PRIVACY [POLICY]

Welcome to Mostly ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Mostly Pte. Ltd. is a company registered in Singapore. We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore and other applicable data protection laws. By using our Service, you agree to the collection and use of information in accordance with this policy.

We collect information that you provide directly to us, as well as information that is collected automatically when you use our Service. Information You Provide: • Account Information: Email address, username, and password when you register • Profile Information: Any additional information you choose to add to your profile • Payment Information: Payment details processed securely through Stripe (we do not store your full credit card number) • User Content: Videos, audio files, and other content you upload to the Service • Communications: Information you provide when contacting our support team Automatically Collected Information: • Device Information: Device type, operating system, browser type, and unique device identifiers • Usage Data: Features used, pages visited, time spent on pages, and interaction patterns • Log Data: IP address, access times, referring URLs, and error logs • Analytics Data: Aggregated usage patterns collected through Google Analytics

We use the information we collect for various purposes, including: Service Operations: • To provide, maintain, and improve the Service • To process your transactions and manage your account • To process your videos and generate AI-powered content • To respond to your comments, questions, and support requests Service Improvement: • To analyze usage patterns and optimize user experience • To train and improve our AI models using anonymized or aggregated data • To develop new features and functionality • To conduct research and analytics Communications: • To send you technical notices and support messages • To send promotional communications (with your consent) • To notify you of changes to our Service or Terms Security & Legal: • To detect, prevent, and address technical issues and security threats • To enforce our Terms of Service • To comply with legal obligations

Your data is stored securely using industry-leading infrastructure and security practices. Storage Infrastructure: • Your files and content are stored on Cloudflare R2, a secure and globally distributed storage service • Account data is stored on secure servers with encryption at rest • All data transmission is encrypted using TLS/SSL Security Measures: • Encryption of data at rest and in transit • Regular security audits and vulnerability assessments • Access controls and authentication measures • Secure development practices Data Retention: • Your content is stored while your account is active and in good standing • User storage will be permanently deleted 30 days after a payment failure • Upon account deletion request, your data will be retained for up to 90 days before permanent deletion • You may export or download your data at any time before deletion While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We may share your information with third parties only in the following circumstances: Service Providers: We work with third-party service providers who assist us in operating our Service. These providers have access to your information only to perform specific tasks on our behalf: • Cloudflare: Cloud storage and content delivery • Stripe: Payment processing • Google (Analytics): Usage analytics and service improvement • AI Model Providers: OpenAI, Google, Fal, ElevenLabs, Modal, and AWS for AI processing These service providers are contractually obligated to protect your data and use it only for the specific services they provide to us. Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. With Your Consent: We may share your information with third parties when you give us explicit consent to do so. We do not sell your personal information to third parties.

Our Service allows you to connect your accounts from third-party platforms such as YouTube, TikTok, and other social media services. This section explains how we handle data from these connected accounts. IMPORTANT NOTICE: This application uses YouTube API Services. By using the YouTube features of our Service, you are subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and Google Privacy Policy (https://policies.google.com/privacy). Connected Account Data: When you connect a third-party account, we may access certain information including: • Video content and metadata (titles, descriptions, thumbnails) • Channel or profile information • Analytics and performance data (if authorized) • Other content you explicitly authorize us to access How We Use Connected Account Data: • We only access your connected accounts to perform actions that you specifically request • We do not share or sell your video data or connected account information to any third parties • Your video data is processed solely to provide the services you have requested (e.g., transcription, clip generation, content analysis) • We do not monitor, store, or analyze your content for purposes beyond your explicit requests Google/YouTube Data - Limited Use Disclosure: Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: • We only use Google user data to provide and improve the features you explicitly request • We do NOT use Google user data for AI model training purposes • We do NOT use Google user data for marketing or advertising purposes • We do NOT transfer Google user data to third parties except as strictly necessary to provide the features you request • We do NOT transfer Google user data to third parties for their independent use • Human access to Google user data is limited to cases where it is necessary to address security issues, comply with applicable law, or respond to your support requests (with your consent) CRITICAL: Complete Data Segregation from AI Services Our YouTube integration is exclusively for PUBLISHING content (uploading videos TO YouTube) and reading basic channel information. There is complete architectural separation between: • Google API data flows (YouTube upload, channel info) • AI processing pipelines (OpenAI, ElevenLabs, Fal, Modal, AWS) These systems never share data. AI services only process content that users directly upload to our platform - this content has no connection to Google APIs. Data Protection for Connected Accounts: • Video data from connected accounts is processed securely and in accordance with this Privacy Policy • We adhere to the API terms of service of each platform we integrate with • For YouTube specifically, our use is governed by YouTube's Terms of Service and Google's Privacy Policy • You can revoke access to connected accounts at any time through your account settings or directly through the third-party platform • You may also revoke our access via Google's security settings: https://myaccount.google.com/permissions Revoking Access: • You can disconnect any third-party account from our Service at any time through your account settings • Upon disconnection, we will cease accessing your data from that platform • Previously processed content will be handled according to our data retention policies For more information about how specific platforms handle your data, please refer to their respective privacy policies: • YouTube/Google: https://policies.google.com/privacy • Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy

To improve our Service and develop better AI capabilities, we may use certain data in the following ways: AI Training: • We may use anonymized or aggregated data from your usage of our Service to train and improve our AI models • This helps us provide better clip detection, transcription accuracy, and content suggestions • Individual user content is processed in aggregate and is not identifiable IMPORTANT DATA SEGREGATION - GOOGLE/YOUTUBE DATA: Our platform maintains complete architectural separation between Google API integrations and AI processing services. This means: • Google User Data is NEVER sent to AI service providers (such as OpenAI, ElevenLabs, Fal, Modal, or AWS AI services) • The YouTube integration is used ONLY for one-directional publishing (uploading videos from our platform TO YouTube) and reading basic channel information • We do NOT download, process, or analyze any content from your YouTube account using AI services • AI processing only occurs on content that users directly upload to our platform, which is completely separate from any Google API data flows • These systems are architecturally isolated - there is no data pipeline that connects Google API data to our AI processing services Our AI service providers (OpenAI, Google AI, ElevenLabs, Fal, Modal, AWS) are used exclusively for processing user-uploaded content that has no connection to Google APIs. Marketing: • We may use anonymized examples of content created with our Service for marketing purposes (with appropriate permissions) • We may feature success stories or use cases (with explicit user consent) • User statistics and aggregated metrics may be used in promotional materials IMPORTANT: Data obtained from Google APIs (including YouTube) is NEVER used for marketing purposes. We do not use Google user data in promotional materials, success stories, or any marketing content. If you do not wish for your non-Google content to be used in these ways, please contact us at [email protected].

Depending on your location, you may have certain rights regarding your personal information: Access & Portability: • You can access your personal information through your account settings • You can export your data at any time using our export features • You can request a copy of all data we hold about you Correction: • You can update your account information at any time through your settings • You can request correction of any inaccurate information Deletion: • You can delete your account at any time • Upon deletion request, your data will be permanently removed within 90 days • Certain data may be retained for legal or legitimate business purposes Objection & Restriction: • You can object to certain processing of your data • You can request restriction of processing in certain circumstances Withdrawal of Consent: • Where we rely on consent, you can withdraw it at any time • Withdrawal does not affect the lawfulness of processing before withdrawal To exercise any of these rights, please contact us at [email protected].

We use cookies and similar tracking technologies to collect and track information about your use of our Service. Types of Cookies We Use: Essential Cookies: • Required for the Service to function properly • Cannot be disabled without affecting functionality • Include authentication and security cookies Analytics Cookies: • Help us understand how users interact with our Service • Collected through Google Analytics • Can be disabled through browser settings Preferences Cookies: • Remember your settings and preferences • Improve your experience by personalizing the Service Managing Cookies: You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Do Not Track: We currently do not respond to Do Not Track (DNT) signals, as there is no consistent industry standard for compliance.

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at [email protected]. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

Your information may be transferred to and maintained on computers located outside of your country, where data protection laws may differ from those of your jurisdiction. If you are located outside Singapore and choose to provide information to us, please note that we transfer the data to Singapore and process it there. Our service providers may also be located in different countries. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy. By using our Service, you consent to the transfer of your information to Singapore and other countries where our service providers are located.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide notice through the Service or via email before the change becomes effective. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide by the modified Privacy Policy.

If you have any questions about this Privacy Policy or our data practices, please contact us: Mostly Pte. Ltd. Email: [email protected] General Inquiries: [email protected] Data Protection Officer: For data protection inquiries, please contact: [email protected] Registered Address: [Address to be updated] Singapore