At Audit Brands, we take privacy and security seriously. This Audit Brands Privacy Policy (the "Privacy Policy") outlines how Audit Risk Media LLC and its affiliates (collectively, "Audit Brands," "we," "our," or "us") process the information we collect about you through our websites, mobile apps, and other online services (collectively, the "Services") and when you otherwise interact with us, such as through our customer service channels.

If you are a California resident, please also see the "Additional US State Privacy Rights" section below. If you have taken steps to verify your identity, this policy reflects the personally identifiable financial information we collect about you in connection with each of those services.

Click on the links below to jump to specific sections:

• INFORMATION WE COLLECT AND HOW WE COLLECT IT
• HOW WE USE YOUR INFORMATION
• DISCLOSURES OF INFORMATION
• THIRD-PARTY TRACKING AND ONLINE ADVERTISING
• DO NOT TRACK
• YOUR CONTROLS
• ADDITIONAL US STATE PRIVACY RIGHTS
• CHILDREN
• TRANSFER OF INFORMATION
• CHANGES TO THIS POLICY
• HOW TO CONTACT US

1. INFORMATION WE COLLECT AND HOW WE COLLECT IT.

Information You Provide

We collect information you provide when you use, or apply to use, our Services or otherwise engage or communicate with us as described below.

• Identity Data: such as your name, date of birth, photos of your face and government-issued identification documents, and other data on government-issued identification documents;
• Contact Data: such as your email address, mailing address, and telephone number;
• Additional Data You Provide: such as via focus groups, survey responses, contests/sweepstakes, customer support, or other means.
• Other Information You Provide: We collect additional personal information that you choose to provide to us. If you do choose to upload your photograph to our Service, please note that all images must adhere to our App Use Standards which you are required to comply with to use any of the Audit Brands Services.

Information We Collect Automatically or Generate

As is true of many digital platforms, we also collect certain information about you automatically when you use our Services, as described below.

• Usage Information: We collect information about your activity on our Services, which includes device identifiers (like IP address or mobile device identifiers), pages or features you use, time and date of access, and other similar usage information.
• Transactional Information: When you receive, submit, or complete a transaction via the Services, we collect information about the transaction, such as transaction amount, type and nature of the transaction, and time and date of the transaction.
• Location Data: We may collect the GPS location of your mobile device in accordance with your device permissions. You can stop the collection of this precise location information at any time (see the Your Controls section below for details). Google uses technologies to approximate your location, including IP address (see Google's Privacy Policy located at https://policies.google.com/privacy to learn more about how they process this information). We also approximate your location by your IP address.
• Information Collected Through Tracking Technologies: We and our service providers also use technologies, including cookies and web beacons, to automatically collect certain types of usage and device information when you use our Services or interact with our emails. The information collected through these technologies includes your IP address, browser type, internet service provider, platform type, device type, operating system, date and time stamp, a unique device or account ID, usage information and other similar information. For information about how to disable cookies, please see the Your Controls section below.
• Inferred Data: We may also infer information about you such as your gender, based on your first name.

Information We Collect from Other Sources

We also obtain information about you from other sources as described below.

• Vendors and Business Partners: We collect information about you from companies that we do business with, such as name, contact data, inferences about your preferences and attributes, as well as inferred fraud risk, from identity verification and fraud prevention partners.
• Financial Account Linking: We may receive financial account information about you from third parties, such as your financial institutions. For example, Audit Brands offers account linking and aggregation services through Plaid, Inc. ("Plaid"). By utilizing these services, you acknowledge and agree that the terms of Plaid's Privacy Policy (currently located at https://plaid.com/legal/#end-user-privacy-policy) will govern Plaid's use of such information, and you consent to Plaid's Privacy Policy. Further, you expressly grant Plaid the right, power, and authority to access and transmit your information as reasonably necessary for Plaid to provide its services.
• Connected Services: If you link, connect, or log in to your Audit Brands Account with a third-party service (e.g., Google, Apple), the third-party service may send us information such as your profile information from that service. This information varies and is controlled by that service or as authorized by you via your privacy settings at that service.
• Publicly Available Data: This may include contact information, your interactions with our social media platforms, and other information from publicly available sources, such as public websites.
• Advertising Data: We collect information in connection with our ad campaigns that surface on other platforms, such as the ads you click on and other interactions with our ads.
• Data from Other Users: If you are in another user's contact list and they choose to disclose that list with us, then we will collect the contact information and your association with that user.

2. HOW WE USE YOUR INFORMATION.

We use the information we collect for purposes described below or as otherwise described to you at the point of collection:

• Maintain and provide the Services, including to process account applications, authenticate your identity, repair our Services, support, process and record transactional information, and handle billing and account management;
• Send you transactional or relationship information, including confirmations, invoices, technical notices, customer support responses, software updates, security alerts, support and administrative messages, and information about your transactions;
• Communicate with you about offers and other things we think you will be interested in, such as newsletters, product announcements, partner offerings, surveys, contests or sweepstakes, events or announcements;
• Personalize our Services, such as by suggesting content or customizing content or ads we show you;
• Monitor and improve our Services, including analyzing usage, research and development;
• Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards;
• Help protect the safety and security of our Services, business, and users, such as to investigate and help prevent fraud or other unlawful activity;
• Protect or exercise our legal rights or defend against legal claims, including to enforce and carry out contracts and agreements; and
• Comply with applicable laws and legal obligations, such as compliance obligations associated with being a money services business.

3. DISCLOSURES OF INFORMATION.

We are committed to maintaining your trust, and we want you to understand when and with whom we disclose information about you. We disclose information about you in the instances described below.

• Authorized Vendors: We disclose information about you with third-party vendors and service providers who perform services for us, such as identification verification, fraud prevention, advertising, mailing services, tax and accounting services, contest fulfillment, web hosting, and analytics services. For example, we use an identification verification service provider, Plaid, to confirm your identity through your ability to authenticate with a financial institution. Alternatively, you may share your government-issued identification. We may use this data to help prevent fraud, or respond to government requests.
• Banking and Credit Card Partners: Where applicable to the product you use, we may also disclose information about you to other entities, such as banking and payment partners, e.g., PayPal or Stripe.
• Audit Brands Affiliates: Where appropriate, we disclose information about you to other companies owned or controlled by Audit Brands. For example, we cross-reference information about you with your profile at Auditbuddies.com to confirm your identity prior to remitting any payments as described in your user agreement. This information could include your name, address, email address, and/or telephone number. These internal or affiliate companies will process any information disclosed to them in the same manner as described under this Privacy Policy.
• Legal Purposes: We disclose information about you if we believe that disclosure is in accordance with, or required by, any applicable law or legal process or to protect and defend the rights, interests, safety, and security of Audit Brands, our users, or the public.
• With Your Consent: We disclose information about you for any other purposes disclosed to you with your consent.
• With Other Users of Our Services: We may disclose information about you with other users of our Services, for which you may not have yet enrolled. In such cases, we will disclose your profile which includes: your profile, profile picture, username, full name, the year you joined, and the transaction history between you and the person viewing it, with other Audit Brands users. For payments and requests, this helps others know they're getting money from you (or that you requested a payment from them). Your profile is obfuscated, but will be visible to anyone on Audit Brands with the link. You may opt out and disable your public profile at any time. For payments, we also disclose information about you, such as your Transactional Information, to the primary account holder if you are an authorized user of a credit card.

We may also disclose information with others in an aggregated or otherwise de-identified form that does not reasonably identify you.

4. THIRD-PARTY TRACKING AND ONLINE ADVERTISING.

We use third-party advertising and analytics services to better understand your online activity and serve you targeted advertisements. For example, we use Google Analytics and you can review the "How Google uses information from sites or apps that use our services" linked here: http://www.google.com/policies/privacy/partners/ for information about how Google processes the information it collects. These companies collect information about your use of our Services and other websites and online services over time through cookies, device identifiers, or other tracking technologies. The information collected includes your IP address, web browser, mobile network information, pages viewed, time spent, links clicked, and conversion information. We and our third-party partners use this information to, among other things, analyze and track data, determine the popularity of content, and deliver advertisements targeted to your interests on our Services and other platforms, as well as to provide advertising-related services to us such as reporting, attribution, analytics, and market research.

For more information about interest-based ads, including to learn about options for opting out of having your web browsing information used for targeted advertising purposes, please visit www.aboutads.info/choices. You should also review your mobile device settings and controls for features that allow you to opt out or opt in to having certain information collected for behavioral advertising purposes. Please note, as a self-directed broker-dealer, we do not advertise on behalf of specific securities or investment options on our Services.

5. DO NOT TRACK.

Some web browsers transmit "do-not-track" signals to websites. We currently don't take action in response to these signals.

6. YOUR CONTROLS.

• Account Profile: You can update certain account profile information by logging into your account. For example, you may choose to upload a photograph of yourself, but are not required to in order to use our identification verification services. You may also choose to update your username. For some Audit Brands products and services (e.g., our platforms that enable payments like Auditbuddies.com), some information cannot be changed due to legal requirements, and in those cases, we may not be able to accommodate your request. Please note that any changes you make to your account profile must be in accordance with our App Use Standards.
• Profile Visibility: Your profile will be visible to anyone on Audit Brands platforms and the public internet. You may opt out and disable your public profile at any time.
• Access to Your Device Data and Precise Location: You may disconnect our mobile app's access to certain stored device information and your device's precise location through your device's settings. For instance, you can withdraw permission for the app to access your contact list or photo gallery.
• How to Control Your Communications Preferences: You can stop receiving promotional emails from us by clicking the "unsubscribe" link in those emails. We may still send you service-related or other non-promotional communications, such as account notifications, receipts, security notices, and other transactional or relationship messages.
• Disabling Certain Data Sharing: You can limit how we disclose your data with our marketing partners to more effectively market our Services to you across sites and apps. When disabled, we will no longer disclose personal information with these partners for these purposes.
• Cookie Controls: Many web browsers are set to accept cookies and similar tracking technologies by default. If you prefer, you can set your browser to delete or reject these technologies. If you choose to delete or reject these technologies, this could affect certain features of our Services. If you use a different device, change browsers, or delete the opt-out cookies that contain your preferences, you may need to perform the opt-out task again.

7. ADDITIONAL US STATE PRIVACY RIGHTS

This section provides additional details about the personal information we collect about California and Virginia residents and the rights afforded to them under the California Consumer Privacy Act ("CCPA") and the Virginia Consumer Data Protection Act ("VCDPA"). Please note that the CCPA does not apply to what is referred to as nonpublic personal information collected by financial institutions (like Audit Brands), as that information is subject instead to other financial privacy laws. Additionally, the VCDPA does not apply to any Audit Brands entities that are financial institutions. As a result, the CCPA and VCDPA do not apply to most of the information that Audit Brands collects.

Subject to certain limitations and exceptions, the CCPA and VCDPA provide California and Virginia residents, respectively, with certain rights. Depending on the state in which you are a resident, you may have the right to:

• Confirm whether Audit Brands processes your personal information;
• Correct inaccurate personal information;
• Request details (in a readily usable format) about the categories and specific elements of personal information we collect;
• Delete your personal information;
• Opt out of any sales, sharing, targeted advertising, or profiling for certain decisions (as these terms are defined in the CCPA and/or VCDPA); and
• Not be discriminated against for exercising these rights.

We do not sell information about you to third parties. In order to help Audit Brands deliver advertising and marketing on other platforms, we do allow third parties to collect information through our Services. Please see the "Third-Party Tracking and Online Advertising" section above for more details, including choices available to you.

We collect the following categories of personal information: identifiers (such as name, email address, and IP address), Internet or other electronic network activity information (such as engagement with promotional messages and ads), and inferences (such as gender, based on your first name). For California residents, the preceding list does not reflect Audit Brands' current processing, but reflects our future product roadmap. For more details about the information we collect (including the categories of sources of this information) as well as the purposes for processing, please see the "Information We Collect and How We Collect It" section above. We disclose this information with the categories of third parties described in the "Disclosures of Information" section above.

California and Virginia residents may make a request to exercise rights under the CCPA and VCDPA, respectively, that are not otherwise exempt under applicable law. If you are an Audit Brands app user, a request may be made by sending an email through our web form. We may verify the request by asking you to provide information that matches information we have on file about you. You can also designate an authorized agent to exercise these rights on your behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly. If you are a Virginia resident and Audit Brands is unable to satisfy your request to exercise a right available to you under the VCDPA, you are entitled to appeal our decision by emailing us through our web form.

8. CHILDREN.

We do not knowingly collect or solicit any information from anyone under the age of 13 through our Services. If we become aware that a child under 13 has provided us with personal information for any reason, we will take reasonable steps to delete that information. If you reasonably believe that we might have information from a child under 13 who is not an authorized user, please contact us through our web form.

9. TRANSFER OF INFORMATION.

Except for when you use our Services outside the United States (e.g., while traveling), our Services are currently designed for use only in the United States. If you are using our Services from another jurisdiction, your information may be processed in the United States or other countries that may not provide levels of data protection that are equivalent to those of your home jurisdiction.

10. CHANGES TO THIS POLICY.

This Privacy Policy will evolve with time, and when we update it, we will revise the "Effective Date" above and post the new Policy and, in some cases, we provide additional notice (such as adding a statement to our website or sending you a notification). To stay informed of our privacy practices, we recommend you review the Policy on a regular basis as you continue to use our Services.

11. HOW TO CONTACT US.

If you have any questions about this Privacy Policy, please contact us through our web form.