Privacy Policy

Effective date 10/13/25

This Privacy Policy for Mosaic Platforms, Inc. (“we,” “us,” or “our“), describes how and why we access, collect, store, use, and/or share (“process”) the personal information that we collect when you use our products and services, visit our websites, and otherwise interact with us online (collectively, the “Services“). For purposes of this Privacy Policy, personal information and personal data will be collectively referred to as personal information.

This Privacy Policy describes the personal information that we collect from you when you use the Services. It also describes how we use and process your personal information and for what purposes it is processed. If you do not agree with our policies and practices, please do not use our Services.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

TABLE OF CONTENT

1. WHAT INFORMATION DO WE COLLECT?

2. HOW DO WE USE YOUR PERSONAL INFORMATION?

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

5. HOW LONG DO WE KEEP YOUR INFORMATION?

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

7. WHAT ARE YOUR PRIVACY RIGHTS?

8. CONTROLS FOR DO-NOT-TRACK FEATURES

9. DO WE MAKE UPDATES TO THIS POLICY?

10. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us and/or that we automatically collect from you.

Personal information, or personal data, means any information about an individual from which that person can be identified.

Personal Information Provided by You. We collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:

• Identity Data, such as your first name, maiden name, last name, title, and gender;
• Contact Data, such as your address, email address and telephone numbers;
• Technical Data, which includes your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website;
• Professional Credentials, such as your employer, occupation and job title;
• Usage Data, which includes information about how you use our Services; and
• Marketing and Communications Data, such as your preference in receiving marketing information from us and your general communication preferences.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you use our Services.

We automatically collect certain information when you visit, use or navigate the website or use our other Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
• Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

2. HOW DO WE USE YOUR PERSONAL INFORMATION?

In Short: We process your personal information for the following purposes listed below. We may also process your personal information for other purposes only with your prior consent.

We will only use your personal information if we have a lawful basis for doing so. Most commonly, we will use your personal information in the following circumstances:

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
• Where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal basis for processing your personal information other than in relation to sending third-party direct marketing communications to you via email where consent is required by law. You have the right to withdraw consent to receive marketing materials at any time by contacting us or clicking on the unsubscribe option in the communications you receive. We also require your consent to use certain cookies. Please see our Cookie Policy for further information.

We may rely on the following legal bases to process your personal information:

Purpose/Activity	Type of data	Lawful basis for processing, including basis of legitimate interest
To manage our relationship with you which will include: (a) Notifying you about changes to our Terms of Service or Privacy Policy (b) Contacting you about your use of the Services (c) Sending administrative information to you, including details about our products and Services, and other similar information	(a) Identity (b) Contact (c) Marketing and Communications	(a) Necessary to comply with a legal obligation (b) Necessary for our legitimate interests (to keep our records updated about changes to our terms and policies)
To deliver relevant content, advertising, marketing and promotional materials to you and measure or understand the effectiveness of the information we provide to you	(a) Identity (b) Contact (c) Usage (d) Marketing and Communications (e) Technical	Depending on whether we have an existing business relationship and where you are based, either: (a) Consent; or (b) Necessary for our legitimate interests (to study how individuals use our Services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to identify usage trends, improve our website, services, marketing, and experiences	(a) Technical (b) Usage	Consent
To protect our Services as part of our efforts to keep our Services safe and secure, including through fraud monitoring and prevention efforts	(a) Identity (b) Contact (c) Technical (d) Usage	(a) Necessary for our legitimate interests (to protect you and our Services) (b) Necessary to comply with a legal obligation

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, for example, to send you marketing messages and materials, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, restructuring or acquisition of all or a portion of our business or assets by another company.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Third-party Vendors and Service Providers. We share your information with third-party vendors and service providers that help us with specialized services, including billing, payment processing, customer service, business analytics, website administration, and data processing.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

Google Analytics

We may share your information with Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as to comply with tax, accounting, reporting or other legal requirements).

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security and improperly collect, access, copy, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

7. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you reside, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, or Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These include the right to (i) request access and obtain a copy of your personal information; (ii) request correction of your personal information; (iii) request erasure of your personal information; (iv) restrict the processing of your personal information; (v) withdraw consent; (vi) transfer your personal information; and (vii) not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA, UK or Switzerland, you also have the right to complain to your local data protection authority at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en, https://ico.org.uk/make-a-complaint/, or https://www.edoeb.admin.ch/en. If you wish to exercise any of the rights set out above, including withdrawing consent, please contact us at privacy@mosaicplatforms.com and give us specific details regarding which right you choose to exercise.

i. What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that, for example, personal information is not disclosed to any person who has no right to receive it or that information is not deleted without authorization. We may also contact you to ask you for further information in relation to your request in order to speed up our response.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below. However, we may still communicate with you for other non-marketing purposes.

8. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do- Not- Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

California “Shine The Light” Law

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are considered California customers to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you would like to make such a request, please submit your request in writing to us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?”

9. DO WE MAKE UPDATES TO THIS POLICY?

Yes. We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are processing your information.

10. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

If you have questions or comments about this policy, you may contact us by email at legal@mosaicplatforms.com, or contact us by post at:

Mosaic Platforms, Inc.
Attn: Privacy
875 Washington St, New York, NY 10014, USA
4th Floor
New York, NY 10014
United States