functionality, improve business processes, evaluate product interest, develop and improve ANVL's offerings, and conduct security, quality, and reliability analysis. This use is distinct from customer-controlled platform data.

Customer-controlled platform data is used only as permitted by the applicable Customer Agreement, Data Processing Addendum, customer instructions, and applicable law.

ANVL does not use identifiable customer-controlled platform data to train generalized artificial intelligence models except where expressly authorized by the applicable institutional customer in a written agreement.

ANVL may use aggregated or de-identified information where permitted by contract and law. ANVL will not attempt to re-identify information treated as de-identified except as permitted for security, validation, or legal compliance.

Third-party AI providers may process information only under applicable contractual restrictions and instructions. This Privacy Policy does not grant ANVL broader AI or data-use rights than those contained in a Customer Agreement.

ANVL and its service providers may use limited browser storage, log files, and similar technologies necessary to operate, secure, and maintain the Website.

Technologies Currently in Use

ANVL does not currently deploy third-party analytics services, advertising pixels, session-replay tools, behavioral tracking scripts, or marketing trackers on the Website. Website fonts are served directly from ANVL's own infrastructure; no runtime requests are made to external font services. ANVL will update this Privacy Policy and implement any required consent or opt-out mechanisms before deploying nonessential analytics, advertising, or behavioral tracking tools.

Standard server-side log files and browser-level information (such as IP address, browser type, and pages visited) may be collected as part of normal Website operation.

Managing Browser Storage

Most browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. Disabling certain cookies may affect Website functionality.

Privacy Preference Signals

Some browsers and extensions transmit privacy preference signals, including Global Privacy Control. ANVL does not currently sell personal information or use the Website for cross-context behavioral advertising. If ANVL's practices change in a manner that requires recognition of privacy preference signals under applicable law, ANVL will update its practices, technical implementation, and this Privacy Policy accordingly.

ANVL may not respond to legacy "Do Not Track" signals where no legal requirement applies.

ANVL maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, loss, misuse, alteration, and disclosure, taking into account the nature of the information and the context of processing.

No system is completely secure, and ANVL cannot guarantee the absolute security of any information. ANVL will provide legally required notifications of qualifying security incidents.

Contractual security obligations for institutional customers are governed by applicable Customer Agreements and security exhibits, not by this Privacy Policy alone.

ANVL retains personal information based on:

• →The purpose for which it was collected
• →The duration of the business relationship
• →Contractual obligations
• →Legal and regulatory requirements
• →Security and fraud-prevention needs
• →Applicable limitation periods
• →Dispute-resolution needs
• →Internal recordkeeping requirements

Examples

• →Prospect and inquiry records may be retained while the relationship remains active and for a reasonable period afterward.
• →Marketing information may be retained until the individual opts out or the information is no longer needed, subject to suppression-list retention.
• →Website and security logs may be retained based on security and operational requirements.
• →Contract and transaction records may be retained for the duration of the relationship and applicable legal periods.
• →Customer-controlled platform data is retained and deleted according to the applicable Customer Agreement, Data Processing Addendum, customer instructions, legal holds, and backup procedures.

Deleted information may remain temporarily in backups or disaster-recovery systems until overwritten in the normal course.

Depending on your location, applicable law, ANVL's role, and the nature of the information, you may have certain privacy rights, which may include:

• →Access to personal information ANVL holds about you
• →Correction of inaccurate personal information
• →Deletion of personal information, subject to legal exceptions
• →Portability of your personal information where applicable
• →Restriction of certain processing activities
• →Objection to certain processing activities
• →Opt-out of certain processing, such as direct marketing or sale of personal information
• →Withdrawal of consent where processing is based on consent
• →Appeal of a denied request where required by applicable law
• →Non-discrimination for exercising privacy rights

These rights are subject to legal exceptions and verification requirements. ANVL may need to verify your identity and authority before processing a request. ANVL may retain information where required by law, contract, security requirements, fraud prevention, or legal claims. Authorized agents may submit requests where permitted by law, subject to verification.

Requests involving customer-controlled platform data should generally be directed to the applicable institutional customer first.

How to Submit a Request

To submit a privacy request, contact ANVL at contact@anvllabs.io. Please include your name, the nature of your request, your relationship with ANVL, and the institutional customer involved, if applicable. ANVL will respond within the timeframe required by applicable law and may request additional information to verify your identity and the scope of your request.

Marketing Communications

You may opt out of marketing emails by using the unsubscribe link in any such message or by contacting contact@anvllabs.io. ANVL may still send transactional communications, security notices, contractual communications, responses to inquiries, operational messages, and other nonmarketing communications. ANVL may retain limited suppression-list information to honor opt-out requests.

Depending on applicable law and ANVL's relationship with you, residents of California and certain other U.S. states may have specific privacy rights.

Applicable rights may include:

• →Right to know or access personal information
• →Right to delete personal information
• →Right to correct inaccurate personal information
• →Right to obtain a portable copy of personal information
• →Right to opt out of the sale of personal information
• →Right to opt out of sharing for cross-context behavioral advertising
• →Right to opt out of certain targeted advertising
• →Right to limit certain uses of sensitive personal information where applicable
• →Right to appeal certain denied requests
• →Right to non-discrimination

ANVL does not sell personal information for monetary consideration. ANVL will provide applicable opt-out mechanisms where required by law. Certain information may be exempt, including information ANVL processes as a service provider or processor on behalf of an institutional customer. ANVL may deny or limit requests where permitted by applicable law.

To submit a state privacy request, contact ANVL at contact@anvllabs.io.

The Website and ANVL's services are intended for business users and are not directed to children under 13 or to minors generally. ANVL does not knowingly collect personal information from children under 13. Individuals under 18 should not submit personal information through the public Website.

If ANVL learns it has collected personal information from a child under 13, ANVL will take reasonable steps to delete it. If you believe ANVL may have received personal information from a child, please contact us at contact@anvllabs.io.

The Website may contain links to third-party websites, services, or resources not operated by ANVL. ANVL is not responsible for the privacy practices of those third-party services. Visitors should review the applicable privacy notices and terms of any third-party service before providing personal information.

Embedded third-party services (such as scheduling tools, maps, or other integrations) may collect information directly from visitors in accordance with their own privacy practices.

Platform integrations used on behalf of institutional customers are governed by applicable Customer Agreements and the applicable provider's terms.

ANVL may update this Privacy Policy to reflect changes in its practices, technology, services, or legal obligations. When changes are made, ANVL will update the "Last Updated" date. Material changes will apply prospectively, and ANVL will provide additional notice or obtain consent where required by applicable law.

Revisions to this Privacy Policy do not amend any executed Customer Agreement, Data Processing Addendum, or other written agreement between ANVL and an institutional customer.

For questions, concerns, or requests regarding this Privacy Policy or ANVL's privacy practices, please contact:

When submitting a privacy request, please include your name, the nature of the request, your relationship with ANVL, and the institutional customer involved, if applicable. ANVL will respond within the timeframe required by applicable law and may request additional information to verify your identity, authority, and the scope of your request.

Depending on your location, you may have the right to contact or lodge a complaint with an applicable privacy or data protection authority.