PRIVACY POLICY

Saved In Sound, Inc. (“Saved In Sound,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information. Saved In Sound operates a digital memory preservation platform that helps families capture and preserve audio and video memories over time (the “Service”). This Privacy Policy explains what information we collect, how we use and share it, how we protect it, and the rights and choices available to parents and users. It applies to the Service, our website at www.savedinsound.com, and any related applications that link to this Policy. Please read it together with our Terms of Service. By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy.

We collect the following categories of information: Account Information - Parent or guardian name - Email address - Login credentials (such as a username and password) Student Information - Student name - School name - Grade level User Content - Audio recordings - Video recordings - Any related descriptions, titles, captions, or notes that a parent adds to a memory Payment Information - Payments are processed by our third-party payment processor, Stripe. Saved In Sound does not collect or store full payment card numbers. We may receive limited transaction details from Stripe (such as a confirmation of payment, the last four digits of a card, and billing ZIP code) to administer your account. Information Collected Automatically - When you use the Service, we may automatically collect limited technical and usage information, such as device type, browser type, IP address, log data, and general usage activity, in order to operate, secure, and improve the Service. We do not use this information to build advertising profiles, and we do not use student content for advertising. We collect information directly from the parent or guardian who creates and manages the account. Children do not provide information to Saved In Sound independently; a parent or guardian creates the account and controls the content. See “Children’s Privacy (COPPA)” below.

We use the information we collect to: - Provide, operate, and maintain the Service - Create and administer accounts - Store and organize memories - Process payments through Stripe - Communicate with parents and users about the Service, including service-related notices - Provide customer support - Maintain the security and integrity of the Service and investigate misuse or abuse - Improve and develop platform functionality - Comply with our legal obligations and enforce our Terms of Service We limit our access to uploaded content to what is reasonably necessary to operate, support, secure, or improve the Service; investigate abuse or violations of our policies; comply with law; or fulfill our obligations to provide the Service. We do not sell personal information. We do not share personal information for cross-context behavioral or targeted advertising. We do not use student content for advertising, and we do not publicly display uploaded content without appropriate authorization.

We process personal information on the following bases: - Performance of a contract — to provide the Service that the account holder has purchased. - Verifiable parental consent — for the collection, use, and disclosure of personal information from a child under 13, as described in “Children’s Privacy (COPPA)” below. - Legitimate business interests — to secure, support, and improve the Service, where those interests are not overridden by your rights. - Legal compliance — to meet our obligations under applicable law.

Saved In Sound is intended to be used by parents and guardians. The Service permits accounts that include the personal information of children under the age of 13 only with verifiable parental consent, consistent with the Children’s Online Privacy Protection Act (“COPPA”) and the FTC’s COPPA Rule (16 C.F.R. Part 312). Parental consent. Before any personal information of a child under 13 is collected, used, or disclosed, the parent or legal guardian must: - Create the account; - Agree to the Terms of Service; - Review and accept the COPPA parental consent notice; and - Complete payment. [Describe the specific method Saved In Sound uses to obtain verifiable parental consent — for example, requiring a credit/debit card or other online payment transaction in connection with a monetary transaction, a government-issued ID check, or another method permitted under 16 C.F.R. § 312.5(b). The method must be reasonably designed to ensure that the person providing consent is the child’s parent. COPPA’s “email plus” method is not available where information is disclosed to third parties or made public. This description should be finalized with counsel before launch.] Information we collect from or about children. With parental consent, we collect the child’s name, school name, and grade level, and the audio and video recordings and related content that the parent uploads about the child. How we use children’s information. We use children’s information solely to provide and operate the Service — to create and organize the family’s memory collection, deliver the Service to the account holder, provide support, and maintain security. We do not use children’s information for advertising or to create profiles, and we do not condition a child’s participation on disclosing more information than is reasonably necessary. Audio recordings of a child’s voice. Audio and video recordings are the core content of the Service and are stored so that the family can access their memories over time. We retain these recordings for as long as the account remains active or until the parent deletes them or the account, subject to the retention period described in “Data Retention” below. Disclosure of children’s information. We do not sell children’s or family data. We share children’s information only with the service providers identified in “Information Sharing” below, which act on our behalf and may use the information only as necessary to provide services to us, and as otherwise described in this Policy or required by law. Schools, PTAs, and PTOs do not receive access to student recordings, student profiles, or account content. A parent may consent to the collection and use of a child’s personal information without consenting to disclosure of that information to third parties, except where such disclosure is integral to the Service (such as our hosting and payment providers). Parental rights regarding children’s information. At any time, a parent or guardian may: - Review the personal information we have collected from or about their child; - Download their child’s recordings and other content; - Request that we delete their child’s personal information; and - Refuse to permit further collection or use of their child’s personal information and withdraw consent. If a parent withdraws consent or requests deletion, we will stop collecting, using, and disclosing the child’s personal information and will delete it in accordance with this Policy; this may mean we can no longer provide the Service. To exercise any of these rights, contact us at hello@savedinsound.com. We may take reasonable steps to verify the identity of the person making the request before acting on it. The operator responsible for children’s information collected through the Service, and the operator that will respond to parent inquiries, is: Saved In Sound, Inc. 3114 Gladiolus Ln, Dallas, TX 75233 Email: hello@savedinsound.com Phone: 5127741943

Saved In Sound’s standard model is direct-to-parent: parents and guardians purchase the Service and create and manage accounts, and the student information we receive comes from the parent — not from a school’s education records. In this standard model, the information we collect is generally not an “education record” governed by the Family Educational Rights and Privacy Act (“FERPA”), and the parent controls the information. Schools, PTAs, PTOs, and other school-affiliated organizations may promote or market the Service to their communities and may receive a revenue share based on attributed purchases. Schools and PTAs do not receive access to student recordings, student profiles, or account content unless expressly authorized by the parent. [If Saved In Sound ever receives student “education records” directly from a school or district — rather than from a parent — FERPA may apply, and Saved In Sound would typically act as a “school official” with a legitimate educational interest under the school’s direct control, under 20 U.S.C. § 1232g(b)(1)(A) and 34 C.F.R. § 99.31(a)(1). That arrangement should be governed by a separate written agreement or data processing addendum with the school and disclosed here.

We do not sell or rent user information, and we do not share it for targeted or cross-context behavioral advertising. We share information with service providers that help us operate the Service, and only to the extent necessary for them to perform services for us: Service Provider Purpose Stripe Payment processing Hetzner Cloud hosting and storage MailerSend Email delivery Microsoft Outlook Business communications
We may also disclose information: - To comply with applicable law, legal process, or a governmental or regulatory request; - To enforce our Terms of Service or this Policy; - To protect the rights, property, or safety of Saved In Sound, our users, or others, including to investigate or prevent fraud or abuse; and - In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or will provide notice and choices as required by law.

We store content with our cloud hosting provider, Hetzner.

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information. These safeguards include: - Encrypted transmission using HTTPS/TLS; - Encryption of stored content (encryption at rest); - Access controls that limit access to personal information to authorized personnel who need it to operate, support, or secure the Service; and - A written information security program with baseline controls and periodic review. We maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information, including information collected from children. No security system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach of security affecting personal information, we will notify affected users and any applicable partners or authorities as required by law.

We retain personal information only for as long as is reasonably necessary to fulfill the purposes described in this Policy, and we do not retain children’s personal information indefinitely. Account and content data remain stored while an account is active. If an account is canceled or deleted, we may retain content for up to thirty (30) days to allow recovery in the event of accidental deletion. After the retention period, content is permanently deleted and scrubbed from our systems unless a longer retention period is required by law. We maintain a written data retention policy that sets out the purposes for which children’s personal information is collected, the business need for retaining it, and the timeframe for its deletion, consistent with 16 C.F.R. § 312.10.

Parents and account holders may: - Access the account and student information we hold; - Download account content and recordings (data portability); - Correct inaccurate account information; - Request deletion of content; - Delete the account; and - Withdraw consent for the collection and use of a child’s information. Texas residents. The Texas Data Privacy and Security Act (“TDPSA”) gives Texas consumers the right to confirm whether we process their personal data and to access it; to correct inaccuracies; to delete personal data; to obtain a portable copy of the data they provided; and to opt out of the sale of personal data, targeted advertising, and certain profiling. Saved In Sound does not sell personal data and does not process personal data for targeted advertising. A parent or legal guardian may exercise these rights on behalf of a known child. How to submit a request. Submit requests to hello@savedinsound.com or 5127741943. We will respond to verifiable requests within the time required by applicable law (generally within 45 days, with one permitted extension where reasonably necessary). If we decline a request, you may appeal our decision by contacting us at hello@savedinsound.com; if we deny the appeal, we will provide information on how to submit a complaint to the Texas Attorney General. We may take reasonable steps to verify your identity before acting on a request.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. We will provide notice of material changes through the Service or by email, and, where a change materially affects previously collected children’s information, we will obtain any new verifiable parental consent required by law before applying the change to that information.

Saved In Sound, Inc. Website: www.SavedInSound.com Email: hello@SavedinSound.com 3114 Gladiolus Ln, Dallas, TX 75233 Phone: 5127741943