Cookie Policy

Last Updated: May 05, 2026

Effective Date: May 05, 2026

This Cookie Policy ("Policy") describes how Automatan, Inc., a company organized under the laws of Delaware, United States of America ("Automatan," "we," "us," or "our"), uses cookies and similar tracking technologies on our websites, applications, and platform (collectively, the "Service").

The Service includes the Automatan platform, website, APIs, software, and related products and services, as further defined in the Terms of Service.

This Policy should be read together with our Privacy Policy, which describes how we collect and use personal data more broadly, and our Terms of Service, which governs your use of the Service. Capitalized terms used but not defined in this Policy have the meanings given to them in the Terms of Service.

By using the Service, you acknowledge that Automatan uses cookies and similar technologies as described in this Policy. Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

1. WHAT ARE COOKIES

Cookies are small text files placed on your device - computer, tablet, or mobile - when you visit a website or use an online service. They are widely used to make websites and platforms function correctly, operate more efficiently, and provide information to the owner of the site or service.

Cookies may be set by Automatan directly ("first-party cookies") or by third-party service providers operating on our behalf ("third-party cookies"). Cookies may be:

• Session cookies - temporary cookies that expire when you close your browser or end your session; or
• Persistent cookies - cookies that remain on your device for a set period of time or until you delete them.

Cookies may store information such as login tokens, session identifiers, user preferences, and analytics identifiers.

In addition to cookies, we may use similar technologies including:

• Web beacons - small transparent image files embedded in web pages or emails used to track user behavior and email open rates;
• Pixels - code embedded in web pages or emails that collects information about user interactions;
• Local storage - browser-based storage mechanisms that function similarly to cookies but store data locally on your device; and
• Session replay tools - technologies that record user interactions with the Service for analytics and debugging purposes.

References to "cookies" in this Policy include all such similar technologies unless stated otherwise.

2. HOW WE USE COOKIES

We use cookies for the following purposes:

2.1 Strictly Necessary Cookies

These cookies are essential to the operation of the Service and cannot be switched off. They are set in response to actions you take, such as logging in, setting preferences, or completing forms. Without these cookies, the Service cannot function properly. These cookies do not require your consent under applicable law.

Strictly necessary cookies are used to:

• authenticate users and maintain secure login sessions;
• maintain session state across pages;
• remember security settings and access permissions;
• enable core platform functionality and API access;
• support multi-factor authentication processes where enabled;
• prevent fraudulent use and protect account security; and
• load balance traffic across infrastructure.

2.2 Functional Cookies

These cookies enable the Service to remember choices you make and provide enhanced, personalized functionality. They may be set by Automatan or by third-party providers whose services we have integrated into the platform.

Functional cookies are used to:

• remember your language, region, and display preferences;
• store user interface customizations;
• remember account settings between sessions; and
• enable integrations and connected third-party services.

Disabling functional cookies may result in loss of personalized settings and require you to re-enter preferences on each visit.

2.3 Analytics and Performance Cookies

These cookies allow us to count visits, understand how users interact with the Service, and measure the effectiveness of features. All information collected by analytics cookies is aggregated and does not directly identify individual users.

Analytics cookies are used to:

• understand how visitors navigate the website and platform;
• measure page load times and performance metrics;
• identify errors, crashes, and technical issues;
• understand which features are most and least used;
• improve the overall performance and usability of the Service; and
• generate internal usage reports and product development insights.

We may use third-party analytics providers to assist with this analysis. Where we do, those providers act as our service providers and process data only on our instructions. We use Google Analytics to understand how visitors interact with the Service. Google Analytics collects information such as pages visited, time spent, and referral sources using cookies. Data collected is processed by Google LLC in the United States. A current list of analytics providers is available upon request or as described in our Privacy Policy.

2.4 Security and Fraud Prevention Cookies

These cookies help us detect and prevent fraudulent activity, unauthorized access, and abuse of the Service. They monitor and protect the integrity of the platform and user accounts.

Security cookies are used to:

• detect and prevent credential stuffing, brute force attacks, and account takeover attempts;
• detect patterns associated with account takeover, credential stuffing, and automated bot activity;
• support bot detection and CAPTCHA functionality; and
• maintain audit logs of access and authentication events.

2.5 Marketing and Targeting Cookies

Where you have provided consent, we or our third-party advertising partners may set marketing cookies to deliver relevant content and measure the effectiveness of marketing campaigns.

Marketing cookies may be used to:

• track visitors across websites to display relevant advertising;
• measure the effectiveness of marketing campaigns;
• build audience profiles for targeted marketing; and
• limit the frequency with which you see the same advertisement.

You may withdraw your consent to marketing cookies at any time as described in Section 5 of this Policy. You may also adjust or withdraw your marketing cookie preferences at any time through the cookie preference center available on the Automatan website.

Automatan does not use marketing cookies within the authenticated platform environment. Marketing cookies, where used, are limited to Automatan's public-facing website.

3. COOKIES WE USE

The following table sets out the categories of cookies currently in use across the Service. Specific cookie names and providers may vary and are updated from time to time.

Automatan will update this table when new cookies are introduced or existing cookies are changed. Material updates will be reflected in the "Last Updated" date of this Policy.

4. THIRD-PARTY COOKIES

Some cookies placed on your device are set by third-party service providers who provide functionality integrated into the Service, including analytics providers, security vendors, authentication providers, and marketing platforms.

Automatan does not control third-party cookies and is not responsible for the content of third-party cookie policies. Third-party cookies are governed by the privacy and cookie policies of the relevant third party. We recommend that you review the privacy policies of any third-party services you interact with through the Service.

Where third-party providers process personal data via cookies on our behalf, they do so as our service providers subject to appropriate data protection agreements. Where third-party providers set cookies for their own independent purposes, they act as independent controllers for that processing.

Third-party providers who process personal data via cookies on our behalf are listed in Automatan's Subprocessor List and are subject to the Data Processing Addendum Data Processing Addendum.

5. YOUR COOKIE CHOICES AND CONTROLS

5.1 Cookie Consent

Where required by applicable law - including the EU ePrivacy Directive and GDPR, and the UK Privacy and Electronic Communications Regulations - we will request your consent before placing non-essential cookies on your device. You may provide or withdraw consent through our cookie consent banner or preference center, available on the Automatan website.

5.2 Browser Controls

Most browsers allow you to refuse or delete cookies through their settings. The method for doing so varies between browsers. You can find instructions for managing cookies in your browser through the following resources:

• Google Chrome: Settings -> Privacy and Security -> Cookies and other site data
• Mozilla Firefox: Settings -> Privacy and Security -> Cookies and Site Data
• Apple Safari: Preferences -> Privacy -> Manage Website Data
• Microsoft Edge: Settings -> Cookies and Site Permissions

Please note that restricting or deleting cookies may affect the functionality of the Service. In particular, disabling strictly necessary cookies will prevent you from logging in or using core features of the platform.

5.3 Opt-Out of Analytics

Where we use Google Analytics, you may opt out by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout. Information about opt-out options for other analytics providers will be made available upon request.

5.4 Opt-Out of Marketing Cookies

You may withdraw your consent to marketing cookies at any time by:

• updating your preferences through the cookie preference center on the Automatan website;
• using your browser settings to block or delete cookies; or
• contacting Automatan using the contact details in Section 8 of this Policy.

Withdrawal of consent to marketing cookies does not affect the lawfulness of any processing carried out before withdrawal.

5.5 Do Not Track

Some browsers offer a "Do Not Track" setting. Automatan does not currently respond to Do Not Track signals as there is no industry-standard protocol for how such signals should be honored. We will review this position as standards develop.

6. COOKIES AND PERSONAL DATA

Some cookies collect information that constitutes personal data under applicable data protection law, including IP addresses, device identifiers, and usage data linked to your account.

Where cookies collect personal data, such processing is governed by Automatan's Privacy Policy and, where applicable, the Data Processing Addendum. The legal bases for processing personal data collected through cookies are:

• Strictly necessary cookies - processed on the basis of legitimate interests in operating a secure and functional service, or as necessary to perform the contract with you;
• Functional cookies - processed on the basis of legitimate interests or, where required by law, consent;
• Analytics cookies - processed on the basis of legitimate interests or, where required by law, consent; and
• Marketing cookies - processed on the basis of consent.

Personal data collected through cookies is stored securely and processed in accordance with Automatan's Privacy Policy. Customers may request access to, correction of, or deletion of personal data collected through cookies by contacting legal@automatan.ai.

For further information about how we handle personal data collected through cookies, please refer to our Privacy Policy.

7. INTERNATIONAL TRANSFERS

Information collected through cookies may be transferred to and processed in the United States and other jurisdictions where Automatan or its third-party providers operate. Where such transfers involve personal data originating from the European Economic Area, United Kingdom, or Switzerland, they are subject to the safeguards described in our Privacy Policy and Data Processing Addendum, including Standard Contractual Clauses (SCCs) where applicable.

Data Processing Addendum: Data Processing Addendum

8. UPDATES TO THIS POLICY

Automatan may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or changes to third-party providers. When changes are made, the updated version will be posted on the Automatan website and the "Last Updated" date will be revised. Where changes are material, Automatan will provide at least thirty (30) days' notice by email to the address associated with Customer's account before the updated Policy takes effect. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

9. CONTACT

If you have any questions about this Cookie Policy or our use of cookies, please contact us at:

Automatan, Inc. 4695 Chabot Drive, Suite 200, Pleasanton, CA 94588
Email: legal@automatan.ai