Privacy Policy for DIA TISA, INC.

Document Version: 2.1

Effective Date: February 26, 2026

1. Introduction and Scope

Welcome to DIA TISA, INC. ("DIA TISA, INC.," "the Company," "we," "us," or "our"). This Privacy Policy describes how your personal information is collected, used, and shared when you interact with our Services.

This Policy is incorporated by reference into our "Terms of Service" (which governs Users and Client Applicants) and our "Client Terms of Engagement" (which governs all Client transactional activity). By using our Services, you agree to the collection and use of information in accordance with this policy.

Your legal status, as defined in our Terms of Service, determines the type of information we collect:

• "User": An individual accessing our public website. We collect "Device Information."

• "Client Applicant": A User who formally submits an application. We collect "Device Information" and "Application Information."

• "Client": A fully approved and onboarded Client.

2. The Information We Collect

We collect information to provide our Services and to comply with our legal and regulatory obligations.

a. Device Information (Collected from all Users)

When you visit our Website, we automatically collect certain information about your device, including your web browser, IP address, time zone, and cookies. We also collect information about how you interact with the Website (e.g., pages viewed, search terms). We refer to this as "Device Information."

We collect Device Information using:

• "Cookies": Data files placed on your device.

• "Log files": Track actions on the Website (IP address, browser type, etc.).

• "Web beacons," "tags," and "pixels": Electronic files used to record browsing information.

b. Application Information (Collected from Client Applicants)

To help the government fight the funding of terrorism and money laundering activities, Federal law requires us to obtain, verify, and record information that identifies each person who opens an account.

When you apply to become a Client, we are legally obligated to collect and verify information, including, but not limited to, your name, address, date of birth, government-issued identification (e.g., driver's license, passport), and information regarding your ultimate beneficial ownership. We refer to this as "Application Information."

This collection is a mandatory part of our Anti-Money Laundering (AML) Program under the Bank Secrecy Act (BSA) and the USA PATRIOT Act.

3. How We Use Your Personal Information

a. Use of Device Information

We use the Device Information we collect to:

• Improve and optimize our Website and Services.

• Generate analytics about how Users and Clients browse and interact with the Website.

• Help us screen for potential risk, security threats, and fraud.

b. Use of Application Information

We use your Application Information, which is distinct from Device Information, for the following specific purposes:

• To verify your identity and comply with our mandatory AML, KYC, and OFAC sanctions screening obligations under Federal law.

• To make a determination, in our sole discretion, on your application to become a Client.

• To establish, maintain, and service your Client account.

• To process your Transactions (as defined in the Client Terms of Engagement).

• To communicate with you regarding your account, Transactions, or significant legal or policy updates.

4. Sharing Your Personal Information

We do not sell your Personal Information. We only share it in the following limited circumstances:

• With Service Providers: We may share information with third-party companies that perform services on our behalf, such as identity verification services (for AML/KYC), secure data hosting, and platform security. These providers are contractually bound to protect your information and use it only for the services we request.

• For Legal and Compliance Obligations: We will share Personal Information if we have a good-faith belief that access, use, or disclosure is reasonably necessary to:

• Meet any applicable law, regulation, or governmental request (e.g., from the IRS, FinCEN, or OFAC).

• Respond to a subpoena, search warrant, court order, or other lawful request for information.

• Enforce our Terms of Service or Client Terms of Engagement, including investigating potential violations.

• Detect, prevent, or address fraud, security, or technical issues.

• Protect against harm to the rights, property, or safety of DIA TISA, INC., our Clients, or the public, as required or permitted by law.

• In a Business Transfer: If DIA TISA, INC. is involved in a merger, acquisition, or asset sale, your Personal Information may be transferred as a business asset.

• With Your Consent: We may share information for other purposes with your explicit consent.

We also use Google Analytics to help us understand how our customers use the Website. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/.

5. Your Rights and Choices

a. Do Not Track

Please note that we do not alter our Website’s data collection and use practices when we see a Do Not Track signal from your browser.

b. European Residents (GDPR)

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. Please note that we are processing your information to pursue our legitimate business interests and to comply with our binding legal obligations (as described in Section 2.b). Your information will be transferred and processed in the United States. If you would like to exercise this right, please contact us.

c. Data Retention

When you provide us with Application Information, we will maintain that information for our records.

We do not delete this information upon request. As a regulated entity, DIA TISA, INC. is subject to mandatory Federal record-keeping laws, including the Bank Secrecy Act, which requires us to maintain Application Information and transaction records for a minimum of five (5) years, particularly after an account is closed. We retain your information for the full period required by applicable law and our internal compliance policies.

d. Minors

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

6. Security of Your Information

We use industry-standard physical, technical, and administrative security measures to safeguard your personal information. However, since the Internet is not a 100% secure environment, we cannot guarantee the security of any information you transmit to us. There is no guarantee that information may not be accessed, disclosed, or altered by a breach of any of our safeguards.

It is your responsibility to protect the security of your login information. Please note that standard email is not encrypted, and we strongly advise you not to send confidential information (like government ID details) over unsecured email channels.

7. Security of Executive and Personnel Information

a. Zero-Tolerance Policy on Data Brokering and "Do Not Sell" Declaration: In accordance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and applicable global privacy frameworks, DIA TISA, INC. maintains a strict "Zero-Sale" policy regarding personnel, corporate officer, and executive data. We do not sell, trade, rent, or share any information regarding our officers, directors, or employees with commercial data brokers, lead generation firms, or marketing databases.

b. Strictly Limited Disclosure: Operating as a high-security vaulting and armored logistics firm requires the heavy compartmentalization of identity data to protect our personnel and client assets. Officer, director, and personnel information is disclosed exclusively to necessary government and regulatory agencies (e.g., the Wyoming Secretary of State), vetted financial institutions, and authorized logistics partners solely for the purpose of legal compliance, security auditing, and operational execution. We do not participate in, nor do we authorize our inclusion in, public-facing commercial business directories.

8. State-Specific Privacy Rights

a. Notice to California Residents (Cal. Civ. Code § 1798.83)

A California resident who has provided personal data to a business may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

b. Your Rights Under California Consumer Privacy Act (CCPA)

You have certain rights under the CCPA (e.g., Right to Access, Right to Deletion). These rights are subject to exceptions. For example, information collected as part of our AML/KYC obligations under the BSA is generally exempt from the CCPA's deletion requirements.

You have the right to opt-out of the "sale" of personal information. DIA TISA, INC. does not sell your personal information. You also have the right to not be discriminated against for exercising your CCPA rights.

If you wish to exercise your CCPA rights, please contact us at Info@diatisa.com.

9. Changes to Our Privacy Policy

Our Privacy Policy may change from time to time. We will not reduce your rights under this policy without your explicit consent. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice.

10. Contact Us

For more information about our privacy practices or if you have questions, please contact us by e-mail at Info@diatisa.com or by mail using the details provided below:

DIA TISA, INC.

1309 Coffeen Avenue, STE 12114

Sheridan, WY 82801

USA