HARMONAID INC.
PRIVACY POLICY — CALIFORNIA AMENDMENTS
CCPA / CPRA Compliance Supplement
Last Updated: February 8, 2026 HARMONAID INC.
PRIVACY POLICY — CALIFORNIA AMENDMENTS
CCPA / CPRA Compliance Supplement
Last Updated: February 8, 2026

OVERVIEW

This document supplements the HarmonAId Inc. Privacy Policy (last updated January 5, 2026)
with additional disclosures and rights required under the California Consumer Privacy Act
(CCPA), as amended by the California Privacy Rights Act (CPRA). This supplement applies to
California residents and should be read in conjunction with the main Privacy Policy.
Where there is any conflict between this supplement and the main Privacy Policy regarding
California-specific rights, this supplement shall control.

SECTION 1: RIGHTS OF CALIFORNIA RESIDENTS

If you are a California resident, you have the following rights under the CCPA/CPRA:
1.1 Right to Know
You have the right to request that we disclose the categories and specific pieces of personal
information we have collected about you, the categories of sources from which the information
was collected, the business or commercial purpose for collecting the information, and the
categories of third parties with whom we share the information.
1.2 Right to Delete
You have the right to request deletion of your personal information that we have collected,
subject to certain exceptions permitted by law (such as compliance with legal obligations,
completing transactions, detecting security incidents, and exercising free speech).
1.3 Right to Correct
You have the right to request that we correct inaccurate personal information that we maintain
about you, taking into account the nature of the personal information and the purposes for which
we process it. You may submit a correction request through your Account Settings or by
contacting us at privacy@harmonaid.ai.
1.4 Right to Data Portability
You have the right to request a copy of your personal information in a portable and, to the extent
technically feasible, readily usable format that allows you to transmit the data to another entity.

1.5 Right to Limit Use of Sensitive Personal Information
You have the right to limit the use and disclosure of your sensitive personal information to
purposes necessary to perform the services you request. HarmonAId collects the following
categories that may constitute sensitive personal information under the CPRA:
• Account log-in credentials (email and password)
• AI-derived inferences about communication quality and compatibility (when you consent
to AI analysis)
To limit the use of your sensitive personal information, you may: (a) revoke consent to AI
analysis of your conversations in Account Settings; (b) contact us at privacy@harmonaid.ai to
request limitations on other sensitive data processing; or (c) use the “Limit the Use of My
Sensitive Personal Information” link, which will be available on our Site.
1.6 Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not
deny you services, charge you different prices, provide a different quality of service, or suggest
that you will receive a different level of service for exercising your rights.
1.7 Right to Opt-Out of Sale or Sharing
HarmonAId does not sell your personal information and does not share your personal
information for cross-context behavioral advertising. Should this practice ever change, we will
provide a conspicuous “Do Not Sell or Share My Personal Information” link on our Site and
notify you in advance.
1.8 Authorized Agent
You may designate an authorized agent to submit requests on your behalf. To do so, provide us
with written authorization signed by you, or a power of attorney. We may verify your identity
before processing a request submitted by an authorized agent. Submit authorized agent
requests to privacy@harmonaid.ai.

SECTION 2: CATEGORIES OF PERSONAL INFORMATION

The following table describes the categories of personal information we collect, the sources,
purposes, and third parties with whom each category is shared. This disclosure covers the
preceding 12 months.

SECTION 3: DATA RETENTION PERIODS
In compliance with CPRA requirements, the following table sets out the retention period for each
category of personal information we collect:

Data Category Retention Period

SECTION 4: CALIFORNIA “SHINE THE LIGHT” (CIVIL CODE §
1798.83)

Under California Civil Code Section 1798.83, California residents who provide personal
information in obtaining products or services for personal, family, or household use are entitled
to request information about personal information shared with third parties for those third
parties’ direct marketing purposes.
HarmonAId does not share personal information with third parties for their direct marketing
purposes. If this practice changes in the future, we will update this section and provide you with
an opt-out mechanism.

SECTION 5: DO NOT TRACK AND GLOBAL PRIVACY
CONTROL
California law requires us to disclose how we respond to Do Not Track (DNT) signals. We do
not currently respond to DNT signals, as there is no uniform industry standard for DNT.
However, we do recognize and honor Global Privacy Control (GPC) signals from your browser.
When we detect a GPC signal, we treat it as a valid opt-out request under the CCPA/CPRA,
specifically as a request to opt out of the sale of personal information and sharing for cross-
context behavioral advertising. Since we do not currently sell personal information or share it for
cross-context behavioral advertising, the GPC signal serves as an additional safeguard for your
privacy preferences.
SECTION 6: FINANCIAL INCENTIVES
We do not offer financial incentives or price or service differences in exchange for the retention
or sale of personal information. Should we ever offer such a program, we will provide you with
clear notice and obtain your opt-in consent prior to enrollment, and you will have the right to
withdraw at any time.

SECTION 7: HOW TO EXERCISE YOUR RIGHTS
To exercise any of the rights described in this supplement, you may:
• Email us at: privacy@harmonaid.ai
• Adjust your preferences in your Account Settings on the Site
• Write to us at: HarmonAId Inc., 131 Continental Dr Suite 305, Newark, DE 19713
Verification Process
When you submit a request, we will verify your identity by matching at least two pieces of
personal information you provide against information we have on file. For requests to access
specific pieces of personal information, we may require additional verification. We will respond
to verifiable requests within 45 days of receipt. If we need additional time (up to an additional 45
days), we will inform you of the reason and the extension period in writing.
Request Metrics
In compliance with CCPA regulations, we will compile and publish annual metrics on the
number of requests to know, delete, correct, and opt-out that we receive, as well as our median
response time and the number of requests denied.
SECTION 8: CONTACT FOR CALIFORNIA-SPECIFIC
INQUIRIES
For questions or concerns specifically related to your California privacy rights, please contact:
HarmonAId Inc. — Privacy Team
Email: privacy@harmonaid.ai
Mail: 131 Continental Dr Suite 305, Newark, DE 19713
We will respond to all inquiries within 10 business days.