Legal

Effective 07 June 2026

Privacy Policy

FortifAI Limited, which operates NOL8 (“we”, “us”, or “our”), respects your privacy. This policy explains what personal information we collect, how we use it, and the choices you have. It applies to our website at nol8.io, our products and services, and any sales or support interactions with us.

NOL8 is part of FortifAI Limited, listed on the ASX as FTI. FortifAI Limited runs this website and is the controller of the personal information described in this policy.

1. Information we collect

We collect the following categories of personal information:

  • Contact and identity data. Name, job title, company, work email, phone number, and similar details you give us through forms, demo requests, or sales conversations.
  • Account data. Login credentials and settings if you hold an account with us.
  • Usage and technical data. IP address, device and browser type, pages viewed, referring URLs, and similar information collected automatically when you use our website or products.
  • Communications. Records of your correspondence with us, including support tickets and meeting notes.
  • Marketing data. Your preferences for receiving communications from us.

We do not seek to collect sensitive categories of personal information through our website. The data we process in the course of providing our products is governed by the agreements with our customers, where NOL8 typically acts as a processor on the customer’s behalf.

2. How we use your information

We use personal information to:

  • Provide, operate, and improve our website, products, and services.
  • Respond to inquiries, demo requests, and support questions.
  • Manage our relationship with you and your organization, including billing and contract administration.
  • Send service updates and, where permitted, marketing communications you can opt out of at any time.
  • Monitor and protect the security and integrity of our systems.
  • Comply with legal, regulatory, and disclosure obligations, including those of our listed parent.

Where data protection law requires a legal basis (for example, under the GDPR or UK GDPR), we rely on one or more of the following:

  • Contract. To take steps at your request before entering a contract and to perform a contract with you or your organization.
  • Legitimate interests. To run, secure, and grow our business, where those interests are not overridden by your rights.
  • Consent. Where you have given consent, for example to certain marketing or non-essential cookies. You can withdraw consent at any time.
  • Legal obligation. To meet our legal and regulatory duties.

4. How we share your information

We do not sell your personal information. We share it only as set out below:

  • Service providers. Vendors who process data on our behalf, such as hosting, analytics, CRM, email, and payment providers, under contracts that require them to protect your information.
  • Group companies. Other entities within the FortifAI group, for the purposes described in this policy.
  • Professional advisers and authorities. Where required to comply with the law, enforce our terms, or protect our rights, property, or safety.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to applicable disclosure rules.

5. International transfers

We operate across multiple regions, including Australia, Israel, and the United States. Your information may be transferred to and processed in countries other than your own. Where we transfer personal information across borders, we put appropriate safeguards in place, such as standard contractual clauses, in line with applicable law.

6. Data retention

We keep personal information only for as long as needed for the purposes set out in this policy, to meet legal and regulatory requirements, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

7. Security

We use technical and organizational measures designed to protect personal information against unauthorized access, loss, or misuse. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

8. Your rights

Depending on where you live, you may have some or all of the following rights:

  • Access a copy of the personal information we hold about you.
  • Correct information that is inaccurate or incomplete.
  • Delete your information in certain circumstances.
  • Object to or restrict certain processing.
  • Receive your information in a portable format.
  • Withdraw consent where we rely on it.
  • Opt out of marketing communications.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

9. Children

Our website and products are intended for businesses and are not directed at children. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the effective date above. If changes are significant, we will provide a more prominent notice where appropriate.

11. Contact us

If you have questions about this policy or how we handle your information, contact:

FortifAI Limited (NOL8)

4 Arieh Shenkar St., Herzliya, Israel

Email: [email protected]

If you are in the EU or UK and we are required to have a representative, our representative is FortifAI Limited.