This Cookie Policy explains how Internal Application ("we", "us", or "our") uses cookies and similar technologies when you visit our website at internalapplication.com or use the Platform. It explains what these technologies are, why we use them, and your rights to control our use of them. This Cookie Policy should be read alongside our Privacy Policy (internalapplication.com/legal/privacy), which provides further detail on how we collect and use personal information. By continuing to use our website and Platform, you acknowledge that you have read and understood this Cookie Policy. Where your consent is required by law, we will ask for it before placing non-essential cookies on your device. If you have any questions about our use of cookies, you can contact us at hello@internalapplication.com.

Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website or use an online service. They are widely used to make websites and platforms work more efficiently, remember your preferences, and provide a better user experience. Cookies are set by either the website you are visiting (known as "first-party cookies") or by third-party services operating on that website ("third-party cookies"). Each cookie typically contains: - The name of the website or service that set the cookie - A unique identifier - An expiry date, after which the cookie is automatically deleted Similar technologies include web beacons (tiny invisible images), local storage, and session storage — these work in a comparable way to cookies and are also covered by this policy. Cookies are not viruses or malicious programs. They cannot execute code, carry viruses, or access information on your hard drive beyond what they store themselves.

Internal Application uses only the categories of cookies described below. We do not use advertising cookies, marketing pixels, or retargeting technologies of any kind. Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be switched off. They are set in response to actions you take, such as submitting a Custom Build request, completing a payment, or logging into your client project account. Examples of what these cookies do: - Maintain your authenticated session if you have a client project account, so you stay logged in as you navigate the Platform - Remember your progress while completing a Custom Build request form - Enable secure transmission of data between your browser and our servers - Store your cookie consent preference so we do not ask again unnecessarily These cookies do not store any personally identifiable information beyond what is required to keep your session active and secure. Functional Cookies: These cookies allow the Platform to remember choices you make and provide enhanced, more personalised features. They may be set by us or by third-party providers whose services we have added to our pages. Examples of what these cookies do: - Remember your language or regional preferences - Remember your display or UI settings between sessions - Maintain your last-used filters when browsing the Directory Performance & Analytics Cookies: We use Google Analytics to understand how visitors use the Platform, including which pages are viewed and how visitors navigate the site. Google Analytics may place analytics cookies and process usage data according to Google's privacy policy. Where required by law, we will request consent before placing non-essential analytics cookies. We do not use: - Advertising or targeting cookies - Social media tracking pixels - Cross-site tracking technologies - Retargeting or remarketing cookies

Cookies can be either "session cookies" or "persistent cookies", depending on how long they remain on your device. Session Cookies: Session cookies are temporary and exist only for the duration of your browser session. They are automatically deleted when you close your browser. We use session cookies primarily to keep your Custom Build request form or client login session active during a single visit. Persistent Cookies: Persistent cookies remain on your device for a set period of time or until you manually delete them. We use persistent cookies to remember your preferences and settings so you do not have to reconfigure them on every visit. The specific duration of each persistent cookie we use is set to the minimum period necessary to fulfil its purpose. No cookie we set has a lifespan exceeding 12 months from the date it was last refreshed.

Internal Application integrates Google Analytics for website analytics. Google Analytics may set third-party cookies to measure usage and improve the Platform. Two third-party services may set cookies in connection with your use of the Platform: - Clerk (clerk.com) may set cookies to manage authentication and session security for client project accounts. - Our payment processor may set cookies on their own payment pages when you complete a Custom Build project fee payment, to ensure secure transaction processing and fraud prevention. These cookies are governed by the relevant provider's own privacy and cookie policies and are strictly necessary for the functions described above. We do not have access to or control over cookies set by these providers on their own pages. Should we add any additional third-party services in the future that result in new cookies being placed, we will update this Cookie Policy accordingly and, where required by law, seek your consent before doing so.

You have the right to decide whether to accept or reject non-essential cookies. You can exercise your cookie preferences in the following ways: Browser Settings: Most web browsers allow you to control cookies through their settings. You can typically: - View cookies that have been set on your device - Block all cookies or only third-party cookies - Delete cookies that have already been set - Set your browser to notify you when a new cookie is being placed Please note that blocking all cookies will affect the functionality of the Platform. If you block strictly necessary cookies, you will not be able to log into a client project account or complete a Custom Build request or payment. Instructions for managing cookies in common browsers: - Google Chrome: Settings → Privacy and Security → Cookies and other site data - Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data - Apple Safari: Preferences → Privacy → Manage Website Data - Microsoft Edge: Settings → Cookies and Site Permissions → Cookies and Site Data Do Not Track: Some browsers include a "Do Not Track" (DNT) feature that signals your preference not to be tracked across websites. As Internal Application does not engage in cross-site tracking, our Platform effectively honours the intent of DNT signals by default. Withdrawing Consent: Where we have relied on your consent to place non-essential cookies, you may withdraw that consent at any time by adjusting your browser settings or clearing your cookies. Withdrawing consent does not affect the lawfulness of any cookie use that took place before you withdrew it.

We may update this Cookie Policy from time to time to reflect changes in the cookies and technologies we use, changes to applicable law, or improvements to our practices. When we make material changes, we will: - Update the "Effective Date" shown at the top of this page - Notify you via email or an in-app notice where the change is significant We encourage you to review this Cookie Policy periodically. Your continued use of the Platform after any update constitutes your acknowledgment of the revised policy. The most current version of this Cookie Policy will always be available at internalapplication.com/legal/cookies.

If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies and similar technologies, please do not hesitate to get in touch with us. You can reach us at: Email: hello@internalapplication.com Website: internalapplication.com We aim to respond to all enquiries within 5 business days. If you are located in a jurisdiction that provides specific rights regarding cookies and online tracking (such as the EU/EEA under the ePrivacy Directive or GDPR), you also have the right to lodge a complaint with your local data protection authority if you believe your rights have not been respected.