Privacy & Data Protection

Privacy Policy,and your choices.

This Privacy Policy describes how Zom Technologies LLC (“ZOM”) collects, uses, and discloses information, and what choices you have with respect to the information.

Effective date · May 26, 2026

01 · Scope

The scope ofthis policy.

This Privacy Policy governs ZOM's Services, Websites, and the other interactions you have with us. A separate Master Subscription Agreement governs Service Data.

This Privacy Policy applies to ZOM's products and services, including applicable mobile and desktop applications (collectively, the "Services"), ZOM websites (collectively, the "Websites") and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with ZOM. If you do not agree with the terms, do not access or use the Services, Websites, or any other aspect of ZOM's business.

This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the ZOM platform ("Third-Party Services"), or any other third-party products, services or businesses. In addition, a separate agreement governs delivery, access, and use of the Services (the "MSA"), including the processing of any data submitted through the Services ("Service Data").

02 · Data collection

Information ZOMcollects and receives.

ZOM may collect, generate, and receive Service Data and other information in a variety of ways depending on how you interact with our Services.

01Content

Service Data

Uploaded documents, client information, portfolio data, financial data from integrations, research queries, meeting notes, and custom configurations.

02Account

Account Information

Email address, phone number, password, and billing details for account creation and management.

03Behavior

Usage Information

Metadata about how you interact with the Services, including features used and research queries made.

04Logs

Log Data

Server logs including IP address, browser type, settings, and timestamps retained for 365 days.

05Device

Device Information

Device type, operating system, device settings, unique identifiers, and crash data.

06Cookies

Cookie Information

Cookies and similar technologies used to collect information about your browsing activities.

03 · Data usage

How ZOMuses information.

Information is used to operate and improve the Services, in line with the applicable MSA and as required by law.

01

Service Data Usage

Service Data will be used by ZOM in accordance with the applicable MSA, Customer's use of Services functionality, and as required by applicable law. ZOM is a processor of Service Data and Customer is the controller.

ZOM uses Information in furtherance of our legitimate interests in operating our Services, Websites, and business.

02

Specific Use Cases

  • Provide, update, maintain and protect our Services
  • Support research, analysis, and advisor work-product features
  • Comply with applicable law and legal process
  • Communicate with you about Services
  • Develop and provide additional features
  • Investigate and prevent security issues
03

Data Retention

Uploaded documents and related customer content are retained to provide the Services unless and until a deletion request is submitted through the Settings page. After a verified request is received, ZOM will delete or anonymize the requested data subject to any legal, regulatory, or contractual retention obligations.

Until requested

Documents retained until a deletion request is submitted in Settings

365

Days application log data retained

3

Years applicant data retained

04 · Your rights

Control overyour data.

Depending on where you live, you may have statutory rights to access, correct, or delete your personal data.

01

Statutory Rights

Individuals located in certain US States such as California, Virginia, and countries including the European Economic Area, Switzerland, and the United Kingdom have certain statutory rights in relation to their personal data.

Subject to any exemptions provided by law, you may have the right to request access to Information (in a portable form or otherwise), as well as to seek to update, delete or correct this Information.

02

Exercise Your Rights

Requests to delete uploaded documents can be submitted through the Settings page in the ZOM product. Other privacy rights requests, or requests from users who cannot access the Settings page, may be sent via email at:

Zom Technologies LLC
Attn: Data Privacy Officer
Pennsylvania, United States

05 · Data deletion

Deletion andright to erasure.

You can request deletion of your personal data and uploaded documents at any time, subject to verification and lawful retention obligations.

01

Your Right to Request Deletion

Subject to applicable law, individuals have the right to request the deletion or erasure of their personal data and uploaded documents held by Zom Technologies LLC (“ZOM”), including rights provided under the General Data Protection Regulation (“GDPR”) Article 17 and applicable U.S. state privacy laws such as the California Consumer Privacy Act (“CCPA”).

02

How to Submit a Request

Requests to delete personal data and uploaded documents should be submitted through the Settings page in the ZOM product. If you cannot access the Settings page, you may contact ZOM’s Data Privacy Officer at:

Zom Technologies LLC
Attn: Data Privacy Officer
Pennsylvania, United States

To protect user privacy and security, ZOM may require verification of identity prior to processing any deletion request.

03

Deletion Process

Upon receipt and verification of a valid deletion request submitted through Settings or to the Privacy Officer, ZOM will:

  • Review the request for applicability and legal or contractual retention obligations
  • Identify all systems where the requester’s personal data and uploaded documents are stored, including application databases, account records, and integrated services
  • Delete or anonymize personal data that is not subject to lawful retention requirements
  • Ensure deletion actions are logged internally for compliance and audit purposes

Where personal data cannot be deleted due to legal, regulatory, or contractual obligations, such data will be restricted from further processing and retained only as required by law.

04

Response Time (SLA)

ZOM will respond to verified data deletion requests within 30 days, or such shorter period as required by applicable law. If additional time is required due to the complexity of the request, ZOM will notify the requester accordingly.

05

Confirmation

Once a deletion request has been completed, ZOM will provide written confirmation to the requester.

Questions about this policy?

Talk to ourprivacy team.

Please feel free to contact ZOM if you have any questions about this Privacy Policy or ZOM's practices, or if you are seeking to exercise any of your statutory rights.