Effective Date: March 27, 2026

This Privacy Policy describes how CI Web Group, Inc., Hydra OS, and getstarted.ciwebgroup.com (collectively, "we," "us," or "our") collect, use, process, and disclose your information in connection with our websites, products, and services. We are committed to protecting your privacy and handling your data in a transparent and secure manner. This policy is designed to comply with applicable U.S. federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Delaware Personal Data Privacy Act (DPDPA), and Google's OAuth consent requirements.

1. Information We Collect

We collect various types of information to provide and improve our services, including:

• Personal Identifiable Information (PII): This includes, but is not limited to, names, email addresses, phone numbers, postal addresses, IP addresses, and unique identifiers.

• Usage Data: Information about how you access and use our websites and services, such as browser type, operating system, pages visited, time spent on pages, and referring URLs.

• Technical Data: Device information, cookies, and other tracking technologies.

• AI Interaction Data: Data generated through your interactions with our AI-powered services, including queries, inputs, and system responses. For the avoidance of doubt, Google user data accessed through OAuth integration (such as Google Analytics and Search Console data) is used only to provide AI-generated insights within the Hydra OS application and is not used to train, fine-tune, or develop any AI or machine learning models.

2. How We Collect Information

We collect information through various methods, including:

• Directly from You: When you fill out forms, register for services, contact us, or interact with our AI tools.

• Automatically: Through cookies, web beacons, pixels, and other tracking technologies as you navigate our websites and use our services.

• From Third Parties: We may receive information from third-party service providers, partners, and publicly available sources.

3. Use of Your Information

We use the collected information for various purposes, including to:

• Provide, maintain, and improve our services.
• Personalize your experience and deliver tailored content.
• Analyze usage patterns and optimize website performance.
• Communicate with you, respond to inquiries, and provide customer support.
• Process transactions and send related notifications.
• Detect, prevent, and address technical issues and security incidents.
• Comply with legal obligations and enforce our terms and conditions.
• Conduct research and development to enhance our offerings.

4. Disclosure of Your Information

We may disclose your information to third parties in the following circumstances:

• Service Providers: We engage third-party service providers to perform functions on our behalf, such as hosting, data analysis, marketing, and customer support. These providers are obligated to protect your information and use it only for the purposes for which it was disclosed.

• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety, and that of our users or the public.

• With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

5. Third-Party Assets and Tracking Technologies

Our websites utilize various third-party assets and tracking technologies that may collect data about your browsing activities. These include:

• Google Web Fonts: Used for displaying fonts on our websites.
• SplitType: A JavaScript library for text animation.
• jQuery: A JavaScript library for DOM manipulation.
• GSAP (GreenSock Animation Platform): A JavaScript library for high-performance animations.
• Google Tag Manager (GTM): Used to manage and deploy marketing tags (e.g., Google Analytics, Google Ads).
• Google Analytics: Collects data on website traffic and user behavior.
• Google Ads Conversion Tracking: Tracks the effectiveness of our advertising campaigns.
• Swiper.js: A JavaScript library for touch sliders.
• Iconnode: Appears to be related to Google Ads processing.
• Flock.js: A JavaScript file identified on getstarted.ciwebgroup.com, likely for analytics or tracking.
• Fontsource: Used for displaying fonts.
• Unicorn Studio: A JavaScript library for interactive elements.
• Supabase: A backend-as-a-service platform, potentially used for data storage or analytics on getstarted.ciwebgroup.com.
• CI Web Group, Inc. CDN: Our own content delivery network, which may host scripts like device-performance-check.js.
• Cortex Dynamic Optimization: A script from cortex.ciwebgroup.com for dynamic content optimization.
• Unknown Tracking Scripts: Scripts from domains like s.ksrndkehqnwntyxlhgto.com and p.ksrndkehqnwntyxlhgto.com that appear to be for tracking purposes.

These third parties may use cookies, pixels, and similar technologies to collect information about your interactions with our websites and other websites over time. This data may be used for analytics, advertising, and other purposes. We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies.

To prevent pixel lawsuits and comply with regulations like CIPA, we implement the following:

• Explicit Consent: We obtain explicit consent from users before deploying non-essential cookies and tracking technologies. This includes clear, conspicuous consent banners or pop-ups that allow users to accept, decline, or customize their cookie preferences.

• Conspicuous Terms: Our Privacy Policy and Terms & Conditions are easily accessible and conspicuous, not hidden in footers or obscure links. We ensure users are clearly notified about our data collection practices.

• Data Minimization: We strive to collect only the data necessary for the stated purposes and retain it only for as long as required.

• Regular Audits: We regularly audit our websites for third-party scripts and tracking technologies to ensure compliance and update our disclosures.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it is collected, the purposes for collecting it, and the categories of third parties with whom we share it.

• Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions.

• Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information.

• Right to Correct: You have the right to request the correction of inaccurate personal information.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

7. Google OAuth & Google User Data

Hydra OS, a product of CI Web Group, Inc., integrates with Google APIs to provide website performance analytics and search visibility reporting to authenticated users. When you connect your Google account through Hydra OS, we access certain Google user data as described below. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

7.1 Google User Data We Access

When you authorize Hydra OS via Google OAuth, we request access to the following scopes of Google user data:

• Google Analytics Data (scope: analytics.readonly) — We access your Google Analytics account data in read-only mode, including website traffic metrics, user behavior data, audience demographics, acquisition sources, and conversion data. This allows us to display website performance dashboards and generate marketing insights within Hydra OS. We do not modify your Google Analytics configuration.
• Google Search Console Data (scope: webmasters) — We access your Search Console data, including search queries, impressions, click-through rates, average position, and indexing status for your verified sites. This allows us to provide SEO performance reporting and search visibility analysis within Hydra OS.

7.2 How We Use Google User Data

We use the Google user data described above solely to provide and improve the Hydra OS application’s user-facing features, specifically:

• Displaying website performance dashboards and analytics reports to you within the Hydra OS platform.
• Generating SEO insights, search visibility metrics, and marketing performance summaries for your websites.
• Caching data to improve dashboard load times and provide historical trend analysis.

We do not use Google user data for advertising, selling to third parties, profiling unrelated to the app’s core functionality, or any purpose other than providing or improving Hydra OS’s user-facing features.

7.3 AI-Assisted Analysis of Google User Data

Hydra OS uses Google Gemini, Google’s artificial intelligence service, to analyze Google Analytics and Google Search Console data accessed through your authorized OAuth connection. This AI-assisted analysis is performed solely to provide user-facing features within the Hydra OS platform, including:

• Generating performance insights and trend analysis from your website analytics data
• Producing SEO recommendations based on your search visibility metrics
• Surfacing actionable marketing optimization suggestions displayed to you within the platform

Google Gemini processes your data via the Gemini API under Google’s API Terms of Service, which provide that API inputs and outputs are not used by Google to train or improve its AI models. Your Google user data is not used to train, fine-tune, or improve any AI or machine learning models. AI processing is limited to analyzing your data to generate insights that are displayed directly to you within the Hydra OS application. Your Google user data is never used as training data, is never aggregated with other users’ Google data for model development, and is processed by Google Gemini solely for the purpose of generating your individual analytics insights within Hydra OS.

7.4 How We Store Google User Data

Google user data accessed through the API is cached on our secure servers to power dashboard displays and historical reporting. Cached data is periodically refreshed from the Google API to ensure accuracy. All stored Google user data is protected using industry-standard encryption in transit (TLS) and at rest. Access to stored data is restricted to authorized systems required to deliver the Hydra OS service.

7.5 How We Share Google User Data

Your Google Analytics and Search Console data is displayed only to you, the authenticated user, within the Hydra OS platform. We do not sell, rent, or trade Google user data.

To provide AI-assisted analytics features described in Section 7.3, your Google user data is processed by Google Gemini (via the Gemini API) as a data sub-processor. This processing is performed solely to generate analytics insights displayed to you within Hydra OS. Google Gemini does not retain your data for model training or improvement purposes, in accordance with Google’s API Terms of Service. Other than this sub-processing by Google Gemini, your Google user data is not shared with, transferred to, or disclosed to any other third parties.

7.6 Data Retention & Deletion

We retain cached Google user data for as long as your Hydra OS account is active and connected to your Google account, or as needed to provide you with the services described above. You may request deletion of your Google user data at any time by:

• Disconnecting your Google account from Hydra OS through the platform settings, which will trigger deletion of cached Google user data within 30 days.
• Contacting us at legal@ciwebgroup.com to request deletion of your data.
• Revoking Hydra OS’s access through your Google Account permissions at https://myaccount.google.com/permissions.

Upon account disconnection or deletion request, all cached Google user data will be permanently deleted from our servers within 30 days, except where retention is required by applicable law.

7.7 Google API Services Limited Use Disclosure

Hydra OS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominent in Hydra OS’s user interface.
• We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, to comply with applicable laws, or as part of a merger/acquisition with prior notice to users.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your affirmative agreement, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.

7.8 OAuth Consent & Verification

Hydra OS undergoes Google’s OAuth app verification process for sensitive scopes to ensure compliance and transparency in data handling. The scopes requested are displayed on the Google OAuth consent screen during authorization, and you may review or revoke access at any time through your Google Account settings. This Privacy Policy is linked on the OAuth consent screen in the Google API Console.

7.9 Parent Organization

Hydra OS https://hydraos.ai is a product developed and operated by CI Web Group, Inc. This Privacy Policy, hosted at https://www.ciwebgroup.com/privacy-policy, governs the data practices of both CI Web Group, Inc. and its Hydra OS product. The privacy policy linked on the Hydra OS OAuth consent screen belongs to CI Web Group, Inc., the parent organization of the Hydra OS product.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

CI Web Group, Inc.
legal@ciwebgroup.com
877-839-1122
13710 Vintage Centre Dr
Houston TX 77069

‍