Fygo Privacy Policy

Updated Date: 1/1/2026

Effective Date: 1/1/2026

The Fygo Privacy Policy ("Privacy Policy") describes how AXISSTORE TECHNOLOGY PTE. LTD.("Fygo", "we", "us", or "our") collects, uses, and discloses your personal information when you access and use our FygoOS operating system, including its web-based interface (the "Web Client"), mobile and desktop applications (the "Apps"), and Fygo Sync (our file synchronization service) (collectively, the "System"), or otherwise communicate with us regarding the System (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

In this Privacy Policy, the terms "personal information" and "personal data" are used interchangeably and refer to information relating to an identified or identifiable natural person. Under applicable U.S. laws, "personal information" is defined as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

This Policy applies to our services offered on FygoOS through both website and app. For specific programs, products, or Services offered by Fygo, individual Service-specific privacy policies may supersede and prevail over this Policy or supplement this Policy in relevant parts.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

This Agreement only applies to users located in a Relevant Jurisdiction, unless otherwise specified.If you are a user located in Japan or California(US), the terms set out under the name of your jurisdiction in the Jurisdiction-Specific Addenda at the end of this Policy apply to you in addition to the terms set out in the main body of this Privacy Policy. In the event of any inconsistency between an Addendum and the main body, the Addendum prevails to the extent of that inconsistency for users in the relevant jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last Updated" date and take any other steps required by applicable law.

What Information We Collect

The types of personal information we obtain about you depend on how you interact with and use our Services. This Section 2 describes: (A) information that is processed locally on your hardware device and is not accessible to Fygo; (B) information that Fygo does collect through the Services; and (C) how we treat non-identifying information when combined with other data.

2.1 Information Processed Locally on Your Hardware Device

For the avoidance of doubt, the categories of personal information and data listed under this Section 2.1 are collected and processed solely on your local hardware device and are not uploaded to, transmitted to, or stored on Fygo's servers. Accordingly, Fygo does not access, collect, or otherwise process such information, and does not disclose such information to any third party, except where we must collect and upload specific personal information to our servers in order to deliver a feature you have actively enabled, in which case we will give you prior notice and obtain any required separate consent at the point of activation.

Because the information described in this Section 2.1 is processed only locally on your hardware device, such information is outside the scope of this Privacy Policy, and Fygo is not in a position to directly respond to requests to exercise data subject rights (such as access, correction, or deletion) with respect to such information. However, upon your reasonable request, Fygo will provide the necessary technical assistance to enable you to access, manage, or delete such locally processed data on your own device.

Information processed locally on your hardware device includes, without limitation:

• Files and File Metadata: including documents, photos, videos, audio recordings, and similar content stored by you on the device, together with their associated metadata;

• Applications and Application Data: including applications you install within FygoOS and data generated by such applications in the course of your use;

• Other Locally Processed Data: any other data not expressly listed above that is processed solely on your local hardware device.

2.2 Information Fygo Collects Through the Services

The types of personal information we obtain about you depends on how you interact with and use our Services. Generally, we only collect your device information, application information and encrypted information to provide and improve Services.

Fygo does not intentionally collect or process your sensitive personal information, however, we receive your personal information you disclose to us, such as your Internet Protocol(IP) address and/or browser, encrypted transferred data and device characteristics,which is received automatically when you visit our Services. But they are not stored, used or analyzed in any form.

The following sections describe the categories and specific types of information we generally collect:

• In order to understand the usage of FygoOS, the scale of our business, and the level of user activity, we collect information on the installation events and activation events of FygoOS.

Please note that standalone installation-event and activation-event information, in and of itself, does not identify any specific natural person.

• In order to activate a commercial license and enable you to access additional features and entitlements, you are required to register a Fygo account. When you activate a commercial license, we collect your registered Fygo account information, activation key, license serial number, activation time, and device information. Such data is used for license verification, feature and entitlement management, technical support, and usage statistics analysis.

Standalone device information, log information, and similar technical information are, on their own, not capable of identifying a specific natural person. However, if we combine such non-identifying information with other information for the purpose of identifying a specific natural person, or if we use it in combination with personal information, then during the period of such combined use, such non-identifying information will be treated as personal information under this Privacy Policy. Except where we have obtained your authorization or where otherwise permitted or required by applicable laws and regulations, we will adopt appropriate safeguards and technical measures — including de-identification, pseudonymization, and/or anonymization — when processing such combined information.

How We Use Your Personal Information

The purposes for which Fygo collects and processes personal data may include, but not limited to:

• Operating the System to provide you proper experience of our Services;

• Enforcing or defending our policies or contract with you;

• Managing your Fygo Account;

• Business statistics and issue investigation (such as system crashes caused by applications);

• Improving our Services and products;

• To protect the rights, property and/or security of us, or any of our affiliates, business partners and/or customers;

• To comply with laws, regulatory obligations, and legal processes.

How We Share , Transfer, Disclosure Your Personal Information

To enable and support the functionality of our Apps , we integrate certain software development kits ("SDKs") provided by third parties. These SDKs are embedded solely for the purpose of delivering the features and services offered through our applications, and they operate on your device or within your browser when the relevant features are used.

When you use features powered by these SDKs, certain personal information may be transmitted directly from your device or browser to the relevant SDK providers. We do not sell your personal information to these third parties.

The categories of third-party SDKs currently integrated into our applications include: (i) crash analytics and performance monitoring SDKs, used to diagnose technical issues and improve application stability; (ii) social media sharing SDKs, used to enable content sharing to third-party platforms when you choose to do so; and (iii) map and location service SDKs, used to display map views and geographic information associated with your content..

Cross-Border Data Transfers

Personal information that you provide to us for account and service management purposes — such as your registration information, account credentials, and service-related records — is stored on our servers located in Singapore.

Please note that content you store on your NAS device (including but not limited to photos, videos, documents, and other files) is stored locally on your own device and is not uploaded to or stored on our servers, unless you expressly enable a specific feature that requires such transmission (for example, remote access or cloud backup services that you actively opt in to).

When transferring personal information to third parties located in foreign countries, we will take the measures required by applicable laws and regulations, such as confirming that the destination country maintains a personal information protection system substantially equivalent to that of your jurisdiction, or entering into appropriate data protection agreements with the recipient.

Third Party Websites and Applications

The Services may provide applications and links to websites operated by third parties. If you install applications or follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such applications and sites, including the accuracy, completeness, or reliability of information found on them. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by a third party. Our inclusion of such applications and links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Minor

We do not knowingly or intentionally collect personal information from individuals below the age of majority in their respective jurisdictions. Our Services are not directed to minors, and we do not encourage individuals under the applicable age of majority to use our Services.

If you believe we have collected personal information from an individual below the age of majority in their jurisdiction without parental/guardian consent, or if you are the parent or guardian of such an individual and wish to have their information removed, please contact us through the email address or physical address provided in the "Contact Us" section. Upon notification, we will promptly investigate the matter and take appropriate steps to delete any such personal information.

Security and Retention

Fygo employs multiple methods of data protection in order to minimize the risk of misuse, unauthorized access and disclosure, and loss of access. Some of these safeguards include the use of pseudonymization, data encryption, data hashing, and other technologies and permission control methods. When our employees directly handle or access your personal information, we do so on secured networks and through fine-grained permission control to limit who can access your information. Data you provide to us is encrypted and stored on Fygo-managed devices, depending on the service.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights

You are able to exercise your following privacy rights by contacting us via contact information in the Contact Us in accordance with the applicable law as well as subject to certain limitations at law, including but limited to:

• Right to know: You may have the right to know what personal information we have collected about you, including the categories of sources from which the personal information is collected, the business or commercial purpose for collecting or sharing personal information, information about third parties to whom we share the personal information, and the specific pieces of personal information we have collected about you.

• Right to Access: You may have the right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.

• Right to Delete: You may have the right to request that we delete personal information we maintain about you.

• Right to Correct: You may have the right to request that we correct inaccurate personal information we maintain about you.

• Right to Request Cessation of Use or Disclosure: You may have the right to request that we cease the use or disclosure of your personal information where such use or disclosure is not in accordance with applicable law or the terms under which the information was collected.

You may exercise any of these rights by contacting us using the contact details provided below. You have the right to appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Important Notices on the Scope of Rights Exercise

Given the nature of our products and services, the manner in which you may exercise the rights described above varies depending on where the relevant information is stored and which service it relates to. Please note the following:

• Data Stored Locally on Your NAS Device: Content and data stored locally on your NAS device (including but not limited to photos, videos, documents, and other files) reside entirely on your own device and are not accessible to us. Accordingly, the deletion, correction, or modification of such locally stored data must be carried out by you directly on your NAS device, and we are not in a position to process such requests on your behalf.

• Data Processed Through Fygo Connect: Where your personal information is collected, processed, or stored through the Fygo Connect service, the exercise of your rights in relation to such information is governed by the Fygo Connect Privacy Policy. Please refer to that policy for the applicable procedures and contact channels.

• Account Deactivation and Account Information Correction: Requests relating to the deactivation of your account, correction of account information, or similar account-level rights are handled through the Fygo Connect service. For details on how to exercise these rights, please refer to the Fygo Connect Privacy Policy.

Contact Us

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at [email protected].

Jurisdiction-Specific Terms

ADDITIONAL TERM FOR CALIFORNIA USER

Consumers residing in California are afforded certain additional rights with respect to their personal information under the California Consumer Privacy Act or ("CCPA") and the "Shine the Light" Law. If you are a California resident, this section applies to you.

Our collection and use of personal information ("Notice at Collection")

As described above, we have disclosed the information about our collection, use and disclosures of your personal information in the "How We Collect and Use Your Personal Information" and "How We Share Your Information" of this Privacy Policy. As required by certain state laws, we use extra tables below (served as "Notice at Collection") to explain this same information, including the categories of personal information we collect (and have collected over the preceding 12 months), types of recipients to which we disclose such information, and the ways we use each category of information.

As described above in "Security and Retention" of this Privacy Policy, we retain personal information for as long as necessary to provide the purposes as set out under How We Collect and Use Your Personal Information section, subject to any legal obligations to further retain your information, for purposes of legal claims or investigations, or as set out in this Privacy Policy. We are required by law to keep some types of information for certain periods of time (e.g. statute of limitations). If your personal information is no longer necessary for the legal or business purposes for which it is processed, we will generally destroy or anonymize that information.

Processing of Sensitive Personal Information

We do not collect users' sensitive data thus do not process requests to limit use and disclosure of sensitive personal information.

"Do Not Track" Signals

In addition, under California law, operators of online services are required to disclose how they respond to "do not track" signals or other similar mechanisms that provide consumers the ability to exercise choice regarding the collection of personal information of a consumer over time and across third party online services, to the extent the operator engages in that collection.

However, we ensure that we do not track your personal information through any online methods, so at this time we do not respond to "do not track" signals. And we do not knowingly permit third parties to collect personal information about an individual’s online activities over time and across different online services.

Exercising your consumer rights

If you are a California resident, you have the right to request, as applicable:

• To know your personal information the business has collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about you;

• To correct your personal information (for example, if it is inaccurate or incomplete);

• To delete your personal information;

• To opt out of the sales or "sharing" (as defined under CCPA) of your personal information.

The rights described above are, in substance, addressed in the "Your Rights" section earlier in this Privacy Policy. Please refer to that section for a general description of how to exercise your rights, the verification procedures that apply to your request, the use of authorized agents, and important notices regarding the scope of rights exercise — including the fact that data stored locally on your NAS device must be managed by you directly on the device, and that rights relating to data processed through Fygo Connect, as well as account deactivation and account information correction, are governed by the Fygo Connect Privacy Policy.

More details on how to make these requests are in the "Your Rights" section above. You can also email us directly at the email address in Section Contact Us to submit a request or designate an authorized agent to submit a request on your behalf. We may ask for additional information to verify the authenticity or your request or a request submitted by an authorized agent. We will not discriminate against you if you exercise your rights under the CCPA.

We strive to process all verified requests within 45 days in accordance with the California Consumer Privacy Act (CCPA). If necessary, we will extend the reasonable period and provide the rationale for the extension.

Notice of Right to Opt-out of Sale/Sharing

You have the right, at any time to direct a business that sells or "shares" personal information about you to third parties not to sell/share your personal information. This is the right to opt-out of sale/sharing. The meaning of "sell" and "sharing" under the CCPA is broadly defined and can include sharing your information for any economic benefit. To the extent that any such third party is not considered a service provider or contractor under CCPA or CCPA is interpreted in a way that any action of Fygo is a "sale" or "sharing".

However, we do not share and sell your information. If you believe that we have exhibited such action and you wish us not to sell or share such information, please submit your request using the methods listed below.

Email: [email protected]

Shing The Light Law

For consumers residing in California, we do not share your personal data with third parties for those third parties’ direct marketing purposes.

ADDITIONAL TERM FOR JAPANESE USER

This "ADDITIONAL TERM FOR JAPANESE USER" (this "Addendum") supplements the Fygo Privacy Policy and applies specifically to the handling of personal information of users residing in Japan. In the event of any inconsistency between the provisions of this Addendum and the provisions of the Policy, the provisions of this Addendum shall prevail with respect to users residing in Japan. Fygo complies with the Act on the Protection of Personal Information of Japan (the "APPI") and related guidelines to ensure the proper handling of your personal information.

Purpose of Use

We will use the personal information we collect only within the scope of the purposes described in "4. How We Use Your Personal Information" of the Policy. We will not use your personal information beyond this scope without obtaining your prior consent, except where permitted by the APPI or other applicable laws.

Provision to Third Parties

We will not provide your personal information to third parties (including those located outside of Japan) without obtaining your prior consent, except as permitted by APPI (e.g., required by law, urgent necessity to protect life or property, or business succession).

Cross-Border Transfer

You have acknowledged and agree that we may transfer and store your personal information on servers located in Singapore.This means your personal information may be transferred to, stored in, or accessed from countries or regions outside your country of residence, whose data protection laws may differ from those of your jurisdiction. You can visit the official website of the Japan Personal Information Protection Commission to obtain information regarding Singapore's personal information protection laws

When providing personal information to third parties in foreign countries, we will take necessary measures required by laws and regulations, such as confirming that the destination country has a personal information protection system equivalent to that of Japan, or concluding appropriate data protection agreements with the recipient.

Security Management Measures

We store the personal data of our Japanese user in the data center located in Singapore.

We take necessary and appropriate measures to prevent the leakage, loss, or damage of personal information and to otherwise manage the security of personal information (including, but not limited to, the measures described in "9. Security and Retention" of the Policy). If you wish to know the specific details of the security management measures we have implemented, please contact us at the inquiry details below.

Your Rights Regarding Retained Personal Data

Users in Japan have the right to request the following regarding "Retained Personal Data" held by us: notification of the purpose of use; disclosure; correction, addition, or deletion of content; suspension of use or erasure; and suspension of provision to third parties. Please contact us at the email address listed in the "Contact Us" section below. We will respond without delay in accordance with the law after verifying your identity.

The rights described above are, in substance, addressed in the "Your Rights" section earlier in this Privacy Policy. Please refer to that section for a general description of how to exercise your rights, the verification procedures that apply to your request, the use of authorized agents, and important notices regarding the scope of rights exercise — including the fact that data stored locally on your NAS device must be managed by you directly on the device, and that rights relating to data processed through Fygo Connect, as well as account deactivation and account information correction, are governed by the Fygo Connect Privacy Policy.

To exercise any of the rights described above, please contact us at the email address listed in the "Contact Us" section below. After verifying your identity, we will respond without undue delay in accordance with the APPI. Where a request is made in a manner prescribed by the APPI (such as requests for disclosure), we may charge a reasonable fee to the extent permitted by law, and will notify you of the applicable fee in advance.

Contact Us

For any questions, complaints, or Requests for Disclosure, etc., regarding this Addendum or our handling of personal information, please contact:

Email: [email protected]

Address: 112 ROBINSON ROAD, #03-01, ROBINSON 112, SINGAPORE 068902