This Privacy Policy explains how AntiSession ("we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use our web and mobile application at antisession.com (the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

AntiSession (a Kentucky Marketing Consulting, LLC experiment) is a meeting cost-tracking platform that helps teams understand the real dollar cost of their meetings, powered by participant salary data. For privacy inquiries, contact us at info@antisession.com.

• Account Registration – Name, email address, profile picture (from OAuth providers) • Salary Data – Annual salary (USD), used privately for meeting cost calculation • Meeting Content – Meeting titles, agenda topics, duration, attendee count • Invitations – Email addresses of invited colleagues • Profile Settings – Preferences and account configuration

When you use the Service, we or our third-party partners may automatically collect: • Usage Data – features used, meetings created, templates saved, votes cast, pages visited • Device & Browser Information – device type, operating system, browser type and version • Log Data – IP address, access times, referring URLs, pages viewed, error logs • Cookies & Tracking Technologies – session cookies (required for login), functional cookies (preferences), and advertising cookies served by Google AdSense/AdMob

If you sign in using Google or Microsoft OAuth, we receive basic profile information (name, email, profile photo) as permitted by your OAuth authorization. We do not receive your Google or Microsoft password. If you connect your Google Calendar or Apple Calendar, we receive read-only access to your calendar data solely to assist with meeting scheduling features. We do not modify, store, or share your calendar events beyond what is required to provide this feature.

• Provide the Service – process meeting cost calculations, display leaderboard data, enable templates, voting, and invitations • Salary Calculations – your salary is used exclusively and privately to calculate your contribution to meeting costs; it is never shown to other users or shared with third parties • Communication – send invite emails on your behalf, account verification emails, and Service-related notifications • Security & Fraud Prevention – detect and prevent unauthorized access and abuse • Service Improvement – analyze usage patterns to improve features and fix bugs • Advertising – serve contextual and interest-based advertisements through Google AdMob (mobile) and Google AdSense (web); we do not use your salary data for advertising purposes • Legal Compliance – comply with applicable laws and respond to lawful requests

We treat your salary information with heightened care: • Private by Design – your salary is stored separately and is never displayed to meeting participants, colleagues, or third parties • Limited Use – salary data is used only to calculate your share of meeting costs; it is not used for advertising targeting, scoring, or any other purpose • No Sale – we do not sell your salary information under any circumstances • Fallback Data – if you do not provide a salary, we use Bureau of Labor Statistics (BLS) national average estimates as a fallback; this data is public and does not identify you • Account-Linked Lock – once salary is linked to a registered account, it cannot be edited by meeting organizers

We do not sell your personal information. We share data only in the following limited circumstances:

We may share data with trusted vendors who help us operate the Service (e.g., cloud hosting, email delivery, analytics). These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security standards.

We use Google, Microsoft and Apple OAuth for authentication and Google AdSense/AdMob for advertising. These providers may collect data through these integrations subject to their respective privacy policies. They may use cookies and device identifiers to serve personalized ads. See Section 7 for opt-out options.

If you share a public meeting link, the meeting's cost data and title may be visible to anyone with that link. You control whether to enable public links.

When you invite someone to a meeting by email, their email address is used to send that invitation. Recipients who do not register are not retained in our systems beyond the invitation.

We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of AntiSession, our users, or the public.

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on the Service before your information is transferred.

We may share aggregated, anonymized data (e.g., "average meeting cost across industries") that cannot reasonably be used to identify you.

• Account information – Until account deletion plus 30 days • Salary data – Until account deletion • Meeting records – Until you delete them or account closure • Log and usage data – Up to 12 months • Invite tokens – 30 days or upon acceptance/rejection • Backup copies – Up to 90 days after deletion You may request deletion of your data at any time (see Section 9).

We use the following types of cookies and tracking technologies: • Essential/Session – Login session management, security (required for Service) • Functional – Remembering your preferences • Analytics – Understanding usage patterns (anonymized) • Advertising (Google AdSense/AdMob) – Serving and measuring ad performance You can manage cookies via your browser settings. To opt out of Google ad personalization, visit adssettings.google.com. By continuing to use the Service, you consent to our use of cookies as described above.

The Service is not directed to individuals under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without appropriate consent, please contact us at privacy@antisession.com and we will promptly delete such information.

You may access and update most of your account information directly through your profile settings.

You may request deletion of your account and associated personal data by emailing privacy@antisession.com. We will process deletion requests within 30 days, subject to legal retention obligations.

Upon request, we will provide you with an export of your personal data in a machine-readable format where technically feasible.

You may opt out of promotional or non-essential emails at any time by clicking "unsubscribe" in any email or by contacting us. You cannot opt out of essential service-related communications.

You may revoke calendar integration permissions at any time through your Google Account settings or Apple device settings.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): • Right to Know – request disclosure of the categories and specific pieces of personal information we have collected • Right to Delete – request deletion of your personal information, subject to certain exceptions • Right to Correct – request correction of inaccurate personal information • Right to Opt Out of Sale/Sharing – we do not sell your personal information; however, Google advertising may constitute "sharing" for cross-context behavioral advertising purposes. You may opt out by adjusting your Google Ad settings or using a browser opt-out tool • Right to Non-Discrimination – we will not discriminate against you for exercising your privacy rights To exercise these rights, email privacy@antisession.com with "California Privacy Request" in the subject line. We will verify your identity before responding. We will respond within 45 days.

If you are located in the European Economic Area (EEA) or United Kingdom, please be aware that AntiSession is currently a single-person bootstrapped operation. While we do protect privacy, we have not yet built the full scaffolding required for GDPR compliance. We will expand this section when the necessary systems are in place. Until then, please review our general privacy practices described throughout this policy.

We implement industry-standard technical and organizational security measures to protect your personal information, including: • Encryption in transit (HTTPS/TLS) • Access controls limiting data access to authorized personnel only • Regular security reviews and monitoring • OAuth-based authentication (we do not store raw passwords for Google/Microsoft sign-ins) Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access caused by factors outside our reasonable control.

The Service may contain links to external websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with AntiSession, including: • Google Privacy Policy: policies.google.com/privacy • Microsoft Privacy Statement: privacy.microsoft.com/privacystatement • Bureau of Labor Statistics: bls.gov/bls/blsprivacy.htm

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where practicable, by sending an email notification to registered users. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

For privacy-related questions or requests: AntiSession Email: privacy@antisession.com General: info@antisession.com Website: antisession.com