PRIVACY POLICY Argus AI (Meta Quest / XR Application) Effective date: 14 January 2026 This Privacy Policy explains how Limited Liability Company “ACUVERUS” (“ACUVERUS”, “we”, “us”, “our”) collects, uses, stores, and shares information in connection with Argus AI and related services (the “App” or “Service”). 1) WHO WE ARE / CONTACT Data controller: Limited Liability Company “ACUVERUS” (ACUVERUS S.R.L.) Registered office: MD-2051, 21 Alba Iulia Street, ap. 1, Chişinău, Republic of Moldova. Privacy contact: [email protected] General contact: https://argusai.pro/contact If you use the App through a healthcare organization (e.g., a hospital/clinic), that organization may set additional rules for clinical data handling, retention, and access. 2) WHAT INFORMATION WE PROCESS We process the following categories of information depending on how you use the App: A. User Input (DICOM and medical imaging files) The App allows you (the account holder / physician) to upload medical imaging files such as DICOM (“User Input”). User Input may contain sensitive health information and may include personal data depending on the content and metadata included in the files. How it works: - You upload DICOM/User Input to our server using your Argus AI account. - The App on Meta Quest signed into the same account may download that DICOM/User Input from our server to the headset for viewing/processing, where it may be stored temporarily as a local cache. - You can delete locally cached DICOM/User Input from the headset by clearing the App cache (this removes downloaded DICOM files from the device). - You can delete server-stored DICOM/User Input from your account via the Service interface (see Section 8). B. App usage and diagnostics data We may collect basic technical information to operate and improve the Service, such as: - App version, device model/OS, language, timestamps, - crash reports and performance diagnostics, - limited usage events (e.g., feature opened) to improve stability and reliability. C. Support and communications If you contact us, we process the information you provide (name, email, organization, message content, and attachments). D. What we do NOT collect/store (Passthrough / camera) We do not collect or store raw passthrough camera video/images from your headset. We do not upload or retain passthrough data on our servers. 3) HOW WE USE INFORMATION We use information for the following purposes: - Provide and operate the Service (uploading, downloading, viewing, visualization, segmentation/annotation tools, exporting, and other requested functions). - Process your User Input (including DICOM) to perform the functions you request. - Maintain safety, security, and integrity (fraud/abuse prevention, security monitoring, access control). - Debugging, diagnostics, and performance improvement (fix crashes, improve stability). - Customer support and communication (respond to requests, provide updates). - Legal compliance and enforcement (meet legal obligations, enforce terms, protect rights and safety). We do not sell personal data. 4) SHARING / DISCLOSURE We share information only as necessary: - With service providers that support hosting, storage, and technical operations of the Service, under confidentiality and security obligations. - With authorities if required by law, or to protect rights, safety, and prevent fraud/abuse. - In connection with a corporate transaction (e.g., merger/acquisition), subject to appropriate safeguards. 5) SECURITY We use reasonable technical and organizational measures designed to protect information (e.g., encryption in transit, access controls, least-privilege practices). No method of transmission or storage is 100% secure, but we work to protect your information against unauthorized access, alteration, and disclosure. 6) RETENTION We retain information only as long as necessary for the purposes described above: - DICOM/User Input stored on our servers is retained until you delete it (or until it is deleted according to account/organizational settings), unless retention is required by law or for security purposes. - Locally downloaded DICOM/User Input on the headset may remain in the App cache until you clear the cache or uninstall the App (depending on device settings). - Support messages and related records may be retained for a limited period to resolve issues and comply with legal obligations. We recommend uploading only the minimum data necessary and using de-identified/anonymized DICOM where feasible. 7) YOUR RIGHTS AND CHOICES Depending on your location and applicable law, you may have rights to request access, correction, deletion, or restriction of processing of your personal data. You can also delete DICOM/User Input as described in Section 8. 8) HOW TO REQUEST DELETION (DATA DELETION INSTRUCTIONS) A. Deleting DICOM/User Input from the headset (local cache) You can remove downloaded DICOM/User Input from your Meta Quest by clearing the App cache. This deletes all locally cached DICOM files stored by the App on the headset. Clearing the App cache deletes only the local downloaded copies on the headset and does not automatically delete server-stored DICOM unless you also delete it from the Service interface (see Section 8B). B. Deleting DICOM/User Input from our servers You can delete DICOM/User Input stored on our servers directly from within your Argus AI account using the Service interface. In the DICOM item card, the first action button is “Delete” (trash bin icon). Selecting this removes the selected DICOM from server storage for your account. If you need help, you can also request deletion by contacting: [email protected] Please include: - the email/identifier associated with your account, - approximate upload date/time, - identifiers (study name/ID, file name, or other reference). We do not charge any fee for deletion requests. When deletion may be limited: We may retain certain information if required to comply with legal obligations, resolve disputes, enforce agreements, or for security/fraud prevention. 9) CHILDREN The App is not intended for children, and we do not knowingly collect personal data from children. 10) CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Effective date”. 11) PLATFORM NOTE Meta/Quest platform features and services may have their own privacy practices. This Policy covers ACUVERUS’s processing related to Argus AI.