Effective Date: May 31, 2025

StockApp Privacy Policy

This Privacy Policy sets out how StockApp, Inc. and our Affiliates identified below (collectively “StockApp,” “we,” “us,” or “our”) may collect, use, retain or disclose your personal information in connection with your use of the StockApp Website and any StockApp products or services that reference or otherwise incorporate this Privacy Policy (collectively, the “Services”).

In addition to this Privacy Policy, in certain cases, we may also provide you with notice of additional practices concerning how we use your personal information in connection with a particular Service or activity. If you do not agree with this Privacy Policy, then do not access or use the Services, Website or any other aspect of StockApp’s business. For the avoidance of doubt, this is the only privacy policy that applies to StockApp.

This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the StockApp Platform (“ Third-Party Services ”), or any other third-party products, services or businesses that will provide their services under their own terms of service and privacy policy. In addition, a separate agreement governs delivery, access and use of the Services (the “ Master Services Agreement ”), including the processing of data such as messages, files or other content submitted through Services accounts (collectively, “ Customer Data ”). The organization or entity (e.g., your employer or another entity or person) (“ Customer ”) that entered into the Master Services Agreement controls its access and use of the Services (its “ Workspace ”) and any associated Customer Data. If you have any questions about specific Workspace settings and privacy practices, please contact the Customer whose Workspace you use. If you have an account, you can check your StockApp Dashboard for the contact information of your Workspace owner(s) and administrator(s). If you have received an invitation to join a Workspace but have not yet created an account, you should request assistance from the Customer that sent the invitation.

Please reach out to your organization for more information or if you would like to exercise any of your data subject rights in connection with our use of your Customer Data or personal information.

From time to time, we may update this Privacy Policy as we adopt new privacy practices or as applicable laws and regulations change. Each time this Privacy Policy is updated, we will update the “Last Updated” date at the top of the page. If we make any material changes to this Privacy Policy, we will notify you by email or by means of a notice on the Website.

1. Our Role as a Data Processor and Controller. StockApp acts as:

a. Data controller for information we collect directly from Customers, Authorized Users, and website visitors.

b. Data processor for Authorized User information provided to us by our Customers. As a data processor, we process data on behalf of our Customers according to their instructions and this Privacy Policy. Our Customers remain the controllers of their Customer Data and Authorized Users' data.

2. Information We Collect about You.

We will only collect your personal information in accordance with applicable law. The information we collect depends on the context of your interactions with us and the choices you make, including your own privacy settings and the specific Services you use. StockApp will collect and receive information through operating the Services and Website, and through other interactions with StockApp. Such information will include Customer Data and other information and data ( “Other Information” ) in a variety of ways:

Customer Data. Customers or individuals granted access to a Workspace by a Customer (“Authorized Users”) routinely submit Customer Data (such as messages, files or other content submitted through Services accounts) to StockApp when using the Services.

1. Product information (including SKUs, catalogs, specifications, pricing, inventory levels)
2. Customer and vendor contact information
3. Lists, categories, and taxonomies you create
4. Orders and transaction information
5. Communications and messages
6. Documents uploaded to our platform

Other Information. StockApp also collects, generates and/or receives the following categories of Other Information:

Workspace and Account Information. To create or update a Workspace account, you or our Customer (e.g. your employer) supply StockApp with an email address, phone number, password, domain, and/or other account setup details. In addition, Customers that purchase a paid version of the Services provide StockApp (or its payment processors) with billing details such as credit card information, banking information, and/or a billing address.

Usage information.

Services Metadata. When an Authorized User interacts with the Services, metadata is generated that provides additional context about the way that an Authorized User uses the Services. For example, StockApp logs the Workspaces, channels, people, features, content, and links you view or interact with, the types of files shared and what Third-Party Services are used (if any).

Log data. As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Website or Services and record it in log files. This log data may include your Internet Protocol (IP) address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences.

Device Information. StockApp collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether we collect some or all of this Other Information often depends on the type of device used and its settings.

Location Information. We receive information from you, our Customers and other third-parties that helps us approximate your location. We may, for example, use a business address submitted by your employer (who is our Customer) or an IP address received from your browser or device to determine approximate location to assist with localization or for security purposes.

Cookie Information. StockApp uses cookies, web beacons and similar technologies to operate our Services and to help collect data, including usage data, identifiers, and device information.

Third Party Services Information. A Customer can choose to permit or restrict Third-Party Services for its Workspace, and StockApp can receive personal data from such Third-Party Services; however, in the event a Customer restricts or disables certain essential Third Party Services, we may be unable to provide the Services to such Customer and such Customer will be unable to access and use the Services. Typically, Third-Party Services are software that integrate with our Services, and a Customer can permit its Authorized Users to enable and disable these integrations for its Workspace. StockApp may also develop and offer StockApp applications that connect the Services with a Third-Party Service. Once enabled, the provider of a Third-Party Service may share certain information with StockApp. For example, if a cloud storage application you are using is enabled to permit files to be imported to a Workspace, we may receive the user name and email address of Authorized Users, along with additional information that the application makes available to StockApp to facilitate the integration. Authorized Users should check the privacy settings and notices in these Third-Party Services to understand what data may be disclosed to StockApp. When a Third-Party Service is enabled, StockApp is authorized to connect and access Other Information made available to StockApp in accordance with our agreement with the provider of the Third-Party Service and any permission(s) granted by our Customer (including, by its Authorized User(s)). Examples of information which StockApp may receive in this manner include whether you successfully created a new account or interacted with a third-party application in a way that is attributable to StockApp usage activity. We do not, however, receive or store passwords for any of these Third-Party Services when connecting them to the Services.

Contact Information. In accordance with the consent process provided by your device or other third-party API, any contact information that an Authorized User chooses to import (such as importing an address book to find coworkers and StockApp Connect contacts or calendar from a device or API), forward or upload to the Services (for example, when sending emails to the Services) is collected when using the Services.

Third-Party Data. StockApp may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and subsidiaries, our partners, or others that we use to make our own information better or more useful. This data may be combined with Other Information we collect and might include aggregate-level data, such as which IP addresses correspond to zip codes or countries. Or it might be more specific: for example, how well an online marketing or email campaign performed.

Audio and Video Metadata. StockApp may receive, capture, and store metadata derived from your use of StockApp features, and additional related data such as data regarding the date and time you used certain applications and the Authorized User that you connected with.

Additional Information Provided to StockApp. We also receive Other Information when submitted to our Website or in other ways, such as responses or opinions you provide if you participate in a focus group, contest, activity or event, feedback you provide about our products or services, information you provide if you apply for a job with StockApp, enroll in a certification program or other educational program hosted by StockApp or a vendor, request support, interact with our social media accounts or otherwise communicate with StockApp.

Generally, no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (collectively, “Information” ). However, certain Information is collected automatically and, if some Information, such as Workspace setup details, is not provided, we may be unable to provide the Services.

How We Use Your Information.

Customer Data. Customer Data will be used by StockApp in accordance with a Customer’s instructions, including to provide the Services, any applicable terms in the MSA, a Customer’s use of Services functionality, and as required by applicable law. StockApp is a processor of Customer Data and the Customer is the controller. Customer may, for example, use the Services to grant and remove access to a Workspace, assign roles and configure settings, access, modify, export, share, and remove Customer Data, and otherwise apply its policies to the Services.

Other Information. StockApp uses Other Information to operate our Services, Website, and business.

Compliance with Legal Obligations. StockApp processes Other Information when we comply with a legal obligation including, for example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others. For example, a search warrant or production order from law enforcement to provide information in relation to an investigation, such as your profile picture or IP address. We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, audio and video metadata, and Additional information provided to StockApp for compliance with a legal obligation.

Legitimate Interests. We rely on our legitimate interests or the legitimate interests of a third-party where they are not outweighed by your interests or fundamental rights and freedoms ("legitimate interests"). We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to StockApp.

To provide, update, maintain and protect our Services, Website and business. This includes the use of Other Information to support delivery of the Services under a MSA, prevent or address service errors, security or technical issues, analyze and monitor usage, trends and other activities, or at an Authorized User’s request. It is in our and your interests to provide, update, maintain and protect our Services, Websites, and business.

To develop and provide search, learning and productivity tools and additional features. StockApp tries to make the Services as useful as possible for specific Workspaces and Authorized Users. It is in our interest and in the interest of our Customers and Authorized Users to continuously improve and develop the Services and our customer support. For example, we may:

improve search functionality by using Other Information to help determine and rank the relevance of content, channels or expertise to an Authorized User;

make Services or Third-Party Service suggestions based on historical use and predictive models;

identify organizational trends and insights;

customize a Services experience; or

create new productivity features and products.

c. To investigate and help prevent security issues and abuse. We may process, including in an automated fashion, Customer Data and Other Information to better understand how StockApp is used or to prevent spam or abuse. It is in our interest to keep the Services secure and to detect, prevent, and address abuse (such as spam) and to investigate and take action in respect of suspicious activity on the Services.

d. To aggregate or de-identify information. In some cases, we aggregate or de-identify information we have associated with you and use the resulting information to improve the Services. At the same time, it is in the interests of Customers and Authorized Users to practice data minimization and privacy by design in respect of their information.

e . Share Information in Respond to Legal Requests. It is in our interest and the interest of the general public to prevent and address fraud, unauthorized use of StockApp, violations of our terms or other harmful or illegal activity; to protect ourselves, our users or others, including as part of investigations or regulatory enquiries; and to prevent death or imminent bodily harm.

f. Transfer, store or process your information outside the European Economic Area. We expect to carry out necessary transfers outside the European Economic Area in the United States exclusively in order to provide, update, maintain and protect our Services, Website, and business.

g. To communicate with you by responding to your requests, comments and questions. If you contact us, we may use your Other Information to respond. It is in our, our Customers’ and Authorized Users’ interests to facilitate communication in order to address any questions or concerns.

h. To send service emails and other communications. For example, we may send you service, technical and other administrative emails, messages, and other types of communications; or contact you to inform you about changes in our Services, our Services offerings, and important Services-related notices, such as security and fraud notices. These communications are considered part of the Services and you may not opt out of them. It is in our Customers and Authorized Users’ interests to address service related issues.

i . To send marketing emails and other communications. We sometimes send emails about new product features, promotional communications or other news about StockApp. These are marketing messages so you can control whether you receive them. You will have the ability to unsubscribe from such marketing messages. If you have additional questions about a message you have received from StockApp please get in touch through the contact mechanisms described below.

j. For billing, account management and other administrative matters. We use Workspace and account information and Usage information for the legitimate interest of contacting you for invoicing, account management, and similar reasons and we use account data to administer accounts and keep track of billing and payments. It is in our interest to facilitate the effective delivery and administration of the Website and Services.

When We Share and Disclose Information . We share your Information solely as permitted by law and only with your consent, as necessary to complete your transactions or provide the Services you have requested or authorized or as further described herein. Customers determine their own policies and practices for the sharing and disclosure of Information to third parties. StockApp does not control how a Customer or any third party chooses to share or disclose Information.

Customer’s Instructions. StockApp may share and disclose Information in accordance with a Customer’s instructions and with appropriate consent, including any applicable terms in the MSA and the Customer’s User Terms functionality and in compliance with applicable law and legal process. Some sharing at a Customer’s request may incur additional fees.

To enable StockApp to follow our Customers’ instructions, StockApp provides several administrator controls to allow Customers to manage their Workspaces. For example, we follow our Customers’ instructions to enable or disable Authorized Users use of various features of the Services, such as channel posting permissions, the sharing and visibility of direct messages including files, or whether and how Authorized Users can connect with other organizations’ Workspaces through StockApp messenger.

We also follow Customer and Authorized User instructions on how an Authorized User’s profile may be displayed within a Customer’s Workspace or when shared through StockApp messenger or other features.

Customers may also provide their Authorized Users with the ability to adjust the audience and visibility of certain Customer Data.

Displaying the Services. When an Authorized User submits Information, it may be displayed or discoverable to other Authorized Users in the same or connected Workspaces. For example, an Authorized User’s email address may be displayed with their Workspace profile, or other profile and organizational information may be displayed to Authorized Users.

Collaborating with Others. The Services provide different ways for Authorized Users working in independent Workspaces to collaborate, such as messenger or email interoperability. Information, such as an Authorized User’s profile and organizational information, may be shared, subject to the policies and practices of the Workspace(s) you use. For example, depending on the settings of your Workspace, to enable connections with other Authorized Users, your profile may be shared or searchable or discoverable by Authorized Users or other users outside of Workspace(s) you belong to, or shared via email when you invite an Authorized User or other user to collaborate via StockApp messenger. In many instances, StockApp includes either administrator controls or user controls, depending on the use case, with respect to external collaboration. Authorized Users may also decide to expand the visibility of certain content and Customer Data, such as files.

Customer Access. Owners, administrators, Authorized Users, and other Customer representatives and personnel may be able to access, modify, or restrict access to Information. This may include, for example, your employer using features of the Services to access or modify your profile details, or to export logs of Workspace activity. For information about your Workspace settings, please visit your account settings dashboard.

Third-Party Service Providers. We may engage third-party companies or individuals as service providers or business partners to process Information and support our business. These third parties may provide, among other services, virtual computing and storage services, assist StockApp with verifying Customers, or we may share business information to develop strategic partnerships with third-party service providers to support our common customers. In this respect, depending on the third-party service provided, StockApp may share your Information. Additional information about the subprocessors we use to support delivery of our Services is set forth on the Website.

Third-Party Services. A Customer may enable, or permit Authorized Users to enable, Third-Party Services. We require each Third-Party Service provider to disclose all permissions for information accessible through the Services, but we do not guarantee that they do so. When Third-Party Services are enabled by a Customer or an Authorized User, StockApp may share Information with Third-Party Services. Third-Party Services are not owned or controlled by StockApp and third parties that have been granted access to Information may have their own policies and practices for its collection, use, and sharing. Please check the permissions, privacy settings, and notices for these Third-Party Services or contact the provider for any questions.

Forums. The Information you choose to provide in a community forum, including Personal Data, will be publicly available.

Organizers and Sponsors of Events/Webinars . If you attend an event or webinar organized by StockApp, we may share your profile and organizational information with the event or webinar sponsors when you register, have your badge scanned, or join a breakout room. If required by applicable law, you may consent to such sharing via the registration form or by allowing your attendee badge to be scanned at a sponsor’s booth. In these circumstances, your Information will be subject to the sponsor’s privacy statements. For more information, please refer to the terms provided when you register for such an event or webinar.

Professional Advisers. We may share your Information with professional advisers acting as service providers, processors, controllers, or joint controllers - including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services, and to the extent we are legally obliged to share or have a legitimate interest in sharing your Information containing Personal Data.

Corporate Affiliates. StockApp may share Information with our corporate affiliates, parents and/or subsidiaries.

During a Change to StockApp’s Business . If StockApp engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of StockApp’s assets or stock, financing, public offering of securities, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of the Information described in the ‘Information We Collect and Receive’ section may be shared or transferred, subject to standard confidentiality arrangements.

Aggregated or De-identified Data. We may disclose or use aggregated or de-identified Information for any purpose. For example, we may share aggregated or de-identified Information with prospects or partners for business or research.

Law Enforcement and Regulators. If we receive a request for information, we may disclose Other Information if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process. Please review the Data Request Policy to understand how StockApp responds to requests to disclose data from government agencies, law enforcement entities, and other sources. This may at times include information that StockApp processes on behalf of StockApp Subsidiary in its role as a subprocessor, including as pursuant to the terms of any data processing agreement between StockApp and its Customers.

To Enforce our Rights, Prevent Fraud, and Ensure Safety. To protect and defend the rights, property, or safety of StockApp, its users, or third parties, including enforcing its contracts or policies, or in connection with investigating and preventing illegal activity, fraud, or security issues, including to prevent death or imminent bodily harm.

With Consent. StockApp may share Information with third parties when we have consent to do so or as otherwise permitted in this Privacy Policy. For Workspaces registered to corporate entities, StockApp may share Information with consent of the Workspace primary owner or authorized corporate officer, or their designee. For workplaces created without a formal affiliation, StockApp may require user consent.

Location and International Transfer of Your Information . We may process (including transfer or store) your personal information in your country or region or in any other country or region where we or our Affiliates or service providers have a presence or maintain data processing facilities, including the United States. We will comply with all applicable laws relating to the processing of your personal information in such location. Where applicable law requires consent for such international processing or transfer, we will seek consent from you independent of this Privacy Policy.

Location of Processing of European personal information. We transfer personal information from the European Economic Area (EEA) and United Kingdom (UK) to the United States. When we do so, we take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognized legal adequacy mechanism, and that it is treated securely and in accordance with this privacy policy.

Transfer outside of EEA, UK, or Switzerland. When we transfer personal information outside of the EEA, UK, or Switzerland, we implement appropriate safeguards, such as:

Standard Contractual Clauses approved by the European Commission.

Binding Corporate Rules (if applicable).

Adequacy decisions where the recipient country has been deemed to provide adequate protection.

To learn more about the European Commission’s decisions on the adequacy of personal information protections, please visit: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

You may be entitled by applicable laws to request more information about the details of international transfers of your information and the security measures taken by us in connection with that transfer. To obtain more information about exercising such rights, please contact us at: privacy@stockapp.com.

Data Privacy Framework. StockApp has certified its compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework (collectively the “Data Privacy Framework”) as set forth by the US Department of Commerce with respect to personal information concerning individuals from the European Economic Area and United Kingdom.

Choice and Control over Your Personal Information . We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that data. In some jurisdictions, you may have the right to request access to, or correction or erasure of, your personal information. You may also have the right to request that a copy of your personal information be provided to you in a readily useable format and to opt-out of certain uses of your data such as targeted advertising and the sale of your data. In particular, see below for more information about your individual rights under California and European privacy laws.

In order to process your request, we may need to ask you to provide specific information to help us verify your identity and applicable rights. You may also designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under certain laws. Before accepting such a request from an agent, StockApp may require the agent to provide proof you have authorized it to act on your behalf and may need you to verify your identity directly with us.

We may, in limited circumstances, refuse to comply with your request or charge you a reasonable fee if your request is clearly unfounded or excessive. In all cases, we will notify you of any fee in advance. Alternatively, we may refuse to comply with the request in such circumstances. If you receive a response from us informing you that we have declined your request, in whole or in part, you may appeal that decision by submitting your appeal to the contact method described at the bottom of this Privacy Policy.

To obtain more information, including information about how to designate an authorized agent to make a request for you, please contact us at: privacy@stockapp.com. When we are processing personal information on behalf of another party that is the “data controller,” you should direct your request to that party.

Marketing opt-outs. You can unsubscribe from promotional communications sent from us at any time by selecting the “unsubscribe” link or by following other directions included within the various marketing and promotional communications we send you. If you receive a sales call from us, you can ask to be placed on our do-not-call list.

Browser or Platform Controls.

Cookie Controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our Website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.

Global Privacy Controls. Some browsers and browser extensions support the “Global Privacy Control” (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.

Email Web Beacons. Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, which prevents the automatic connection to the web servers that host those images.

Targeted Advertising and “selling” or “sharing” of Your Personal Information . We do not “sell” or “share” any other types of personal information. We collect this information for the business and commercial purposes as more fully described in the “How We Use Your Information” section above. We share this information as described in the “How We Share and Disclose Information” section above. StockApp does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out). We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers for purposes of targeting advertisements on non-StockApp websites, applications, and services. In addition, we may allow third parties to collect personal information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal information, or if you use our Website or Services to interact with third parties or direct us to disclose your personal information to third parties.

First-Time Visitors to Website. First-time visitors to our Website can opt-out of these practices by selecting “ Necessary cookies only” in the cookie banner presented to you when to navigate to our site. Repeat Website visitors can opt-out of these practices at any time by selecting “Cookie preferences” at the bottom of StockApp webpages and then selecting “Necessary cookies only” in the cookie banner. You can also opt-out of this practice by visiting our “Do Not Sell or Share My Personal Information” page and selecting “Necessary cookies only”, or emailing us using the contact information at the bottom of this Privacy Policy. If you opt-out using these choices, we will not disclose or make available such personal information in ways that are considered a “sale” or “sharing” under applicable law. However, we will continue to make your personal information available to our service providers who process your personal information on our behalf. Further, using these choices will not opt you out of the use of previously “sold” or “shared” personal information or stop all interest-based advertising, such as contextual based ads.

California Consumers . If you are a California consumer, you may have additional rights under the California Consumer Privacy Act as amended by the California Individual rights for Privacy Rights Act (the “CCPA”), including:

Notice at Collection. At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained. You can find those details in this Privacy Policy by clicking on the above links.

Right to Know. You have a right to request that we disclose to you the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information. Note that we have provided much of this information in this Privacy Policy.

Rights to Request Correction or Deletion. You also have the right to request that we correct inaccurate personal information and that we delete personal information under certain circumstances, subject to a number of exceptions.

Right to Opt-Out / “Do Not Sell or Share My personal information”. You have a right to opt-out from future “sales” or “sharing” of personal information as those terms are defined by the CCPA. You can exercise this right as further outlined in the “Data Sales” section above.

Right to Limit Use and Disclosure of Sensitive Personal Information . You have a right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law. Note that we do not use sensitive personal information for any such additional purposes.

Right Against Discrimination. Finally, you have a right to not be discriminated against for exercising these rights set out in the CCPA.

Residents of the United Kingdom and the European Union. If you are in the United Kingdom or the European Union, you may have the right to:

Request access to or correction or erasure of your personal information;

Object to processing of your personal information under certain circumstances;

Request the restriction of processing of your personal information;

Transfer or receive a copy of your personal information in a usable and portable format where such personal information is subject to automated processing or processing is based on your consent or a contract with you;

Withdraw consent at any time for future processing of your personal information where such processing is based on consent; and

For residents of France, send us specific instructions regarding the use of your personal information after your death.

Additionally, you may have the right to file a complaint with your applicable supervisory authority.

6. Data Protection Authority . Subject to applicable law, you also have the right to (i) restrict StockApp’s use of Other Information that constitutes your personal information; and (ii) lodge a complaint with your local data protection authority. If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority. If you work or reside in a country that is a member of the European Union or that is in the EEA, you may find the contact details for your appropriate data protection authority on the following website. If you are a resident of the United Kingdom you may contact the UK supervisory authority, the Information Commissioner’s Office.

7. Security . We take reasonable and appropriate steps to help protect your personal information from unauthorized access, use, disclosure, alteration, or destruction, whether in transmission or storage.

8. Data Retention . StockApp will retain Customer Data in accordance with a Customer’s instructions (including to perform any applicable terms in the MSA and through Customer’s use of Services functionality) and as required by applicable law. Customer may customize its retention settings and, depending on the Services plan, apply those customized settings at the Workspace level or other level. The Customer may also apply different settings to messages, files or other types of Customer Data. The deletion of Customer Data and other use of the Services by the Customer may result in the deletion and/or de-identification of certain associated Other Information.

StockApp may retain Other Information pertaining to you for as long as necessary for the purposes described in this Privacy Policy (such as to provide the Services, including any optional features you use, and to provide customer support). This may include keeping your Other Information after you have deactivated your account for the period of time needed for StockApp to pursue legitimate business interests, conduct system reviews and/or audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.

9. Age Limitations . StockApp does not allow use of our Services and Website by anyone younger than 16 years old, to the extent prohibited by applicable law. If you learn that anyone younger than 16 has unlawfully provided us with personal data, please contact us and we will take steps to delete such information.

10. StockApp Affiliates . This Privacy Policy applies to StockApp, Inc. as well as its subsidiaries and affiliates (collectively, “Affiliates” ).

11. Contacting StockApp . If you have a privacy question, concern or complaint for StockApp, you may contact us at: privacy@stockapp.com, or at our primary place of business at:

StockApp, Inc.

2261 Market St # 86747

San Francisco, CA 94114

United States