1. Data Controller

For the purposes of the EU General Data Protection Regulation ("GDPR") and other applicable data protection laws, the data controller of your personal data collected through this Site is:

Thorcast AI Inc.
251 Little Falls Drive
Wilmington, New Castle County
Delaware 19808
United States
Email: info@thorcast.ai

If you have any questions about this Privacy Policy or our data practices, you can contact us at the email address above.

2. Personal Data We Collect

When you use our Site, we may collect and process the following categories of personal data:

2.1. Information you provide directly

When you:

• Fill out a contact form or request a demo
• Subscribe to a newsletter or mailing list
• Download content, such as whitepapers or case studies
• Communicate with us by email or other channels

we may collect, for example:

• Name and surname
• Company name
• Job title or role
• Business email address
• Phone number, if provided
• Country or region
• Any other information you choose to provide in the message field

2.2. Information we collect automatically

When you visit the Site, we may collect certain information automatically through cookies, log files and similar technologies, such as:

• IP address
• Browser type and version
• Operating system
• Device type
• Referring URL, pages visited, and clickstream data
• Date and time of your visit
• General location based on IP, at city or region level

This information is generally processed in an aggregated or pseudonymised form and does not allow us to directly identify you, unless combined with other data.

3. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Make the Site work properly, such as session cookies
• Understand how visitors use the Site, such as analytics
• Improve performance, design and content

Depending on your location, we may display a cookie banner that allows you to accept or reject certain categories of cookies, for example analytics or marketing cookies.

For more details on the specific cookies we use and your choices, please refer to our Cookie Policy, if applicable.

4. How We Use Your Personal Data

We use the personal data collected through the Site for the following purposes:

1. To respond to your requests Handling contact form submissions and demo requests; answering questions and providing information about our services.
2. To prepare for and manage a potential commercial relationship Following up on your interest in Thorcast.AI; scheduling calls, demos, trials, or evaluations.
3. To send you marketing communications, B2B News, updates, product information, invitations to events or webinars — only in accordance with applicable laws and your communication preferences. You can opt out at any time via the unsubscribe link or by contacting us.
4. To operate, secure and improve the Site Monitoring performance and usage patterns; debugging, preventing fraud and ensuring the security of our systems.
5. To comply with legal obligations Responding to lawful requests from authorities; keeping necessary records for compliance purposes.

5. Legal Bases for Processing under GDPR

Where GDPR applies, we rely on one or more of the following legal bases to process your personal data:

• Performance of a contract or pre-contractual steps: When you request a demo, contact us regarding our services or ask us to take steps before entering into a contract.
• Legitimate interests: To operate and improve our Site, to understand how it is used, to ensure security, and to conduct reasonable B2B marketing to professionals who may be interested in our services. We balance these interests with your rights and expectations.
• Consent: For certain optional cookies, such as analytics or marketing cookies, and for sending certain types of marketing communications where consent is required by law. You can withdraw your consent at any time.
• Compliance with legal obligations: Where we are required to process or retain certain data under applicable law.

6. How We Share Your Personal Data

We do not sell your personal data.

We may share your personal data with:

1. Service providers, processors Third-party vendors who process data on our behalf and according to our instructions, such as: website hosting and infrastructure providers, analytics services, CRM and marketing automation tools, and email and communication platforms.
2. Professional advisors Such as lawyers, auditors or consultants, when reasonably necessary.
3. Authorities and legal entities Where required by law, regulation, court order, or to protect our rights, property or safety or those of others.

In all cases where third parties process personal data on our behalf, we require them to implement appropriate technical and organisational measures to protect your data and to process it only for specified purposes.

7. International Transfers of Personal Data

Thorcast AI Inc. is based in the United States, while our service providers or infrastructure may be located in other countries, including outside the European Economic Area ("EEA").

Where GDPR applies and we transfer personal data outside the EEA, for example to the United States or other jurisdictions, we will ensure an adequate level of protection by:

• Transferring to countries that have been recognised by the European Commission as providing an adequate level of protection, or
• Using appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), or
• Relying on other lawful transfer mechanisms under the GDPR.

You may contact us for further information about the specific safeguards in place.

8. Data Retention

We retain personal data collected through the Site only for as long as necessary for the purposes described in this Privacy Policy, in particular:

• Contact and demo requests: for as long as needed to handle your request and reasonably follow up on potential business opportunities.
• Marketing communications: until you unsubscribe or object, or after a period of inactivity in accordance with our internal policies.
• Technical logs and analytics: for a limited period, generally no longer than 12–24 months, unless a longer retention is needed for security or legal reasons.

We may retain certain data for longer if required by law, or to establish, exercise or defend legal claims.

9. Your Rights Where Applicable

Depending on your location and subject to applicable law, including GDPR, you may have some or all of the following rights regarding your personal data:

• Right of access: to obtain confirmation whether we process your data and to receive a copy.
• Right to rectification: to correct inaccurate or incomplete personal data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction of processing: to limit how we process your personal data in certain cases.
• Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible.
• Right to object: to object at any time to processing based on our legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us at: info@thorcast.ai. We may need to verify your identity before responding to your request.

If you are located in the EEA or UK and believe that we have not handled your personal data properly, you also have the right to lodge a complaint with your local data protection authority.

10. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our Site is not intended for children under the age of 16, and we do not knowingly collect personal data from children through the Site. If you believe that a child has provided us with personal data, please contact us and we will take steps to delete such information.

12. Third-Party Websites

Our Site may contain links to websites or services operated by third parties. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their content, privacy practices or policies. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other reasons.

When we make material changes, we will update the "Last updated" date at the top and, where required by law, notify you via the Site or by other appropriate means.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.

14. Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or our handling of your personal data, please contact us at:

Email: info@thorcast.ai
Address: Thorcast AI Inc., 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808, United States