1. Introduction

This Cookie Policy explains how Enclira uses cookies and similar technologies when you access or use:

• Enclira websites.
• Enclira web applications.
• Customer websites powered by Enclira.
• White-Label Services.
• Administrative portals.
• Customer portals.
• Marketplace interfaces.
• Landing pages.
• Other online services operated or powered by Enclira.

This Policy should be read together with the Enclira Privacy Policy and Enclira Terms of Service.

Because Enclira provides white-label technology, a particular Customer Application may use additional cookies or similar technologies configured by the relevant Customer or third-party services.

2. What Are Cookies?

A cookie is a small text file or similar piece of information stored on or accessed from your computer, mobile device or other device when you visit a website.

Cookies can allow a website to remember your preferences, maintain a login session, maintain security, remember shopping-cart information, understand how the website is used, measure performance, provide personalized functionality, and support advertising or marketing where permitted.

Cookies may be:

• First-party cookies — cookies placed by the website or service you are accessing.
• Third-party cookies — cookies or similar technologies placed by a third-party service operating in connection with the website.
• Session cookies — cookies that generally expire when your browsing session ends.
• Persistent cookies — cookies that remain on your device for a specified period or until manually deleted.

3. Similar Technologies

This Policy also applies, where applicable, to technologies that perform functions similar to cookies, including:

• Local storage.
• Session storage.
• Pixels.
• Web beacons.
• Tracking pixels.
• Software development kits (SDKs).
• Device identifiers.
• Browser identifiers.
• Fingerprinting technologies.
• Tags.
• Scripts.
• Similar storage or access technologies.

The term “cookies” in this Policy should therefore be understood broadly to include these technologies where appropriate.

Current UK regulatory guidance expressly recognizes that rules concerning cookies can also apply to technologies that store information on, or access information from, a user’s device.

4. Why Enclira Uses Cookies

Depending on the service and configuration, Enclira may use cookies and similar technologies for the following purposes:

• Strictly necessary functionality.
• Authentication and account management.
• Security and fraud prevention.
• Preferences and personalization.
• Performance and reliability.
• Analytics.
• Feature functionality.
• Marketing and advertising.
• Integration with third-party services.
• Consent management.

Not every Enclira website or application uses every category.

The technologies actually used depend on the features enabled for that particular service.

5. Strictly Necessary Cookies

Strictly necessary cookies are used to provide functionality that you have requested or that is essential for operating the service.

Examples may include cookies used for:

• Authentication.
• Login sessions.
• Account security.
• Session management.
• Load balancing.
• Fraud prevention.
• Maintaining shopping-cart or checkout functionality.
• Remembering essential service settings.
• Maintaining security tokens.
• Preventing unauthorized access.
• Maintaining consent preferences.
• Enabling basic Platform functionality.

Where applicable law recognizes an exemption for strictly necessary technologies, Enclira may use these technologies without obtaining consent.

Strictly necessary does not mean “useful” or “convenient.” The technology must actually be necessary for the requested service or permitted purpose.

For example, UK regulatory guidance recognizes an exemption for technologies that are strictly necessary to provide an online service requested by the user, while technologies that are merely helpful or convenient may still require consent.

6. Authentication and Login Cookies

When you sign in to an Enclira-powered application, cookies or similar technologies may be used to:

• Maintain your authenticated session.
• Remember that you are logged in.
• Protect your account.
• Prevent unauthorized access.
• Maintain session security.
• Identify your authorized session.

Without these technologies, certain authenticated services may not function correctly.

7. Security Cookies

Enclira may use cookies and similar technologies to:

• Detect suspicious activity.
• Prevent fraudulent access.
• Identify abnormal login behavior.
• Protect authentication sessions.
• Prevent automated abuse.
• Protect APIs.
• Maintain application security.

Security-related technologies may operate independently of analytics or advertising technologies.

8. Preference Cookies

Enclira may use cookies or local storage to remember preferences such as:

• Language.
• Region.
• Display preferences.
• Application settings.
• Selected organization.
• Selected workspace.
• Notification preferences.
• Consent choices.
• Other user interface preferences.

These technologies may improve the user experience but may not always be strictly necessary.

Where consent is required, Enclira will obtain the appropriate consent before placing or accessing such technologies.

9. Analytics Cookies

Enclira may use analytics technologies to understand how users interact with our services.

Analytics may help us understand:

• Number of visitors.
• Pages viewed.
• Features used.
• Navigation patterns.
• Application performance.
• Errors.
• Crashes.
• Session behavior.
• Geographic region at an appropriate level.
• Browser and device information.
• Referral sources.

Analytics may be provided through Enclira infrastructure or third-party analytics providers.

Where analytics cookies or similar technologies require consent under applicable law, Enclira will request consent before activating them.

10. Performance and Monitoring Technologies

Enclira may use technologies to monitor:

• Application performance.
• Loading times.
• Errors.
• API failures.
• Availability.
• Infrastructure performance.
• Application crashes.
• Security events.

These technologies help Enclira identify technical problems and improve service reliability.

Depending on the technology and applicable law, certain operational technologies may be considered strictly necessary while others may require consent.

11. Marketing and Advertising Technologies

Where Enclira or a Customer uses marketing or advertising functionality, cookies and similar technologies may be used to:

• Measure advertising effectiveness.
• Understand interactions with advertisements.
• Limit repetitive advertising.
• Measure campaign performance.
• Support attribution.
• Personalize advertising.
• Understand website activity across sessions.

Non-essential advertising or behavioral tracking technologies will not be activated where applicable law requires prior consent unless a valid legal exception applies.

Enclira will not treat continued browsing, scrolling or inactivity as consent where applicable law requires affirmative consent.

Regulatory guidance emphasizes that valid cookie consent should involve a clear affirmative action and that non-essential cookies should not be placed before consent where consent is required.

12. Third-Party Cookies

Some Enclira services may include third-party functionality such as:

• Analytics.
• Video.
• Maps.
• Social-media integrations.
• Payment services.
• Customer-support tools.
• Marketing platforms.
• Advertising platforms.
• Authentication providers.
• AI-related interfaces.
• Monitoring tools.

These third parties may use their own cookies or similar technologies.

Third-party technologies may allow the relevant provider to collect information directly from your browser or device.

Third-party providers may change their technologies, purposes or cookie lifetimes independently.

Enclira does not control the independent cookie practices of third-party providers.

Where required, Enclira will seek appropriate consent before activating non-essential third-party technologies.

13. White-Label Applications

Enclira provides technology that can be branded and configured for Customers.

A Customer Application may therefore use:

• Enclira cookies.
• Customer-configured cookies.
• Customer analytics.
• Customer marketing tools.
• Third-party integrations.
• Customer-specific scripts.
• Other technologies configured by the Customer.

Consequently, the cookie technologies used by one Enclira-powered application may differ from another.

The Customer operating a particular White-Label Service may provide additional cookie information or a separate cookie policy.

Where Enclira acts solely as a technology provider for a Customer, the Customer may be responsible for determining which non-essential cookies are deployed within its environment and for obtaining legally required consent.

14. Marketplace and E-Commerce Cookies

Where Enclira supports marketplace or e-commerce functionality, cookies or similar technologies may be used for:

• Shopping carts.
• Checkout sessions.
• Order processing.
• Authentication.
• Payment-session continuity.
• Fraud prevention.
• Remembering preferences.
• Marketplace functionality.
• Transaction analytics.

Payment providers may also use their own technologies.

Enclira does not control the independent cookie practices of payment providers.

15. Payment Providers

Enclira may integrate with payment providers such as Stripe, Razorpay and other payment processors.

Payment providers may use cookies, SDKs or similar technologies for:

• Payment processing.
• Fraud detection.
• Security.
• Authentication.
• Transaction management.
• Risk assessment.

The use of such technologies may be governed by the applicable payment provider’s privacy and cookie policies.

Enclira does not intend to use cookies to collect full payment-card credentials.

16. Social-Media Technologies

Enclira may integrate with services such as Facebook, Instagram, LinkedIn, YouTube, Google and other social-media or content platforms.

Social-media features may use cookies, pixels, SDKs or other technologies. Examples may include:

• Embedded content.
• Social sharing.
• Authentication.
• Content publishing.
• Analytics.
• Advertising measurement.

Third-party platforms may process information according to their own privacy policies.

17. AI and IRA

Enclira may use cookies or similar technologies in connection with:

• IRA.
• AI assistants.
• Chatbot interfaces.
• AI workflows.
• AI-enabled search.
• Personalization.
• Session management.

These technologies may be used to maintain an AI session, remember preferences, maintain security or provide requested functionality.

AI providers may use separate technologies when their services are directly integrated into a Customer Application.

Such processing is also subject to the Enclira Privacy Policy and applicable third-party terms.

18. Consent Management

Where applicable law requires consent for non-essential cookies or similar technologies, Enclira may display a cookie-consent mechanism.

The consent interface may allow you to:

• Accept all non-essential technologies.
• Reject non-essential technologies.
• Manage individual categories.
• Save your preferences.
• Withdraw consent.
• Change your preferences later.

Enclira will seek to provide meaningful choices rather than making acceptance of unnecessary cookies a condition of accessing the core service.

European data-protection guidance emphasizes that consent should represent a genuine, informed choice and should not be obtained through designs that effectively force users to accept unnecessary cookies.

19. Cookie Banner

Where required, Enclira may display a cookie banner when you first access a website.

The banner may provide options such as Accept All, Reject Non-Essential and Manage Preferences.

The exact design may vary by:

• Jurisdiction.
• Application.
• Customer configuration.
• Applicable law.
• Technology used.

The absence of a cookie banner does not necessarily mean that no cookies are used. Strictly necessary technologies may operate without prior consent where legally permitted.

20. Withdrawal of Consent

Where Enclira relies on consent for non-essential cookies, you may withdraw or change your consent.

You may do this through:

• The “Cookie Settings” mechanism.
• A privacy or cookie preference center.
• Applicable browser controls.
• Other mechanisms made available by the service.

Withdrawal of consent does not affect processing that occurred lawfully before withdrawal.

Where consent is withdrawn, certain functionality may become unavailable if that functionality depends on the relevant technology.

21. Equal Choice

Where consent is required, Enclira will seek to provide users with a meaningful ability to accept, reject, manage and later withdraw non-essential cookies.

Enclira will not intentionally design consent mechanisms to make rejection materially more difficult than acceptance where applicable law prohibits such practices.

22. Cookie Lifetimes

Cookies may remain on your device for different periods.

They may be:

• Session-based.
• Short-term.
• Persistent.
• Deleted after a defined period.
• Deleted when you withdraw consent.
• Deleted when the applicable service no longer requires them.

The actual lifetime depends on the specific technology.

Enclira will seek to ensure that cookie durations are appropriate for their purpose.

Current regulatory guidance recommends identifying whether cookies are session or persistent cookies and establishing appropriate retention periods.

23. Cookie Categories

For operational purposes, Enclira may classify technologies into categories such as:

The actual legal treatment depends on the purpose and applicable jurisdiction, not merely the category name.

24. Cookie Inventory

Enclira may maintain an internal cookie and technology inventory.

The inventory may include:

• Cookie or technology name.
• Provider.
• First-party or third-party status.
• Purpose.
• Category.
• Session or persistent status.
• Duration.
• Domain.
• Data collected.
• Whether consent is required.
• Applicable service.

The public Cookie Policy may not list every individual technical identifier because the inventory may change as Enclira updates its infrastructure.

Where required by law, Enclira or the relevant Customer may provide more detailed information through a cookie-preference interface.

25. Customer-Configured Technologies

Customers may have the ability to integrate:

• Analytics.
• Marketing platforms.
• Advertising systems.
• Pixels.
• Custom scripts.
• External content.
• Other technologies.

Where a Customer independently configures such technologies, the Customer may be responsible for determining the purpose, providing appropriate notice, obtaining consent where required, configuring the technology appropriately, honoring withdrawal of consent, and complying with applicable law.

Enclira may restrict technologies that create unreasonable security, privacy or operational risks.

26. Mobile Applications

Although mobile applications may not use browser cookies in the same way as websites, Enclira applications may use equivalent technologies including:

• SDKs.
• Local storage.
• Device identifiers.
• Authentication tokens.
• Analytics identifiers.
• Advertising identifiers.
• Push-notification tokens.
• Similar technologies.

Where applicable, such technologies are treated consistently with the principles described in this Policy and the Enclira Privacy Policy.

Certain device permissions, such as location or notifications, are controlled through the mobile operating system rather than cookies.

27. Browser Controls

Most modern browsers allow you to:

• Delete cookies.
• Block cookies.
• Allow cookies.
• Block third-party cookies.
• Clear cookies when closing the browser.
• Manage site-specific permissions.

Browser controls differ between browsers.

Blocking all cookies may prevent certain Enclira functionality from operating correctly.

For example, authentication and security functionality may require strictly necessary cookies.

28. Do Not Track and Similar Signals

Some browsers and devices provide privacy preference signals or “Do Not Track” mechanisms.

The legal treatment of these signals varies by jurisdiction and technology.

Where applicable law requires Enclira to recognize a particular privacy preference signal, Enclira will implement the required behavior.

Where no legal requirement applies, Enclira may not respond to every browser-level signal.

29. Global Privacy Requirements

Enclira serves users globally.

Depending on your location, different rules may apply to cookies and similar technologies. These may include requirements under:

• European Union law.
• European Economic Area law.
• UK law.
• United States state privacy laws.
• Indian law.
• Canadian law.
• Other applicable privacy and electronic-communications laws.

Enclira will apply appropriate consent and privacy mechanisms based on the applicable legal requirements and the nature of the processing.

30. European Economic Area

Where applicable European law requires consent before storing or accessing non-essential information on a user’s device, Enclira will seek consent before activating the relevant technologies unless a valid legal exception applies.

Enclira will seek to ensure that consent is:

• Informed.
• Specific.
• Freely given.
• Unambiguous.
• Capable of being withdrawn.

European data-protection authorities have emphasized that consent must involve a genuine choice and cannot generally be inferred merely from continued browsing or scrolling.

31. United Kingdom

For users in the United Kingdom, Enclira will comply with applicable requirements governing cookies and similar technologies.

The UK’s PECR framework requires clear information and generally requires consent for non-exempt cookies and similar technologies. Strictly necessary technologies may qualify for an exemption.

Enclira will also consider applicable UK GDPR requirements where cookie-related processing involves personal information.

32. United States

United States privacy requirements vary by state.

Depending on the jurisdiction, users may have rights concerning:

• Targeted advertising.
• Sale or sharing of personal information.
• Profiling.
• Tracking technologies.
• Access.
• Deletion.
• Correction.
• Other forms of processing.

Where applicable, Enclira will provide legally required mechanisms for exercising such rights.

33. India

Enclira may use cookies and similar technologies for legitimate operational, security, preference, analytics and other purposes subject to applicable Indian law.

Where consent or other notice is legally required, Enclira will provide an appropriate mechanism.

The Enclira Privacy Policy contains additional information concerning personal-data processing.

34. Third-Party Cookie Policies

Third-party providers may maintain their own policies. Examples may include:

• Analytics providers.
• Advertising providers.
• Payment processors.
• Social-media platforms.
• Video providers.
• Mapping providers.
• Customer-support providers.
• Cloud services.

Users should review the applicable third-party privacy and cookie policies when interacting with third-party functionality.

35. Changes to Cookies

Enclira may introduce, remove or modify cookies and similar technologies as:

• Services evolve.
• Security requirements change.
• Third-party providers change.
• Analytics systems change.
• New features are introduced.
• Legal requirements change.

Where a change requires renewed consent, Enclira will seek consent as required.

Regulatory guidance recognizes that fresh consent may be needed when the use of cookies changes materially.

36. Security

Cookies and similar technologies may contain identifiers or other information that could affect account security.

Enclira may use security measures including:

• Secure cookie attributes.
• Encrypted connections.
• Access controls.
• Session expiration.
• Token rotation.
• Monitoring.
• Fraud detection.

No security system is completely risk-free.

37. Privacy and Personal Information

Cookies and similar technologies may sometimes process information that constitutes personal information under applicable law.

Such processing is also governed by the Enclira Privacy Policy.

The Privacy Policy explains:

• What personal information Enclira processes.
• Why it is processed.
• Legal bases.
• Data sharing.
• International transfers.
• Retention.
• User rights.
• Deletion.
• Security.

38. Data Retention

Information collected through cookies and similar technologies will be retained only for as long as reasonably necessary for the relevant purpose, subject to:

• Applicable law.
• Contractual obligations.
• Security requirements.
• Legitimate business needs.
• Technical limitations.
• Legal retention requirements.

Cookie duration does not necessarily equal the retention period of information associated with a cookie.

For example, an identifier may expire while associated analytics information may remain subject to a separate retention period.

39. Cookie Consent Records

Where Enclira obtains consent, we may maintain records of:

• Consent status.
• Consent categories.
• Date and time.
• Relevant website or application.
• Consent mechanism.
• Withdrawal or modification of consent.

Consent records may be retained as necessary to demonstrate compliance with applicable legal requirements.

Regulatory guidance recommends maintaining appropriate records of cookie consent.

40. Your Choices

You may control cookies through:

• Enclira Cookie Settings — where available, use the cookie-preference mechanism provided by the website.
• Browser settings — use your browser’s privacy settings to manage cookies.
• Device settings — mobile operating systems may provide controls for advertising identifiers, tracking permissions, app permissions, storage and other privacy settings.
• Third-party controls — some third-party providers provide their own privacy or advertising controls.

41. Consequences of Disabling Cookies

Disabling certain technologies may cause:

• Login problems.
• Loss of preferences.
• Shopping-cart problems.
• Reduced functionality.
• Inability to use certain features.
• Inaccurate analytics.
• Certain integrations not working.

Strictly necessary technologies may be required for the service to operate.

42. No Guarantee of Third-Party Technologies

Enclira does not guarantee the behavior, availability or security of third-party technologies.

Third-party providers may:

• Change their technology.
• Change cookie names.
• Modify expiration periods.
• Change data practices.
• Introduce new technologies.
• Discontinue services.

Enclira will take reasonable steps to manage such changes within its control.

43. White-Label Customer Responsibility

Customers using Enclira’s White-Label Services acknowledge that their applications may contain Customer-configured technologies.

Customers are responsible for ensuring that their configurations comply with applicable law.

Where Enclira provides a consent-management mechanism, Customers must configure it appropriately for their intended processing.

Customers must not use Enclira to deploy tracking technologies unlawfully.

44. Contact Us

If you have questions regarding Enclira’s use of cookies or similar technologies, contact Enclira Labs Private Limited:

• Privacy: privacy@enclira.com.
• Legal: legal@enclira.com.
• Support: support@enclira.com.
• Website: https://www.enclira.com.
• Registered office: Enclira Labs, Arenesha Coworking Space, 6th Floor, The District, Financial District, Nanakramguda, Hyderabad, Telangana 500032, India.

45. Changes to This Cookie Policy

We may update this Cookie Policy periodically.

The updated version will include a revised “Last updated” date.

Where required by applicable law, we may provide additional notice or request renewed consent.

46. Effective Date

This Cookie Policy is effective from 17 August 2026.

Version: 1.0.