AssetIQ ("AssetIQ", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of personal information and customer data entrusted to us.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect information when you access or use the AssetIQ website, software platform, mobile applications, APIs, and related services (collectively, the "Services").

By accessing or using the Services, you acknowledge and agree to the practices described in this Privacy Policy.

AssetIQ is a cloud-based asset management platform designed to help organizations manage, maintain, track, audit, and analyse physical and digital assets.

AssetIQ is owned and operated by:

Arvant Technologies Pte Ltd Singapore Website: www.assetiq.sg Enquiries: support@assetiq.sg

This Privacy Policy applies to:

• Website visitors • Prospective customers • Trial users • Registered users • Paying subscribers • Authorized users of customer accounts

This Policy applies to personal information collected through the AssetIQ website, platform, mobile applications, customer support channels, and related services.

We collect information necessary to provide, operate, secure, and improve the Services.

We use information for legitimate business purposes, including to: • Provide and operate the Services • Create and manage user accounts • Deliver platform functionality • Process subscriptions and payments • Provide customer support • Improve platform performance • Monitor platform security • Detect fraud and abuse • Communicate service updates • Meet legal and regulatory obligations

We do not sell personal information or Customer Data.

Where required by applicable privacy laws, we process personal information based on: • Performance of a contract • Legitimate business interests • Compliance with legal obligations • User consent where required

Customers retain all rights, title, and ownership of Customer Data stored within AssetIQ.

Customer Data includes: • Asset records • Maintenance records • Inspection reports • Work orders • Images • Documents • GPS information • Operational data • User-generated content

AssetIQ does not claim ownership of Customer Data.

AssetIQ acts as a service provider and data processor for Customer Data and accesses Customer Data only where necessary to: • Deliver Services • Provide support • Resolve technical issues • Improve platform functionality • Investigate security incidents • Comply with legal obligations

AssetIQ recognizes that Customer Data may contain commercially sensitive information, including: • Asset valuations • Operational procedures • Maintenance schedules • Workforce assignments • Equipment utilisation data • Financial information

AssetIQ treats all Customer Data as confidential and implements safeguards designed to protect its confidentiality, integrity, and availability.

We may share information with trusted third parties where necessary to provide the Services. These may include: • Cloud hosting providers • Payment processors • Email delivery services • Security monitoring providers • Analytics platforms • Professional advisors • Regulatory authorities where legally required

We require service providers to maintain appropriate confidentiality and security obligations.

AssetIQ does not sell personal information or Customer Data to third parties.

AssetIQ may engage approved subprocessors to assist in delivering the Services. Examples may include: • Microsoft Azure (cloud hosting and infrastructure) • Payment processing providers • Email delivery providers • Monitoring and security providers • Customer support systems

All subprocessors are subject to contractual obligations designed to protect personal information and Customer Data.

A current list of subprocessors may be made available upon request.

AssetIQ implements industry-standard security measures designed to protect personal information and Customer Data. Security controls may include, where applicable: • Microsoft Azure cloud infrastructure • Encryption in transit using TLS • Encryption at rest where supported • Multi-factor authentication • Role-based access controls • Audit logging • Security monitoring and alerting • Vulnerability management • Secure software development practices • Periodic security reviews • Backup and recovery procedures

While we take reasonable steps to secure information, no system can be guaranteed to be completely secure.

AssetIQ maintains backup and recovery procedures designed to support business continuity and minimize service disruption.

Backups are performed regularly and retained in accordance with operational requirements.

Recovery procedures are periodically reviewed and tested to help support service resilience.

AssetIQ retains information only for as long as necessary to: • Provide the Services • Meet contractual obligations • Resolve disputes • Comply with legal requirements

Following subscription termination: • Customer Data may be retained for up to ninety (90) days to facilitate recovery or migration • Data may subsequently be securely deleted or anonymized unless retention is legally required • Backup retention periods may vary based on operational and regulatory requirements

Customer Data may be stored or processed in countries where AssetIQ or its service providers operate. These locations may include: • Singapore • Australia • Japan • United States • Other jurisdictions supporting service delivery

Where international transfers occur, AssetIQ implements appropriate technical, contractual, and organizational safeguards to protect information.

AssetIQ may utilise artificial intelligence, machine learning, predictive analytics, and automation technologies to enhance platform functionality and user experience.

Customer Data will not be used to train publicly available artificial intelligence models without the customer's explicit consent.

Customers remain responsible for reviewing and validating business decisions based on AI-generated recommendations, forecasts, or insights.

AssetIQ maintains processes for identifying, investigating, and responding to security incidents.

In the event of a security incident affecting personal information or Customer Data, AssetIQ will: • Investigate the incident promptly • Take reasonable measures to contain and remediate the issue • Notify affected customers where required by applicable law or contractual obligations • Cooperate with relevant authorities where necessary

Subject to applicable privacy laws, individuals may have the right to: • Access personal information • Correct inaccurate information • Request deletion of personal information • Restrict processing • Object to processing • Request data portability • Withdraw consent where applicable

Requests may be submitted using the contact information provided below.

AssetIQ is intended for business and professional use.

The Services are not directed toward individuals under sixteen (16) years of age, and we do not knowingly collect personal information from children.

AssetIQ is committed to complying with applicable privacy and data protection laws, including: • Singapore Personal Data Protection Act (PDPA) • Australian Privacy Act • General Data Protection Regulation (GDPR), where applicable • Other applicable privacy and data protection regulations

AssetIQ continually reviews and improves its privacy and security practices to support compliance obligations and customer expectations.

AssetIQ may update this Privacy Policy from time to time.

Material changes may be communicated through: • The AssetIQ platform • Website notifications • Email communications

The updated version becomes effective on the date specified at the beginning of this Policy.

Continued use of the Services after the effective date constitutes acceptance of the revised Privacy Policy.

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact:

General Enquiries support@assetiq.sg

Website www.assetiq.sg