PRIVACY POLICY

With this Privacy Policy we explain how we process personal data in connection with (i) the Tiger Finder website available at URL https://tigerfinder.com (the “Website”) and (ii) the Tiger Finder influencer discovery platform and related services (the “Services”).

1. Name and Address of the Responsible Party

• Name: YouScan Limited (operating the Tiger Finder Services)
• Address: 2 Agias Elenis, 6th Floor,1060 Nicosia, Cyprus
• General privacy contact: privacy@youscan.io

2. Data Protection Officer

External Data Protection Officer:

ePrivacy GmbH represented by Prof. Dr. Christoph Bauer

address: Burchardstrasse 14, 20095 Hamburg, Germany

If you want to contact the Data Protection Officer directly (for example, for a sensitive matter), please do so by post. Email communications can have security limitations. Please indicate that your request relates to “YouScan Limited / Tiger Finder”.

3. Scope and Categories of Data Subjects

This Privacy Policy applies to the following categories of individuals:

1. 1. Website visitors
   2. Customers and prospective customers (including agency and brand representatives)
   3. Authorized Users who access a Customer Account
   4. Creators/influencers whose publicly available information may be processed and displayed through the Services (Creator Data Subjects)

4. What Personal Data We Process

Depending on how you interact with the Website and Services, we may process the following categories of personal data:

1. First and last name, company name, role/title, address, email address, phone number, login credentials (in hashed form where applicable), and account identifiers; 
2. Subscription plan, invoices, transaction history, and payment-related data. Payment card data is typically processed by our payment service providers; we receive limited payment confirmation and tokens rather than full card numbers, depending on the provider;
3. Content of emails, support tickets, chats, calls (and related metadata) and other correspondence with us; 
4. IP address, device identifiers, browser type, operating system, referral URLs, pages viewed, timestamps, crash reports, and similar log data;
5. Cookie IDs, advertising IDs, and information about your interactions with the Website and (where applicable) the Services; 
6. Search queries/prompts, filters applied, clicks, lists/shortlists created, labels/tags, collaboration actions, export events (if enabled), and other usage telemetry relating to how the Services are used; 
7. The Services may process and display information about creators/influencers that is publicly available on third-party platforms or otherwise publicly available online. This may include, depending on availability and platform rules: usernames/handles, profile names, profile images, public biography text, public content (or excerpts/metadata), engagement signals, audience-level insights presented in aggregated form, and links to public profiles. The specific fields may change over time based on platform availability and legal requirements.

We do not ask Customers to upload special category (sensitive) personal data to the Services and the Services are not intended for profiling individuals based on sensitive characteristics.

5. Cookies and Similar Technologies 

We use cookies and similar technologies to operate the Website and, where applicable, to support certain Service features.

1. Types of cookies: 
2. 1. Operationally necessary cookies. Required for core site functionality (e.g., security, session management, authentication).
   2. Performance and analytics cookies. Help us understand how the Website and Services are used, measure performance, and diagnose issues.
   3. Functionality cookies. Remember preferences (e.g., language, region) and support enhanced features.
   4. Advertising/marketing cookies (where used). Support measurement of marketing campaigns and showing relevant advertising on third-party websites.
2. You can manage cookies through your browser settings and, where applicable, through the cookie consent banner/preferences tool on the Website. Disabling certain cookies may limit site functionality.

6. Purposes of Processing

We process personal data for the following purposes:

1. 1. Account creation, authentication, access management, core features (search, matching, analytics, shortlists), and related service delivery.
   2. Responding to inquiries, providing technical support, and communicating operational messages.
   3. Subscription management, invoicing, payment processing, fraud prevention, and record-keeping.
   4. Monitoring for suspicious activity, protecting the Services from misuse (including automated scraping or attacks), and maintaining platform integrity.
   5. Debugging, performance monitoring, analytics, training internal teams, improving user experience, developing new features, and service quality management.
   6. Meeting legal requirements, responding to lawful requests, handling disputes, and enforcing our agreements.
   7. Marketing the Services (including events, newsletters, and relevant product updates) where permitted by law. Where required, we use consent for marketing communications.
   8. Producing aggregated statistics and business metrics (for example, usage trends) that do not identify individuals.

7. Legal Bases

Where the GDPR applies, we rely on the following legal bases:

1. 1. Contract (Art. 6(1)(b) GDPR). To provide the Services to Customers and Authorized Users and to manage subscriptions.
   2. Legitimate interests (Art. 6(1)(f) GDPR). To operate, secure, and improve the Website and Services; to prevent abuse; to produce aggregated statistics; and to support business operations. For Creator Data Subjects, our legitimate interests include providing an influencer discovery and analytics service based on publicly available information, while applying safeguards and honoring applicable rights.
   3. Consent (Art. 6(1)(a) GDPR). For marketing communications where required, and for certain cookies/trackers.
   4. Legal obligation (Art. 6(1)(c) GDPR). To comply with applicable laws and regulatory requirements.

8. Whether You Must Provide Personal Data

Unless stated otherwise, providing personal data is not a statutory requirement. However, certain data is required to create an account, authenticate users, provide the Services, process payments, or respond to support requests. If you do not provide required data, some Services may not be available.

9. Retention Periods

We retain personal data for as long as needed for the purposes described above, including:

1. 1. For the duration of the Customer relationship and a reasonable period thereafter for administration, dispute resolution, and compliance.
   2. For the period required by applicable tax and accounting laws.
   3. Typically for limited periods appropriate for security and troubleshooting, unless longer retention is required for investigations or legal obligations.
   4. Coverage and retention depend on platform availability, technical requirements, and legal obligations. The data presented through the Services may change or be removed over time.
   5. Where possible, we delete or anonymize personal data when it is no longer needed.

10. Recipients of Personal Data

We may share personal data with:

1. 1. Affiliates Members of our corporate group (subsidiaries, parent companies, and affiliates) where needed for operations and service delivery.
   2. Service providers (processors). Vendors that support hosting, analytics, security, customer support, email delivery, billing/invoicing, payments, CRM, and similar functions. These providers act under contract and process data on our instructions where required by law.
   3. Third-party platforms and integrations (where used). If you connect integrations or use features that interact with third-party platforms, those third parties may receive data as part of providing the integration.
   4. Courts, regulators, law enforcement, and advisors where required by law or to protect rights, safety, and security.
   5. In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable law.

11. Data Sources

We collect personal data:

1. 1. from you directly (account registration, subscription, communications);
   2. from your devices (cookies and logs);
   3. from public sources and third-party platforms where information is publicly available (for creator discovery features);
   4. from business partners and service providers (for example, payment confirmation, analytics, CRM enrichment where lawful).

12. International Data Transfers

Personal data may be transferred to countries outside the European Economic Area (EEA). Where required, we rely on appropriate safeguards such as:

1. 1. adequacy decisions of the European Commission; and/or
   2. Standard Contractual Clauses (SCCs) and additional protective measures, as appropriate.

13. Your Rights

Depending on your location and applicable law (including GDPR where applicable), you may have rights to:

1. 1. access your personal data;
   2. rectification;
   3. deletion;
   4. restriction of processing;
   5. data portability;
   6. objection to processing (including processing based on legitimate interests);
   7. withdraw consent (where processing is based on consent); and
   8. lodge a complaint with a supervisory authority.

You may submit requests by:

1. 1. sending an email to privacy@youscan.io; or
   2. using our Data Subject Request form: https://tigerfinder.com/gdpr-request  

If you act on behalf of a Customer (for example, as an Authorized User), we may need to verify your authority and coordinate with the Customer’s Account administrator where appropriate.

14. Creator Data Requests

If you are a creator/influencer and believe your publicly available information is displayed in the Services, you may contact privacy@youscan.io to submit an access/objection request or other request under applicable law. We may need to verify identity and assess the request in light of the nature of the data (publicly available) and our legitimate interests, and we will respond within applicable legal timelines.

15. Third-Party Services and APIs

The Services may rely on or integrate with third-party platforms, tools, or APIs. Your use of such third-party services may be governed by the third party’s terms and privacy policies. We do not control third-party services and are not responsible for their practices.

If the Services use YouTube API Services for certain features, that use is subject to YouTube’s terms and Google’s Privacy Policy (commonly available at: https://www.youtube.com/t/terms and http://www.google.com/policies/privacy). Interactions with YouTube API Services are governed by Google’s policies to the extent applicable.

16. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Services. The updated version will be posted on the Website with an updated “Status” date.

Status of this Privacy Policy: February 26, 2026