iLea is early-stage. Until we complete formal company registration, iLea is the data controller responsible for your personal data on the iLea Business platform. Privacy questions: mark.malko@ileaapp.com We're transparent about how we process data. This policy is written in plain language for everyone.

We collect two types of information: Information you give us When you sign up or interact with iLea Business, we collect: • Account Information: Your name, email address, company/brand name, business details • Communication Data: Messages you send us via support or forms • Brand/Company Information: Catalog metadata, product descriptions, imagery, pricing structures Information we collect automatically Automatically collected technical data includes: • Usage Data: How you interact with the platform (features used, timestamps, session durations) • Technical Data: IP address, browser type, device type, cookies and tracking identifiers This helps us keep the platform working well and improve your experience.

We process your data based on these legal grounds: • Contract Performance: To deliver the iLea Business platform and its features to you. • Legitimate Interest: To improve and protect our services, maintain security, and prevent fraud. • Legal Obligation: To comply with applicable laws, regulations, or legal processes. • Consent (where applicable): For marketing communications, with the ability for you to withdraw consent at any time.

We don't sell your data. We may share your information with: • iLea Mobile App ecosystem: Your brand catalog is synchronized with the consumer app as part of the service • Service Providers: Trusted partners who assist in hosting, analytics, and support • Legal Requirements: If required by law, court order, or legal process • Business Transfers: In context of merger or acquisition (with notice wherever required)

We keep your data only as long as we need it to: • Provide our services • Comply with legal obligations • Resolve disputes or enforce agreements When you delete your account, we remove your personal data within 30 days, except where retention is required by law or ongoing legitimate interest.

Under GDPR, you have these rights: • Access: Request a copy of your personal data • Rectification: Correct inaccurate or incomplete information • Erasure: Request deletion of your data ("right to be forgotten") • Restriction: Limit how your data is processed • Portability: Receive your data in a structured format • Object: Object to processing based on legitimate interest • Withdraw Consent: You can withdraw consent at any time To use these rights, email mark.malko@ileaapp.com

We protect your data with: • Encryption: TLS/SSL for secure data transmission • Access Controls: Role-based and identity validation • Monitoring: Logs and monitoring for suspicious activity • Data Center Security: Secure infrastructure with modern compliance standards No system is 100% secure. We work hard to protect your data, but we can't guarantee complete security.

Your data may be processed outside the EU/EEA. When that happens, we use safeguards like: • Standard Contractual Clauses • Data Processing Agreements with Service Providers This is done in compliance with GDPR requirements for cross-border data flows.

We use cookies to: • Maintain user sessions and preferences • Analyze usage performance • Personalize features where permitted You can control cookies in your browser settings. Turning them off may limit some features.

Our services aren't for children under 16. We don't intentionally collect data from children. If we learn we have, we'll delete it.

We may update this policy as laws or our practices change. We'll update the "Last updated" date. If you keep using the platform after changes, that means you accept them.

For privacy questions or to use your rights: Email: mark.malko@ileaapp.com iLea is early-stage. We'll complete formal company registration as we grow.