Privacy Policy

Pantile Investments Inc. ("Pantile," "we," "us," or "our") is a Delaware C corporation operating as a registered investment adviser, registered in Colorado and Illinois. We are committed to protecting the privacy of our clients, prospective clients, and visitors to our website and platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at pantileinvestments.com, use our client platform, or use our mobile applications, including the Pantile iOS app (collectively, the "Services").

As a financial institution under the federal Gramm-Leach-Bliley Act, we are subject to federal requirements governing the treatment of nonpublic personal information, including the Federal Trade Commission's Safeguards Rule (16 CFR Part 314), as well as to the rules of the state securities regulators that license us. This policy is designed to meet or exceed those requirements.

1. Information We Collect

Personal Information You Provide

When you create an account, request our services, or communicate with us, we may collect:

• Full name, date of birth, and Social Security Number
• Mailing address, email address, and phone number
• Employment and income information
• Investment objectives, risk tolerance, and financial goals
• Account numbers and financial account information
• Tax identification information
• Government-issued identification documents
• A profile photograph, if you choose to provide one

Sign in with Google

You may choose to create your account or sign in using your Google account instead of a Pantile password. This is optional, and a Pantile password remains available to you. If you use it, Google sends us only the following:

• Your Google account email address, along with Google's confirmation that the address has been verified
• Your first and last name, where your Google account provides them
• A stable identifier that Google uses to distinguish your Google account from any other

We store that identifier and the date the connection was made so we can recognize you on later sign-ins. We never receive your Google password, and signing in with Google does not give us access to Gmail, Google Drive, Google Contacts, Google Calendar, or any other Google service or its contents.

Your Pantile advisor may separately connect their own work mailbox and calendar to our platform. That is a different connection, made by your advisor with their own Google or Microsoft work account rather than by you, and it does involve their mailbox and calendar. It is described under "Your Advisor's Email and Calendar" below.

Connecting Google to an existing Pantile account requires you to first prove control of that account, and we email you whenever a Google account is connected. You can remove the connection at any time by changing or resetting your password, which also signs you out on every device, or by contacting us.

The Google sign-in button is provided by Google and loads from Google's servers on our sign-in and sign-up pages. Google therefore receives your IP address and basic browser information when those pages load, whether or not you use the button. Google's handling of that information is governed by Google's own privacy policy at policies.google.com/privacy.

Sign in with Apple

You may also choose to create your account or sign in using your Apple account. Like Sign in with Google, this is optional, and a Pantile password remains available to you. If you use it, Apple sends us only the following:

• A stable identifier, specific to Pantile, that Apple uses to distinguish your Apple account from any other
• An email address, which Apple confirms it has verified. Apple may leave this out of later sign-ins, because the identifier on its own is enough for us to recognize you.

We never receive your Apple password, and we do not request or receive access to iCloud Mail, iCloud Photos, Contacts, Calendar, or any other Apple service or its contents.

Hide My Email. Apple lets you hide your real email address when you sign in. If you choose that option, the address we receive is a relay address that Apple created for Pantile alone, and we never see your real address. We record that the address is a relay one. Email we send you is then delivered by Apple's forwarding service, so if you later turn forwarding off for Pantile in your Apple ID settings, our messages will stop reaching you, including security alerts and account notices.

Your name. Apple provides your name only once, the first time you ever authorize Pantile, and it is delivered to your browser rather than carried inside the signed credential we verify. We use it only to fill in the sign-up form for you, where you can correct it. We never use it to identify you or to match you to an existing account.

Connecting Apple to an existing Pantile account requires you to first prove control of that account, and we email you whenever an Apple account is connected. You can remove the connection at any time by changing or resetting your password, which also signs you out on every device, or by contacting us.

The Apple sign-in button is provided by Apple and loads from Apple's servers on our sign-in and sign-up pages. Apple therefore receives your IP address and basic browser information when those pages load, whether or not you use the button. Apple's handling of that information is governed by Apple's own privacy policy at apple.com/legal/privacy.

Your Advisor's Email and Calendar

Your Pantile advisor may connect their work mailbox and calendar, where those are held with Google or with Microsoft, to our platform. This is so that your correspondence and meetings with your advisor appear alongside the rest of your record instead of living only in their inbox. Your advisor makes this connection with their own Google or Microsoft work account and can disconnect it at any time. You are never asked to connect an account for this, and this feature does not read your mailbox or your calendar.

If your advisor disconnects their mailbox, we stop retrieving new messages and events and ask Google or Microsoft to revoke our access. What we had already stored stays in your record, because it is part of the firm's books and records, and is kept for the period described in Section 6. We hold an encrypted credential for the connection, and your advisor can also end our access from their Google Account's third-party access page or their Microsoft account's app permissions page.

We retrieve only messages that involve someone already in your record. We ask Gmail or Outlook for messages in which an email address we already hold for you, or for another person attached to your record such as a spouse, a CPA, or an attorney, appears as the sender or as a recipient. We do not list, search, or read your advisor's mailbox as a whole, and mail that does not involve one of those addresses is never retrieved. Because this covers both what your advisor receives and what they send, messages in both directions are stored.

For messages that do match, we store:

• The sender and the recipients, including any Cc and Bcc addresses, and the date and time
• The subject and the full message body, in both plain text and HTML form
• Attachments, including their file names, types, sizes, and contents
• A complete, unaltered copy of the original message as Gmail or Outlook delivered it, kept so that a message can be reprocessed later without asking Google or Microsoft for it again

From your advisor's calendar we store:

• The title, description, location, start and end times, and status of each event
• The attendees of each event, including their names, email addresses, and whether they accepted
• Which calendars your advisor keeps. On Google, where your advisor has allowed it, we read the list of their calendars so that meetings on a shared team calendar are included, not only meetings on their own. We then read events from each calendar on that list, including calendars other people have shared with your advisor, for the year before and the year after today. On Microsoft we read the events on their calendar over the same window.

The connection also lets your advisor work from inside our platform instead of switching to Gmail or Outlook. We use it to send email and replies from their address, to create calendar events and the Google Meet or Microsoft Teams links for meetings with you, and, on Gmail, to read and set the email signature on their work address. On Microsoft, a message your advisor sends from our platform is created as a draft in their mailbox and sent from there. We never delete, move, or otherwise change any existing message in your advisor's mailbox.

What we do not do with it. We do not use information obtained through these Google or Microsoft permissions for advertising, we do not sell it, and we do not transfer it to anyone except as described in Section 3. We do not use it to develop, improve, or train any generalized artificial intelligence or machine learning model. Theo, our AI assistant, reads your email and calendar only when your Pantile advisor asks Theo about their own clients, as described in Section 3, and never on behalf of anyone else. Pantile personnel do not read message content except where you or your advisor ask us to, where it is necessary to investigate a security incident or a support request, or where the law requires it.

Meetings on Zoom and Google Meet

Your advisor can schedule a video meeting with you from our platform, on Zoom or on Google Meet. Those meetings are set up to be recorded and transcribed. A Zoom meeting created through our platform is recorded to Zoom's cloud, and Zoom produces the transcript. For a Google Meet call booked through our platform, we ask Google to transcribe and record the call, where your advisor's Google Workspace edition supports that. The invitation your advisor sends for a Zoom meeting says that the meeting will be recorded, and both services show everyone in the call an on-screen indicator while recording or transcription is on. Tell your advisor before the meeting if you would prefer not to be recorded.

From a recorded meeting we store:

• The transcript, with the name of each speaker, and on Zoom the closed captions and the in-meeting chat where they exist
• Who attended, including display names, email addresses where the service provides them, and when each person joined and left
• On Zoom, the meeting summary that Zoom's own AI Companion produces, where your advisor's Zoom account has that feature turned on
• A reference to the recording itself. The video and audio stay at Zoom or in your advisor's Google Drive; we do not download or hold a copy.

For Google Meet we read only calls booked through our platform, never other meetings on your advisor's account. For Zoom we read the meetings your advisor creates through our platform, together with any other meeting on their connected Zoom account that Zoom reports to us, and a meeting is transcribed only if it was recorded. Transcripts are used to draft a note about the meeting for your advisor to review, described under "Amazon Web Services (AI Features)" in Section 3, and are kept as part of your record for the period described in Section 6.

Information Collected Automatically

When you access our website or platform, certain technical information is collected. We split this between two distinct purposes: website security and audit (collected and stored by Pantile) and product analytics (transmitted to our analytics provider with significant privacy controls applied).

For website security and audit (collected by Pantile):

• IP address (logged in our authentication audit trail for fraud detection, account takeover prevention, and regulatory recordkeeping)
• Browser type, device, and operating system
• Pages visited, time spent, and referring URL
• Time of access

For product analytics (transmitted to PostHog):

• Anonymous behavioral events (pageviews, scroll depth, time on page)
• Clicks on our call-to-action buttons, recorded with the button's label and the page it links to
• Aggregate browser family, operating system family, and device type
• Page performance metrics
• A daily-rotating anonymous browser identifier

The following are NOT received by our analytics provider: IP address, geographic location (city, postal code, region, country, latitude, longitude), raw browser user agent string, form values, keystrokes, or any link to your Pantile account. These are discarded at ingest or never collected at all.

Cookies and Analytics

We use cookies and similar tracking technologies to analyze site usage and improve your experience. With your consent, we use PostHog, a product analytics platform, to understand how visitors interact with our website and platform. PostHog receives anonymous behavioral events (pageviews, scroll depth, session duration, and clicks on our call-to-action buttons, recorded with the button's label and the page it links to) and aggregate technical information (browser family, operating system family, device type).

We have configured PostHog with the following privacy controls: client IP addresses are discarded at PostHog's ingest layer; geographic enrichment (city, postal code, region, country, latitude, longitude) is disabled at the project level via a paused GeoIP transformation and a property filter that strips any geo fields; the raw browser user agent string is stripped at ingest before storage; URLs sent to PostHog have any personal record identifiers (such as document IDs and account IDs) removed before transmission; and your analytics identifier is never linked to your Pantile account in any way. We have a signed Data Processing Agreement with PostHog that characterizes PostHog as our Service Provider under California Consumer Privacy Act section 1798.140(ag), not as a third party.

When you first visit our site, you will be asked whether you consent to analytics. Analytics are not activated unless you click "Accept." You can change your preference at any time on our Do Not Sell or Share My Personal Information page at pantileinvestments.com/do-not-sell, which turns analytics on or off immediately. You can also control cookies through your browser settings.

We honor your browser's privacy signals. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of analytics tracking in accordance with the California Consumer Privacy Act (CCPA). We also respect the Do Not Track (DNT) browser setting. When either signal is active, no analytics data is collected or transmitted to our analytics provider.

PostHog processes analytics data on our behalf. For more information about how PostHog handles data, please refer to PostHog's privacy policy at posthog.com/privacy.

Device Recognition

When you log in with multi-factor authentication, you may choose to "Remember this device." If you opt in, we store a small, randomly generated identifier as a cookie on your browser. This cookie contains no personal information. It allows our system to recognize your browser and skip the multi-factor authentication step on future logins for up to 30 days.

This cookie is:

• Only set when you explicitly check "Remember this device"
• Automatically deleted after 30 days
• Immediately invalidated if you change or reset your password
• Limited to the same browser type and operating system where it was created
• Not used for tracking, analytics, or advertising

You can remove this cookie at any time by clearing your browser's cookies, which will require multi-factor authentication on your next login.

Mobile App Information

When you use the Pantile iOS app, we additionally collect or process:

• Push notification token: if you enable notifications, your device's push token is used by us and our messaging provider to deliver alerts (such as new-message notifications) through the Apple Push Notification service. You can disable notifications at any time in iOS Settings.
• Crash and error diagnostics: the app reports crashes and errors to Sentry so we can find and fix problems (see Section 3).
• Biometric unlock: if you enable Face ID, biometric matching happens entirely on your device via Apple's operating system. We never receive or store your biometric data.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our wealth management and financial advisory services
• Open and manage your investment accounts at Charles Schwab and Altruist
• Execute investment transactions and manage your portfolio
• Communicate with you about your account, performance, and financial planning
• Keep a complete record of your correspondence and meetings with your advisor, including transcripts of meetings held on Zoom or Google Meet, where your advisor has connected their work mailbox, calendar, or Zoom account, so that the advisory team can serve you and so that we can meet the record-keeping rules that Colorado and Illinois apply to investment advisers
• Operate our client platform, including the dashboard, document management, and AI-powered tools. Our AI features send some of your information to Amazon Web Services for processing, described under "Amazon Web Services (AI Features)" in Section 3
• Authenticate you and keep your session secure, including through Sign in with Google or Sign in with Apple if you choose to use one
• Comply with legal, regulatory, and compliance obligations
• Detect and prevent fraud or unauthorized access
• Respond to your inquiries and provide customer support

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

Custodians (Charles Schwab and Altruist)

Your investment accounts are held at one or more third-party custodians: Charles Schwab & Co., Inc. and Altruist Financial LLC. We share necessary account and identity information with the custodian holding your account to open, maintain, and execute transactions in that account. Each custodian has its own privacy policy governing the information it receives.

Amazon Web Services (Hosting and Storage)

Our website, platform, and mobile app run on Amazon Web Services (AWS), which provides the servers, database, file storage, and content delivery behind the Services, along with the encryption keys that protect what is stored. AWS therefore holds essentially all of the information described in this policy, including your account record, the documents you upload, and your profile photograph. Under our agreement with AWS, AWS does not access or use that information except as necessary to provide this infrastructure or to comply with the law.

The AWS data centers we use are located in the United States. Information stored there is encrypted at rest and in transit, our database and file storage are not reachable from the public internet, and access is limited to authorized Pantile personnel and the systems that run the Services.

Amazon Web Services (AI Features)

Our AI features run on Amazon Bedrock, a service of Amazon Web Services, Inc. Bedrock hosts the Claude models built by Anthropic and runs them inside Amazon's own systems. Using an AI feature transmits to Amazon the information that feature needs:

• Theo, our AI assistant: the question you ask, the conversation so far, and whatever Theo has to look up to answer it, which can include your holdings, balances, transactions, and the financial and employment profile you gave us. If you have turned on document access, Theo can also read the text of documents in the Intake folder of your Data Room.
• Theo, when your advisor uses it: your advisor can ask Theo about the clients in their own book, and Theo can then look up your holdings and returns, the meetings on your advisor's calendar with you, the notes your advisor keeps about you, the titles of your documents, and your correspondence with your advisor, of which Theo is handed the sender, the subject, the date, and the first few hundred characters of each message rather than the whole body. Theo can also propose a note for your record, which your advisor reviews before it is saved. These lookups are available only to advisors; when you use Theo yourself, it cannot read any correspondence.
• Meeting notes: the transcript of a recorded Zoom or Google Meet call with your advisor, together with the profile and holdings we already hold for you, used to draft a note about the meeting that your advisor reviews before it is added to your record.
• Dashboard summaries: your holdings, asset allocation, and period returns, used to write the plain-English summaries shown on your dashboard.
• Document analysis: documents you upload for review are sent whole, as files, so that statements which are scanned images rather than text can still be read. A statement of that kind can carry your name, your account numbers, and every position you hold, which makes this the most sensitive information we transmit anywhere.

This processing happens in the United States. A request may be handled in Amazon's US East (Northern Virginia), US East (Ohio), or US West (Oregon) region.

Amazon states that inputs to and outputs from Amazon Bedrock are not used to train Amazon's models or any third-party model, are not shared with the provider of the model, and are not stored by the service by default. Anthropic, which built the model doing the processing, therefore does not receive what we send. We have not enabled Bedrock's optional request logging, so no separate copy of these requests is kept. What we retain is the result: the answer, summary, or analysis, stored in our own systems and covered by the rest of this policy.

You control whether the AI features may use your documents. We ask you the first time you open the Intake folder of your Data Room, and no AI feature reads a document of yours before you have answered. Afterward the setting lives in your platform settings and you can change it at any time. Turning it off stops both Theo and document analysis from reading your documents, whether the request comes from you or from your Pantile advisor on your behalf, and your Data Room keeps working as document storage. It does not affect Theo's other answers or your dashboard summaries, neither of which reads your documents.

Google (Sign-In, Advisor Mailbox, and Meet)

If you choose to sign in with Google, Google necessarily learns that you are signing in to Pantile, since the sign-in is performed by Google and the identity token is issued by Google. Because Google's sign-in button loads from Google's servers, Google also receives your IP address and basic browser information when our sign-in and sign-up pages load, whether or not you use it. Signing in with Google sends Google no other information about you. In particular, it does not send Google your account balances, holdings, or documents.

Where your advisor has connected their work mailbox and calendar, as described in Section 1, information also travels to Google in the other direction. A message your advisor writes in our platform is handed to Gmail to deliver, and a meeting your advisor schedules in our platform is created on their Google Calendar, along with its Google Meet link and its list of attendees. This is the same information that would reach Google if your advisor had written the message in Gmail or created the meeting in Google Calendar directly. For a Google Meet call booked through our platform, we also ask Google to turn on transcription and recording for that call, and afterward we read the transcript, the participant list, and a reference to the recording from Google. We read Meet records only for calls booked through our platform. We send Google nothing else: not your balances, your holdings, or the documents in your Data Room. Google's use of the information it receives is governed by Google's privacy policy at policies.google.com/privacy.

Pantile's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. That policy is published at developers.google.com/terms/api-services-user-data-policy.

Microsoft (Advisor Mailbox)

Where your advisor's work mailbox and calendar are held with Microsoft rather than Google, the connection described in Section 1 is made with Microsoft instead. A message your advisor writes in our platform is created as a draft in their Outlook mailbox and sent by Microsoft, and a meeting your advisor schedules in our platform is created on their Outlook calendar, along with its Microsoft Teams link and its list of attendees. This is the same information that would reach Microsoft if your advisor had used Outlook directly. We send Microsoft nothing else. Microsoft's use of the information it receives is governed by Microsoft's privacy statement at privacy.microsoft.com/privacystatement.

Zoom (Meetings)

When your advisor schedules a Zoom meeting with you through our platform, Zoom receives the meeting's topic and agenda and, if your advisor registers you for the meeting, your name and email address. The meeting is recorded to Zoom's cloud and transcribed there, and Zoom may also produce a meeting summary with its AI Companion feature. Zoom holds the recording. Zoom sends us the transcript, the captions, the in-meeting chat, the participant list, and any summary, as described in Section 1. Your advisor uses either their own Zoom account or the firm's Zoom account for this, and the invitation itself comes from your advisor's own mailbox. Zoom's use of the information it receives is governed by Zoom's privacy statement at zoom.com/trust/privacy/privacy-statement.

Apple (Sign-In)

If you choose to sign in with Apple, Apple necessarily learns that you are signing in to Pantile, since the sign-in is performed by Apple and the credential is issued by Apple. Because Apple's sign-in button loads from Apple's servers, Apple also receives your IP address and basic browser information when our sign-in and sign-up pages load, whether or not you use it. If you use Hide My Email, Apple additionally handles the email we send you, since it forwards that mail to your real address on our behalf. We send Apple no other information about you. In particular, we do not send Apple your account balances, holdings, documents, messages, or any other information you provide to us. Apple's use of the information it receives is governed by Apple's privacy policy at apple.com/legal/privacy.

PostHog (Analytics)

With your consent, we transmit anonymized usage data to PostHog, Inc., our analytics provider, to help us understand how visitors use our website and platform. PostHog acts as our Service Provider under California Consumer Privacy Act section 1798.140(ag) per a signed Data Processing Agreement, not as a third party. PostHog does not receive your name, contact information, financial information, IP address, geographic location, raw browser user agent, or any nonpublic personal information protected under the Gramm-Leach-Bliley Act. Analytics is opt-in: it does not initialize unless you accept on our cookie consent banner, and it does not initialize at all for users detected as California residents or for browsers sending the Global Privacy Control signal.

Sentry (Error and Crash Reporting)

Our platform and mobile app use Sentry, an error-monitoring service, to receive crash reports and diagnostic information (such as device model, operating system version, and the state of the app when an error occurred) so we can identify and fix problems. We have configured Sentry not to receive IP addresses or user identifiers, and we automatically redact credentials and strip request contents from reports before they are sent. Sentry does not receive your financial information.

Stream (Secure Messaging)

In-platform messages between you and your Pantile team are delivered through Stream (Stream.io, Inc.), a secure messaging infrastructure provider. Stream processes and stores message content, participant names, and delivery metadata on our behalf solely to provide the messaging feature.

Crisp (Live Chat)

Our public website offers a live chat window, provided by Crisp, so visitors can reach us without creating an account. The chat loads only on our public pages and is not used for communications with logged-in clients, which go through Stream as described above. Crisp receives whatever you choose to type into the chat, including any name or email address you provide, along with delivery metadata such as the page you were on and the time of your message. It also stores a small amount of data in your browser so that your own conversation stays attached to you if you navigate or come back later. We do not pass Crisp your Pantile account details.

GoHighLevel (CRM)

We use GoHighLevel as our customer relationship management (CRM) platform to manage prospect and client communications, track inquiries, and coordinate outreach. Information such as your name, email address, phone number, and communication history may be stored in GoHighLevel. GoHighLevel processes this data on our behalf and is contractually obligated to protect it in accordance with applicable privacy standards.

Advisor Jetpack (Lead Generation)

We work with Advisor Jetpack, a lead generation service, to connect with individuals who have expressed interest in financial advisory services. When you submit your information through an Advisor Jetpack campaign or form, that information (including your name, email address, and phone number) is shared with Pantile Investments so that we may contact you about our services. By submitting your information through these campaigns, you consent to being contacted by Pantile Investments.

Legal and Regulatory Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request, including to comply with SEC or state regulatory requirements.

With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so, such as when connecting you with estate attorneys or CPAs through our Partner Network.

4. Data Security

We take the security of your personal information seriously. Our systems run on Amazon Web Services in the United States (see Section 3). All client data stored in our systems is encrypted in transit and at rest. Our security practices are designed to comply with the Federal Trade Commission's Safeguards Rule (16 CFR Part 314) and industry best practices, including:

• Encryption of all client data at rest and in transit
• Secure authentication with JWT-based session management
• Access controls limiting data access to authorized personnel
• Regular security assessments and monitoring

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using commercially reasonable safeguards.

Email is not a secure channel for instructions. We verify any request to move money, change your account, or trade that reaches us only by email before we act on it.

5. Communications

We may communicate with you via email regarding your account, our services, and important updates. Email communications are opt-in services. We will only contact you if you have provided your consent.

Email

You may opt out of non-essential email communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. Even if you opt out of marketing communications, we may still send you transactional messages related to your account, such as trade confirmations, regulatory notices, and security alerts.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We also retain information as necessary to comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Client records, including correspondence with your advisor and transcripts of meetings with them, are kept for at least five years after the end of the year in which they were last updated, which satisfies the record-keeping rules that Colorado and Illinois apply to investment advisers, and this applies to former clients as well.

Analytics data collected through PostHog is retained for 1 year. If analytics data is fully anonymized, this retention limit no longer applies.

7. Your Rights

Depending on your state of residence, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your information, subject to regulatory retention requirements
• The right to opt out of certain data sharing practices
• The right to opt out of analytics tracking via Global Privacy Control (GPC) or Do Not Track (DNT) browser signals, which we automatically honor
• The right to turn analytics tracking off at any time on our Do Not Sell or Share My Personal Information page at pantileinvestments.com/do-not-sell

To exercise any of these rights, please contact us using the information below. We will respond to your request within the timeframe required by applicable law.

8. Minors' and Children's Privacy

Our Services are intended for adults. As stated in our Terms of Use, you must be at least 18 years old to create an account. Our Services are not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18.

We likewise do not knowingly collect personal information from children under the age of 13, the age covered by the federal Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected information from anyone under the age of 18, please contact us at [email protected] and we will promptly delete it.

We ask for your date of birth during sign-up for the sole purpose of confirming that you are 18 or older. If the date you enter shows that you are under 18, we stop the sign-up, and that date of birth is never transmitted to us or stored by us. We do place one value in your browser's local storage to prevent repeated sign-up attempts from that browser for 30 days. It contains no date of birth and no personal information, and you can remove it by clearing your browser's site data.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, provide additional notice through email or our platform.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: