Privacy Policy

Effective date: 27th April 2025

Last Updated date: 11th August 2025

We know you care about how your personal data is used and shared, and we take your privacy seriously. We only collect and process your personal data as necessary to develop, provide, and improve our services, as required by law, or for the limited purposes explicitly stated in this Privacy Policy. Please read this Privacy Policy to learn how we process your personal data.

This YouWare Privacy Policy ("Privacy Policy") describes how your personal data is processed when you use YouWare, a platform that lets you generate websites, and instantly share links with others. This Privacy Policy applies to activities by YouWare, Inc. and its affiliates and subsidiaries (collectively "YouWare," "we" or "us"). This Privacy Policy supplements any additional YouWare policies or terms, which are incorporated by reference. YouWare Inc. is the data controller of your personal data and is responsible for providing you with this Privacy Policy.

By using or accessing our services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy. Remember that your use of YouWare's services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

If you have a disability and need to access this Privacy Policy in an alternative format, please contact [email protected].

1. Information We Collect, How It Is Used, & The Legal Basis for Processing

Account Information. We collect your email address to create an account and verify your identity. We also generate a unique user ID for your YouWare account. This information is used to manage your account, communicate with you, resolve issues, and provide updates about new YouWare features. This processing is necessary to comply with our legal and contractual obligations to you.

Device Information. We collect your device type and operating system details for analytics and to troubleshoot product issues. This helps us ensure the proper functioning of our services. This processing is necessary to comply with our contractual obligations to you.

Third Party Application Login. You can log into your YouWare account using third party applications (e.g., Google). When you log in using this method, we collect your name, email address and avatar associated with that third-party application for authentication and identity verification purposes. This processing is necessary to comply with our contractual obligations to you.

User Research. We may ask you to help us test new features or participate in surveys to help enhance your YouWare experience. Your participation is voluntary and the data we collect is anonymized. With your consent, we may use your personal data to communicate with you. It is in our legitimate business interest to improve our platform.

Interactions with Bots on YouWare. Our third-party AI model LLM providers and third-party bot developers may receive details about your interactions with bots on YouWare (including the contents of your chats) to provide and generally improve their services, which they may process in their legitimate business interests. Your YouWare user account information (e.g., username and email) is not shared with our third-party AI model providers or developers. Third-party developers that create bots on YouWare using APIs may view and store your anonymized chats on their servers to train their models. We may use your interactions on YouWare to provide you a personalized experience, such as recommending other bots to explore or topics to discuss.

Bots developed by third parties may request access to device permissions, including but not limited to camera, microphone, location, and storage. These third-party developers may collect and process data in accordance with their own privacy policies. While relevant data may be stored on our servers, we do not have access to or control over the data collected by these third parties. We encourage you to review the privacy policies of these third-party services to understand how your data may be handled.

You fully understand and completely agree that the information you voluntarily upload or publicly share during the use of our services may involve your own or others' personal data, and even sensitive personal data. Regarding such personal data and sensitive personal data, you should ensure that you have obtained your own complete, sufficient, and accurate authorization and consent. Moreover, if it involves third-party information, you must have obtained the explicit authorization and consent of the third parties. At the same time, you guarantee that the information you provide does not contain personal data of minors. Before uploading or publicly sharing, please carefully consider the nature of the information and its possible impacts to effectively protect personal data security and legal rights.

You guarantee that the text, pictures, videos, audio, links, and other contents uploaded when using our services are either original by you or have obtained legal authorization. They do not infringe on the personality rights of any third-party, such as the right to reputation, the right to name, the right to portrait, the right to voice, the right to privacy, as well as other legal rights and interests such as intellectual property rights and trade secrets. For those that need to be authorized, you have obtained complete, effective, and legal authorization from the third - party right - holders. And the above-mentioned contents do not contain any content that violates laws, regulations, and policies. The intellectual property rights of any content you upload and publish as part of using our services belong to you or the original copyright owner. We do not have the ability or obligation to manage, control, and conduct substantial review of the content you upload. Although in certain circumstances, we may conduct a formal review of the uploaded content for security and other considerations, this review does not mean that we make any commitments, guarantees, and/or assume any responsibilities for the content you upload. You should handle any disputes caused by the content you upload on your own and bear all the possible legal responsibilities. If our affiliated parties and us suffer losses (including but not limited to economic losses, reputation losses, and legal fees and other rights - protection costs paid thereby) due to your infringement or other improper acts, you shall also fully compensate for all the losses suffered by us, our affiliated parties, controlled companies, and successor companies.

Keep in mind, any information and files you provide to the AI Agents on YouWare will be shared with third-party AI model providers and developers powering the AI Agents, and there is no need to share sensitive personal data with the AI Agents (e.g., credit card information, social security information, etc.).

2. Categories of Sources of Personal Data

You:

• When you create an account, use our interactive tools, or log in via a third-party application.
• When you voluntarily provide information in surveys, during user research, or when providing content as a content creator.
• When you send us an email or otherwise contact us, for example, if you have questions or issues regarding your account or our services.

Third Parties:

• Vendors, such as third-party payment processors and tax service providers, when handling your billing and tax-related information.
• Analytics providers, who help us analyze data related to your device information, usage patterns, and interactions with our services.
• Third-party application providers (e.g., Google for login), from whom we receive your name and email for authentication purposes.

3. How We Share Your Personal Data

Service Providers

These parties help us provide the Services or perform business functions on our behalf. They include:

• Hosting, technology, and communication providers that assist in running the YouWare platform, ensuring its availability and functionality.
• Support and customer service vendors who help us address your inquiries and resolve issues.
• Third-party payment processors and tax service providers who handle your subscription billing data and content creator payments.

Analytics Partners

These parties provide analytics on web traffic, user interactions, and service usage. They help us understand how you use our services, identify areas for improvement, and optimize our platform.

Parties You Authorize, Access or Authenticate

Third parties you access through the services, such as when you log in using a third - party application. We share the necessary information with these parties for authentication and identity verification purposes.

Legal Obligations

We may share any Personal Data that we collect with third parties in conjunction with any of the activities set forth under "Meeting Legal Requirements and Enforcing Legal Terms" (see section 4).

Business Transfers

All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.

Affiliates

We may disclose personal data to our affiliates. Our affiliates may use this personal data in a manner consistent with this Privacy Policy.

4. Our Commercial or Business Purposes for Collecting Personal Data

Providing, Customizing and Improving the Services

• Creating and managing your account or other user profiles.
• Offering you the products, services, or information that you've requested, encompassing AI-coding capabilities to assist you in generating code efficiently, and link sharing functionality. Additionally, we enable paid subscribers to effortlessly download the code of their deployed projects, ensuring they have full access and control over their creations.
• Meeting or fulfilling the reason you provided the information to us, like processing your subscription or facilitating payments.
• Providing support and assistance for the Services, including troubleshooting device - related issues.
• Improving the Services, including testing new features, conducting user research, and performing internal analytics for product development.
• Doing fraud protection, security, and debugging to ensure the safety and integrity of our platform.
• Carrying out other business purposes stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws.

Corresponding with You

Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about YouWare or the Services, such as updates on new features or security notifications.

Meeting Legal Requirements and Enforcing Legal Terms

• Fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.
• Protecting the rights, property or safety of you, YouWare or another party.
• Enforcing any agreements with you, including our Terms of Use.
• Responding to claims that any content or activity on our platform violates third - party rights.
• Resolving disputes that may arise in relation to our services.

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.

5. Tracking Tools and Opt-Out

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, "Cookies") to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data–usually text files–placed on your computer, tablet, phone or similar device when you use that device to access our Services.

We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s).

Essential Cookies

Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Services. Disabling these Cookies may make certain features and services unavailable.

Functional Cookies

Functional Cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and recognize you when you return to our Services. These Cookies help us to personalize our content for you, greet you by name and remember your preferences (for example, your preferred language or bot - interaction settings).

You can decide whether or not to accept Cookies through your internet browser's settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work.

6. Data Security and Retention

We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your password and/or other sign - on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide you with our Services. This includes data related to your paid subscription - based access to download project code, such as download logs. In some cases we retain such data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes related to the download service (such as unauthorized access claims), or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

7. Personal Data of Children

The Children's Online Privacy Protection Act ("COPPA") requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children who are under 13 years of age. Our Services are not directed to children under 13. Also, we do not knowingly collect or solicit personally identifiable information from a child under 16. If we learn we have collected personal data from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 years of age has provided us with Personal Data, please contact our Data Protection Officer at [email protected].

8. California Resident Rights

If you are a California resident, you have the rights set forth in this section. Please see the "Exercising Your Rights" section below for instructions regarding how to exercise these rights.

If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact our Data Protection Officer at [email protected].

Access

You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. In response, we will provide you with the following information:

• The categories of Personal Data that we have collected about you.
• The categories of sources from which that Personal Data was collected.
• The business or commercial purpose for collecting or selling your Personal Data (we do not sell your Personal Data).
• The categories of third parties with whom we have shared your Personal Data.
• The specific pieces of Personal Data that we have collected about you.
• If we have disclosed your Personal Data to any third parties for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third - party recipient.

Deletion

You have the right to request that we delete the Personal Data that we have collected about you. Under the California Consumer Privacy Act (CCPA), this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request. When you submit a deletion request, we will delete your personal data as soon as possible. If you have any questions, you can contact our Data Protection Officer at [email protected].

Exercising Your Rights

To exercise the rights described above, you or your Authorized Agent (defined below) must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a "Valid Request." We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may submit a Valid Request to [email protected].

You may also authorize an agent (an "Authorized Agent") to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.

Personal Data Sales Opt-Out and Opt-In

We will not sell your Personal Data, and have not done so. To our knowledge, we do not sell the Personal Data of minors under 16 years of age.

We process your Personal Data for the purposes described in this Privacy Policy and our processing activities of your Personal Data shall be governed by laws and regulations in various jurisdictions, which shall be determined by various facts, including but without limitation, the location you resident, the location of our servers and the registration address of us. While data protection law varies by country, we apply the protections described in this policy to your Personal Data regardless of where it is processed, and only transfer that data pursuant to legally valid transfer mechanisms.

9. Regional Privacy Disclosures and Rights

9.1 Residents of the European Economic Area (EEA) and United Kingdom

We are considered the "data controller" of the "personal data" (as defined under the General Data Protection Regulation, GDPR) we handle under this Policy. The laws of the EEA and the United Kingdom require data controllers to inform you of the legal basis for using, sharing, or disclosing your personal data. Our legal bases are as follows:

Contractual Commitments: We may use, share, or disclose personal data to fulfill our contractual obligations to you, such as complying with agreements and commitments in contracts.

With Your Consent: Where required by law or in some cases, we use, share, or disclose personal data based on your consent.

Legitimate Interests: In many cases, we use, share, or disclose personal data when it furthers our legitimate business interests and does not override the interests or fundamental rights and freedoms of affected individuals, such as for customer service, promotional activities, business analysis and improvement, service security, fraud prevention, and legal issue management.

Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.

You have the following statutory rights in relation to your personal data:

• To object, on grounds relating to your particular situation, to the processing of your personal data by us. This includes the right to object to our processing of your personal data for direct marketing (also known as mass marketing under Swiss law) and the right to object to our processing of our personal data where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party. If we process your personal data based on our legitimate interests or those of a third party, or in the public interest, you can object to this processing, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for legal reasons. Where we use your personal data for direct marketing for our own Services, you can always object and opt out of future marketing messages using the unsubscribe link in such communications or through other means.

• To obtain from us confirmation as to whether your personal data is being processed, and, where that is the case, to request access to details about how we process your personal data and copies of the personal data.

• To obtain from us the rectification of inaccurate personal data concerning you.

• To ask us to erase your personal data to the extent it is not required for legally required purposes or necessary for security and integrity purposes.

• To request restriction of processing of your personal data, in which case, it would be marked and processed by us only for certain purposes.

• To receive your personal data which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit the personal data to another entity without hindrance from us.

• To withdraw your consent at any time. This will not affect the lawfulness of our use of your personal data before your withdrawal.

• To lodge a complaint with a supervisory authority.

• In some jurisdictions such as France and Portugal, you also have the right to provide us with guidelines as to the processing of your personal data after your death.

You may view a list of supervisory authorities in the EEA and UK and their respective contact information here: • EEA: https://edpb.europa.eu/about-edpb/about-edpb/members_en• United Kingdom: https://ico.org.uk/global/contact-us/

To submit a request to exercise your privacy rights, you can contact us by emailing [email protected]. In your request, please describe what rights you are exercising and how you would like us to assist. We may need to request specific information from you to help us verify your identity and that you have the right to request what you are requesting. These are security measures to ensure that we do not disclose personal data to any person who has no right to receive it, or otherwise process the data in unauthorized ways. We may also contact you to ask for further information about your request to clarify the scope of your request and speed up our response. We will respond to requests to exercise privacy rights according to applicable laws.

9.2 Residents of California

Under the California Consumer Privacy Act (CCPA), we must provide you with the "categories" of personal data and sensitive personal data we collect and disclose for business or commercial purposes.

We have collected and disclosed various categories of personal data for business or commercial purposes. The categories of personal data include identifiers (such as account ID, email address), internet or other electronic network activity information (e.g., IP address), general geolocation data (if collected), audio or video information (if you upload relevant content), other information you voluntarily provide (e.g., content - related information, questionnaire responses), and inferences drawn from the collected information.

We also collect certain categories of "sensitive personal data" as defined under the CCPA:

• Account log - in and password or other credentials allowing access to your account • Other sensitive personal data you voluntarily provide as an individual user of the Services (e.g., if you disclose sensitive information in your uploaded content)

We process these categories of personal data for the purposes described in this agreement We collect this information directly from you, through your use of the Services, and from other parties as applicable.

Do - Not - Track disclosure: We do not respond to browser - initiated Do Not Track signals as the Internet industry is still working on standards, implementations, and solutions.

Retention of your personal data: Please see the Data Retention section below.

CCPA rights: California residents can make requests about their personal data as described in Rights to Information About You. The CCPA also allows you to limit the use or disclosure of your "sensitive personal data" if it is used for certain purposes. Note that we do not use or disclose sensitive personal data for purposes other than those for which you cannot opt out under the CCPA.

Under California Civil Code Sections 1798.83 - 1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties' direct marketing purposes; in order to submit such a request, please contact our Data Protection Officer at [email protected].

9.3 Nevada Resident Rights

If you are a resident of Nevada, you have the right to opt - out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. We do not sell your Personal Data. If you have any questions, please contact our Data Protection Officer at [email protected] with the subject line "Nevada Do Not Sell Request".

9.4 Illinois, Texas, Washington and other applicable states: biometric data protection

If you are a resident of Illinois, Texas, Washington or other applicable states, please be advised that we do not collect, store, or use biometric data (such as fingerprints, facial recognition, voiceprints, or other unique biological characteristics) without your explicit consent. In accordance with the applicable biometric data protection laws. We are committed to safeguarding your biometric information. If we do collect biometric data, we will inform you of the specific purpose and scope of the data collection and obtain your consent before doing so. We will also retain biometric data only for as long as necessary for the purposes for which it was collected, and ensure its secure storage and handling. If you have any questions about how your biometric data is used or wish to request deletion of any biometric data we may have collected, please contact us at [email protected].

Bots developed by third parties may collect, store or use your biometric data. These third-party developers may collect and process your biometric data in accordance with their own privacy policies. While relevant biometric data may be stored on our servers, we do not have access to or control over the data collected by these third parties. We encourage you to review the privacy policies of these third-party services to understand how your biometric data may be handled.

10. Changes to this Privacy Policy

We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time. This could be due to various reasons, including changes in our service offerings, updates to legal requirements, or modifications in our relationships with third - party service providers like Stripe. In the event of changes related to Stripe's data - handling practices that materially affect your privacy, we will alert you to any such changes by placing a notice on the YouWare application, by sending you an email and/or by some other means.

11. Contact Information

If you have any questions or comments about this Privacy Policy or YouWare's handling of personal data, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact our Data Protection Officer at:

[email protected]