Fygo Seek Privacy Notice

Version 1.1

Updated Date: 13/10/2026 Effective Date: 13/10/2026

1. About this Notice

This Fygo Seek Privacy Notice ("Notice") describes how AXISSTORE TECHNOLOGY PTE. LTD. ("Fygo", "we", "us" or "our") collects, uses and discloses personal information when you install, access or use Fygo Seek, visit a Seek sharing link, manage a Seek licence or contact us about Seek (collectively, the "Services").

This Notice supplements the Fygo OS Privacy Policy (the "Main Policy"). It sets out only the processing that is specific to, or differs for, Seek. For all matters not addressed here — including our general data-handling principles, security programme, international-transfer mechanisms and the full description of your rights — the Main Policy applies. If this Notice and the Main Policy conflict with respect to Seek, this Notice controls to the extent of the conflict.

Fygo hardware and other Fygo products remain governed by their own applicable privacy notices.

In this Notice, "personal information" and "personal data" have the same meaning: information relating to an identified or identifiable individual, including information that can reasonably be linked to an individual, device or household where applicable law so provides. Other capitalised terms have the meaning given in the Main Policy.

2. Who we are and our role

Fygo is the controller of personal information that we process for our own account, service-administration, security, support and analytics purposes.

Because Seek runs on your NAS, where your NAS means your personal hardware including Fygo NAS devices and other self-owned devices, media files, project data, review comments, annotations and local AI search indexes are stored and processed on your device under your control. For that content, you (or your organisation) are the controller and Fygo processes it, if at all, only as described in this Notice..

"You" includes account holders, team members, external reviewers and other individuals whose personal information is processed in connection with the Services.

3. Changes to This Privacy Policy

We may update this Policy to reflect changes in Seek, our practices or applicable law. We will identify the updated version and effective date and make the revised Policy available through Seek or the relevant website. For material changes, we will provide the notice, advance information and renewed consent required by applicable law before the changed processing begins.

4. How We Collect and Use Your Personal Information

Seek is a feature of Fygo OS that allows an authorized Fygo OS user holding a valid Seek licence (the "Sharer") to share videos and images stored on the Sharer's NAS with other people (the "Recipients") by generating a sharing link.

Seek does not provide cloud caching or cloud playback. Fygo does not create or upload a low-bitrate review copy to a Seek cloud server, object-storage service or content-delivery network for hosted storage or playback distribution. Where encrypted relay connectivity is used for a sharing link, Fygo forwards the encrypted transmission without accessing its plaintext and without persistently storing the media as a hosted content repository.Separate account, licence, connection, security, support and diagnostic records may nevertheless be received and stored by Fygo.

If a future version introduces cloud-based features, we will update this Notice before those features are made available to you.

• Information that stays on your NAS. When a Sharer creates a sharing link, the link identifier, the shared media and the access settings chosen by the Sharer — which may include an access password, a validity period, and download and comment permissions — are generated and stored on the Sharer's own NAS. Fygo does not receive, store or have access to the shared media, the link password or these settings.

• How sharing works. Seek does not provide cloud caching or cloud playback. Fygo does not create or upload a low-bitrate review copy to a cloud server, object-storage service or content-delivery network for hosted storage or playback distribution, and does not operate a relay, proxy or transit server for Seek. Shared content is transmitted directly between the Recipient's device and the Sharer's NAS over the Sharer's own internet connection. Separate account, licence, connection, security, support and diagnostic records may nevertheless be received and stored by Fygo.

• Supporting services. To verify your entitlement to Seek and to help your NAS be reached, the following Fygo services may process limited technical data:
  (a) Licence verification： activation code, licence status and type (free or paid), NAS identifier, Fygo account identifier and verification timestamps;
  (b) Address resolution / dynamic DNS: the domain name bound to your NAS, its current public IP address and resolution request records;
  (c) Fygo account authentication : as described under "Recipients who comment" below.
  None of these services transmits or stores the shared media, link passwords or comment content.

• Recipients who only view. A Recipient does not need a Fygo account to open a sharing link and view shared content. Fygo also collects certain information from A Recipient who merely view a shared link, including their IP address, access records (including the time and frequency of visits), and browser and device information. Such information is collected for purposes including, without limitation, (i) displaying to the sharer the number of times the link has been accessed, and (ii) enabling Fygo to conduct product analytics and statistical analysis.

• Recipients who comment. To post a comment, a Recipient does not need to sign in with a Fygo account, but needs to set a nickname. If the Recipient signs in with a Fygo account, Fygo processes the Recipient's Fygo account identifier, nickname and authentication records (sign-in time, IP address, device or browser type and authentication result) to verify the Recipient's identity and protect account security. The comment content itself is transmitted directly to and stored on the Sharer's NAS; Fygo does not receive or store comment content.

Because shared media, access logs and comments are stored on the Sharer's NAS and not on Fygo's servers, as the operator of that NAS, the Sharer determines the purposes and means of processing any personal information of Recipients recorded there and is responsible for handling it in accordance with applicable law. Fygo acts only as the provider of the Seek software and the supporting services described above.

5. How We Share Transfer and Disclose Your Personal Information

We use the personal information described in Section 4 to:

• provision, activate and administer Seek licences and entitlements;

• establish and maintain connections, including encrypted relay for sharing links;

• authenticate users, detect and prevent fraud, abuse and security incidents;

• provide customer support and respond to your requests;

• diagnose, maintain and improve the reliability and performance of the Services;

• comply with legal obligations and enforce our terms.

• We do not use content stored on your NAS (media, comments, annotations, search indexes) to train models, for advertising or for any purpose of our own.

6. Sharing links you create

When you create a review-sharing link, the content you choose to share, including media, reviewer names, comments and annotations, becomes accessible to anyone who has the link, subject to any expiry or access restrictions you set. This disclosure is made at your direction and not by Fygo. Fygo does not access the plaintext of shared content and does not store it. Where encrypted relay connectivity is used, Fygo only forwards the encrypted transmission.

Before sharing, please make sure you are entitled to share the content and any personal information it contains, and set appropriate expiry and access restrictions where available. You can revoke a link at any time from within Seek. If you received a link and have questions about the content, please contact the person who shared it, as that person controls the content.

7. Your Rights

• Rights you may have

Depending on where you live, you may have rights to know or access personal information, obtain a copy, correct inaccurate information, delete information, restrict or object to processing, withdraw consent, request portability, opt out of certain disclosures or profiling, and appeal a refusal. You may also complain to a competent privacy or data-protection authority.

• How to exercise your rights depends on where the information is held

Seek runs on your NAS, and the current version does not provide cloud caching or cloud playback. As a result, the way you exercise your rights differs according to where the relevant information is stored.

Content and data stored on your NAS. Media, projects, previews, review comments, annotations, local AI search indexes and other content stored on your NAS reside entirely on your own device and are not accessible to Fygo. Access, correction, deletion or export of such data must be performed by you, or by the account holder or administrator who manages the device, using the controls available in Seek or FygoOS. We are not in a position to act on data-subject requests concerning data held only on your NAS, though we may provide reasonable technical assistance on request.

Records held by Fygo. Account, licence, connection, security, support and diagnostic records that Fygo receives and stores, as described in Section 4, are held by Fygo. You may exercise your rights concerning these records by contacting [email protected].

Data processed by other Fygo services. Where information is processed by another Fygo service (for example, Fygo Connect), please refer to the privacy notice for that service for the applicable procedures.

Account-level operations. Account deactivation, account correction and certain identity-related functions are managed at the FygoOS or Fygo platform level. Please follow the guidance in the Main Policy for those operations.

• External reviewers and link recipients

If your personal information was processed by Seek because an account holder invited you to review content, or included your name or comments in a review-sharing link, that account holder controls the relevant content on their NAS. Please direct requests concerning that content, including removal of your comments or annotations or revocation of a link, to the account holder in the first instance. We will assist where appropriate. You may contact Fygo directly at [email protected] for any records that Fygo itself holds about you.

• Controls available to you

You may use the account, Seek or FygoOS controls available to you to manage account details, projects, media and permissions, review-sharing links (including setting expiry and revoking links), local AI search indexes, optional diagnostic reporting where offered, and other local content.

• Separate actions

Account deletion, licence termination, NAS unbinding, member removal, link expiry or revocation and deletion of NAS content are separate actions. Performing one does not automatically perform the others. For example, terminating a licence does not delete content on your NAS, and deleting content on your NAS does not delete account or licence records held by Fygo.

• Verification, agents, timing and exceptions

We may verify your identity and authority before responding. An authorised agent may submit a request where permitted by law, but we may require proof of authorisation and direct identity verification. We respond within the period required by applicable law and do not discriminate against you for exercising a privacy right. Some rights are subject to lawful exceptions, including security, the rights of others and legal retention obligations.

8. Other matters governed by the Main Policy

The legal bases for our processing, the categories of recipients to whom we disclose personal information, international transfers, retention periods, security measures, our approach to children's data and how we notify changes are as described in the Main Policy, and apply equally to the account, licence, connection, security, support and diagnostic records described in Section 4 of this Notice. Specific to Seek: content stored on your NAS, including media, projects, comments, annotations and local AI search indexes, is not received, transferred or retained by Fygo and remains under your control; relay traffic for sharing links is encrypted and is not decrypted or persistently stored by Fygo; and where Seek is provisioned under a team or organisational licence, your organisation's administrator may access account and activity information relating to that licence. Any future feature that would result in Fygo receiving media content will be notified in Seek before it takes effect.

9. Contact Us

Should you have questions about this Policy or wish to exercise a privacy right, contact us at [email protected]. Service and contractual questions may be sent to [email protected].

AXISSTORE TECHNOLOGY PTE. LTD.
112 Robinson Road, #03-01, Robinson 112
Singapore 068902

JURISDICTION SPECIFIC ADDENDA

These addenda supplement the Fygo Seek Privacy Policy. They apply where the relevant law applies to you or our processing and prevail over the main Policy to the extent of a conflict required by law.

1. ADDITIONAL TERMS FOR CALIFORNIA USERS

This section applies to California residents where Fygo is subject to the California Consumer Privacy Act, as amended (CCPA). It provides a Notice at Collection and additional information about California privacy rights.

Our Collection and Use of Personal Information Notice at Collection

The table summarizes the categories of personal information that we collected during the preceding 12 months, the sources and business purposes, and the categories of recipients. We do not sell personal information or share it for cross-context behavioral advertising.

Shared content is transmitted directly between the Recipient's device and the Sharer's NAS over the Sharer's own internet connection. Fygo does not operate a relay, proxy or transit server for Seek and therefore does not receive the shared media, the Recipient's IP address when viewing content, or any record of who accessed a link or when.

Retention is described in Security and Retention above. We retain each category only for the period reasonably necessary for the disclosed purpose, subject to legal obligations and claims.

Do Not Track and Opt-Out Preference Signals

We do not sell personal information or share it for cross-context behavioral advertising. We do not use conventional browser Do Not Track signals as a separate consent mechanism. Where an opt-out preference signal such as Global Privacy Control is legally applicable to a processing activity, we honor it as required.

Exercising Your Consumer Rights

Subject to exceptions, California residents may request to know, access, correct or delete personal information and obtain information about sources, purposes and recipients. You may exercise rights at [email protected]. We may verify your identity and an authorized agent's authority. We ordinarily respond within 45 days and may extend as permitted by law. We will not discriminate against you for exercising a CCPA right.

Notice of Right to Opt Out of Sale or Sharing

We do not currently sell personal information or share it for cross-context behavioral advertising. If that practice changes, we will provide a clear opt-out method and honor applicable opt-out preference signals before the practice begins.

Shine the Light

We do not disclose personal information to third parties for their own direct marketing purposes as addressed by California's Shine the Light law.

2.ADDITIONAL TERMS FOR EEA, UK, AND SWITZERLAND USERS

These terms apply where the EU GDPR, UK GDPR or Swiss Federal Act on Data Protection applies. References to the GDPR include the UK GDPR and applicable Swiss requirements where the context permits.

Controller

The controller is AXISSTORE TECHNOLOGY PTE. LTD. You may contact the controller through the Contact Us details above.

Legal Bases

Where applicable law requires a legal basis, we rely on: performance of a contract (licence administration, connectivity, support); legitimate interests (security, abuse prevention, service reliability, limited analytics); legal obligation; and consent where required by local law, which you may withdraw at any time. Further detail is in the Main Policy.

Your Rights

Subject to the conditions and exceptions set out in the GDPR, you have the following rights in relation to personal data of which Fygo is the controller:

• Access. To obtain confirmation whether we process

• Rectification. To have inaccurate personal data corrected and incomplete personal data completed.

• Erasure. To have your personal data erased where, for example, it is no longer necessary for the purposes for which it was collected, you withdraw consent on which the processing is based, you object and there are no overriding legitimate grounds, or the processing is unlawful.

• Restriction. To have processing restricted while the accuracy of the data is contested, where the processing is unlawful but you oppose erasure, where we no longer need the data but you require it for legal claims, or while an objection is being assessed.

• Portability. To receive personal data you have provided to us, where we process it by automated means on the basis of your consent or a contract with you, in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible. This applies in particular to account and licence data you have provided.

• Objection. To object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing, you may object at any time and we will stop without exception. Seek does not use your personal data for direct marketing.

• Withdrawal of consent. Where processing is based on your consent, to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

• Automated decision-making. Not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. Seek does not make decisions of this kind. Licence verification and authentication checks are automated technical controls that determine whether a licence or sign-in is valid; they do not evaluate personal aspects of you and do not produce legal or similarly significant effects within the meaning of the GDPR.

How to exercise your rights

Records held by Fygo. You may exercise the rights described in section “Your Rights” by contacting us at [email protected] or through the contact details for our data protection officer and, where applicable, our representative in the European Union or the United Kingdom set out in the Main Policy. Account-level operations, including account deactivation and correction of account details, are managed at the FygoOS or Fygo website; please follow the guidance in the Main Policy for those operations.

Data on the Sharer's NAS. If you are the Sharer, you can access, correct, export or delete shared media, access settings, comments and access logs directly on your NAS using the controls in Seek or FygoOS, and you can revoke a sharing link or change its password, validity period or permissions at any time. If you are a Recipient and your request concerns comments you have posted, access logs recording your visit, or content in which you appear, please contact the Sharer who created the link. Fygo is not in a position to access, correct or erase data held only on a Sharer's NAS. We may provide reasonable technical assistance to a Sharer to help them respond to a request.

Recipients who comment. If you have signed in with a Fygo account to comment, Fygo holds your account identifier, nickname and authentication records, and you may exercise your rights in respect of those records with Fygo. Your comment content is held only on the Sharer's NAS and requests concerning it should be directed to the Sharer.

Other Fygo services. Where personal data is processed by another Fygo service, please refer to the privacy notice for that service.

Separate actions. Erasure of records held by Fygo, deletion of your Fygo account, termination of a Seek licence, unbinding a NAS, revoking a sharing link and deletion of content on a NAS are separate actions. Performing one does not automatically perform the others.

Identity verification, time limits and cost

We may ask you to provide information reasonably necessary to confirm your identity before acting on a request. Where you act through an authorised representative, we may

Where we do not act on your request, we will inform you without delay, and at the latest within one month, of the reasons and of your right to lodge a complaint with a supervisory authority and to seek a judicial remedy.

Complaints and remedies

If you consider that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement. If you are in the United Kingdom, you may complain to the Information Commissioner's Office. If you are in Switzerland, you may complain to the Federal Data Protection and Information Commissioner. You also have the right to an effective judicial remedy against a legally binding decision of a supervisory authority and against a controller or processor. We would appreciate the opportunity to address your concerns before you approach a supervisory authority, but you are not required to contact us first.