Política de Cookies

1. Introduction and Scope

This Cookie Policy ("Policy") explains how Takt, Inc. ("Takt," "we," "our," or "us") uses cookies and similar tracking technologies on https://www.takt.io and other Takt websites, web applications, and online services, in our marketing emails, and in our mobile applications, in each case where they link to or reference this Policy (collectively, the "Website").

This Policy describes what these technologies are, the categories we use, the purposes and legal bases for their use, the third parties involved, and the choices and rights available to you. It should be read together with the Takt Privacy Policy, which governs our broader processing of personal data. Capitalized terms not defined here have the meaning given in the Privacy Policy.

Within Takt's authenticated customer platform, we use cookies and similar technologies to authenticate and secure your session and to understand how the product is used so we can improve it. That use is governed by our customer agreements and Data Processing Addendum (DPA) rather than this Policy, and we do not use data from the platform for advertising.

2. What Are Cookies and Similar Technologies

Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites operate, to improve efficiency, and to provide reporting information. This Policy also covers similar technologies that perform comparable functions, including:

• Pixels and web beacons — small graphics or code snippets that record whether a page or email was viewed and support analytics and advertising measurement.

• Software development kits (SDKs) and tags — code integrated into the Website that enables third-party functionality such as analytics or advertising.

• Local storage — browser storage mechanisms (e.g., HTML5 local storage) that retain information on your device.

We refer to all of these collectively as "cookies" in this Policy. Cookies may be:

• First-party (set by Takt) or third-party (set by a service provider or partner acting on our behalf or their own behalf);

• Session (deleted when you close your browser) or persistent (remaining on your device until they expire or are deleted).

3. Legal Bases and Consent

Where required by law — including in the European Economic Area (EEA), the United Kingdom (UK), and other jurisdictions with equivalent requirements — we set non-essential cookies only after you provide prior, informed, and freely given consent through our consent management platform ("CMP").

When you first visit the Website, our CMP banner offers one-click "Accept All" and "Reject All" options with equal prominence on its first layer, together with granular controls for each category of non-essential cookie. Non-essential cookies are not placed or activated until you make a selection, and you may withdraw or change your consent at any time (see Section 7). We record and retain evidence of consent choices to demonstrate compliance, and we refresh your consent at least every 12 months or when this Policy changes materially.

Our legal bases are as follows:

• Strictly necessary cookies are placed on the basis that they are essential to provide the Website you have requested (and, under the ePrivacy Directive / UK PECR, are exempt from the consent requirement). Where these involve personal data, our lawful basis under the GDPR / UK GDPR is our legitimate interest in operating and securing the Website.

• Preference, analytics, and advertising cookies are placed on the basis of your consent. Where such processing also involves personal data, consent is the corresponding GDPR / UK GDPR lawful basis.

In the United States, we do not treat consent as a precondition for most cookies, but we honor opt-out preferences and universal opt-out signals as described in Sections 8 and 9.

4. Categories of Cookies We Use

5. Cookie Inventory

The following table lists the cookies currently used on the Website. Cookie names and durations are set by their providers and may change as providers update their technologies; we review and update this inventory at least annually and when we add or remove a provider.

6. Third-Party Cookies and International Transfers

Some cookies are placed by third-party service providers and partners that provide analytics, advertising, content, and related services. Where we embed a third-party tag that collects and transmits personal data from the Website — such as the LinkedIn Insight Tag — we are jointly responsible with the provider for that collection and transmission, and our arrangements with these providers (including LinkedIn's joint controller terms) allocate those responsibilities. Each provider also processes data for its own purposes under its own privacy notice, and we encourage you to review the notices of Google (Analytics and Ads), LinkedIn, and HubSpot.

Where cookies result in personal data being transferred outside the EEA, UK, or Switzerland — for example, to service providers in the United States — such transfers are made under an appropriate transfer mechanism. Our principal providers participate in the EU-U.S. Data Privacy Framework (including the UK Extension and the Swiss-U.S. Data Privacy Framework), and where the Framework does not apply we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) or another applicable adequacy decision, together with supplementary measures where required.

7. How to Manage Your Cookie Preferences

You have several ways to control cookies:

• Consent manager. You can change or withdraw your consent at any time using the "Cookie Preferences" link available in the Website footer, which reopens our CMP. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

• Browser settings. Most browsers let you refuse or delete cookies and notify you when cookies are set. Because these controls vary by browser, refer to your browser's help documentation. Blocking strictly necessary cookies may impair Website functionality.

• Provider opt-outs. You can opt out of Google Analytics using Google's browser add-on and manage Google advertising cookies through Google Ad Settings. LinkedIn advertising preferences can be managed in your LinkedIn account settings.

• Industry opt-out tools. You can use the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), and, in Europe, Your Online Choices (youronlinechoices.eu).

8. Global Privacy Control and Universal Opt-Out Signals

We recognize and honor browser-based universal opt-out mechanisms, including the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the "sale" or "sharing" of personal information and of targeted/cross-context behavioral advertising for that browser or device. If we can reasonably associate the signal with you as a known individual — for example, because you have submitted a form on the Website — we also apply the opt-out to your personal information in our systems, including excluding you from advertising audience lists. Because these signals are otherwise device- and browser-specific, you may need to enable them on each browser and device you use.

9. Your Privacy Rights by Region

9.1 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have rights under the GDPR / UK GDPR, including the rights to access, rectify, erase, restrict, and object to processing, and to data portability, in each case subject to applicable conditions and exemptions. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). To exercise these rights, contact us using the details in Section 12.

9.2 United States

Depending on your state of residence, you may have rights under state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, and comparable laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states as they take effect. Subject to each law's conditions and exceptions, these rights may include the right to know/access, correct, and delete personal information; the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising; the right to limit the use of sensitive personal information; and the right to non-discrimination for exercising your rights.

Do Not Sell or Share My Personal Information. We do not sell your personal information to data brokers or anyone else; the information cookies collect is used internally to market and sell Takt's own products. Because we use advertising platforms such as LinkedIn and Google to reach prospective customers, however, we do "share" personal information for cross-context behavioral advertising as defined under California law, and this may also qualify as a "sale" under some state laws because those platforms use the data for their own purposes too. The personal information involved is limited to identifiers, device and internet-activity information, and — where you submit a form — business contact details such as name, email, and phone number. We do not collect or share sensitive personal information through cookies. The categories of personal information we collect, the categories of third parties we disclose them to, and our retention practices are described in more detail in the Takt Privacy Policy. You can exercise your right to opt out by adjusting your choices in our CMP, by using the "Do Not Sell or Share My Personal Information" link in the Website footer, or by enabling the Global Privacy Control (see Section 8). Opting out is as easy as opting in, and we do not use interfaces designed to impair your choice.

To submit a rights request, use the mechanisms above or contact us using the details in Section 12. We will verify your request as required by law and will not discriminate against you for exercising your rights. You may use an authorized agent where permitted.

10. Data Retention

Cookies persist for the durations described in Section 5. Data collected through cookies is retained as follows: analytics data is retained in Google Analytics for 14 months and then deleted automatically; advertising audience memberships expire according to the windows configured in each advertising platform; and contact information you submit through forms is retained in our CRM for as long as needed to manage our relationship with you, as described in the Privacy Policy. Data is otherwise deleted or anonymized when no longer necessary for the purposes described in this Policy or to meet legal, accounting, or reporting obligations. Records of consent are retained for the period necessary to demonstrate compliance.

11. Children's Privacy

The Website is a business-oriented service directed to professional audiences and is not intended for children. We do not knowingly use cookies to collect personal information from children under the age of 16 (or the age specified by applicable law). If you believe a child has provided personal information through the Website, please contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in the technologies we use, legal requirements, or our practices. When we make material changes, we will update the "Effective Date" above and, where required by law, seek renewed consent or provide additional notice. We encourage you to review this Policy periodically.

13. Contact Us

For questions about this Policy or our use of cookies, or to exercise your rights, contact:

Takt, Inc.

1902 Campus Commons Drive, Suite 200

Reston, VA 20191

Email: privacy@takt.io

Takt has assessed that it is not required to appoint a statutory Data Protection Officer; privacy matters are handled through privacy@takt.io. Takt is in the process of appointing representatives in the European Union and the United Kingdom under Article 27 of the EU GDPR and UK GDPR; this Policy will be updated with their contact details once the appointments are complete.