FiberLytic Privacy Policy

Effective Date: July 13, 2026

Last Updated: July 13, 2026

1. WHO WE ARE AND WHAT THIS POLICY COVERS

This Privacy Policy explains how Provium Tech Inc. ("Provium," "we," "us," or "our"), operating the FiberLytic platform, collects, uses, discloses, and protects personal information. Our principal place of business is 11366 Flame Willow Lane, Knoxville, TN 37932, United States.

This Policy covers:

• The FiberLytic marketing website (fiberlytic.com and related pages).
• The FiberLytic software-as-a-service application (app.fiberlytic.com).

FiberLytic is a business-to-business platform used by fiber optic construction companies and their crews. This Policy describes our practices for personal information we control. For most information that field crews and employees enter into the platform (production records, field photographs, location data, payroll information), we act as a service provider that processes that information on behalf of the customer organization that employs those individuals. See Section 11.

2. INFORMATION WE COLLECT

We collect the following categories of personal information. The category names track the categories used in California law so that this Policy can serve as our California notice at collection.

2.1 Identifiers and contact information. Name, email address, telephone number, company name, job title, and account login credentials. Collected when you create an account, request a demo, sign a Service Order, or are invited to an organization.

2.2 Commercial and account information. Subscription plan, billing status, transaction and payment records (payment card data is handled by our payment processor; we do not store full card numbers), and your interactions with our sales and support teams.

2.3 Professional and employment information. Role, department, crew assignment, supervisor, and work activity recorded in the platform. For payroll features, this includes worker classification (W-2 employee, 1099 contractor, or subcontractor).

2.4 Sensitive personal information. Two categories of information we handle qualify as "sensitive" under California law:

• Precise geolocation. When a field user enables Live Mode or uses location-stamped features, the application records precise GPS coordinates (latitude and longitude), accuracy, heading, and speed, continuously during an active work session. This is used to map field production, verify work locations, and support 811 locate tickets.
• Government identifiers. For payroll and tax features, we collect and store, in encrypted form, government identification numbers such as Social Security Number, ITIN, or EIN.

We use sensitive personal information only for the purposes described in this Policy and do not use or disclose it to infer characteristics about an individual. See Section 8 for your right to limit its use.

2.5 Internet and device activity. IP address, browser type, device information, referring URLs, pages viewed, and how you interact with the platform.

2.6 Audio/visual and session activity. To diagnose problems and understand how the application is used, we record application session activity using a product analytics tool. This may include a replay of on-screen interactions within the application. We configure these tools to suppress sensitive form fields where feasible. See Section 6.

2.7 User content and files. Documents and files you upload, including construction maps, field photographs, redline markups, and job documents. Photographs taken in the field may contain embedded location metadata.

2.8 Inferences. Aggregated and de-identified usage patterns we derive to operate and improve the Service. We do not build advertising profiles about individual users from platform data.

3. SOURCES OF INFORMATION

We collect personal information directly from you, automatically through your use of the website and application, and from the customer organization that invites you to FiberLytic or enters information about you (for example, an employer adding a crew member).

4. HOW WE USE INFORMATION

We use personal information to: provide, operate, secure, and improve the Service; create and manage accounts; authenticate users and prevent fraud or abuse; process payments and manage subscriptions; provide customer support; record and map field production and work locations; operate payroll and tax features; send service and transactional messages; send marketing communications where permitted (see Section 7); analyze usage and diagnose technical problems; and comply with legal obligations.

5. HOW WE DISCLOSE INFORMATION AND THE THIRD PARTIES WE USE

We do not sell personal information for money. We use a limited set of third-party service providers to operate FiberLytic. We disclose personal information to these providers only as needed for them to perform services for us, under contracts that restrict their use of the information. The providers we currently use are:

Disclosures that may qualify as "sharing" under California law. The Google Analytics and Meta Pixel tools on our website involve disclosing online activity to those companies for analytics and advertising measurement. Under the CCPA/CPRA, some of this activity may be treated as "sharing" of personal information for cross-context behavioral advertising, even though no money changes hands. You can opt out of this activity as described in Sections 6 and 8.

Other disclosures. We may also disclose personal information: to the customer organization through which you use FiberLytic; to comply with law, legal process, or a government request; to enforce our agreements or protect the rights, safety, and property of Provium, our users, or others; and in connection with a merger, acquisition, financing, or sale of assets, with notice to affected users.

6. COOKIES, TRACKING, AND YOUR CHOICES

We use cookies and similar technologies for three purposes: (a) essential cookies required for the platform to function and to keep you logged in; (b) analytics cookies and tags (Google Analytics, PostHog) to understand usage; and (c) advertising and measurement tags (Meta Pixel) on our marketing website.

Consent banner. On our website we present a cookie consent banner. Non-essential analytics and advertising technologies (Google Analytics, Meta Pixel) are not loaded until you accept them, and you can change your choice at any time. This consent mechanism is also how we obtain your agreement before any session activity is recorded within scope of the banner.

Session replay. Within the application, we use PostHog to record session activity for diagnostics and product improvement. We do not record this activity in demo mode, and we configure the tool to avoid capturing sensitive input fields where feasible.

Browser controls and Global Privacy Control. You can manage cookies through your browser settings. We honor the Global Privacy Control (GPC) signal as a valid request to opt out of "sharing" where applicable.

7. EMAIL AND MARKETING COMMUNICATIONS

Today we send primarily transactional email (account verification, password reset, invitations, and service notices). If we send marketing or promotional email, every such message will include a clear unsubscribe link, an accurate subject line and sender, and our physical mailing address, and we will honor opt-out requests promptly, consistent with the CAN-SPAM Act. Unsubscribing from marketing email does not stop transactional messages necessary to operate your account.

7A. SMS / TEXT MESSAGE NOTIFICATIONS

FiberLytic offers optional operational SMS text-message notifications to field workers and supervisors (for example, job and task assignments, splice-completion reminders, and production approval or rejection status). These messages are transactional and operational, not marketing.

Consent is opt-in. We send SMS only to users who provide a mobile number and explicitly opt in through the "SMS Text Notifications" section of their account profile in the application. The opt-in is unchecked by default, is not a condition of employment or of using the Service, and can be withdrawn at any time.

Program terms. Message frequency varies. Message and data rates may apply. Reply STOP to any message to unsubscribe, or HELP for help. Carriers are not liable for delayed or undelivered messages.

We do not share mobile information for marketing. We do not sell, rent, or share mobile phone numbers or SMS/text-messaging opt-in consent with third parties or affiliates for their own marketing or promotional purposes. Mobile opt-in data is used only to deliver the operational notifications you requested and is disclosed only to the messaging provider (Twilio) that transmits the messages on our behalf, and as otherwise required by law. No mobile information is shared with third parties or affiliates for marketing purposes under any circumstances.

8. YOUR PRIVACY RIGHTS

Depending on where you live, you may have the following rights regarding your personal information:

• Right to know and access the categories and specific pieces of personal information we have collected about you.
• Right to delete personal information we hold about you, subject to legal and contractual retention obligations.
• Right to correct inaccurate personal information.
• Right to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising.
• Right to limit the use of sensitive personal information to what is necessary to provide the Service.
• Right to non-discrimination for exercising any of these rights.

How to exercise your rights. Submit a request to privacy@fiberlytic.com. We will verify your identity before responding and will respond within the timeframes required by applicable law. You may use an authorized agent to submit a request on your behalf.

A note for field users and employees. If you use FiberLytic because your employer or a contracting organization gave you access, much of your information is controlled by that organization, not by Provium. For requests about that information, contact your employer; we will assist them as their service provider.

9. "DO NOT SELL OR SHARE" AND "LIMIT THE USE OF MY SENSITIVE PERSONAL INFORMATION"

To opt out of the analytics and advertising activity described in Sections 5 and 6 that may qualify as "sharing," and to limit the use of your sensitive personal information, you can: (a) reject non-essential cookies in our consent banner; (b) enable Global Privacy Control in your browser; or (c) email privacy@fiberlytic.com. We will not discriminate against you for exercising these choices.

10. DATA RETENTION

We retain personal information for as long as your account is active and as needed to provide the Service. Production records, job records, and financial records are retained for up to seven years to meet business and tax record-keeping obligations. Precise geolocation history and session activity are retained only as long as needed for the purposes described in this Policy and are then deleted or de-identified. You may request earlier deletion, subject to legal and contractual retention obligations.

11. OUR ROLE: CONTROLLER VERSUS SERVICE PROVIDER

For information we collect through our marketing website, our own analytics, and account administration, Provium determines the purposes of processing and acts as the business or controller.

For Customer Data that an organization and its authorized users enter into the application (production data, field photographs, location data, payroll and tax information), Provium acts as a service provider or processor that handles that information on the organization's behalf and under its instructions, as set out in our Terms of Service. We do not use that Customer Data for our own purposes except to provide and secure the Service and as permitted for aggregated, de-identified analytics.

12. SECURITY

We maintain administrative, physical, and technical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, encryption of government identification numbers, role-based access controls, and audit logging. No system is perfectly secure. If we confirm a security breach affecting your personal information, we will notify affected parties as required by law.

13. CHILDREN

FiberLytic is a business tool not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact privacy@fiberlytic.com and we will delete it.

14. CHANGES TO THIS POLICY

We may update this Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide additional notice. Your continued use of the Service after an update takes effect constitutes acceptance of the updated Policy.

15. CONTACT US

For privacy questions or to exercise your rights:

Provium Tech Inc. Attn: Privacy 11366 Flame Willow Lane, Knoxville, TN 37932, United States privacy@fiberlytic.com

FiberLytic by Provium Tech Inc. · fiberlytic.com