Privacy Policy

This Privacy Notice for TRIBEROI LLC (doing business as TribeROI) ("we," "us," or "our") describes how and why we might access, collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you:

· Visit our website at https://triberoi.com or any website of ours that links to this Privacy Notice

· Use the TribeROI Community Agent — the first agentic AI platform built to transform fragmented community data into business insights and board-ready ROI metrics

· Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, please contact us at privacy@triberoi.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice. You can find more details by using the section headings below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the choices you make.

Do we process sensitive personal information? No. We do not process sensitive personal information.

Do we collect information from third parties? No. We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

How do we keep your information safe? We have organizational and technical processes in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products, participate in activities on the Services, or contact us.

Personal Information Provided by You. The personal information we collect may include: names, email addresses, usernames, passwords, contact preferences, job titles, social accounts, and company name.

Sensitive Information. We do not process sensitive information.

Social Media Login Data. We may provide you with the option to register using your existing social media account (e.g., Facebook, X). If you choose to do so, we will collect certain profile information from the social media provider as described in Section 7.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information — such as your IP address and browser characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This includes device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for internal analytics.

We also collect information through cookies and similar technologies. For more information, see our Cookie Notice at https://triberoi.com/cookies.

The information we collect includes:

· Log and Usage Data — IP address, device information, browser type, pages viewed, searches, date/time stamps, and error reports

· Device Data — device type, operating system, browser model, and system configurationLocation

· Data — general location based on IP address. You may opt out by disabling location settings on your device

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following reasons:

· To facilitate account creation and authentication and otherwise manage user accounts

· To deliver and facilitate delivery of services to the user

· To respond to user inquiries and offer support

· To send administrative information to you about our products, services, and policy changes

· To request feedback about your use of our Services

· To send marketing and promotional communications (you may opt out at any time)

· To protect our Services through fraud monitoring and prevention

· To identify usage trends and improve our Services

· To determine the effectiveness of our marketing and promotional campaigns

· To save or protect an individual's vital interest, such as to prevent harm

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we have a valid legal reason to do so.

If you are located in the EU or UK: The GDPR and UK GDPR require us to explain the legal bases we rely on:

· Consent — where you have given us permission for a specific purpose. You may withdraw consent at any time.

· Performance of a Contract — where processing is necessary to fulfill our contractual obligations to you.

· Legitimate Interests — where processing is reasonably necessary to achieve our business interests without outweighing your rights.

· Legal Obligations — where processing is necessary for compliance with applicable law.

· Vital Interests — where processing is necessary to protect someone's safety.

If you are located in Canada: We may process your information if you have given specific or implied consent, or where permitted by law without consent (e.g., fraud investigations, legal compliance, business transactions).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations with specific third parties.

We may need to share your personal information in the following situations:

· Business Transfers — in connection with any merger, sale of company assets, financing, or acquisition of our business

· AI Service Providers — to power our AI features, your input and output data is processed by Anthropic (Claude) and Google Cloud AI. See Section 6 for full details.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some tracking technologies help maintain security, prevent crashes, save preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies for analytics purposes. We also use Cloudflare security services, which place cookies on your device to protect the Website from automated bot traffic. Specific information about how we use cookies and how you can refuse certain cookies is set out in our Cookie Notice at https://triberoi.com/cookies.

Google Analytics

We may share your information with Google Analytics to track and analyze use of the Services. To opt out, visit https://tools.google.com/dlpage/gaoptout. For Google's privacy practices, see https://policies.google.com/privacy.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: We offer products and features powered by artificial intelligence.

As part of our Services, we offer products and features powered by artificial intelligence and machine learning (collectively, "AI Products"). These tools are designed to enhance your experience and provide community analytics and ROI insights.

AI Service Providers

We provide AI Products through the following third-party AI service providers:

· Anthropic (Claude) — used for natural language processing, query routing, and agent intelligence

· Google Cloud AI — used for supplemental AI processing and infrastructure

Your input, output, and relevant personal information will be shared with these providers only as necessary to enable your use of the AI Products. Both providers are contractually prohibited from using your data to train their general models or for any purpose beyond service delivery, consistent with their published data processing terms.

Our AI Products are designed for:

· AI-powered community analytics and insights

· Predictive ROI modeling and C1-C2-C3 framework analysis

· Natural language processing and query routing

· AI automation and document/report generation

· AI search across community data sources

How to Opt Out

To opt out of AI processing, contact us using the contact information in Section 17. Please note that opting out of AI processing would prevent use of the core TribeROI service.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you register or log in using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile information from your social media provider, which may include your name, email address, friends list, and profile picture.

We will use the information we receive only for the purposes described in this Privacy Notice. We are not responsible for other uses of your personal information by your third-party social media provider, and recommend you review their privacy policy.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes in this Privacy Notice, unless required by law.

We will only keep your personal information for as long as your account is active, unless a longer retention period is required by law (such as tax, accounting, or other legal requirements).

Session data and query logs are retained for up to 24 months from the date of collection for product improvement purposes, after which they are deleted or anonymized. You may request earlier deletion by contacting us at privacy@triberoi.com.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or securely store and isolate it from further processing until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any such data, please contact us at privacy@triberoi.com.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have rights that allow you greater access to and control over your personal information.

In some regions (including the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws, including the right to: (i) request access and obtain a copy of your personal information, (ii) request rectification or erasure, (iii) restrict processing of your personal information, (iv) data portability, and (v) not be subject to automated decision-making. You may exercise these rights by contacting us as described in Section 17.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or the UK data protection authority.

Withdrawing Your Consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us. This will not affect the lawfulness of processing before withdrawal.

Opting Out of Marketing

You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us. You may still receive service-related communications necessary for account administration.

Account Information

To review or change your account information, log in to your account settings. Upon request to terminate your account, we will deactivate or delete your account from our active databases. We may retain some information to prevent fraud, troubleshoot problems, and comply with legal requirements.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference. No uniform technology standard for recognizing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard is adopted in the future, we will update this Privacy Notice accordingly.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a US resident, you may have specific rights regarding your personal information depending on your state of residence.

Categories of Personal Information We Collect

The table below shows the categories of personal information collected in the past twelve (12) months:

Collected:

· Names, email addresses, usernames, account names, IP address – Identifiers

· Names, contact information, job titles – Personal information (CA Customer Records)

· Job titles, company names – Professional or employment-related

Not Collected:

· Gender, age, race, ethnicity, national origin – Protected classification characteristics

· Transaction information, purchase history, financial details –. Commercial information

· Fingerprints and voiceprints – Biometric information

· Browsing history, search history, online behavior – Internet or network activity

· Device location – Geolocation data

· Images, audio, video recordings – Audio, electronic, sensory information

· Student records and directory information – Education information

· Profiles based on preferences and characteristics – Inferences from personal information

· N/A – Sensitive personal information

Your Rights

You have rights under certain US state data protection laws, including:

• Right to know whether or not we are processing your personal data

• Right to access your personal data

• Right to correct inaccuracies in your personal data

• Right to request deletion of your personal data

• Right to obtain a copy of personal data you previously shared with us

• Right to non-discrimination for exercising your rights

• Right to opt out of targeted advertising, sale of personal data, or profiling

How to Exercise Your Rights

To exercise these rights, you may submit a data subject access request, email us at privacy@triberoi.com, or contact us using the details in Section 17. We will verify your identity before processing your request.

Appeals

If we decline to take action on your request, you may appeal by emailing privacy@triberoi.com. We will respond in writing with an explanation of our decision. If your appeal is denied, you may submit a complaint to your state attorney general.

California 'Shine The Light' Law

California Civil Code Section 1798.83 permits California residents to request information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. To make such a request, contact us using the details in Section 17.

14. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This Privacy Notice satisfies the notice requirements defined in both Acts. You have the right to request access to or correction of your personal information at any time by contacting us.

Republic of South Africa

You have the right to request access to or correction of your personal information. If you are unsatisfied with how we address any complaint, you may contact the Information Regulator (South Africa) at https://inforegulator.org.za.

15. AI SESSION DATA USE

In Short: Your queries and session data may be stored to improve TribeROI. Data is shared with AI service providers only as necessary to deliver the service, under strict confidentiality obligations.

When you use TribeROI's Community Agent, we may collect and store your queries, inputs, and session interactions. This data is used for the following purposes:

· to process your requests and return accurate community analytics and ROI insight sService delivery

· to evaluate agent performance, identify errors, and improve response quality over time Product improvement

· to detect misuse and protect the integrity of the platform Security and fraud prevention

AI Service Providers. To power TribeROI's AI features, your input and output data is processed by Anthropic (Claude) and Google Cloud AI. These providers receive only the data necessary to fulfill your request. They are contractually prohibited from using your data to train their general models or for any purpose beyond service delivery, consistent with their published data processing agreements.

What we do not do. We do not sell your session data. We do not share your queries or outputs with other TribeROI customers or any third party for marketing purposes. We do not use your data to build profiles for advertising.

Data retention. Session data is retained for up to 24 months from the date of collection. You may request deletion of your session data at any time by contacting us at privacy@triberoi.com.

Opting out. If you do not wish your session data to be used for product improvement purposes, you may contact us to opt out. Please note that opting out of AI processing entirely would prevent use of the core TribeROI service.

16. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this document. If we make material changes, we may notify you by posting a prominent notice or by sending you a direct notification. We encourage you to review this Privacy Notice regularly.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us at:

TRIBEROI LLC

971 US Highway 202N

Branchburg, NJ 08876

United States

Email: privacy@triberoi.com

Website: https://triberoi.com

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To submit a request, please visit our data subject access request portal or contact us directly at privacy@triberoi.com. We will respond to all requests in accordance with applicable data protection laws.