PRIVACY POLICY

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us and which may link to other websites, services ,or applications. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link towards a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy notice. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly torespond to your questions.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media or Google account details (like your Google login). Where you choose to do this, we will receive certain profile information about you from your social media provider or Google. The profile information we receive may vary depending on the provider concerned, but will often include your name, email address, and profile picture, as well as other information you choose to make public on such a platform.

We will use the information we receive only for the purposes that are described in this privacy notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party providers. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and howyou can set your privacy preferences on their sites and apps.

ListKit integrates with Google APIs, including Google Workspace APIs, for the provision of certain services. We ensure that our use of these APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. If you are accessing our Services from outside the United States,please be aware that your information may be transferred to, stored, and processed by us in our facilities andby those third parties with whom we may share your personal information (see "WHEN AND WITH WHOMDO WE SHARE YOUR PERSONAL INFORMATION?" above), in the United States, and other countries.

If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countriesmay not necessarily have data protection laws or other similar laws as comprehensive as those in your country.However, we will take all necessary measures to protect your personal information in accordance with thisprivacy notice and applicable law.

European Commission's Standard Contractual Clauses:

We have implemented measures to protect your personal information, including by using the EuropeanCommission's Standard Contractual Clauses for transfers of personal information between our groupcompanies and between us and our third-party providers. These clauses require all recipients to protect allpersonal information that they process originating from the EEA or UK in accordance with European dataprotection laws and regulations. Our Standard Contractual Clauses can be provided upon request. We have implemented similar appropriate safeguards with our third-party service providers and partners and furtherdetails can be provided upon request.

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacynotice unless otherwise required by law.

The data we process in providing the Service is non-sensitive personal data and not subject to any sectorspecific data retention requirements. We retain such personal data for as long as it is useful in our Services,either as an actual data point or in order to derive, correct or validate other data points, and provided that weare comfortable that the data is accurate and can be relied upon.

We delete personal data when either (i.) it is no longer used for any purposes, or (ii.) a data subject requestsdeletion of their personal data or objects to us processing their data pursuant to their GDPR or other state ornational rights (unless we have a valid legal justification to retain it, such as to resolve disputes or comply withour legal obligations). Where applicable, we also retain personal data which is necessary to exclude it frombeing accessible in our database and future use.

When we have no ongoing legitimate business need to process your personal information, we will either deleteor anonymize such information, or, if this is not possible (for example, because your personal information hasbeen stored in backup archives), then we will securely store your personal information and isolate it from anyfurther processing until deletion is possible.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technicalsecurity measures.

We have implemented appropriate and reasonable technical and organizational security measures designed toprotect the security of any personal information we process. However, despite our safeguards and efforts tosecure your information, no electronic transmission over the Internet or information storage technology can beguaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, orother unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, ormodify your information. Although we will do our best to protect your personal information, transmission ofpersonal information to and from our Services is at your own risk. You should only access the Services withina secure environment.

11. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, yourepresent that you are at least 18 or that you are the parent or guardian of such a minor and consent to suchminor dependent’s use of the Services. If we learn that personal information from users less than 18 years ofage has been collected, we will deactivate the account and take reasonable measures to promptly delete suchdata from our records. If you become aware of any data we may have collected from children under age 18,please contact us at hello@listkit.io.

12. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Canada,you have rights that allow you greater access to and control over your personal information. You may review,change, or terminate your account at any time.

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protectionlaws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) torequest rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) ifapplicable, to data portability. In certain circumstances, you may also have the right to object to the processingof your personal information. You can make such a request by contacting us by using the contact detailsprovided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.If you are located in the EEA or UK and you believe we are unlawfully processing your personal information,you also have the right to complain to your Member State data protection authority or UK data protectionauthority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, whichmay be express and/or implied consent depending on the applicable law, you have the right to withdraw yourconsent at any time. You can withdraw your consent at any time by contacting us by using the contact detailsprovided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, whenapplicable law allows, will it affect the processing of your personal information conducted in reliance onlawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing andpromotional communications at any time by clicking on the unsubscribe link in the emails that wesend, replying "STOP" or "UNSUBSCRIBE" to the SMS messages that we send, or by contacting us using thedetails provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below. You willthen be removed from the marketing lists. However, we may still communicate with you — for example, tosend you service-related messages that are necessary for the administration and use of your account, to respondto service requests, or for other non-marketing purposes.

Account Information

If you would at any time like to review or change the information in your account or terminate youraccount, you can:

• Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information fromour active databases. However, we may retain some information in our files to prevent fraud, troubleshootproblems, assist with any investigations, enforce our legal terms and/or comply with applicable legalrequirements.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, youcan usually choose to set your browser to remove cookies and to reject cookies. If you choose to removecookies or reject cookies, this could affect certain features or services of our Services. You may also opt out of interest-based advertising by advertisers on our Services.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track("DNT") feature or setting you can activate to signal your privacy preference not to have data about youronline browsing activities monitored and collected. At this stage no uniform technology standardfor recognizing and implementing DNT signals has been finalized. As such, we do not currently respond toDNT browser signals or any other mechanism that automatically communicates your choice not to be trackedonline. If a standard for online tracking is adopted that we must follow in the future, we will inform you aboutthat practice in a revised version of this privacy notice.

14. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to yourpersonal information.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who areCalifornia residents to request and obtain from us, once a year and free of charge, information about categoriesof personal information (if any) we disclosed to third parties for direct marketing purposes and the names andaddresses of all third parties with which we shared personal information in the immediately preceding calendaryear. If you are a California resident and would like to make such a request, please submit your request inwriting to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with Services, you have theright to request removal of unwanted data that you publicly post on the Services. To request removal of suchdata, please contact us using the contact information provided below and include the email address associatedwith your account and a statement that you reside in California. We will make sure the data is not publiclydisplayed on the Services, but please be aware that the data may not be completely or comprehensivelyremoved from all our systems (e.g., backups, etc.).

CCPA Privacy Notice

The California Code of Regulations defines a "resident" as:

(1) every individual who is in the State of California for other than a temporary or transitory purpose and (2) every individual who is domiciled in the State of California who is outside the State of California for atemporary or transitory purpose

All other individuals are defined as "non-residents."

If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding yourpersonal information.

What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A - As long as the user has an account with us.
• Category B - As long as the user has an account with us.
• Category G - As long as the user has an account with us.

We may also collect other personal information outside of these categories through instances where youinteract with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

How do we use and share your personal information?

We collect and share your personal information through:

• Targeting cookies/Marketing cookies
• Social media cookies
• Beacons/Pixels/Tags
• Click redirects
• Social media plugins. We use social media features, such as a "Like" button, and widgets, such asa "Share" button, in our Services. Such features may process your Internet Protocol (IP) address andtrack which page you are visiting on our website. We may place a cookie to enable the feature towork correctly. If you are logged in on a certain social media platform and you interact with a widgetF. Internet or other similar networkactivityBrowsing history, search history, online behavior,interest data, and interactions with our and otherwebsites, applications, systems, and advertisementsNOG. Geolocation data Device location YESH. Audio, electronic, visual,thermal, olfactory, or similarinformationImages and audio, video or call recordings created inconnection with our business activities NOI. Professional or employment-related informationBusiness contact details in order to provide you ourServices at a business level or job title, work history,and professional qualifications if you apply for a jobwith usNOJ. Education Information Student records and directory information NOK. Inferences drawn from otherpersonal informationInferences drawn from any of the collected personalinformation listed above to create a profile orsummary about, for example, an individual’spreferences and characteristicsNOL. Sensitive Personal Information NOor button belonging to that social media platform, this information may be recorded to your profile ofsuch social media platform. To avoid this, you should log out from that social media platform beforeaccessing or using the Services. Social media features and widgets may be hosted by a third party orhosted directly on our Services. Your interactions with these features are governed by the privacynotices of the companies that provide them. By clicking on one of these buttons, you agree to the useof this plugin and consequently the transfer of personal information to the corresponding socialmedia service. We have no control over the essence and extent of these transmitted data or theiradditional processing.

More information about our data collection and sharing practices can be found in this privacy notice.

We sell personal information collected for our database to our Customers. This database may containinformation about consumers’ business personas including name, employer, job title, email address, phonenumber, office address, social media or professional profile link, and work or educational history. Thisinformation is sold to our customers for the purpose of business-to-business sales and marketing and isprovided subject to license agreements, as specified in our Terms of Service, that limit its use to thosepurposes.

You can opt out from the selling or sharing of your personal information by disabling cookies in CookiePreference Settings and contacting us at hello@listkit.io submitting a request for Do Not Sell or Share MyPersonal Information under the CCPA.

You may contact us by email at hello@listkit.io, or by referring to the contact details at the bottom of thisdocument.

If you are using an authorized agent to exercise your right to opt out we may deny a request ifthe authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Will your information be shared with anyone else?

We may disclose your personal information with our Customers for the purposes of providing Services or withservice providers pursuant to a written contract between us and each service provider. Each service provider isa for-profit entity that processes the information on our behalf, following the same strict privacy protectionobligations mandated by the CCPA.

We may use your personal information for our own business purposes, such as for undertaking internalresearch for technological development and demonstration. This is not considered to be "selling" of yourpersonal information.

We have disclosed the following categories of personal information to third parties for a business orcommercial purpose in the preceding twelve (12) months:

• Category A. Identifiers, such as contact details like your real name, alias, postal address, telephone ormobile contact number, unique personal identifier, online identifier, Internet Protocol address, emailaddress, and account name.
• Category B. Personal information, as defined in the California Customer Records law, such as yourname, contact information, education, employment, employment history, and financial information.

The categories of third parties to whom we disclosed personal information for a business or commercialpurpose can be found under "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONALINFORMATION?".

We have sold or shared the following categories of personal information to third parties in the precedingtwelve (12) months:The categories of third parties to whom we sold personal information are:

Your rights with respect to your personal data

Right to request deletion of the data — Request to delete

You can ask for the deletion of your personal information. If you ask us to delete your personal information,we will respect your request and delete your personal information, subject to certain exceptions provided bylaw, such as (but not limited to) the exercise by another consumer of his or her right to free speech, ourcompliance requirements resulting from a legal obligation, or any processing that may be required to protectagainst illegal activities.

Right to be informed — Request to know

Depending on the circumstances, you have a right to know:

• whether we collect and use your personal information;
• the categories of personal information that we collect;
• the purposes for which the collected personal information is used;
• whether we sell or share personal information to third parties;
• the categories of personal information that we sold, shared, or disclosed for a business purpose;
• the categories of third parties to whom the personal information was sold, shared, or disclosed for abusiness purpose;
• the business or commercial purpose for collecting, selling, or sharing personal information; and
• the specific pieces of personal information we collected about you.

In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

We will not discriminate against you if you exercise your privacy rights.

Right to Limit Use and Disclosure of Sensitive Personal Information

We do not process consumer's sensitive personal information.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person aboutwhom we have the information in our system. These verification efforts require us to ask you to provideinformation so that we can match it with information you have previously provided us. For instance, dependingon the type of request you submit, we may ask you to provide certain information so that we can match theinformation you provide with the information we already have on file, or we may contact you through acommunication method (e.g., phone or email) that you have previously provided to us. We may also use otherverification methods as the circumstances dictate.

We will only use personal information provided in your request to verify your identity or authority to make therequest. To the extent possible, we will avoid requesting additional information from you for the purposes ofverification. However, if we cannot verify your identity from the information already maintained by us, wemay request that you provide additional information for the purposes of verifying your identity and for securityor fraud-prevention purposes. We will delete such additionally provided information as soon as we finishverifying you.

Other privacy rights

• You may object to the processing of your personal information.
• You may request correction of your personal data if it is incorrect or no longer relevant, or ask torestrict the processing of the information.
• You can designate an authorized agent to make a request under the CCPA on your behalf. We maydeny a request from an authorized agent that does not submit proof that they have beenvalidly authorized to act on your behalf in accordance with the CCPA.

To exercise these rights, you can contact us by email at hello@listkit.io, or by referring to the contact details atthe bottom of this document. If you have a complaint about how we handle your data, we would like to hearfrom you.

15. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: Yes, if you are a resident of Virginia, you may be granted specific rights regarding access to and useof your personal information.

Virginia CDPA Privacy Notice

Under the Virginia Consumer Data Protection Act (CDPA):

"Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual orhousehold context. It does not include a natural person acting in a commercial or employment context.

"Personal data" means any information that is linked or reasonably linkable to an identified or identifiablenatural person. "Personal data" does not include de-identified data or publicly available information.

"Sale of personal data" means the exchange of personal data for monetary consideration.

If this definition "consumer" applies to you, we must adhere to certain rights and obligations regarding yourpersonal data.

The information we collect, use, and disclose about you will vary depending on how you interact with us andour Services provided to Customers.

Your rights with respect to your personal data

• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the saleof personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”)

We sell personal data to our Customers, third parties or processes personal data for targetedadvertising. Please see the following section to find out how you can opt out from further selling orsharing of your personal data for targeted advertising or profiling purposes.

Exercise your rights provided under the Virginia CDPA

More information about our data collection and sharing practices can be found in this privacy notice.

You can opt out from the selling of your personal data, targeted advertising, or profiling by disablingcookies in Cookie Preference Settings. You may contact us by email at hello@listkit.io or submit a data subject access request.

If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent doesnot submit proof that they have been validly authorized to act on your behalf.

Verification process

We may request that you provide additional information reasonably necessary to verify you and yourconsumer's request. If you submit the request through an authorized agent, we may need to collect additionalinformation to verify your identity before processing your request.

Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) daysof receipt. The response period may be extended once by forty-five (45) additional days when reasonablynecessary. We will inform you of any such extension within the initial 45-day response period, together withthe reason for the extension.

Right to appeal

If we decline to take action regarding your request, we will inform you of our decision and reasoning behindit. If you wish to appeal our decision, please email us at hello@listkit.io. Within sixty (60) days of receipt of anappeal, we will inform you in writing of any action taken or not taken in response to the appeal, including awritten explanation of the reasons for the decisions. If your appeal if denied, you may contact the Virgina Attorney General to submit a complaint.

16. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by anupdated "Revised" date and the updated version will be effective as soon as it is accessible. If we makematerial changes to this privacy notice, we may notify you either by prominently posting a notice of suchchanges or by directly sending you a notification. We encourage you to review this privacy notice frequently tobe informed of how we are protecting your information.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at hello@listkit.io or contact us by mailat:

ListKit, LLC

8 The Green #12710

Dover, DE 19901

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WECOLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personalinformation we collect from you, change that information, or delete it. To request to review, update, or deleteyour personal information, please submit a data subject access request or contact us at hello@listkit.io.