Privacy Policy

This Privacy Policy ("Policy") explains how Alpha Level, Inc. (collectively, "Alpha Level", "we", "us" or "our") collects, stores, uses, and discloses personal data about you, how we use it, how and when it may be shared, the rights and choices you have with respect to your personal data, how we communicate with you and how you can make requests or submit inquiries to us about your personal data.

1. About Us

Alpha Level offers a holistic, vendor-agnostic alert management platform built for security operations teams. It continuously consumes and classifies incoming alerts, automatically filtering out noise using precision AI techniques.

2. What Does This Policy Cover

This Policy applies to personal data we collect both online and offline, including personal data we collect through our website, currently located at www.alphalevel.ai (collectively the "Sites"), in connection with other products and services we provide you that reference this Policy (together with the Sites, the "Services"), and any other interactions you may have with us including at or through conferences, events, visits to our offices, electronic newsletters or communications.

In this Policy, "personal data" means any information that identifies, relates to, describes, is reasonably capable of being associated with or reasonably can be used to identify an individual or household and other data that is linked to personal data or is otherwise defined as "personal data," "personal information," or "personally identifiable information" by applicable laws.

This Policy does not apply to any products, services, websites, or content that are offered by third parties or have their own privacy policy.

3. How Is This Policy Updated

We may modify this Policy from time to time. If we make changes, we will revise the "Last Updated" date at the top of the Policy on our Sites and use reasonable efforts to provide you additional notification by sending you an email notification. We encourage you to review this Policy each time you visit our Sites to stay informed of our privacy practices and the choices available to you.

4. Information We Collect

The personal data we collect about you depends on how you interact with us or use our Services. We describe below the categories of personal data we collect and the sources of this information.

Information You Provide to Us

We collect personal data from you when you use our Services, send us an email, fill out a form, subscribe to our newsletter, respond to a survey, interact with us on social media, or otherwise communicate with us. Types of personal data we may collect include:

• Contact information such as your first and last name, job title, company and email address
• Communications with us including through meetings with our representatives, visits to our offices, presentations by us, and website forms
• Social and community content such as posts, photos, videos, or audio files that you may provide through our social media pages and our community pages
• Any additional information that you choose to provide

In some cases, we may also collect information you provide about others, such as when you are the administrator for your company's account and you provide information about other personnel at your company. We will use this information to fulfill your requests and will not send communications to your contacts unrelated to your requests unless they separately create an account, engage with us or consent to receive communications from us.

Information Collected Automatically When You Interact With Us

We and our service providers may automatically log personal data about you, your computer or mobile device, and your interaction over time with the Services, such as:

• Device information. We may collect information about your device(s) such as Internet Protocol ("IP") addresses, browser type and version, domain names, access times, log information, error messages, device type, unique device identifiers, operating system, information about your use of the Site, data regarding network connected hardware and other technical information such as protocol status and substatus, bytes sent and received and server information.
• Pseudonymous Identifiers. We may collect pseudonymous identifiers such as unique cookie and device identifiers, mobile device identifiers, other identifiers derived from email address, or phone numbers, or your device information.
• Usage information. We may collect information about your use of the Services, such as the pages you viewed, the Services you used or interacted with, referring website addresses and details about any links or communications with which you interacted.
• Information Collected by Cookies and Other Tracking Technologies. Please see our cookie policy in the section "Cookies and Other Information Collection Tools" for more details.

Information We Collect From Other Sources

We may also collect personal data about you from other sources, including publicly available databases, and combine that with information we collect through the Services.

Information We Infer or Derive

We may derive information or draw inferences about you based on the personal data we collect or have otherwise received about you.

5. How We Use Your Personal Data

Depending on how you interact with us and the Services you or your organization utilize, we use your personal data to:

• Provide and Improve Products and Services. Provide, activate, operate, maintain, develop, enhance, improve, support, troubleshoot, and manage our Services and your accounts on our Services, monitor and analyze trends, usage, and activities.
• Respond to You. Provide technical, product and other support and respond to your requests, inquiries, comments and concerns.
• Service Communications. Notify you about changes, updates and other announcements related to our Services and send you technical notices, updates, security alerts, safety and support messages.
• Safety and Security. For safety and security, including to detect and protect against fraud or illegal activities, security incidents, and harm to rights, property or safety of Alpha Level, users of our Services or others.
• Advertising and Marketing. To provide you with advertising, promotional messages and other information about products, events and services of ours, our affiliates and third parties.
• Research and Development. To conduct research and development and develop new products and services.
• Corporate Transactions. We process personal data in the context of a merger, consolidation, reorganization, sale of our assets, financing or acquisition of all or a portion of our business.
• Comply with Legal and Financial Obligations. To comply with our legal and financial obligations, resolve disputes, enforce our agreements, and exercise our legal rights.
• Your Consent. Process your personal data in accordance with your consent or when you intentionally direct or instruct us to do so.

6. Disclosure Of Personal Data

We may disclose your personal data as follows or as otherwise described in this Policy:

• Affiliates and Subsidiaries. We disclose your personal data to our affiliates and other organizations under common control for the purposes described in this Policy.
• Vendors and Service Providers. We disclose your personal data to our vendors and service providers to perform the functions for which we engage them.
• Corporate Transactions. We disclose your personal data as part of any merger, sale of our assets, financing or acquisition of all or a portion of our business.
• Analytics Providers. We disclose personal data to our website analytics partners.
• Professional Advisors. We disclose your personal data to our professional advisors like our lawyers, accountants, financial, insurance and other advisors.
• Aggregated or De-Identified Data. We disclose aggregated, anonymized, or de-identified information, which cannot reasonably be used to identify you.
• Law Enforcement. We disclose your personal data when we believe doing so is reasonably necessary to comply with applicable law or legal process, to enforce our agreements, or to protect the rights, property or safety of Alpha Level or others.
• With your Consent or Direction. We disclose personal data with your consent or at your direction.

7. How We Protect Your Personal Data

We implement commercially reasonable physical, technical and procedural measures to help protect personal data from unauthorized access or use; however, the transmission of information via the internet is not completely secure or private. If you have questions about the security of personal data we collect, please contact us using the information provided below.

8. Cookies And Other Information Collection Tools

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the online service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.

The types of cookies we may use include:

• Necessary Cookies — strictly necessary to make our Services function properly.
• Functional Cookies — help perform certain functionalities like sharing content on social media platforms.
• Performance Cookies — used to understand and analyze key performance indexes of the Sites.
• Analytics Cookies — used to understand how visitors interact with the Sites.
• Advertisement Cookies — used to provide visitors with relevant ads and marketing campaigns.

You can limit online tracking by blocking cookies in your browser, using privacy plug-ins or browsers, or opting out through advertising industry tools such as optout.aboutads.info or optout.networkadvertising.org.

When you first visit our Site, we ask for your consent before setting any non-essential cookies. You can change your preference at any time using the "Cookie Preferences" link in the footer of any page.

9. Social Media And Other Third-Party Links And Services

Occasionally, at our discretion, we may include or offer third-party products or services on our Sites or links to other websites. The privacy practices of these third parties will be governed by the parties' own privacy notices. We are not responsible for the security or privacy of any information collected by these third parties.

Some aspects of the Sites may allow you to interface with social media services such as Facebook, Instagram, LinkedIn, and X (formerly known as Twitter). By using these interfaces, you will allow us to access information about you from those social media services.

10. Retention Of Personal Data

We will retain your personal data for as long as is necessary to fulfil the purpose for which this data was collected and for the business purposes explained in this Policy. Even after we stop providing Services directly to you, and even if you close your account, we may retain your personal data to the extent permitted by applicable law to comply with our legal and regulatory obligations, to protect against fraudulent or abusive activity, and to exercise, establish or defend legal claims.

11. Your Privacy Rights And Choices

Consistent with applicable law, you may exercise the following rights by contacting us as listed below:

Opt Out of Direct Marketing

You may opt out of receiving direct marketing communications from us by following the unsubscribe instructions in those communications or by contacting us as set forth below.

Access, Correct or Delete Your Personal Data

You may have the right to request access to and receive details about the personal data we maintain about you, correct inaccuracies, or request that we delete your personal data by contacting us as indicated below.

Withdraw Consent

Where you have provided your consent for us to use your personal data and subject to applicable law, you have the right to withdraw your consent and we will apply that preference going forward.

Additional Rights

Depending on your location and subject to applicable law, you may also have the right to restrict processing, data portability, the right to object to processing, and the right not to be discriminated against for exercising these rights.

12. Children's Privacy

Our Services are not aimed at children under the age of 18 or the age defined under applicable law. We do not intentionally collect information from children under the age of 18 or the age defined under applicable law.

13. International Data Transfers

We may process and store your personal data in the United States and other countries which may have less-protective data protection laws than the region in which you are situated. Where applicable law requires a data transfer mechanism, we use EU Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum, or other legal methods available to us under applicable law.

14. Contact Us