Cookie Policy

1. Introduction

Invicti Security Corp. and its affiliated companies and subsidiaries (“Invicti”, “we”, “us”, or “our”) use cookies and similar tracking technologies when you visit www.invicti.com and any related websites or media channels (collectively, the “Sites”). This Cookie Policy explains what these technologies are, why we use them, and your rights to control their use.

This policy should be read alongside our Privacy Policy, which provides further detail on how we handle personal information collected through the Sites.

Changes to this policy. We may update this Cookie Policy from time to time. When we do, we will revise the “Last updated” date on this page and, where required by law, notify you of material changes. We encourage you to review this page periodically.

2. What Are Cookies and Similar Technologies?

A cookie is a small text file placed on your device when you visit a website. It assigns your browser a unique identifier, which is sent back to us each time you interact with the Sites. Cookies allow us to recognise your device across visits and provide a more consistent, functional experience.

In addition to cookies, we may also use:

• Web beacons and pixel tags — tiny image files embedded in web pages or emails that help us track page visits and email opens.

• Session storage — data held temporarily in your browser for theduration of a single visit.

Unlike cookies, web beacons and pixel tags cannot be declined directly. However, you can limit their effect by controlling the cookies that interact with them (see Section 5 below).

3. How We Use Cookies

We use cookies for the following purposes. Wherea legal basis under GDPR applies, it is noted in the table below.

Legal bases (GDPR). Strictly necessary and security cookies are placed on the basis of ourlegitimate interest in operating a secure and functional website — no consentis required. All other cookie categories are placed only with your priorconsent, which you may withdraw at any time (see Section 5).

4. Third-Party Cookies

Some cookies on the Sites are placed by thirdparties acting as our service providers or advertising partners. These third parties may use cookies to collect information about your activity on our Sites and on other websites in order to provide measurement services and serve targeted advertisements.

Invicti does not control the cookies placed by third parties, and their use is governed by those parties' own privacy and cookie policies. You can find further information at:

• Google: policies.google.com/privacy

• LinkedIn: linkedin.com/legal/privacy-policy

• Meta: www.facebook.com/privacy/policy

• HubSpot: legal.hubspot.com/privacy-notice

You can also opt out of interest-basedadvertising from participating companies via the Network Advertising Initiative opt-out tool at optout.networkadvertising.org.

5. Your Cookie Choices and Rights

5.1 Managing consent

When you first visit the Sites, you will be presented with a cookie banner that allows you to accept or decline non-essential cookies by category. You can update your preferences at any time by clicking the cookie banner in the footer of any page on the Sites.

Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.

5.2 Browser settings

You can configure your browser to refuse all or some cookies, or to alert you when cookies are set. Please note that disabling cookies may affect the availability and functionality of parts of the Sites. Guidance for common browsers:

• Apple Safari — support.apple.com

• Google Chrome — support.google.com/chrome

• Microsoft Edge — support.microsoft.com

• Mozilla Firefox — support.mozilla.org

• Opera — help.opera.com

5.3 Rights for users in the EU, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights in relation to personal data collected through cookies:

• Right of access — request a copy of the personal data we hold aboutyou.

• Right to erasure — request deletion of your personal data, subject to certain exceptions.

• Right to object — object to processing based on our legitimate interests.

• Right to restrict processing — ask us to limit how we use your data.

• Right to data portability — receive your data in a structured, machine-readable format.

• Right to withdraw consent — withdraw consent at any time for any processing based on consent.

To exercise any of these rights, please contact us using the details in Section 7. You also have the right to lodge a complaint with your local supervisory authority. In the EU, your lead supervisory authority is determined by your country of residence; in the UK it is the Information Commissioner's Office (ico.org.uk).

International transfers. Personal data collected through cookies may be transferred to, and processed in, countries outside the EEA or UK, including the United States. Where we transfer personal data outside these territories, we rely on appropriate safeguards such as the European Commission's standard contractual clauses. For further information, please contact us at privacy@invicti.com.

5.4 Rights for California residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected, the sources and purposes of collection, and the third parties with whom we share it.

• Right to delete — request deletion of your personal information, subject to certain exceptions.

• Right to correct — request correction of inaccurate personal information.

• Right to opt out of sale or sharing — direct us to stop selling or sharing your personal information for targeted advertising purposes.

• Right to limit use of sensitive personal information — where applicable.

• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

Opt-out of sale or sharing. We allow certain advertising partners to collect internet or network activity information through cookies on our Sites for targeted advertising purposes. To opt out, update your preferences in the cookie settings tool, or submit a request using the contact details in Section 7. We also honour the Global Privacy Control (GPC) opt-out signal.

Submitting a request. You may submit a request to know, delete, or correct by emailing privacy@invicti.com. Requests may be submitted by an authorised agent with written permission. We will verify your identity before processing your requestand respond within 45 days (extendable by a further 45 days where reasonablynecessary).

12-month data summary. In the preceding 12 months, we have collected the following categories of personal information through cookies: Identifiers, Internet or Other Electronic Network Activity Information, and Geolocation Data. This information has been shared with service providers and advertising partners only to the extent described in this policy.

6. Data Retention

We retain personal data collected via cookies for the periods set out in Section 3. After those periods expire, cookie data is either deleted automatically by your browser or purged from our analytics and advertising systems. Where we are required by law to retain data for longer, we will do so for the minimum period required.

7. Contact Us

If you have questions or concerns about this Cookie Policy or wish to exercise your rights, please contact us:

By email

‍privacy@invicti.com

By post

Invicti Security Corp.

Attn: Privacy

7171 Southwest Parkway, Bldg 300, Suite 475

Austin, TX 78735

‍

Last modified 20 August 2026.

‍