Privacy Policy

1.1 Blue Ocean Labs, LLC (“Blue Ocean Labs” “we”, “our ”, or “us”) is committed to protecting your privacy. This privacy policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you (“personal information“) and information regarding our use of cookies and similar technologies.

1.2 Blue Ocean Labs operates SecureSync, a cloud-based business platform available via our website(s) (our “Website”) at https://securesync.ai and any desktop or mobile applications we make available (the “Services”).

1.3 This privacy policy applies to the Blue Ocean Labs Services.

1.4 Before accessing or using the Blue Ocean Labs Services, please ensure that you have read and understood our collection, storage, use and disclosure of your personal information as described in this privacy policy. This privacy policy describes our practices and, where applicable, the legal basis on which we process personal information. Where we are required by law to obtain your consent for a particular processing activity, we will request that consent separately.

1.5 This privacy policy should be read together with our Terms of Use at https://securesync.ai/terms and, if you receive sign-in codes by text message, our SMS Terms in Exhibit C of the Terms of Use at https://securesync.ai/terms#sms-terms.

2.1 Information you give to us. We collect personal information about you when you voluntarily submit information directly to us by filling in forms on our Website or by corresponding with us by phone, email or otherwise. This includes information you provide when you register to use our Website, subscribe to the Blue Ocean Labs Services, participate in any discussion boards, forums or other social media functions on our site or enter a competition, promotion or survey and when you report a problem with our Website, or use some other feature of the Blue Ocean Labs Services as available from time to time.

2.2 If you choose not to provide personal information, we may not be able to provide the Blue Ocean Labs Services to you or respond to your other requests.

2.3 Information we receive from other sources. We may receive personal information about you from or through individuals or corporate entities which are subscribers to the Blue Ocean Labs Services (“Subscribers“) where you are to be designated a user of the Blue Ocean Labs Services. We may receive personal information about you if you use any of the websites we operate or which are operated by the Subscribers within our platform or the other services we provide from time to time. We also work closely with third parties (including, for example, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers) and may receive information about you from them, subject to your agreements with them.

2.4 We also automatically collect personal information about you indirectly about how you access and use the Blue Ocean Labs Services and information about the device you use to access the Blue Ocean Labs Services.

2.5 We may link or combine the personal information we collect and/or receive about you and the information we collect automatically. This allows us to provide you with a personalized experience regardless of how you interact with us.

2.6 We may anonymize and aggregate any of the personal information we collect (so that it does not identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the Blue Ocean Labs Services and developing new products and features. We may also share such anonymized information with others.

3.1 We use the personal information we collect to: (a) provide, operate, maintain, secure and support the Services; (b) create and administer accounts and authenticate users, including by sending one-time sign-in codes by text message to users who choose that method; (c) process payments and manage subscriptions and billing; (d) communicate with you about the Services, including responses to inquiries, service announcements, and security and administrative notices; (e) send marketing communications in accordance with your preferences (see Section 7); (f) personalize your experience and improve and develop the Services and new products and features; (g) monitor and analyze usage and trends; (h) detect, investigate, prevent and address fraud, abuse, security incidents and other harmful activity; and (i) comply with legal obligations and enforce our terms and other agreements.

3.2 Where EEA or UK data protection law applies and we act as a controller, we rely on the following legal bases to process your personal information: (a) performance of a contract, where processing is necessary to provide the Services to you or to take steps at your request before entering into a contract; (b) our legitimate interests, including operating, securing, improving and marketing the Services, where those interests are not overridden by your rights and interests; (c) your consent, where required (for example, for certain cookies or marketing communications), which you may withdraw at any time; and (d) compliance with legal obligations to which we are subject.

4.1 Our Subscribers use the Blue Ocean Labs Services to synchronize, manage and present data from their own business systems, which may include personal information about their clients, contacts and other individuals. With respect to such information, the Subscriber is the controller (or “business”) and Blue Ocean Labs is a processor (or “service provider”) acting on the Subscriber’s instructions under our agreement with the Subscriber, including the applicable Data Processing Addendum.

4.2 If your personal information has been submitted to the Blue Ocean Labs Services by or on behalf of a Subscriber and you wish to exercise rights you may have with respect to that information, please direct your request to the relevant Subscriber. We will assist Subscribers in responding to such requests as described in the Data Processing Addendum, and where we receive such a request directly, we will refer it to the relevant Subscriber where appropriate.

5.1 We may share your personal information with any member of our group, which includes our subsidiaries. We will not share your personal information with any third parties except as described in this privacy policy or in connection with the Service. None of the sharing described in this Section 5 applies to mobile phone numbers provided for text message verification or to text messaging opt-in data and consent, which are covered only by Section 5.6. We may share your information with selected third parties, including:

• Business partners, vendors, suppliers, and subcontractors who perform services on our behalf (these companies are authorized to use your personal information only as necessary to provide these services to us);
• Analytics and search engine providers that assist us in the improvement and optimization of our Website;
• Advertising partners, with whom we may share identifiers and internet or other electronic network activity information collected through targeting cookies in order to deliver advertising relevant to your interests (cross-context behavioral advertising); this may constitute “sharing” under the California Consumer Privacy Act, and you may opt out as described in Section 11 and Section 12;
• Payment processors for the purpose of fulfilling relevant payment transactions;
• Third parties in connection with a business transaction. Personal information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business. If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

5.2 In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet law enforcement requirements.

5.3 If we are under a duty to disclose or share your personal information to comply with a legal obligation, or to enforce or apply our terms of service and other agreements, or to protect the rights, property, or safety of Blue Ocean Labs, our customers, or others, we may disclose such information as permitted by law. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

5.4 Public forums. The Services are generally not intended to include public blogs or community forums. If we enable any public-facing features in the future, any information you submit in those areas may be visible to others. To request removal of personal information from any such feature, contact us at support@securesync.ai.

5.5 Testimonials. With consent, we may display personal testimonials of satisfied customers on our site, along with other endorsements. If you wish to update or delete your testimonial, you can contact us at support@securesync.ai.

5.6 Text message verification. If a Subscriber allows it, users can choose to receive one-time sign-in codes by text message. We use the mobile phone number you provide for this only to send those codes and to keep a record of your consent, and we never use it for marketing, notices or any other purpose. Messages are sent by Blue Ocean Labs through AWS End User Messaging Notify, a service of Amazon Web Services, which passes them to your mobile carrier for delivery. You can stop these messages at any time by replying STOP or by switching to another sign-in method. The SecureSync SMS Terms in Exhibit C of the Terms of Use at https://securesync.ai/terms#sms-terms describe the program in full.

No mobile numbers will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Messages are delivered through AWS Notify, and AWS does not share end user phone numbers with third parties for marketing or promotional purposes.

6.1 Certain optional features of the Blue Ocean Labs’ Services use artificial intelligence. When a Subscriber enables AI features, relevant content and personal information may be transmitted to third-party model or infrastructure providers solely to provide the feature, subject to contractual confidentiality and security obligations. We do not use personal information or Subscriber content to train generalized AI models unless the Subscriber explicitly opts in in writing.

7.1 From time to time we may contact you with relevant information about the Blue Ocean Labs Services and our other products and services. Most messages will be sent electronically. For some messages, we may use personal information we collect about you to help us determine the most relevant information to share with you.

7.2 If you do not want to receive such messages from us, you will be able to tell us by selecting certain boxes on forms we use when we first collect your contact details. You can also change your marketing preferences at any time by contacting us at support@securesync.ai.

7.3 We never use a mobile phone number provided for text message verification to send marketing or promotional messages, by text message or otherwise.

8.1 Security. All information you provide to us is stored on secure servers in a controlled environment with limited access. Any payment transactions will be encrypted in transit using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Service, you are responsible for keeping this password confidential. Subscribers should not share their password with anyone.

8.2 While no transmission of information via the internet is completely secure, we take reasonable measures to protect your personal information. We cannot guarantee the security of your personal information transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

8.3 International Transfers of your Personal Information. We may transfer personal information to countries where we or our service providers operate. Where personal information is transferred outside of your jurisdiction, we implement appropriate safeguards. For EEA/UK personal information, transfers outside the EEA/UK will be made pursuant to appropriate safeguards such as the Standard Contractual Clauses (and, where applicable, the UK Addendum) and as further described in the applicable Data Processing Addendum.

8.4 In the event of a security incident involving your personal information, we will notify affected individuals and applicable regulators as and when required by applicable law.

9.1 We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of our legitimate business interests and satisfying any legal or reporting requirements.

9.2 To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and the applicable legal requirements.

10.1 In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:

• Right of access and portability. The right to obtain access to your personal information along with certain information, and to receive that personal information in a commonly used format and to have it ported to another data controller.
• Right to rectification. The right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete.
• Right to erasure. The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
• Right to restriction. The right to obtain the restriction of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information.
• Right to object. The right to object, on grounds relating to your particular situation, to the processing of your personal information, and to object to the processing of your personal information for direct marketing purposes, to the extent it is related to such direct marketing.

10.2 If you wish to exercise one of these rights, please contact us using the contact details at the end of this privacy policy. Upon request, we will provide you with information about whether we hold any of your personal information. You may access, correct or request deletion of your personal information by logging into your account, or by contacting us at support@securesync.ai. We will respond to your request within 30 days.

10.3 If you reside in the European Union (EU) or the United Kingdom, Blue Ocean Labs is the controller of your personal information described in this policy (other than information we process on behalf of Subscribers, as described in Section 4) for purposes of European data protection legislation. You also have the right to file a complaint with your local data protection authority. Information about how to contact your local data protection authority is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

If you are located in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner’s Office ( https://ico.org.uk).

11.1 This Section applies to residents of California and other US states with comprehensive consumer privacy laws, and supplements the rest of this privacy policy. It describes our practices with respect to personal information we process as a “business” or “controller.” For personal information we process on behalf of a Subscriber as a service provider or processor, please direct requests to the relevant Subscriber as described in Section 4.

11.2 Categories of personal information. In the preceding 12 months, we have collected the following categories of personal information: identifiers (such as name, email address, phone number and IP address); commercial information (such as subscription, billing and transaction records); internet or other electronic network activity information (such as usage data, device and browser information, and information collected through cookies); professional or employment-related information (such as company name and role); and inferences drawn from the foregoing (such as preferences). We collect these categories from you directly, automatically when you use the Services, and from Subscribers and the third parties described in Section 2, and we use and disclose them for the purposes described in Section 3 and Section 5.

11.3 Selling and sharing. We do not sell personal information for monetary consideration. We may “share” identifiers and internet or other electronic network activity information collected through targeting cookies with advertising partners for cross-context behavioral advertising, as “sharing” is defined under the California Consumer Privacy Act. We do not knowingly sell or share the personal information of consumers under 16 years of age, and we do not use or disclose sensitive personal information for purposes that require a right to limit under applicable law.

11.4 Your rights. Subject to applicable law, you have the right to: (a) know and access the personal information we have collected about you; (b) correct inaccurate personal information; (c) delete personal information; (d) receive a portable copy of your personal information; (e) opt out of the sale or sharing of personal information; and (f) not receive discriminatory treatment for exercising your rights.

11.5 How to exercise your rights. You may exercise these rights by emailing support@securesync.ai or, for opt-outs of sharing, by adjusting your cookie preferences as described in Section 12. We will verify your request using information associated with your account or other information you provide. You may use an authorized agent to submit a request on your behalf; we may require proof of the agent’s authorization and verification of your identity.

11.6 Opt-out preference signals. We honor opt-out preference signals such as the Global Privacy Control (GPC). When we detect a valid GPC signal from your browser, we will treat it as a request to opt out of the sharing of personal information for cross-context behavioral advertising for that browser.

11.7 Appeals. If we decline to take action on a request, you may appeal our decision by replying to our response or by emailing support@securesync.ai with “Privacy Appeal” in the subject line. We will respond to your appeal within 45 days (or such other period required by applicable law). If your appeal is denied, you may contact the attorney general or privacy regulator in your state.

12.1 Our Service uses cookies and similar technologies (collectively referred to as cookies) to distinguish you from other users of our Service. This helps us to provide you with good service. This helps us enhance and personalize your user experience, to monitor and improve our Website and services, and for other internal purposes. As is true of most websites, we gather certain information automatically.

12.2 We use the following types of cookies:

• Strictly necessary cookies. These cookies are required for the essential operation of our Service such as to authenticate you and prevent fraudulent use.
• Analytical/performance cookies. These cookies allow us to recognize and count the number of visitors and to see how visitors move around our Service when they are using it. This helps us to improve the way our Service works, for example, by ensuring that you can find information easily.
• Functionality cookies. These cookies are used to recognize you when you return to our Service. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Targeting cookies. These cookies record your visit to our Service, the pages you have visited and the links you have followed. We will use this information to make our Service and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

12.3 Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

12.4 You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able to access all or parts of our site.

12.5 Social Media. Our Website may display social media features, such as Facebook Like button and widgets such as the Share button. These features may collect your IP address, which page you are visiting on our Website, and may set a cookie to enable the feature to function properly. Social media features and widgets are hosted on our site or by a third party, and your interactions with these features are governed by the privacy policy of the company providing it.

12.6 Opting out of targeting cookies. You may opt out of targeting cookies and the associated “sharing” of personal information for cross-context behavioral advertising by adjusting your browser settings as described above, by using any cookie preference tools we make available on the Website, or by contacting us at support@securesync.ai . As described in Section 11, we also honor opt-out preference signals such as the Global Privacy Control.

13.1 The Blue Ocean Labs Services may, from time to time, contain links to and from third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

13.2 Some of the pages on our Website may utilize framing techniques to serve content to/from our partners while preserving the look and feel of our Website. Please be aware that you are providing your personal information to these third parties and not to Blue Ocean Labs.

14.1 The Blue Ocean Labs Services are not directed at minors and we do not intend to collect personal information from minors in our capacity as a controller. If you become aware that a child has provided us with personal information without appropriate consent, then please contact us using the details below so that we can take the appropriate steps in accordance with our legal obligations and this privacy policy.

15.1 We may update this privacy policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.

16.1 If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our Website. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this privacy policy. A mobile phone number provided for text message verification only ever receives sign-in codes and is never used for these notices.

17.1 Regardless of your location, questions, comments, and requests regarding this privacy policy may be addressed to our privacy contact at support@securesync.ai (or, where applicable, our Data Protection Officer) or by postal mail to:

Blue Ocean Labs, LLC

7400 N. Oracle Road, Suite 150-428

Tucson, AZ 85704

USA

17.2 This privacy policy was last modified on September 22, 2026.