Privacy Notice

1.1 Scope

This Privacy Notice describes how Allsource Data Corporation and our affiliated companies process information about you. This Privacy Notice applies to information we collect about Representatives of customers and potential customers who access or use our websites (collectively, the "Website") or otherwise interact with us, such as through our customer support channels. It also applies to information we collect about our customers' Clients in connection with providing our marketing intelligence services (the "Services").

This Privacy Notice is effective as of the Effective Date. We may change this Privacy Notice from time to time. If we make changes, we will notify you by revising the "Effective Date" above. Where required by law, we will notify you of changes through the Services or by other means and seek your consent to or allow you to opt out of the changes. You are responsible for reviewing this Privacy Notice regularly to stay informed about our information practices and the choices available to you.

1.2 Collection of Information

1.2.1 Information You Provide to Us

We collect information directly from Representatives when you submit a form, request customer support, or otherwise communicate with us. The categories of information we collect include:

• Identification Information: Name, email address, and business website.
• Communication Information: Information included in your communications with us.

We may also collect any other information you choose to provide, including Customer Data such as Customer Transactions and Failed Leads.

1.2.2 Information We Collect Automatically

We automatically collect the following categories of information from Representatives:

• Internet Activity Information: Information about how you access our Website, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, and browser type. We also collect information about your activity on our Website and interaction with our communications, such as access times, browsing behavior (such as pages viewed and links clicked), the page you visited before navigating to our Website, and information about your activity on specific pages.
• Information Collected by Cookies and Similar Tracking Technologies: We use tracking technologies, such as cookies and pixels, to collect information about your interactions with our Website and communications. These technologies help us improve our Website and communications, see which areas and features of our Website are popular, count visits, and track clicks. You may be able to adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Services.

1.2.3 Information We Collect About Clients

We collect information about Clients from third parties like data vendors and our customers. This information includes name, business and personal email address, phone number, LinkedIn page, age, profession, income bracket, profession, marital status, whether Clients have children, and the Internet Activity Information described above.

1.2.4 Derived Information

We may derive information or draw inferences about Clients based on the information we collect. For example, we may infer how likely a Client is to purchase from our customers based on the information we have about that Client.

1.3 Use of Information

We use the categories of information we collect for the following business and commercial purposes:

• Service Delivery: To provide and maintain our Services, including to identify Clients and otherwise optimize marketing campaigns for our customers.
• Communication: To communicate with Representatives about Allsource and our Services, including to respond to your questions, inform you of price or Services changes, and send you other transactional or relationship messages.
• Marketing and Advertising: To send direct marketing messages (including via email and automated text) and target advertisements to Representatives and Clients on third-party platforms and websites. You can opt out of direct marketing messages we send by following the instructions in those communications (such as by clicking "unsubscribe" in the emails or replying "STOP," "END," or "CANCEL" to the texts).
• Research and Development: To monitor and analyze Website trends, usage, and activities, improve our Website and Services, develop new products and services, and generate de-identified data that we will not re-identify.
• Protection and Compliance: To detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of Allsource and others, and comply with our legal and financial obligations.
• Notice/Consent: We may also use information in other circumstances after giving you notice and/or getting your consent.

1.4 Targeted Advertising and Analytics

We engage others to provide analytics services, serve advertisements, and perform related services across the web and in mobile applications. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Website, including your IP address, web browser and mobile network information, pages viewed, time spent on pages, and links clicked. This information is used to deliver advertising targeted to your interests on other companies' sites or mobile apps and to analyze and track data, determine the popularity of certain content, and better understand your activity.

Some of the activities described in this section may constitute "targeted advertising," "sharing," or "selling" under certain laws. You can learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance.

1.5 Disclosure of Information

We disclose the categories of information described above as follows:

• Vendors: We disclose information to vendors, service providers, contractors, and consultants that need this information to provide services to us, such as companies that assist us with web hosting, fraud prevention, customer service, data enrichment, analytics, and marketing and advertising.
• Customers: We license the "Information We Collect About Clients" to our customers.
• Advertising Partners: We disclose information to third parties for the purposes described in the "Marketing and Advertising" subsection above.
• Professional Advisors: We disclose information to our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
• Legal Authorities: We may disclose information to legal authorities and others for the purposes described in the "Protection and Compliance" subsection above, including if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements and if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Allsource, our users, the public, or others.
• Corporate Transactions: We reserve the right to disclose information in connection with, or during negotiations of certain corporate transactions, including the merger, sale of Allsource assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliates: We reserve the right to disclose information between and among Allsource and any current or future parents, affiliates, subsidiaries, and other companies under common control and ownership.
• Consent: We may disclose information when we have your consent or you direct us to do so.

We also disclose de-identified information that cannot reasonably be used to identify you.

1.6 Residents of Certain US States

Privacy laws in certain states ("State Privacy Laws") require additional disclosures and grant their residents certain rights. This section applies to residents of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia and serves as our Notice at Collection for California.

1.6.1 Additional Disclosures

We collect identifiers, communication information, and internet activity information from Representatives and we collect identifiers, characteristics of protected classifications, commercial information, professional or employment-related information, and derived information about Clients. We collect this information from the following categories of sources: we collect information directly and by automated means from Representatives and we collect information about Clients from third-party sources like data vendors and our customers. We collect and disclose personal information for the following business and commercial purposes: Service Delivery, Research and Improvement, Communication, Marketing and Advertising, Conducting Analytics, and Protection and Compliance. We do not collect information deemed "sensitive" under State Privacy Laws and we do not use or disclose sensitive personal information to infer characteristics about you.

1.6.2 Your Privacy Rights

• Access, Correction, and Deletion: Depending on your state of residence, and subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information and access your personal information, including in a portable format, (2) request deletion of your personal information collected from or about you, (3) request correction of inaccurate personal information, and (4) request information about the third parties to whom we disclosed your personal information. Use the "Contact Us" information below to exercise these rights. We may verify your request by asking you to verify your email address and/or provide information related to your recent interactions with us. If we deny your request, you may appeal by contacting us as described below.
• Opt Out of Sales, Sharing, and Targeted Advertising: We sell identifiers, characteristics of protected classifications, commercial information, communication information, internet activity information, professional or employment-related information, and derived information relating to Clients to our customers. In addition, we process personal information to serve you advertisements on non-Allsource properties, expand the reach and effectiveness of our own marketing campaigns, and allow certain third parties to use this information for their own marketing purposes. These activities may be considered targeted advertising under State Privacy Laws. We do not knowingly "sell" or "share" the personal information of consumers under 16 years of age.
• Nondiscrimination: We will not treat you differently for exercising your privacy rights.
• Appeals: If we deny your request, you may appeal our decision by contacting us as described below. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.
• Authorized Agents: If you are submitting a rights request as an authorized agent, you must submit proof of your authorization to make the request, such as a valid power of attorney or signed permission from the subject of the request. Please do not provide any sensitive personal information in connection with this request, such as a driver's license or other government-issued ID. In some cases, we may contact the subject of the request for verification.

1.6.3 Data Retention

We store personal information for as long as necessary to carry out the purposes for which we originally collected it, satisfy our legal requirements, or for other business purposes explained in this Privacy Notice.

1.6.4 Shine the Light

A California law known as "Shine the Light" permits residents of California to request certain details about how their information is disclosed to third parties for marketing purposes. If you are a California resident and would like to make such a request, please contact us as described below.

1.7 Contact Us

If you have any questions about this Privacy Notice, please contact us at:

Email: support@allsourcedata.com

Address: Allsource Data Corporation, 2701 W Busch Blvd #371, Tampa, FL 33618

Exhibit A: Data Processing Details and Support Services

Details of Processing

• Purpose: To provide Services, including lookalike modeling and insights generation.
• Categories: Identifiers, transaction data, lead data, enrichment features.
• Roles: Each Party will act as a separate and independent controller of any Personal Data received from the other Party.

Technical and Organizational Measures to Ensure the Security of Personal Data

Program: Each Party will implement and maintain a written information security program containing administrative, technical, and organizational safeguards appropriate to the risks posed that comply with this Exhibit A and that: (a) are designed to protect against any Security Incident; and (b) meet or exceed prevailing industry standards and requirements under Applicable Data Protection Law.

Access Controls: Each Party will: (a) abide by the "principle of least privilege," pursuant to which each Party will permit access to Personal Data by its personnel solely on a need-to-know basis; and (b) promptly terminate its personnel's access to Personal Data when such access is no longer required for performance under the Agreement.

Account Management: Each Party will effectively manage the creation, use, and deletion of all account credentials used to access each Party's systems, including by implementing: (a) a segregated account with unique credentials for each user; and (b) strict management of administrative accounts.

Vulnerability Management: Each Party will: (a) use automated vulnerability scanning tools to scan its systems; (b) log vulnerability scan reports; (c) use patch management and software update tools where appropriate; and (d) prioritize and remediate vulnerabilities by severity.

Security Segmentation: Each Party will monitor, detect, and restrict the flow of information on a multilayered basis within its systems using tools such as firewalls, proxies, and network-based intrusion detection systems.

Data Loss Prevention: Each Party will use data loss prevention measures designed to identify, monitor, and protect Personal Data in use, in transit, and at rest.

Encryption: Each Party will encrypt, using industry standard encryption tools, all Personal Data that each Party: (a) transmits or sends wirelessly across public networks or within each Party's systems; and (b) stores on laptops, portable devices, or otherwise within each Party's systems. Each Party will safeguard the security and confidentiality of all encryption keys associated with encrypted Personal Data.

Physical Safeguards: Each Party will maintain physical access controls designed to secure its systems.

Support Services

Customer Support: If a User requires support regarding the Platform, all requests or questions must be first submitted by such User to Customer's designated Tier 1 support representative(s) (each, a "Customer Representative"). If a Customer Service Representative determines that there is an Error in the Platform and is unable to resolve such Error after reasonable efforts, the Customer Service Representative may contact Allsource regarding such Error. "Error" means an issue which causes the Platform or any portion thereof to perform in a manner that deviates from its specifications and/or design. Allsource will provide Support Services via telephone, e-mail, or other service tools used by Allsource in order to address Errors pertaining to the Platform.

Maintenance Windows: Allsource may take down or limit access to the Platform to conduct routine maintenance during its scheduled maintenance window, which is currently 10:00 p.m. Pacific Time on Sunday through 2:00 a.m. Pacific Time on Monday (the "Scheduled Maintenance Window").

Updates: Allsource will provide Customer, at no additional charge, all updates or modifications to the Platform that Allsource typically provides its other customers free of charge. Such updates or modifications do not include any new releases of Allsource products or services.

Training Services: Allsource will provide training services to Customer regarding the use of the Platform as set forth in the Implementation Services Statement of Work or as otherwise agreed to in writing by the parties.