LEGITIMATE INTEREST ASSESSMENT (LIA) SUMMARY Company: Apexflow SDK Date: February 17, 2026 1. PURPOSE OF PROCESSING Apexflow processes limited personal data (e.g., IP addresses, device characteristics/identifiers where available, timestamps, and browsing/interaction signals) solely to ensure security, prevent and detect fraud/invalid traffic (IVT), and fix errors within our advertising technology services. We rely on Legitimate Interest for the following TCF special purpose: • Special Purpose 1: Ensure security, prevent fraud, and debug To detect invalid traffic, prevent ad fraud and abuse, investigate incidents, maintain audit/security logs, and troubleshoot technical errors. Apexflow does not rely on Legitimate Interest for ad delivery or ad measurement purposes under the TCF. Where advertising-related processing occurs (e.g., selecting basic ads or measuring ad performance), it is performed only on the basis of user consent as declared in our TCF Purpose declarations. 2. NECESSITY TEST This processing is strictly necessary to protect publishers and advertisers from fraudulent activity, maintain the integrity and availability of our systems, investigate security incidents, and diagnose and resolve technical errors. Without this processing, we cannot effectively prevent abuse or ensure a secure and reliable service. 3. BALANCING TEST We balanced our interests against the rights and freedoms of data subjects and conclude our interests are not overridden because: • Data minimisation: We process only what is necessary for security and error handling. • No profiling for advertising: Data is not used to create advertising profiles or for personalised advertising. • Safeguards: Access controls, encryption in transit, and strict recipient allowlisting are applied. • Retention limits: Data is retained for a limited period (max 400 days) for security investigations and auditability, then deleted or irreversibly anonymised where applicable. • User rights: Users can exercise applicable rights via our contact channel. CONCLUSION Apexflow has determined it has a legitimate interest in processing the above data solely for security, fraud prevention, and error fixing (Special Purpose 1), and that this interest is not overridden by the interests or fundamental rights and freedoms of data subjects. For further inquiries, please contact: or@apexflowsdk.com