In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

1. Identifiers: (Examples) Contact details, such as real name, alias, postal address, telephone or mobile contact information, unique personal identifer, online identifier, Internet Protocol address, email address, and account name (Collected: Yes)

2. Personal information as defined in the California Customer Records statute: (Examples) Name, contact information, education, employment, employment history, and financial information (Collected: Yes)

3. Protected classification characteristics under state or federal law: (Examples) Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data (Collected: Yes)

4. Commercial information: (Examples) Transaction information, purchase history, financial details, and payment information (Collected: Yes)

5. Biometric Information: (Examples) Fingerprints and voiceprints (Collected: No)

6. Internet or other similar network activity: (Examples) Browsing history, search history, online behavior, interest data, and other interactions with our and other websites, applications, systems, and advertisements. (Collected: No)

7. Geolocation Data: (Examples) Device location (Collected: No)

8. Audio, electronic sensory, or similar information: (Examples) Images and audio, video or call recordings created in connection with our business activities (Collected: Yes)

9. Professional or employment-related information: (Examples) Business contact details in order to provide you with our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us (Collected: Yes)

10. Education Information: (Examples) Student records and directory information (Collected: No)

11. Inferences drawn from collected personal information: (Examples) Inferences drawn from any other personal information listed above to create a profile or summary about, for example, an individual's preferences or characteristics (Collected: No)

12. Sensitive personal information: (Examples) Citizenship or immigration status, drivers' license, financial information including account access details, social security numbers, and state id card numbers (Collected: Yes)

We only collect sensitive personal information as defined by applicable privacy laws or the purposes allowed by law or with your consent. Sensitive personal information may be used, or disclosed to a service provider or contractor, for additional, specified purposes. You may have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by the phone mail in the context of:

• Receiving help through our customer service channels;

• Participation in customer services or contests; and

• Facilitation in the delivery of our Services and to respond to your inquiries.

We will use and retain the collected personal information as needed to provide the Services or for:

• Category 1 - as long as the user has an account with us

• Category 2 - as long as the user has an account with us

• Category 3 - as long as the user has an account with us

• Category 4 - as long as the user has an account with us

• Category 8 - as long as the user has an account with us

• Category 9 - as long as the user has an account with us

• Category 12 - as long as the user has an account with us

Sources of Personal Information

Learn more about the sources of personal information we collect in "What Information Do We Collect?"

How We Use and Share Personal Information

Learn more about how we use your personal information in the section, "How Do We Process Your Information?"

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information in the section, "When and With Whom Do We Share Your Personal Information?"

We may use your personal information for our own business purposes, such as for undertaking internal research for technology development and demonstration. This is not considered to be "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your Rights

You have the rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

Right to know whether or not we are processing your personal data

• Right to access your personal data

• Right to correct inaccuracies in your personal data

• Right to request the deletion of your personal data

• Right to obtain a copy of the personal data you previously shared with us

• Right to non-discrimination for exercising your rights

• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California's privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling").

Depending upon the state where you live, you may also have the following rights:

• Right to access the categories of personal data being processed (as permitted by applicable law, including Minnesota's privacy law)

• Right to obtain a list of categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California and Delaware's privacy law)

• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including California and Delaware's privacy law)

• Right to review, understand, question, and correct how personal data has been profiled (as permitted by applicable law, including California and Delaware's privacy law)

• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California and Delaware's privacy law)

• Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including California and Delaware's privacy law)

How To Exercise Your Rights

To exercise your rights, you contact us at vasili@meritumwealth.com, or by referring to the contact details at the bottom of this document or page.

Under certain US data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. however, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

If you submit a request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit a request on your behalf.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal your decision by emailing us at vasili@meritumwealth.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for your decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section "How Can You Contact Us About This Notice?"