Cookie Policy

Cookies are small text files that are placed on your device (computer, tablet, or mobile) when you visit a website or use a web application. They are widely used to make websites and applications work more efficiently, as well as to provide reporting information and enable personalised experiences. Cookies may be set by Intellisha ("first-party cookies") or by third-party service providers that we use to deliver certain features ("third-party cookies"). Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period or until deleted). We also use similar technologies such as web beacons, pixels, and local storage, which function in a comparable way to cookies. References to "cookies" in this Policy include all such technologies.

Intellisha uses cookies and similar technologies to: • Keep you signed in — Session cookies allow the platform to recognise you as an authenticated user as you navigate between pages, eliminating the need to log in repeatedly. • Remember your preferences — Persistent cookies store your settings (such as language preferences and UI configurations) so the platform feels consistent across sessions. • Understand platform usage — Analytics cookies help us identify which features are most used, where users encounter friction, and how we can improve the overall experience. All analytics data is aggregated and anonymized. • Ensure security — Security cookies help us detect and prevent fraudulent activity, brute-force login attempts, and cross-site request forgery (CSRF) attacks. • Measure performance — Performance cookies allow us to monitor the speed and reliability of the platform, helping our engineering team prioritise optimisations.

We work with a limited number of trusted third-party providers who may set cookies on your device when you use our Services. We carefully vet these providers and require them to comply with applicable privacy and data protection laws. Current third-party cookie providers include: • AWS CloudFront — Content delivery and load balancing. Cookies are used for sticky session routing and performance optimisation. These are strictly necessary. • Analytics Provider — We use a privacy-focused analytics solution to collect aggregated usage statistics. No personal identifiers are shared with analytics providers. • Authentication Providers (SSO) — If you use Google or Microsoft Single Sign-On, those providers may set their own cookies to manage the authentication flow. Please refer to their respective privacy and cookie policies for details. We do not use advertising networks or ad-tech tracking cookies. We do not allow third-party advertisers to set cookies through our Services.

You have several options to control cookies: Cookie Consent Banner When you first visit our platform, we display a cookie consent banner. You can use this to accept all cookies, reject non-essential cookies, or customise your preferences by category. You can revisit and update your preferences at any time from our Cookie Settings panel (accessible from the footer of any page). Browser Settings Most web browsers allow you to control cookies through their settings. You can: • View and delete existing cookies. • Block all cookies or cookies from specific websites. • Configure notifications when a cookie is set. Disabling strictly necessary cookies may prevent the platform from functioning correctly and will log you out of your session. Browser-Specific Instructions: • Chrome: Settings → Privacy and Security → Cookies and Other Site Data • Firefox: Settings → Privacy & Security → Cookies and Site Data • Safari: Preferences → Privacy → Manage Website Data • Edge: Settings → Cookies and Site Permissions → Cookies and Site Data Do Not Track (DNT) Some browsers transmit a "Do Not Track" signal. While Intellisha respects user privacy, there is currently no consistent industry standard for responding to DNT signals. We do not alter our data collection practices in response to DNT signals but will update this section if standards are established.

The following categories of data may be collected through cookies and similar technologies: • Technical identifiers: Browser type and version, operating system, device type, screen resolution. • Usage data: Pages visited, features clicked, session start and end times, navigation paths. • Performance data: API response times, page load durations, error types and frequencies. • Authentication data: Encrypted session tokens (never raw passwords or sensitive credentials). • Preference data: UI theme, language/region selection, recently accessed documents (stored locally). Data collected through analytics and performance cookies is aggregated and anonymized before analysis. We cannot use this data to identify you personally. All cookie data is protected in accordance with our Privacy Policy, including our commitments to data encryption, access controls, and retention limits.

Different cookies have different lifespans: • Session cookies expire automatically when you close your browser tab or window. • Authentication cookies persist for up to 30 days (or the duration you select when logging in with "Remember me"). • Preference cookies persist for up to 12 months, allowing your settings to be remembered across sessions. • Analytics cookies persist for up to 13 months in accordance with best practice guidance from data protection authorities. • Consent cookies (recording your cookie preferences) persist for 12 months before we ask for your consent again. You can delete any cookie at any time through your browser settings.

We process cookie-related data on the following legal bases: • Strictly Necessary Cookies: Processed under Contractual Necessity — these cookies are required to deliver the Services you have contracted with us for. • Functional, Analytics & Performance Cookies: Processed based on your Consent, which you provide via our cookie consent banner. You may withdraw consent at any time. For users in the European Economic Area (EEA), United Kingdom, and other applicable jurisdictions, we comply with the ePrivacy Directive ("Cookie Law") and applicable national implementations, as well as the General Data Protection Regulation (GDPR).

We may update this Cookie Policy from time to time to reflect changes in our technology, legal requirements, or the cookies we use. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where required, by obtaining fresh consent. We encourage you to review this Policy periodically to stay informed about our use of cookies.

If you have any questions about our use of cookies or this Cookie Policy, please contact us: Intellisha, Inc. — Privacy Team Email: legal@intellisha.com Address: Pune, Maharashtra, India For questions about your personal data more broadly, please refer to our Privacy Policy.