TSNA Center Privacy Policy

Effective Date: January 1, 2025  |  Last Updated: March 26, 2026

1. Service Scope and Account Responsibilities

TSNA Center provides secure, reliable solutions in the field of security-related services. To access certain services, users must register accounts and provide accurate, complete, and current information. Users are responsible for:

• Safeguarding their account credentials, including passwords and two-factor authentication tokens.
• All activities conducted under their accounts, whether authorized or unauthorized.
• Promptly notifying TSNA Center of any unauthorized access or suspected security breach.
• Keeping account information up to date to ensure continued and uninterrupted service.

TSNA Center reserves the right to refuse registration, suspend, or terminate accounts that violate these responsibilities or where there is a reasonable suspicion of misuse.

2. Acceptable Use and Prohibited Content

Users agree not to use TSNA Center services for illegal, fraudulent, or harmful purposes. Prohibited content includes, but is not limited to:

• Violent, gory, obscene, or sexually exploitative content.
• Content involving the exploitation or abuse of children.
• Malware, spam, phishing, or unauthorized access attempts.
• Content that infringes upon intellectual property rights, trademarks, or trade secrets of any third party.
• Content that promotes hate speech, discrimination, or harassment based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics.
• Disinformation, deepfakes, or synthetic media intended to deceive or manipulate.
• Unauthorized scraping, crawling, or automated data extraction from TSNA Center platforms.

TSNA Center reserves the right to remove prohibited content and suspend or terminate offending accounts without prior notice. Violations may be reported to relevant authorities. Users found to be in violation may be held liable for any resulting damages.

3. Information Collection, Privacy, and Security

TSNA Center collects personal information necessary to provide and improve services. The categories of information we may collect include:

• Identity and Contact Information: Name, email address, phone number, and other registration details.
• Technical Information: IP address, device identifiers, browser type and version, operating system, and network information.
• Usage Information: Pages visited, features used, time and duration of sessions, search queries, and interaction logs.
• Transaction Information: Billing address, payment method details (processed via secure third-party payment processors), and transaction history.
• Communications: Support tickets, feedback, survey responses, and correspondence with TSNA Center.

We implement industry-standard security measures including encryption in transit and at rest, access controls, intrusion detection systems, and regular security audits. However, absolute security cannot be guaranteed, and users transmit information at their own risk.

Cross-border transfers may occur as part of service operations. Users consent to such transfers by using TSNA Center services, subject to appropriate safeguards as described in Section 6.

4. Data Collection for Service Improvement and Optimization

To continuously improve the quality, performance, safety, and relevance of TSNA Center services, we collect and analyze data about how our services are accessed and used. This includes both data you actively provide and data automatically generated through your interactions with our platform.

Specifically, we may use your data for the following improvement and optimization purposes:

• Product Development and Enhancement: Aggregated and de-identified usage data helps us understand which features are most valuable, identify friction points, and prioritize new functionality that better meets user needs.
• Performance Monitoring and Optimization: We analyze system performance metrics, error rates, latency data, and infrastructure load to maintain service reliability, minimize downtime, and improve response times across all regions.
• Security and Fraud Detection: Behavioral patterns and telemetry data are used to identify anomalous activity, detect potential threats, prevent unauthorized access, and strengthen our security systems over time.
• Machine Learning and AI Model Training: Where permitted by applicable law and your consent preferences, de-identified or anonymized interactions may be used to train, evaluate, and improve automated systems, recommendation engines, and AI-assisted features within our platform. We apply strict data minimization and anonymization standards before any such use.
• Personalization and User Experience: We use data about your preferences, settings, and usage history to tailor content, surface relevant features, and provide a more seamless and personalized experience.
• A/B Testing and Experimentation: We may conduct controlled experiments by presenting different versions of features or interfaces to subsets of users, using outcome data to determine which approaches best serve our user community.
• Analytics and Business Intelligence: Aggregated statistical analysis helps us understand market trends, measure the effectiveness of our services, and make informed decisions about resource allocation and strategic direction.

Where we use your data for these purposes, we apply the principle of data minimization — collecting only what is necessary — and prefer anonymized or aggregated data wherever possible. You retain the right to opt out of certain non-essential data uses, including personalization and AI model improvement, through your account privacy settings. Opting out of these uses will not affect core service functionality.

We do not sell your personal data to third parties for their independent use. Data shared with service partners is governed by appropriate data processing agreements and is limited to what is necessary for the stated purpose.

5. Data Breach Response and Updates

In the event of a security breach that affects your personal information, TSNA Center will:

• Promptly investigate the nature and scope of the breach.
• Take immediate steps to contain, mitigate, and remediate the incident.
• Notify affected users as required by applicable law, typically within 72 hours of becoming aware of the breach.
• Report the incident to relevant supervisory authorities where legally required.
• Provide guidance on protective measures users can take to safeguard their information.

Users should report any suspicious activity, unauthorized account access, or potential security vulnerabilities to our Data Protection team at tsnacenter@xtsna.com. To report abuse or policy violations specifically, please use complaints@xtsna.com (reserved exclusively for abuse reports and complaints).

TSNA Center may update these Terms and Privacy Policy periodically to reflect changes in law, technology, or our services. Material updates will be communicated via email or prominent notice within the platform at least 30 days before taking effect. Continued use of the services after such notice constitutes acceptance of the revised policy.

6. Data Storage and Hosting

Your personal data and account information may be stored and processed on servers located in the United States, Taiwan, or Singapore. By using TSNA Center services, you consent to the transfer, storage, and processing of your information in these jurisdictions, which may have different data protection laws than those in your country of residence.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by relevant authorities.

We implement appropriate technical and organizational measures to ensure the security of your data, but absolute security cannot be guaranteed.

7. Cookies and Similar Technologies

TSNA Center and our partners may use cookies, web beacons, local storage, pixel tags, and similar technologies ("Cookies") to collect and store information when you use our services. Cookies help us:

• Remember your preferences and settings for a more personalized experience.
• Analyze usage patterns and improve the functionality, performance, and security of our services.
• Provide relevant marketing and service notifications.
• Measure the effectiveness of our communications and promotional campaigns.

Types of Cookies we use may include:

• Essential Cookies: Required for core functionality of the website and services. These cannot be disabled without affecting service operation.
• Performance Cookies: Help us understand usage trends and optimize service performance. Data collected is aggregated and anonymized.
• Functionality Cookies: Remember user preferences, language settings, and customizations.
• Advertising / Targeting Cookies: Deliver relevant promotional content and track the effectiveness of marketing campaigns. These are only activated with your explicit consent where required by law.

You can manage, block, or delete Cookies via your browser or device settings, or through our dedicated Cookie Preference Center available in the platform footer. Please note that disabling certain Cookies may affect the usability or functionality of our services.

8. Third-Party Services and Integrations

TSNA Center services may integrate with, or contain links to, third-party websites, applications, APIs, or services that are not operated by TSNA Center. When you interact with these third-party services, their respective privacy policies and terms of service apply. TSNA Center is not responsible for the privacy practices or content of third-party services.

Third parties we may work with include:

• Payment Processors: Secure third-party providers that handle transaction data. TSNA Center does not store full payment card details on its own servers.
• Cloud Infrastructure Providers: Partners who host, store, or process data on our behalf, bound by data processing agreements.
• Analytics Providers: Services that help us understand usage patterns, subject to data minimization and anonymization requirements.
• Authentication Providers: Identity and single sign-on (SSO) services, such as OAuth-based providers, used to verify user identity.

We evaluate all third-party partners for security and compliance standards before integration. Data shared with partners is limited to what is strictly necessary for the services they provide on our behalf.

8A. TSNA Center as an Identity Provider (OAuth)

In addition to using third-party authentication providers ourselves, TSNA Center also operates as an OAuth-based identity provider, allowing you to use your TSNA Center account to sign in to third-party applications and services that integrate with TSNA Center ("Connected Apps").

• Authorization and Scopes: When you choose to connect a third-party application to your TSNA Center account, you will be shown the specific categories of information ("scopes") that the application is requesting access to. Access is granted only after your explicit authorization.
• Data Shared with Connected Apps: Depending on the scopes you approve, a Connected App may receive limited profile information such as your name, email address, or account identifier. TSNA Center does not share your password or authentication credentials with any Connected App.
• Third-Party Responsibility: Once information is shared with a Connected App pursuant to your authorization, that application's own privacy policy and terms govern its use of your data. TSNA Center is not responsible for how Connected Apps handle information after it has been shared.
• Developer Obligations: Third parties that integrate with TSNA Center's OAuth service as developers must comply with our developer terms and are prohibited from requesting scopes beyond what is reasonably necessary for their application's stated functionality.
• Security: TSNA Center implements industry-standard OAuth 2.0 protocols, including token expiration and refresh mechanisms, to help protect your account when used with Connected Apps. You are responsible for reviewing the permissions requested before authorizing any Connected App.

9. Children's Privacy

TSNA Center services are not directed to individuals under the age of 21. We do not knowingly collect personal information from children under 21. If we become aware that a child under 21 has provided us with personal information without verifiable parental consent, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided personal information to TSNA Center without your consent, please contact us at tsnacenter@xtsna.com. In jurisdictions where a higher minimum age applies, the higher age requirement will govern.

10. User Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal data. TSNA Center is committed to honoring these rights in accordance with applicable law:

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Rectification: Request correction of inaccurate or incomplete personal data.
• Right of Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another service provider.
• Right to Object: Object to processing of your data for direct marketing, profiling, or legitimate interest purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right Not to Be Subject to Automated Decisions: Request human review of significant decisions made solely by automated means.

To exercise any of these rights, please submit a request through your account settings or contact us at tsnacenter@xtsna.com. We will respond within 30 days. We may verify your identity before processing your request to protect account security.

11. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, including to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary depending on the type of data:

• Account Data: Retained for the duration of your account and for up to 3 years following account closure, unless a longer period is required by law.
• Transaction Records: Retained for up to 7 years to comply with financial and tax regulations.
• Log and Telemetry Data: Typically retained for 90 days for security and performance purposes; aggregated analytics may be retained longer in anonymized form.
• Support Communications: Retained for up to 2 years to facilitate follow-up and service quality improvement.
• Backup Copies: May persist for up to 60 days after deletion requests are processed, after which they are permanently purged from all backup systems.

When retention periods expire, personal data is securely deleted or irreversibly anonymized in accordance with our data lifecycle management procedures.

12. Fees and Payments

Applicable fees, billing cycles, and payment methods are described in your service agreement or the relevant plan details page. By subscribing to paid services, you authorize TSNA Center to charge your designated payment method on the applicable billing schedule.

• Fees are non-refundable unless otherwise stated in your service agreement or required by applicable consumer protection law.
• TSNA Center reserves the right to modify pricing with at least 30 days' advance notice.
• Non-payment or failed payment may result in suspension or termination of services after a reasonable grace period.
• Users are responsible for all applicable taxes unless TSNA Center is required by law to collect them on your behalf.

13. Disclaimers and Liability

Services are provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

TSNA Center does not warrant that services will be uninterrupted, error-free, or free from harmful components. To the maximum extent permitted by applicable law, TSNA Center is not liable for:

• Indirect, incidental, special, consequential, or punitive damages.
• Loss of data, revenue, profits, or business opportunities.
• Damages arising from reliance on inaccurate or incomplete information.
• Unauthorized access to or alteration of your transmissions or data by third parties.

TSNA Center's total aggregate liability to you for any claim arising out of or relating to these terms or the services shall not exceed the greater of (a) the fees paid by you to TSNA Center in the one (1) month preceding the claim, or (b) USD $100.

13A. Force Majeure

TSNA Center shall not be liable for any failure or delay in performing its obligations under these terms where such failure or delay results from causes beyond its reasonable control, including but not limited to:

• Acts of God, natural disasters, fire, flood, earthquake, or extreme weather events.
• War, terrorism, civil unrest, riots, or acts of government or military authority.
• Epidemics, pandemics, or public health emergencies.
• Labor disputes, strikes, or shortages of labor or materials.
• Internet, telecommunications, or power outages; failures of third-party hosting, cloud, or network infrastructure providers.
• Cyberattacks, denial-of-service attacks, or other malicious interference by third parties.
• Changes in law, regulation, or government order, including export control or sanctions restrictions.

TSNA Center will make reasonable efforts to notify affected users of any such event and to resume performance as soon as reasonably practicable. During a Force Majeure event, TSNA Center's obligations under these terms will be suspended for the duration of the event, and no such suspension will be deemed a breach of these terms. If a Force Majeure event continues for more than 30 consecutive days, either party may terminate the affected services upon written notice, without further liability except for obligations accrued prior to the event.

14. Suspension, Termination, and Service Modifications

TSNA Center may suspend, restrict, terminate, or modify services at any time, with or without notice, including in cases of:

• Violation of these Terms or our Acceptable Use Policy.
• Actions that may expose TSNA Center or other users to legal, financial, or reputational harm.
• Technical, security, or operational reasons beyond our reasonable control.
• Regulatory requirements or government orders.

Where possible, TSNA Center will provide reasonable advance notice of service changes or discontinuation. We will not be liable for any loss resulting from changes or termination of services. Users may terminate their accounts at any time through account settings. Upon termination, data will be handled in accordance with our Data Retention policy (Section 11).

15. Entire Agreement

This Privacy Policy, together with any other policy referenced herein (including the Terms of Service), constitutes the entire agreement between you and TSNA Center regarding the services, and supersedes all prior or contemporaneous agreements, communications, and proposals, whether oral or written, between you and TSNA Center relating to the same subject matter.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will continue in full force and effect. TSNA Center's failure to enforce any right or provision of this Privacy Policy will not be considered a waiver of that right or provision.

16. Contact and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us through any of the following channels:

• General Inquiries (TSNACenter): tsnacenter@xtsna.com
• Abuse Reports & Complaints only: complaints@xtsna.com — This address is reserved exclusively for reporting abuse, prohibited content, and policy violations.
• Support Portal: https://www.tsna.cc/support

For users in the EEA or UK, our Data Protection Officer (DPO) can be contacted at tsnacenter@xtsna.com. You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.