Scope

This notice supplements our Privacy Policy and applies specifically to California residents as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA").

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, account ID, device identifiers, IP address
• Internet activity: Browsing and interaction history within the Service, search queries, domain preferences
• Geolocation data: Approximate location derived from IP address (not precise GPS)
• Inferences: Preferences, interests, and behavioral patterns drawn from usage data for personalization

Your Rights Under CCPA

As a California resident, you have the right to:

• Right to Know: Request disclosure of the specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: Request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights.
• Right to Limit Use of Sensitive Information: Request that we limit our use of sensitive personal information to what is necessary to perform the Service.

Sale and Sharing of Personal Information

Lilith does not sell your personal information as defined under the CCPA. We do not share your personal information for cross-context behavioral advertising purposes. We have not sold or shared personal information in the preceding 12 months.

Retention

We retain each category of personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in our Privacy Policy. Account data is retained while your account is active. Analytics data is retained for up to 90 days in identifiable form, after which it is aggregated and anonymized.

How to Exercise Your Rights

To exercise your CCPA rights, you may submit a verifiable consumer request by:

• Emailing us at privacy@oshunsynthetics.com with the subject "CCPA Request"
• Using the data management tools in your profile settings to download or delete your data

We will verify your identity before processing any request. You may also designate an authorized agent to submit requests on your behalf. We will respond to verifiable requests within 45 days. If we need additional time, we will inform you of the reason and extension period (up to an additional 45 days).

Contact for CCPA Inquiries

Oshun Synthetics LTD — Privacy Team
Email: privacy@oshunsynthetics.com