This Privacy Policy for Signfi LLC and its affiliates (collectively, “Company”, “we”, “us” “our”) describes how we collect, use and disclose information about (i) users of the Company’s website (signfi.io), together with any content, tools, features and functionality offered on or through our website and (ii) any individuals who apply for jobs with the Company, including those who apply via the website (collectively, our “Platform”) or otherwise submit information through the Platform. For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Platform.

This Privacy Policy for Signfi LLC and its affiliates (collectively, “Company”, “we”, “us” “our”) describes how we collect, use and disclose information about (i) users of the Company’s website (signfi.io), together with any content, tools, features and functionality offered on or through our website and (ii) any individuals who apply for jobs with the Company, including those who apply via the website (collectively, our “Platform”) or otherwise submit information through the Platform. For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Platform.

01

Updating this privacy policy

We may modify this Privacy Policy from time to time in which case we will update the “Last Revised” date at the top of this Privacy Policy. If we make changes that are material, we will use reasonable efforts to attempt to provide notice to you and, where required by applicable law or otherwise in our discretion, we will obtain your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on the Platform, or by other means, consistent with applicable law. However, it is your sole responsibility to review the Privacy Policy from time to time to view any such changes. The updated Privacy Policy will be effective as of the time of posting, or such later date as may be specified in the updated Privacy Policy. IF YOU DO NOT AGREE TO ANY UPDATES TO THIS PRIVACY POLICY PLEASE DO NOT ACCESS OR CONTINUE TO USE THE PLATFORM.

02

Company’s collection and use of information

When we provide you with the Platform, we may ask you to or you may provide us with certain details or information about you as follows:

• The following basic contact details: name, email and phone number. We collect basic contact details to communicate with you.

• The following wallet association information, if you choose to associate your digital wallet with the Platform: wallet address, public key, and time of connection. We collect wallet address to whitelist you for future mintings and time of connection to determine launch times that are most convenient to our community. If you choose to use the Platform, you are responsible for keeping your wallet credentials safe. We highly recommend that you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.

• The following social media account information: age group and information about pages you like or accounts you follow.

• The following job applicant details: name, email, phone number, information included in your resume, CV or other content you provide, details of your qualifications, skills, experience education history and employment history, interview feedback, information we gather conducting reference checks, and work authorization status. We collect job applicant details in the context of your application for employment.

• The following performance metrics: marketing channel traffic and purchaser demographics. We collect performance metrics in order to create aggregated, anonymized reports.

• Any other information you choose to include in communications with us, for example, when contacting us through the Platform.

Some features of the Platform may require you to enter certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Any information you provide in connection with those features will be used in connection with your use and access of those features.

We also automatically collect certain information about your interaction with the Platform (“Usage Data”). To do this, we may use cookies, web beacons/clear gifs, other geolocation tracking technologies (“Tracking Technologies”). Usage Data may include:

• Unique device identifier

• Device type, such as your phone, computer, or tablet

• IP address

• Browser type

• Wallet type

• Usage Data, such as date and time stamps, such as the date and time you first accessed the Platform

• Operating system

• Transaction history

• Log data

• Approximate location, including latitude and longitude

• Time zone

• Other information regarding your interaction with the Platform, such as clickstream data, ad impressions, primary market transactions and interactions with secondary marketplaces, collectibles and collections

We use the information we collect automatically to improve the functionality of the Platform, to facilitate transactions you initiate through the Platform, to monitor and manage your usage of the Platform, to tailor features and content to you, to run analytics and better understand user interaction with the Platform.

In addition to the foregoing, we may use all of the above information to comply with any applicable legal obligations (including, without limitation, legal prohibitions in transacting with certain wallet addresses), to enforce any applicable terms of service, and to protect or defend the Platform, our rights, the rights of our users, or others.

03

How the company shares your information

In certain circumstances, the Company may share your information with other parties. Such circumstances may include:

• With vendors or other service providers, such as

• Payment processors

• Cloud storage providers

• Email marketing services vendors

• Security vendors

• Compliance vendors

• Human resources service providers, including for processing job applications and conducting background checks

• With our affiliates or otherwise within our corporate group for the purposes described in this Privacy Policy

• With our platform partners to facilitate interoperability and the provision of the Platform to you and for you to make payments

• With third parties for marketing purposes

• To comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries

• In connection with an asset sale, merger, bankruptcy, or other business transaction

• To enforce any applicable Terms of Service

• To ensure the safety and security of the Company and/or its users

• When you request us to share certain information with third parties, such as through your use of social media widgets or login integrations

• With professional advisors, such as auditors, law firms, or accounting firms

You acknowledge that such sharing of information may occur in all of the aforementioned circumstances and is permitted by and subject to this Privacy Policy.

04

Cookies and other tracking technologies

Do Not Track Signals

Your browser settings may also allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our website is not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, you can visit All About DNT.

Cookies and Other Tracking Technologies

You may control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Platform, including general functionality, to work incorrectly.

Most browsers accept cookies automatically. However, you may be able to configure your browser settings to use the Platform without some cookie functionality. You can delete cookies manually or set your browser to automatically delete cookies on a pre-determined schedule. To opt out of tracking by Google Analytics, click here.

If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

05

User generated content

Certain features of the Platform may allow you to upload content directly to the Platform (“User-Generated Content” or “UGC”). We or others may store, display, reproduce, publish, or otherwise use UGC, and may or may not attribute it to you. Others may also have access to UGC and may have the ability to share it with third parties. If you choose to submit UGC to any public area of the Platform, your UGC will be considered “public” and will be accessible by anyone, including the Company.

Please note that we do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available on the features permitting creation of UGC or what others do with information you share with them. We are not responsible for the accuracy, use or misuse of any such UGC that you disclose or receive from third parties.

06

Social features

Certain features of the Platform permit you to initiate interactions between the Platform and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to click and access the Company’s pages on certain third-party platforms, such as Discord, Meta, and Twitter, and from there to “like” or “share” our content on those platforms. Use of Social Features may entail a third party’s collection and/or use of your data. If you use Social Features or similar third-party services, information you post or otherwise make accessible may be publicly displayed by the third-party service you are using. Both the Company and the third party may have access to information about you and your use of both the Platform and the third-party service. For more information on third-party websites and platforms, see Section 7.

07

Third party websites and links

Our Platform may contain links to other online platforms operated by third parties. We do not control such other online platforms and are not responsible for their content, their privacy policies, or their use of your information. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms (such as Discord, Meta, and Twitter) may also be viewable by other users of the Platform and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Platform. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of personal information by third parties. Any information submitted by you directly to these third parties is subject to that third party’s privacy policy. Your interactions with third party wallets, such as MetaMask, and/or any third-party wallet extensions, are governed by the applicable privacy policies of the providers of those wallets.

08

Children’s privacy

Children under the age of 13 are not permitted to use the Platform, and we do not seek or knowingly collect any personal information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database.

If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

09

Data Security

Please note that any information you send to us electronically, while using the Platform or otherwise interacting with us, may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware though that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send us through any means is transmitted at your own risk.

Any personal information in our custody and control will be subject to safeguards that are appropriate to the sensitivity and confidentiality of such information. Any third party to whom we disclose your information will be required to implement appropriate protections either through contract, professional obligations (for example, in connection with our auditors, lawyers and accountants) or otherwise.

10

Canada and California users

This section applies only to California residents and/or users based in Canada. For purposes of this Section 10, “personal information” for (a) California residents has the meaning given in the California Consumer Privacy Act (“CCPA”) but does not include information exempted from the scope of the CCPA; and (b) users based in Canada has the meaning given in the Personal Information Protection and Electronic Documents Act (PIPEDA) or the relevant provincial privacy legislation but does not include information exempted from the scope of PIPEDA or the relevant provincial privacy legislation.

In the past 12 months, we may have collected some or all of the categories of information we set out in Section 2 above. We do not sell personal information to third parties and have not done so in the past 12 months. The below table explains our current practices, and our practices for the past 12 months, related to the categories of personal information we collect about you, the purposes for collecting personal information and whether we disclose your personal information, and if so, to whom.

You may have the rights listed below in relation to personal information we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

• Right to Know Request. You have a right to request the following information about our collection, use and disclosure of your personal information over the prior 12 months and ask that we provide you with a copy of the following information:

• categories of and specific pieces of personal information we have collected about you;

• categories of sources from which we collect personal information;

• the business of commercial purposes for collecting personal information;

• categories of third parties to whom the personal information was disclosed for a business purpose; and

• categories of personal information disclosed about you for a business purpose.

• Right to Delete Request. Under the CCPA, you have a right to request that we delete personal information, subject to certain exceptions.

• Right to Update. You have a right to update and/or correct any personal information we have collected and which continues to be needed for the purposes described in this Privacy Policy.

You may make a request described above by emailing privacy@signfi.io. We may need to collect information from you to verify your identity, such as your email address, government issued ID or date of birth, before providing a substantive response to the request. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

We will not discriminate against you for exercising any of your rights under the CCPA or similar laws of other jurisdictions, as applicable.

11

International users

We are based in the United States. The Platform is for individuals located in the United States and Canada, so if you access the Platform from outside the United States, we want to remind you that our handling of information about you will be subject to United States data privacy laws. Your personal information may be hosted in servers located in the United States or in any country in the world. No matter where your personal information resides, the protections in this Privacy Policy shall be applied.

12

How to contact us

Should you have any questions about our privacy practices or this Privacy Policy, please email us at privacy@signfi.io.