Privacy Policy for Greenlight Effective date: 21 May 2026 Last updated: 21 May 2026 This Privacy Policy explains how ActiveSystems Software Inc. ("ActiveSystems", "we", "us") collects, uses, and protects information when you use the Greenlight mobile application (the "App"). Greenlight is an internal business tool that lets authorized staff submit, review, and approve software license requests within their organization. By using Greenlight you agree to this policy. If you do not agree, please do not use the App. 1. Who this policy covers Greenlight is distributed to authorized employees, partners, and clients of ActiveSystems. It is not intended for use by the general public, by minors, or by anyone who has not been invited by an administrator. If you believe you were granted access in error, please contact us. 2. Information we collect We only collect information necessary to operate the license request workflow. Account information you provide - Full name - Work email address - Phone number (optional) - Password (stored in hashed form — we never see your password in plain text) - Role and permission assignments (e.g., requester, approver, verifier, admin) - Client/organization affiliation Information you create inside the App - License request details (product, license type, client/account, request description, justification) - File attachments you upload to support a request - Approval decisions, comments, and timestamps you generate as an approver - Status updates and workflow history Information collected automatically - A session authentication token, stored only on your device using the device's secure storage (iOS Keychain / Android Keystore), used to keep you signed in - Server-side logs of API requests for security, debugging, and audit purposes (timestamps, IP address, requested endpoint, response status, user identifier) We do not collect: precise location, photos or media outside of files you explicitly attach, contacts, microphone or camera data, advertising identifiers, biometric data, or any data unrelated to license request workflows. 3. How we use your information We use the information above only to: - Authenticate you and keep your session active - Display your assigned license requests, approval queue, and request history - Route requests through the approval workflow assigned by your administrator - Notify relevant approvers, verifiers, and requesters of status changes - Maintain audit trails required by license-management operations - Protect against unauthorized access, fraud, and abuse - Diagnose and fix technical issues with the App or backend We do not use your information for advertising, profiling, behavioral analytics, or any purpose unrelated to operating the App. 4. How we share your information Greenlight does not sell or rent your personal information to anyone. Your information is shared only as needed to make the App work: - Within your organization: license requests, attachments, and approval decisions are visible to other authorized users of your organization (such as your assigned approvers, verifiers, and administrators) according to the role-based permissions configured for your tenant. - With ActiveSystems: our engineering and support staff may access data when troubleshooting issues you report, when required for security incident response, or when performing scheduled maintenance, always under strict confidentiality obligations. - Service providers: we use Google Play (for distribution), Expo Application Services (for app delivery and build pipelines), and our own hosting infrastructure operated by ActiveSystems. These providers process data only on our behalf. - Legal compliance: we may disclose information if required by law, court order, or to protect the rights, property, or safety of ActiveSystems, our users, or the public. 5. Where your data is stored and how we protect it License request data, account information, and attachments are stored on servers operated by ActiveSystems in the Philippines. All communication between the Greenlight App and our servers is encrypted in transit using HTTPS (TLS). Passwords are stored only as one-way cryptographic hashes. Session tokens never leave your device's secure storage. We apply role-based access controls, audit logging, and standard administrative safeguards. No internet-based service can be guaranteed 100% secure, but we work continuously to protect your information. 6. Data retention We retain account and license request data for as long as your account is active and for the period required for audit and legal purposes after deactivation. When your administrator deactivates your account, your personal information is retained in read-only form for compliance and historical workflow records, but you can no longer sign in. License request records may be retained indefinitely as business records. 7. Your rights You may: - Access and update your profile information from within the App - Ask your administrator to correct, deactivate, or delete your account - Request a copy of the personal information we hold about you - Request deletion of your personal information, subject to legitimate retention requirements (such as audit and accounting obligations) To exercise these rights, contact us at the address below or your designated organization administrator. 8. Children's privacy Greenlight is intended for use by adults in a professional setting. It is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If we learn we have done so, we will delete it. 9. Changes to this policy We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, if changes are material, notify users in the App or by email. Continued use of Greenlight after a change means you accept the revised policy. 10. Contact us If you have questions, concerns, or requests about your privacy or this policy, contact: ActiveSystems Software Inc. 2nd Floor Insular Life Building C.M. Recto Avenue Davao City 8000, Philippines Email: info@activesystems.ph General contact: info@activesystems.ph Website: https://www.activesystems.ph