Sitin.ai ("Sitin.ai," "we," "us," or "our") provides a platform that allows eligible users to participate in promotional campaigns, publish approved advertising or promotional content through their own social media accounts, and receive cash rewards for qualifying activity. This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you use the Sitin.ai mobile application, website, and related services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Services.

1. Eligibility and Age Requirement

The Services are intended only for individuals who are at least 18 years old. You may not create an account or use the Services if you are under 18. We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information, we may suspend the account and delete the information as required by law.

2. Information We Collect

Depending on how you use the Services, we may collect the following categories of information:

A. Account and Profile Information

• Name, username, date of birth, profile photo, and other profile details;

• Email address, phone number, login credentials, and authentication information; and

• Account preferences, status, and settings.

B. Social Media Information

When you connect or authorize a social media account, we may receive information permitted by your authorization and the applicable platform, such as:

• Social media username, account or page identifier, profile information, and profile image;

• Public or authorized posts, media, captions, links, and related metadata;

• Audience, reach, impression, view, click, engagement, and other campaign-performance information;

• Account status and information needed to confirm that your account or content meets campaign requirements; and

• Access tokens or similar authorization credentials needed to maintain the connection.

We only request access consistent with the permissions shown to you during the authorization process. The information available to us depends on the social media platform, your account settings, and the permissions you grant.

C. Campaign and Content Information

• Campaigns viewed, accepted, completed, declined, or submitted;

• Advertising or promotional content you create, upload, publish, or submit;

• Post URLs, screenshots, timestamps, campaign instructions, approvals, revisions, and completion records;

• Content performance and reward eligibility; and

• Information used to detect duplicate, misleading, manipulated, or fraudulent submissions.

D. Rewards, Payments, and Tax Information

• Reward balances, transaction history, payout requests, payment status, and related records;

• Payment account details or payout identifiers; and

• Identity, tax, or other information required to process payments, prevent fraud, or comply with law.

Payment and payout providers may collect financial information directly from you. We may receive limited information from those providers, such as a payment token, account identifier, last four digits, payout status, or verification result, rather than full financial account details.

E. Identity and Verification Information

We may request identity documents, a selfie, age-confirmation information, or verification results when reasonably necessary to confirm eligibility, protect accounts, process payouts, prevent fraud, or comply with law. If we collect or process biometric identifiers or biometric information, we will provide any separate notice and obtain any consent required by applicable law.

F. Device, Usage, and Technical Information

• IP address, device identifiers, device model, operating system, app version, language, and time zone;

• App activity, pages or screens viewed, buttons clicked, session information, referral source, and campaign interactions;

• Cookies, software development kits, pixels, and similar technologies, where used; and

• Crash reports, diagnostics, security events, and performance logs.

G. Location Information

We may derive approximate location from your IP address or device settings. We collect precise location only if a feature requires it, you grant device permission, and we provide any notice required by law.

H. Communications and Support Information

We may collect messages, feedback, survey responses, reports, support requests, and other information you provide when communicating through the Services.

3. How We Collect Information

We may collect information:

• Directly from you when you register, connect an account, join a campaign, submit content, request a payout, or communicate with us;

• Automatically from your device and your use of the Services;

• From social media platforms and other services you choose to connect;

• From advertisers, campaign partners, payment providers, identity-verification providers, analytics providers, fraud-prevention providers, and other service providers; and

• From public sources, including publicly available social media content and engagement information.

4. How We Use Information

We may use personal information to:

• Create, authenticate, maintain, and secure your account;

• Connect authorized social media accounts and operate campaign features;

• Determine campaign eligibility, verify completed promotional activity, measure performance, and calculate rewards;

• Process payouts, maintain transaction records, and satisfy tax or financial reporting obligations;

• Communicate about campaigns, account activity, rewards, security, policy updates, and service notices;

• Provide support and respond to requests;

• Personalize campaign opportunities and improve the Services;

• Conduct analytics, testing, research, troubleshooting, and product development;

• Detect and prevent fraud, fake engagement, account abuse, unauthorized access, manipulation, and violations of campaign rules or law;

• Enforce our terms, protect users and third parties, and resolve disputes; and

• Comply with legal obligations and respond to lawful requests.

We may create aggregated or de-identified information and use or disclose it for lawful purposes. We will not attempt to re-identify information that is maintained as de-identified, except where permitted by law to test our de-identification methods.

5. Social Media Connections and Public Content

Connecting a social media account is optional unless it is necessary to use a particular campaign or feature. You may be able to revoke access through the relevant social media platform or through available settings in the Services. Revoking access may prevent you from using related features and may not delete information already received or retained for completed transactions, fraud prevention, dispute resolution, or legal compliance.

Content you publish on a social media platform is governed by that platform's terms, privacy policy, and your privacy settings. Promotional content may be visible to the public or to your selected audience. Before publishing, review the content, campaign instructions, required advertising disclosures, and the audience selected on your social media account.

6. How We Disclose Information

We may disclose personal information to the following categories of recipients:

A. Service Providers

We may disclose information to providers that support hosting, cloud storage, analytics, authentication, communications, customer support, identity verification, fraud prevention, content review, payment processing, tax reporting, security, and other business operations. These providers may use information only for the services they perform for us or as otherwise permitted by law.

B. Advertisers and Campaign Partners

We may disclose information reasonably necessary to operate and verify a campaign, such as your social media profile or account identifier, submitted promotional content, post URL, proof of publication, content status, performance metrics, compliance information, and reward-related records. We do not provide campaign partners with full payment credentials.

C. Social Media Platforms and Services You Direct Us to Use

We may exchange information with a social media platform or another third-party service when you connect it, publish content, request a feature, or otherwise direct us to do so.

D. Legal, Safety, and Enforcement Recipients

We may disclose information when reasonably necessary to comply with law, regulation, legal process, or a valid government request; enforce agreements or campaign rules; investigate fraud or security incidents; protect the rights, property, or safety of users, the public, or others; or establish, exercise, or defend legal claims.

E. Business Transfers

Information may be disclosed as part of an actual or proposed merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality protections where required.

F. With Your Direction or Consent

We may disclose information for another purpose that is explained to you at the time and authorized by you.

7. Sale, Sharing, and Targeted Advertising

We do not sell personal information in exchange for money. Some disclosures involving analytics, advertising, cookies, pixels, or similar technologies may be considered a "sale," "sharing," or use for targeted advertising under certain U.S. state privacy laws, even when no money is exchanged. Where applicable, we will provide a legally required method to opt out and will honor recognized browser-based opt-out preference signals when required and technically applicable.

Cash rewards provided through Sitin.ai are compensation for qualifying promotional activity under applicable campaign rules. They are not offered in exchange for permission to sell your personal information.

Because the Services are restricted to adults, we do not knowingly sell or share the personal information of anyone under 18.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services and for the purposes described in this Privacy Policy. Retention periods may depend on the nature of the information, whether your account remains active, completed campaigns and payouts, legal and tax obligations, dispute-resolution needs, fraud-prevention requirements, and applicable limitation periods.

When information is no longer reasonably necessary, we may delete, aggregate, or de-identify it. Some information may remain in backups for a limited period or be retained where required or permitted by law.

9. Your Choices

Depending on available features, you may:

• Review or update certain account and profile information in the App;

• Disconnect a social media account through the App or the relevant social media platform;

• Adjust device permissions through your device settings;

• Manage push notifications through the App or device settings;

• Manage applicable cookies or tracking choices through available privacy controls; and

• Request account deletion using the account-deletion or privacy-request option made available in the App.

Deleting your account may not immediately remove public content already posted to a third-party social media platform. You must manage that content through the applicable platform.

10. U.S. State Privacy Rights

Residents of certain U.S. states may have rights regarding their personal information, subject to applicable law and exceptions. These may include the right to:

• Confirm whether we process personal information and access or obtain a copy of it;

• Correct inaccurate personal information;

• Delete personal information;

• Obtain certain information in a portable format;

• Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling;

• Limit certain uses or disclosures of sensitive personal information; and

• Appeal a decision concerning a privacy request.

You may submit a request through the privacy-request option made available in the App. We may take reasonable steps to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the user's identity.

We will not unlawfully discriminate against you for exercising an applicable privacy right. Some information may be exempt from a request, including information we must retain to complete transactions, prevent fraud, protect security, comply with law, or establish or defend legal claims. If an appeal right applies, our response will explain how to appeal.

California Notice

For California residents, the categories of personal information described in Section 2 may include identifiers; customer-record information; characteristics protected under law; commercial and financial information; internet or other electronic network activity; approximate geolocation information; audio, electronic, visual, or similar information; inferences; and sensitive personal information. We collect these categories from the sources described in Section 3, use them for the purposes described in Section 4, and disclose them to the recipient categories described in Section 6.

We do not use or disclose sensitive personal information for purposes that require a right to limit under California law unless we provide the required notice and choice. We do not knowingly sell or share the personal information of consumers under 18.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission, storage, or security is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying us through available in-app support if you suspect unauthorized access to your account.

12. Third-Party Services

The Services may link to or integrate with social media platforms, payment providers, advertisers, and other third-party services. Their handling of your information is governed by their own terms and privacy policies. This Privacy Policy does not apply to information processed independently by those third parties.

13. Processing in the United States and Other Locations

Personal information may be processed and stored in the United States and other countries where we or our service providers operate. Privacy and data-protection laws in those locations may differ from the laws where you live. Where required, we use appropriate safeguards for cross-border transfers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version and update the effective date. If a change materially affects how previously collected personal information is used or disclosed, we will provide additional notice or obtain consent when required by law.

15. Privacy Requests

To exercise an applicable privacy right, ask a privacy question, or report an account-security concern, use the privacy-request or support option available within Sitin.ai. Requests will be handled in accordance with applicable law.