Cookie Policy

1. Introduction

Invicti Security Corp. and its affiliated companies and subsidiaries (“Invicti”, “we”, “us”,or “our”) use cookies and similar tracking technologies when you visit www.invicti.com and any related websites ormedia channels (collectively, the “Sites”). This Cookie Policy explains whatthese technologies are, why we use them, and your rights to control their use.

This policy should be read alongside our PrivacyPolicy, which provides further detail on how we handle personal informationcollected through the Sites.

Changes to this policy. We may update this Cookie Policy from time to time. When we do, wewill revise the “Last updated” date at the top of this page and, where requiredby law, notify you of material changes. We encourage you to review this pageperiodically.

2. What Are Cookies and Similar Technologies?

A cookie is a small text file placed on yourdevice when you visit a website. It assigns your browser a unique identifier,which is sent back to us each time you interact with the Sites. Cookies allowus to recognise your device across visits and provide a more consistent,functional experience.

In addition to cookies, we may also use:

• Web beacons and pixel tags — tiny image files embedded in web pages oremails that help us track page visits and email opens.

• Session storage — data held temporarily in your browser for theduration of a single visit.

Unlike cookies, web beacons and pixel tagscannot be declined directly. However, you can limit their effect by controllingthe cookies that interact with them (see Section 5 below).

3. How We Use Cookies

We use cookies for the following purposes. Wherea legal basis under GDPR applies, it is noted in the table below.

Legal bases (GDPR).Strictly necessary and security cookies are placed on the basis of ourlegitimate interest in operating a secure and functional website — no consentis required. All other cookie categories are placed only with your priorconsent, which you may withdraw at any time (see Section 5).

4. Third-Party Cookies

Some cookies on the Sites are placed by thirdparties acting as our service providers or advertising partners. These thirdparties may use cookies to collect information about your activity on our Sitesand on other websites in order to provide measurement services and servetargeted advertisements.

Invicti does not control the cookies placed bythird parties, and their use is governed by those parties' own privacy andcookie policies. You can find further information at:

• Google: policies.google.com/privacy

• LinkedIn: linkedin.com/legal/privacy-policy

• Meta: www.facebook.com/privacy/policy

• HubSpot: legal.hubspot.com/privacy-notice

You can also opt out of interest-basedadvertising from participating companies via the Network Advertising Initiativeopt-out tool at optout.networkadvertising.org.

5. Your Cookie Choices and Rights

5.1 Managing consent

When you first visit the Sites, you will bepresented with a cookie banner that allows you to accept or declinenon-essential cookies by category. You can update your preferences at any timeby clicking the cookie banner in the footer of any page on the Sites.

Withdrawing consent does not affect thelawfulness of any processing carried out before you withdrew it.

5.2 Browser settings

You can configure your browser to refuse all orsome cookies, or to alert you when cookies are set. Please note that disablingcookies may affect the availability and functionality of parts of the Sites.Guidance for common browsers:

• Apple Safari — support.apple.com

• Google Chrome — support.google.com/chrome

• Microsoft Edge — support.microsoft.com

• Mozilla Firefox — support.mozilla.org

• Opera — help.opera.com

5.3 Rights for users in the EU, UK, and Switzerland (GDPR)

If you are located in the European EconomicArea, the United Kingdom, or Switzerland, you have the following rights inrelation to personal data collected through cookies:

• Right of access — request a copy of the personal data we hold aboutyou.

• Right to erasure — request deletion of your personal data, subject tocertain exceptions.

• Right to object — object to processing based on our legitimateinterests.

• Right to restrict processing — ask us to limit how we use your data.

• Right to data portability — receive your data in a structured,machine-readable format.

• Right to withdraw consent — withdraw consent at any time for anyprocessing based on consent.

To exercise any of these rights, please contactus using the details in Section 7. You also have the right to lodge a complaintwith your local supervisory authority. In the EU, your lead supervisoryauthority is determined by your country of residence; in the UK it is theInformation Commissioner's Office (ico.org.uk).

International transfers. Personal data collected through cookies may be transferred to, andprocessed in, countries outside the EEA or UK, including the United States.Where we transfer personal data outside these territories, we rely onappropriate safeguards such as the European Commission's standard contractualclauses. For further information, please contact us at privacy@invicti.com.

5.4 Rights for California residents (CCPA / CPRA)

If you are a California resident, you have thefollowing rights under the California Consumer Privacy Act (CCPA) as amended bythe California Privacy Rights Act (CPRA):

• Right to know — request disclosure of the categories and specificpieces of personal information we have collected, the sources and purposes ofcollection, and the third parties with whom we share it.

• Right to delete — request deletion of your personal information,subject to certain exceptions.

• Right to correct — request correction of inaccurate personalinformation.

• Right to opt out of sale or sharing — direct us to stop selling orsharing your personal information for targeted advertising purposes.

• Right to limit use of sensitive personal information — whereapplicable.

• Right to non-discrimination — we will not discriminate against you forexercising any of your CCPA rights.

Opt-out of sale or sharing. We allow certain advertising partners to collect internet or networkactivity information through cookies on our Sites for targeted advertisingpurposes. To opt out, update your preferences in the cookie settings tool, orsubmit a request using the contact details in Section 7. We also honour theGlobal Privacy Control (GPC) opt-out signal.

Submitting a request. You may submit a request to know, delete, or correct by emailingprivacy@invicti.com. Requests may be submitted by an authorised agent withwritten permission. We will verify your identity before processing your requestand respond within 45 days (extendable by a further 45 days where reasonablynecessary).

12-month data summary. In the preceding 12 months, we have collected the following categoriesof personal information through cookies: Identifiers, Internet or OtherElectronic Network Activity Information, and Geolocation Data. This informationhas been shared with service providers and advertising partners only to theextent described in this policy.

6. Data Retention

We retain personal data collected via cookiesfor the periods set out in Section 3. After those periods expire, cookie datais either deleted automatically by your browser or purged from our analyticsand advertising systems. Where we are required by law to retain data forlonger, we will do so for the minimum period required.

7. Contact Us

If you have questions or concerns about thisCookie Policy or wish to exercise your rights, please contact us:

By email

‍privacy@invicti.com

 By post

Invicti Security Corp.

Attn: Privacy

7171 Southwest Parkway, Bldg 300, Suite 475

Austin, TX 78735

‍

Last modified 20 August 2026.

‍