Effective Date: September 23, 2026

EchoLift, LLC (“EchoLift,” “we,” “us,” or “our”) respects your privacy and is committed to protecting information that we collect through our websites, technology platforms, advertising services, and other products and services.

This Privacy Policy explains how EchoLift collects, uses, discloses, retains, and protects information when you visit https://echolift.ai, use an EchoLift product or service, interact with EchoLift advertising technology, or otherwise interact with us.

This Privacy Policy applies to information collected through our websites, applications, technology platforms, advertising services, and other services that link to this Privacy Policy (collectively, the “Services”).

This Privacy Policy does not necessarily apply to information collected by third parties, including publishers, advertisers, advertising exchanges, supply-side platforms, demand-side platforms, podcast platforms, streaming services, or other third-party services that may interact with EchoLift.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. INFORMATION WE COLLECT

The information we collect depends on how you interact with EchoLift.

1.1 Information You Provide Directly

When you interact with EchoLift, you may provide information such as:

• name;
• email address;
• telephone number;
• company name;
• job title;
• business address;
• account credentials;
• billing and payment information;
• campaign information;
• advertising preferences;
• communications and correspondence with EchoLift;
• information submitted through forms or support requests; and
• other information you voluntarily provide.

If you create an EchoLift account or use the EchoLift platform, we may also collect information associated with your account, including login information, account settings, campaign configuration, and platform activity.

1.2 Information Collected Automatically

When you access our websites or Services, we may automatically collect information about the device, browser, application, or network you use.

This information may include:

• IP address;
• browser type and version;
• operating system;
• device type;
• device identifiers;
• mobile advertising identifiers;
• language preferences;
• approximate geographic location;
• referring website or source;
• pages and content viewed;
• links or buttons clicked;
• dates and times of activity;
• session information;
• advertising interactions;
• campaign and impression information;
• audio or podcast content associated with an advertising opportunity;
• information regarding how the Services are accessed or used; and
• other technical or usage information.

We may combine automatically collected information with other information we have about you where permitted by applicable law.

1.3 Advertising and Measurement Information

EchoLift provides technology that may be used to facilitate advertising across streaming audio, podcasts, digital audio, websites, applications, and other digital media environments.

Depending on the Services being provided, EchoLift may process information associated with an advertising opportunity, device, browser, or user.

This may include:

• IP addresses;
• cookie identifiers;
• mobile advertising identifiers;
• device identifiers;
• browser information;
• application information;
• approximate geographic information;
• contextual information;
• information about the website, application, podcast, stream, or other media environment where an advertisement is served;
• advertising impressions and interactions;
• conversion or attribution information;
• frequency and exposure information;
• audience or segment information;
• information supplied by advertisers, agencies, publishers, platforms, or other partners; and
• inferences regarding interests, preferences, or likely audience characteristics.

Where appropriate, we use technical and organizational measures designed to limit the information associated with particular individuals and may use pseudonymous, aggregated, or de-identified information.

1.4 Information From Customers and Partners

Our customers and business partners may provide information to us in connection with their use of the Services.

For example, advertisers, agencies, publishers, media companies, and technology partners may provide:

• campaign information;
• audience segments;
• advertising creative;
• conversion information;
• measurement information;
• customer or account information;
• publisher or inventory information;
• device or advertising identifiers;
• contextual information; and
• other information necessary to provide the Services.

In these circumstances, EchoLift may process information on behalf of the applicable customer or partner.

2. HOW WE USE INFORMATION

We may use information we collect for the following purposes:

Providing the Services

We use information to:

• provide, operate, and maintain the Services;
• establish and manage accounts;
• execute advertising campaigns;
• facilitate advertising delivery;
• provide targeting and optimization;
• perform measurement and attribution;
• generate reports and analytics;
• provide customer support;
• process transactions and payments; and
• communicate with customers and users.

Improving the Services

We may use information to:

• understand how the Services are used;
• troubleshoot technical problems;
• monitor system performance;
• develop and improve products and features;
• test new technologies;
• conduct analytics and research;
• improve advertising optimization;
• detect and prevent fraud;
• maintain security; and
• improve the accuracy and effectiveness of our technology.

Advertising and Measurement

Where permitted by applicable law, we may use information to:

• deliver advertisements;
• select or optimize advertisements;
• measure advertising performance;
• limit advertising frequency;
• understand advertising effectiveness;
• perform attribution and conversion measurement;
• detect invalid traffic and advertising fraud;
• provide contextual advertising;
• create or apply audience segments; and
• provide advertisers and media partners with reporting and analytics.

Communications

We may use your contact information to communicate with you regarding:

• your account;
• the Services;
• billing;
• technical issues;
• security matters;
• changes to our products or policies; and
• other service-related matters.

Where permitted by law, we may also send marketing communications. You may opt out of marketing communications at any time by using the unsubscribe mechanism included in the communication or contacting us.

Legal and Safety Purposes

We may use information when reasonably necessary to:

• comply with applicable law;
• respond to legal process or governmental requests;
• enforce our agreements;
• investigate suspected violations;
• detect and prevent fraud, abuse, or security incidents;
• protect the rights, property, or safety of EchoLift, our customers, users, or others; and
• establish, exercise, or defend legal claims.

3. ARTIFICIAL INTELLIGENCE AND AUTOMATED TECHNOLOGIES

Certain EchoLift Services may use artificial intelligence, machine learning, automated decision-making, contextual analysis, predictive modeling, or similar technologies.

These technologies may be used to:

• analyze advertising and media content;
• classify contextual information;
• identify relevant audiences;
• optimize campaign delivery;
• generate recommendations;
• predict campaign performance;
• detect fraud or invalid activity;
• improve measurement and attribution; and
• develop and improve EchoLift products and technology.

AI-generated or algorithmically generated outputs may not always be accurate and are not guaranteed to be correct.

EchoLift may use aggregated, de-identified, or otherwise appropriately protected information to train, test, evaluate, and improve its models, algorithms, and technology, subject to applicable law and contractual restrictions.

EchoLift does not intend to use Customer Confidential Information to train generally available AI models in a manner that identifies the Customer or exposes its confidential information, unless expressly authorized.

4. COOKIES AND SIMILAR TECHNOLOGIES

EchoLift and our service providers may use cookies, pixels, tags, SDKs, local storage, and similar technologies to operate and improve our websites and Services.

These technologies may be used to:

• remember preferences;
• maintain account sessions;
• understand website traffic;
• measure advertising performance;
• provide analytics;
• detect fraud;
• understand how users interact with our Services;
• support advertising delivery and measurement; and
• improve our products.

4.1 Cookies

Cookies are small data files stored on your device by your browser.

We may use both session cookies and persistent cookies.

Session cookies generally expire when you close your browser. Persistent cookies remain on your device until they expire or are deleted.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of portions of the Services.

4.2 Third-Party Technologies

Third-party service providers may place cookies, pixels, tags, or similar technologies on our websites or Services.

These third parties may include analytics providers, advertising technology providers, infrastructure providers, measurement providers, and other service providers.

Their use of information may be governed by their own privacy policies.

5. INTEREST-BASED AND CONTEXTUAL ADVERTISING

EchoLift may support advertising that is based on contextual information, audience characteristics, device information, or other information made available through our customers and partners.

Depending on the applicable Service, advertising may be influenced by information such as:

• the content being consumed;
• the website or application being accessed;
• approximate geographic information;
• device or browser information;
• advertising identifiers;
• prior advertising interactions;
• audience segments; or
• other information permitted under applicable law.

EchoLift may work with advertisers, agencies, publishers, exchanges, supply-side platforms, demand-side platforms, data providers, measurement providers, and other advertising technology partners to provide these Services.

6. HOW WE SHARE INFORMATION

We may disclose information to the following categories of recipients.

6.1 Customers and Advertising Partners

Where necessary to provide advertising and measurement Services, we may share relevant information with advertisers, agencies, publishers, streaming platforms, podcast networks, advertising exchanges, supply-side platforms, demand-side platforms, data providers, measurement providers, and other advertising technology partners.

The information shared may include pseudonymous identifiers, advertising event information, contextual information, device information, approximate geographic information, audience segment information, and campaign performance information.

6.2 Service Providers

We may disclose information to vendors and service providers that perform services on our behalf, including providers of:

• cloud hosting;
• data storage;
• analytics;
• security;
• payment processing;
• customer support;
• email delivery;
• advertising technology;
• fraud prevention;
• data processing;
• infrastructure;
• professional services; and
• other business functions.

These providers are authorized to use information only as necessary to provide services to EchoLift or as otherwise permitted by applicable law.

6.3 Corporate Transactions

If EchoLift is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, information may be transferred as part of that transaction.

6.4 Legal Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with law;
• respond to subpoenas, court orders, or other legal process;
• respond to governmental requests;
• enforce our agreements;
• investigate fraud or abuse;
• protect the security of our systems; or
• protect the rights, property, or safety of EchoLift or others.

6.5 Aggregated and De-Identified Information

We may create aggregated, statistical, or de-identified information from information we collect.

We may use and disclose such information for legitimate business purposes, including analytics, research, product development, benchmarking, reporting, and marketing, provided that the information is maintained in a form that is not reasonably capable of being associated with an identified individual where required by applicable law.

7. CUSTOMER DATA

EchoLift may process information submitted to the Services by or on behalf of our customers.

Where EchoLift processes personal information solely on behalf of a customer, the customer may determine the purposes for which that information is processed.

In those circumstances, the customer may be responsible for providing appropriate privacy notices and responding to individual privacy requests.

If you believe that a customer of EchoLift has provided your information to us and you wish to exercise privacy rights relating to that information, you may contact the applicable customer directly or contact EchoLift at privacy@echolift.ai.

EchoLift may also process certain information independently for its own legitimate business purposes, including security, fraud prevention, service improvement, analytics, legal compliance, and operation of the Services.

8. DATA RETENTION

We retain information for as long as reasonably necessary to:

• provide the Services;
• fulfill the purposes described in this Privacy Policy;
• maintain business and financial records;
• comply with legal and regulatory obligations;
• resolve disputes;
• enforce agreements;
• prevent fraud and abuse; and
• protect the security of our systems.

Retention periods may vary depending on the type of information and the purpose for which it was collected.

Where information is no longer required, we may delete it, aggregate it, de-identify it, or otherwise dispose of it in accordance with our policies and applicable law.

9. DATA SECURITY

EchoLift maintains reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.

Our safeguards may include:

• access controls;
• authentication mechanisms;
• encryption;
• network security;
• monitoring and logging;
• security testing;
• employee confidentiality requirements; and
• other commercially reasonable security practices.

No system or method of transmitting information over the Internet is completely secure. Accordingly, we cannot guarantee the absolute security of information.

10. YOUR PRIVACY RIGHTS

Depending on where you live and subject to applicable law, you may have rights regarding your personal information.

These rights may include the right to:

• know or access personal information we maintain about you;
• correct inaccurate information;
• request deletion of personal information;
• obtain a copy of certain information in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain targeted advertising or sales of personal information; and
• appeal certain decisions regarding your privacy request.

These rights are subject to exceptions under applicable law.

To exercise applicable rights, contact us at:

privacy@echolift.ai

We may need to verify your identity before processing certain requests. We will not discriminate against you for exercising privacy rights granted by law.

11. CALIFORNIA PRIVACY RIGHTS

California residents may have additional rights under the California Consumer Privacy Act, as amended (“CCPA”), and other applicable California privacy laws.

Depending on the circumstances, California residents may have the right to:

• know what categories and specific pieces of personal information we collect;
• know the categories of sources from which personal information is collected;
• know the business or commercial purposes for collecting or disclosing personal information;
• know the categories of third parties to whom personal information is disclosed;
• request deletion of personal information;
• request correction of inaccurate personal information;
• obtain certain information in a portable format;
• opt out of the sale or sharing of personal information;
• limit certain uses of sensitive personal information where applicable; and
• not receive discriminatory treatment for exercising applicable privacy rights.

Categories of Personal Information

Depending on how you interact with EchoLift, we may collect categories of information that correspond to categories recognized under California law, including:

• identifiers;
• commercial information;
• internet or other electronic network activity;
• geolocation information;
• professional or employment-related information;
• inferences drawn from the foregoing; and
• other categories of information where required by applicable law.

Sale or Sharing

Certain disclosures of information for advertising, measurement, or similar purposes may constitute a “sale” or “sharing” under California law even when no money is exchanged directly for the information.

California residents may submit applicable requests by contacting:

privacy@echolift.ai

We may take reasonable steps to verify requests before fulfilling them.

12. EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND

If you are located in the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland, applicable data protection laws may provide additional rights.

These rights may include the right to:

• access personal data;
• correct inaccurate personal data;
• request deletion;
• restrict processing;
• object to certain processing;
• receive personal data in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a relevant data protection authority.

12.1 Legal Bases

Where required by applicable law, EchoLift relies on one or more of the following legal bases:

• performance of a contract;
• compliance with legal obligations;
• legitimate interests;
• consent; or
• another lawful basis recognized under applicable law.

Where EchoLift relies on legitimate interests, those interests may include operating and improving our Services, securing our systems, preventing fraud, providing advertising and measurement services, communicating with customers, and developing new products.

12.2 International Transfers

EchoLift may process information in the United States and other jurisdictions where EchoLift or its service providers operate.

Where required, EchoLift will use appropriate safeguards for international transfers of personal information, including applicable contractual or other legally recognized transfer mechanisms.

To exercise applicable rights or request information about international transfers, contact:

privacy@echolift.ai

13. CHILDREN’S PRIVACY

The Services are not directed to children under the age of 13, and EchoLift does not knowingly collect personal information directly from children under 13.

If you believe that a child has provided personal information to EchoLift, please contact us at privacy@echolift.ai.

If we become aware that we have collected personal information from a child under 13 in a manner prohibited by law, we will take reasonable steps to delete the information.

14. DO NOT TRACK

Some web browsers offer a “Do Not Track” setting.

Because there is currently no universally accepted standard for responding to Do Not Track signals, EchoLift may not respond to all browser-based Do Not Track signals.

Where required by applicable law, EchoLift will honor legally recognized opt-out preference signals.

15. THIRD-PARTY WEBSITES AND SERVICES

Our websites and Services may contain links to third-party websites, applications, platforms, or services.

EchoLift does not control and is not responsible for the privacy practices of third parties.

We encourage you to review the privacy policies of any third-party service you access.

16. BUSINESS INFORMATION

When you interact with EchoLift as a customer, prospective customer, business partner, vendor, or other business contact, we may collect business contact information such as:

• name;
• company;
• business email address;
• business telephone number;
• job title;
• billing information;
• correspondence;
• account information; and
• information relating to the business relationship.

We use this information to operate our business, provide Services, manage customer relationships, process payments, communicate with business contacts, and perform related business activities.

We do not sell business contact information for unrelated third-party marketing purposes.

17. MARKETING COMMUNICATIONS

You may receive transactional communications that are necessary to provide the Services, such as account notices, billing communications, security notices, and service updates.

You may also receive marketing communications where permitted by applicable law.

You may unsubscribe from marketing emails by following the unsubscribe instructions in the applicable communication or contacting us at privacy@echolift.ai.

Even if you opt out of marketing communications, you may continue to receive transactional or service-related communications.

18. CHANGES TO THIS PRIVACY POLICY

EchoLift may update this Privacy Policy from time to time.

When we make changes, we will post the updated Privacy Policy on our website and update the Effective Date above.

If we make material changes, we may provide additional notice where required by applicable law.

Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acceptance of the updated Privacy Policy to the extent permitted by law.

19. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or EchoLift’s privacy practices, please contact us at:

EchoLift, LLC

Email: privacy@echolift.ai

Website: https://echolift.ai

For privacy requests relating specifically to advertising data, you may also contact:

adops@echolift.ai