GLOBAL PRIVACY POLICY

Welcome to the Privacy Policy of Dexponent Inc. ("Dexponent," "Company," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal information in accordance with applicable data protection laws.

This Privacy Policy explains how we collect, use, share, and safeguard the personal data you may provide when interacting with our website https://dexponent.com/ browser extension, mobile application, and other features, tools, or functionalities we make available (collectively, the "Services").

For the purposes of applicable privacy and data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR, Dexponent Inc. acts as the data controller for the processing of your personal information as described in this Policy.

Non-Custodial Architecture Disclosure

Dexponent provides a non-custodial wallet interface. This means:

• You alone control your private keys and digital assets.
• Dexponent never receives, stores, or transmits your funds or private keys.
• All cryptographic operations—including transaction signing—occur locally on your device.
• Dexponent does not act as a custodian, money services business (MSB), or financial intermediary and does not require a money-transmitter license under U.S. or applicable laws.

Please read this Privacy Policy carefully. By using our Services, you acknowledge that you have read and understood this policy and agree to the terms described herein. If you do not agree with this Privacy Policy, you should not access or use the Services.

Questions or Concerns?

If you have any questions or concerns about our privacy practices or this policy, you can contact us using the details provided at the end of this document.

What Dexponent Users Should Know About Their Privacy

At Dexponent, your privacy and security are at the core of how we build. Our goal is to provide a powerful, self-custodial experience that respects your control, minimizes unnecessary data collection, and keeps you in charge of your interactions with the DeFi ecosystem.

We've designed Dexponent from the ground up to minimize the collection and processing of personal information. Here's what that means for you:

What We Don't Do

• We never collect your private keys, recovery phrases, or seed words.
• We don't hold or transmit your digital assets—you control your assets at all times.
• We do not sell your personal data to anyone, under any circumstances.
• We don't collect or retain sensitive personal data unless necessary to operate specific features or comply with applicable laws (and only with your consent, where required).
• We don't process full financial or banking information—even when you use third-party services like token bridges or fiat onramps, such details are handled entirely by those third-party providers.

When We May Process Technical Information (e.g. IP Addresses)

Dexponent may temporarily process device-related technical data, such as IP addresses, only in limited situations, such as:

• To facilitate secure network access and prevent abuse or attacks (e.g., DDoS mitigation).
• To measure latency or performance issues to improve the responsiveness of the app.
• To comply with regulatory obligations, such as economic sanctions or geographic restrictions.
• To proxy requests to third-party protocols (where applicable), helping reduce your device's direct exposure.
• To route traffic via servers closer to your location (if necessary) for smoother interaction.

If you'd prefer not to share certain technical data like your IP address, you can always use tools like a Virtual Private Network (VPN) to add an additional layer of privacy.

What We May Collect (When Necessary)

We collect limited categories of information, and only as needed to provide or improve the service:

Wallet Addresses: We may process your wallet address temporarily in relation to signed transactions or requests initiated by you. This happens only within the scope of your use of the Dexponent interface and is never retained unnecessarily.

Settings and Preferences: Some configuration preferences are stored locally on your device. If you opt in to sync across devices, encrypted copies may be processed by Dexponent—only you can decrypt them.

Feedback & Support Interactions: If you contact us for help, we may retain your communications (e.g. emails or feedback forms) to improve service.

Event Analytics (Optional): If you choose to opt in, we may collect anonymized usage metrics (e.g. how often a feature is used). These analytics are pseudonymous and help us improve functionality. You can opt out anytime.

Marketing Preferences (Optional): If you subscribe to updates or marketing emails, we may collect information on your interaction with those communications (e.g., open rate). You can unsubscribe at any time.

Device Identifiers (Optional): If you opt in to receive mobile push notifications, we may store a device token to send those messages. You can revoke this at any time through your device settings.

Third-Party Providers

Some services (e.g., fiat ramps, bridges, or RPC infrastructure) may be provided by third-party partners. Dexponent does not control their data practices, so we encourage you to review their privacy policies before using their features. Your interaction with such services is always voluntary and may be turned off or routed through different providers if you prefer.

You Stay in Control

Dexponent is committed to giving you meaningful control over your privacy. Most data processing is optional and can be managed via your local settings or by adjusting your interaction with external tools.

We encourage you to review our full Privacy Policy for a detailed explanation of what we collect and how we handle your data.

1. Our Role and Your Relationship With Dexponent

This section explains how Dexponent Inc. interacts with you, the individual or entity using our services, and how we determine the handling of your personal information.

Dexponent provides access to its non-custodial software interface and related services and determines the purpose and means of processing any personal data you share with us. In this context, Dexponent acts as a data controller under applicable data protection laws, where relevant.

You are subject to our Terms of Service when using the platform. If you are using Dexponent on behalf of a company or other legal entity, that organization is considered the account holder and may have certain rights over your access or use of the Services. You represent that you are authorized to act on behalf of such an entity and that your use of the Services is governed by both our Terms and any applicable internal policies of your organization.

Importantly, Dexponent never takes custody of your digital assets, private keys, or transactions. All cryptographic actions take place locally on your device, and you remain in full control of your assets at all times.

2. Information We Collect About You

Dexponent collects a limited amount of personal information to provide, maintain, and improve our non-custodial services. We do not collect your private keys, do not sell your personal data, and avoid processing personal information unless it is strictly necessary to deliver the services or comply with applicable law.

We collect information in the following ways:

• Information you voluntarily share with us (e.g., for support or feature access)
• Information collected automatically through your use of the platform
• Information from third-party service providers, only where necessary

2.1. Information You Provide to Us

Depending on how you interact with Dexponent, you may choose to share certain personal information, including:

Contact Details: When you engage with customer support or subscribe to communications, you may provide your name, email address, or other contact preferences.

Support Interactions: If you contact us for assistance, we collect any details you provide (e.g., bug reports, wallet type, browser info, and messages) to help resolve your request.

Feedback and Surveys: If you participate in a feedback form or usability research, we may collect your responses and any data you share voluntarily.

Optional Account Information: In some cases (e.g., advanced features), you may be offered the option to create a user profile. If you choose to do so, we will collect the minimum information necessary for that feature (e.g., email or username).

Dexponent will never ask for or store your private keys, recovery phrases, or wallet seed data.

2.2. Information We Collect Automatically

Dexponent may collect limited technical information through your device to enable core functionality and improve performance. This may include:

IP Address: Used temporarily for basic network operations such as security protections, DDOS mitigation, or geographic-based service restrictions. This data is anonymized or discarded as quickly as operationally possible.

Device Information: Including browser type, device type, operating system, and screen resolution, which we may use solely to ensure the interface functions correctly and is compatible with your device.

Interaction Data: Such as general navigation behavior, button clicks, and usage patterns (e.g., time on page), collected in anonymized form for performance analysis or optional analytics.

Cookies and Local Storage: Dexponent may use essential cookies or local device storage to remember your settings. You can manage cookie preferences via your browser or device settings. We do not use third-party advertising cookies.

2.3. Location Information

Dexponent may infer your general geographic location (e.g., city or country) from your IP address to:

• Route you to the closest server
• Comply with regulatory restrictions on jurisdictional access
• Detect and prevent fraudulent or abusive activity

We do not track precise GPS location or store geolocation data.

2.4. Third-Party Sources

If you interact with Dexponent through third-party channels (e.g., email platforms, analytics tools, or integration partners), we may receive limited information such as:

• Email confirmation of newsletter opt-ins
• Aggregated usage stats via privacy-respecting analytics providers
• Third-party bug reports or compatibility data (e.g., from wallet connect interfaces)

All such integrations are subject to strict contractual and technical safeguards, and Dexponent never shares or receives unnecessary personal data.

3. How We Use the Personal Information We Collect

At Dexponent, we collect only the minimum personal information necessary to deliver and improve our services. We do not sell your personal data, and we use the information we collect only for legitimate, clearly defined purposes. The ways in which we use your personal information include:

3.1 Service Provision and User Access

We may use your personal information to:

• Allow you to access and interact with the platform and its features.
• Process and respond to your requests (such as customer support or feature use).
• Enable essential service functionality such as performance optimization, security, and session continuity.

In limited circumstances, where you have opted into optional services (e.g., email updates or advanced features), we may use your contact details for authentication or notification purposes.

3.2 Personalization and User Experience

We may use device-level or usage-based information (e.g., region, language, or browser type) to:

• Customize certain aspects of the platform to match your preferences.
• Improve loading speeds or route you to optimal infrastructure based on your location.
• Support integration with third-party decentralized applications or blockchain services when you initiate such connections.

3.3 Platform Development and Optimization

We use aggregated, anonymized usage information to:

• Identify trends, performance issues, or user behavior patterns to enhance the platform.
• Debug problems, test new features, and ensure compatibility across devices.

No personally identifiable behavior tracking is performed unless explicitly consented to by you.

3.4 Communication and Support

We may use your information to:

• Respond to inquiries or support requests you initiate.
• Send system alerts or important notices (e.g., updates to this Privacy Policy, Terms of Service, or major changes to our infrastructure).
• Ensure continuity of service and resolve account-related issues.

Dexponent will never contact you to request your private keys, recovery phrases, or wallet credentials. Any such request should be reported as fraudulent.

3.5 Marketing (Optional and Consent-Based)

If you opt in, we may use your email address or browser preferences to:

• Send you occasional updates, feature announcements, or educational content.
• Deliver surveys, feedback requests, or promotions relevant to your use of Dexponent.

You can opt out of marketing communications at any time by following the unsubscribe link in our emails or updating your preferences.

3.6 Aggregated Analytics and Insights

We may anonymize or de-identify data for:

• Measuring user adoption and feature usage.
• Understanding platform performance in different regions or devices.
• Sharing broad usage statistics with partners or ecosystem contributors.

This data cannot be used to identify you personally and does not include wallet activity or private key information.

3.7 Legal and Compliance Purposes

We may use personal information as required by law, including:

• To comply with applicable regulations (e.g., sanctions compliance).
• To respond to lawful requests from courts, regulators, or enforcement agencies.
• To enforce our Terms of Service, prevent abuse, and protect the rights and safety of Dexponent and its users.

Dexponent does not store custodial user funds and is not a financial intermediary. However, we may apply access restrictions or service limitations where legally required.

3.8 Security and Abuse Prevention

To ensure the ongoing safety and integrity of the platform, we may process limited user information to:

• Prevent fraudulent use or unauthorized access.
• Detect and mitigate denial-of-service attacks, spam, or exploit attempts.
• Investigate incidents involving Terms of Service violations or suspected abuse.

All security-related processing is subject to strict confidentiality protocols.

4. When and With Whom We Share Personal Information

Dexponent respects your privacy and does not sell your personal information. However, in order to provide and maintain our services, we may need to share limited personal information with trusted third parties under specific circumstances outlined below.

4.1 Dexponent Affiliates and Group Entities

We may share personal information with our affiliates, subsidiaries, or group companies, where applicable, to support service delivery, maintenance, infrastructure, compliance, or customer support. All such entities are bound by the same confidentiality and data protection obligations described in this Privacy Policy.

4.2 Service Providers and Technical Partners

We work with third-party service providers who assist us in the operation and improvement of our platform. These providers may process limited personal information on our behalf, but only as necessary for them to perform specific tasks, such as:

Infrastructure and Hosting: Cloud computing platforms that help us securely store and deliver services.

Analytics and Performance Tools: Partners who help us understand how the platform is used, improve latency, and detect unusual activity.

Customer Support Platforms: Systems that allow us to communicate with users and resolve inquiries.

Communication Tools: Third-party services used for transactional messages, alerts, and optional updates.

Security and Abuse Prevention: Vendors who monitor system integrity and support legal compliance (e.g., restricting access from sanctioned regions or IPs).

Payment Processors (if applicable): If you engage in any paid services or optional purchases, your billing details may be shared with PCI-DSS compliant payment gateways solely for processing your transaction. Dexponent does not store your full payment information.

All such providers are contractually obligated to handle your information with strict confidentiality and in compliance with applicable privacy laws.

4.3 Legal or Regulatory Requirements

We may disclose your personal information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or valid government requests.
• Enforce our Terms of Service or respond to claims.
• Prevent fraud, abuse, or other prohibited activity.
• Protect the rights, safety, or property of Dexponent, its users, or the public.

Any such disclosure will be limited to what is legally required and handled with due process.

4.4 Third-Party Integrations or Blockchain Services

If you choose to interact with decentralized applications, third-party blockchain services, or external wallets through Dexponent's interface, you may share your wallet address, transaction information, or other interaction-related details with these third parties. Dexponent does not control or take responsibility for the data handling practices of these external platforms. Your use of such services is subject to their respective privacy policies and terms.

We do not share your personal information with these third-party platforms unless you explicitly initiate such interaction.

4.5 Strategic Partners (Consent-Based)

Where you have given explicit consent (e.g., through opt-in settings), we may share minimal information (such as your email address or usage preferences) with trusted strategic partners for co-branded features, promotional campaigns, or research. You can withdraw this consent at any time.

5. Service Providers

We work with third-party service providers to support and operate various aspects of our platform, such as hosting infrastructure, analytics, communications, and customer support. These service providers assist us in delivering our services effectively and securely, and they process information only on our instructions and in accordance with applicable data protection laws.

6. Your Data Rights

Depending on your location and applicable privacy laws, you may have certain rights regarding the personal information we process about you. These rights are described below and can be exercised by contacting us using the details provided in the "Contact Us" section of this policy. Please note that some rights may not apply in all jurisdictions.

6.1 Access to Your Data

You may request access to the personal information we hold about you, along with details on how and why we process it, the categories of third parties it may have been shared with, and the source of the information if not collected directly from you.

6.2 Correction of Inaccurate Information

If you believe the information we have about you is incorrect or incomplete, you can ask us to update or correct it.

6.3 Deletion of Your Information

You may request that we delete or anonymize your personal data, subject to certain legal exceptions (such as regulatory compliance or fraud prevention).

6.4 Object to Processing

You may object to the processing of your personal data in cases where we rely on our legitimate interests or conduct direct marketing. We will stop processing unless we have compelling lawful reasons to continue.

6.5 Restrict Processing

You may request that we temporarily suspend our processing of your data under certain circumstances—for example, if the accuracy of the data is contested or you object to its processing.

6.6 Data Portability

Where technically feasible and legally permitted, you may request a copy of your personal information in a machine-readable format, or ask us to transfer it directly to another service provider.

6.7 Withdraw Consent

If you have given us consent to process your personal data, you may withdraw it at any time. Please note, this does not affect processing that took place before the withdrawal.

6.8 Filing Complaints

You have the right to file a complaint with a relevant data protection authority in your country or region if you believe we have violated your data protection rights.

6.9 Non-Discrimination

You will not be penalized or receive different treatment for exercising your privacy rights.

6.10 Opt-Out of Targeted Advertising

If required by applicable law, you may request that we stop using your data for personalized marketing or targeting purposes.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including delivering our Services, responding to your inquiries, maintaining operational integrity, and meeting any legal, regulatory, or contractual obligations.

Where applicable, we may retain your data:

• To enforce our Terms of Service or other contractual rights;
• To comply with applicable tax, legal, or accounting requirements;
• For the resolution of disputes, security incidents, or technical issues;
• If retention is required in connection with an ongoing investigation, legal matter, or regulatory proceeding.

Once your information is no longer required for these purposes, we will either securely delete it or anonymize it in a way that it can no longer be linked back to you.

8. Security and Storage

Dexponent prioritizes the protection of your personal information and employs reasonable administrative, technical, and organizational safeguards to help prevent unauthorized access, use, loss, or disclosure of data you choose to share with us. These safeguards include encryption, access control, and secure data storage practices where applicable.

However, no system or method of data transmission over the Internet can be guaranteed to be 100% secure. While we take measures to safeguard your information, you acknowledge that you provide data to us at your own risk, and we cannot guarantee its absolute security. You are encouraged to use secure devices, networks, and updated software to reduce exposure to vulnerabilities.

If you suspect any unauthorized use of your data or believe your privacy may have been compromised while using Dexponent's services, please notify us immediately.

Personal information collected through Dexponent's platform may be stored and processed in jurisdictions where we or our service providers operate. By using our services, you consent to the transfer and storage of your information in accordance with this Privacy Policy and applicable laws.

9. Data Analytics and Advertising

Dexponent may utilize data analytics tools to enhance service functionality, analyze usage patterns, optimize performance, and, where permitted, deliver relevant information or promotional content. We seek user consent where legally required or where appropriate based on regional data protection laws.

9.1 Analytics for Service Improvement

To understand how users engage with our website and to improve the user experience, we may use first-party analytics systems that collect anonymized or aggregated technical data such as device type, browser version, session duration, and navigation behavior. These insights help us diagnose performance issues, measure engagement, and enhance platform design.

Where applicable, we may also integrate third-party analytics tools—such as Google Analytics or similar providers—to collect pseudonymized metrics. These third-party services may log anonymized data such as IP address ranges, geographic region, device settings, and referral links to help us assess traffic sources and user flows. All such integrations are configured in accordance with applicable privacy laws, and we never share private keys or wallet-specific transaction data through analytics systems.

Users who wish to limit Google Analytics tracking may install the Google Analytics Opt-Out Browser Add-on.

9.2 Marketing and Interest-Based Advertising

Where allowed and with your consent, Dexponent or its authorized partners may use cookies or pixel tags to serve you tailored content or marketing messages across web properties. These technologies enable us to understand which ads or campaigns are relevant based on your interaction with Dexponent's website.

Advertising platforms such as Google Ads, LinkedIn, or similar partners may display Dexponent-sponsored content based on aggregated user activity or preferences. This does not involve the sharing of your wallet address, financial information, or personally identifiable information (PII). Instead, advertising is typically delivered using anonymized identifiers or browser-based tracking technologies.

9.3 Third-Party Cookies and Trackers

Please note that third-party cookies or scripts embedded on Dexponent's site such as social sharing buttons or embedded content are subject to those third parties' privacy policies. Dexponent does not control the behavior of such third-party trackers and disclaims responsibility for their data handling practices. We recommend reviewing their privacy policies directly.

10. Third-Party Platforms, Links, and External Services

Dexponent's platform may enable you to access or interact with external services, decentralized applications (dApps), and other websites or tools operated by third parties (collectively referred to as "Third-Party Platforms").

Please note that this Privacy Policy does not apply to the privacy practices, content, or operations of any Third-Party Platform you may access through Dexponent. We do not control, endorse, or assume responsibility for the data practices of these external platforms, and any interaction you undertake with them is governed solely by their respective privacy policies and terms of service.

The presence of a third-party link, embedded widget, or connectivity feature on the Dexponent interface does not constitute our endorsement of that service. Your engagement with those platforms is entirely at your discretion and risk.

Where technically feasible and permitted by law, Dexponent may implement proxy methods or data minimization practices to reduce the exposure of your personal or technical information when routing interactions to external services. However, once you leave our interface or engage directly with a third-party system (e.g., a dApp, bridge, or fiat on-ramp provider), the handling of your information is subject to that third party's policies—not ours.

We strongly encourage you to review the privacy and data protection practices of any external application or website before sharing any personal or wallet-related information with them.

11. Co-Branded or Affiliated Webpages

From time to time, Dexponent's platform or website may include links to third-party websites or services that feature Dexponent's name, logo, or branding in partnership with other organizations or service providers. These co-branded or affiliated pages may appear visually similar to Dexponent's interface, but they are operated by external parties.

Please note that this Privacy Policy does not govern your use of those co-branded websites or services. The collection, use, and protection of your personal information on such sites are subject to the privacy policies and terms of the respective third-party operators.

We encourage you to carefully review the applicable privacy notices of any co-branded or affiliated pages before submitting personal or wallet-related information or engaging with their services.

12. Eligibility to Use Dexponent's Services

Dexponent's services are intended for individuals who have reached the legal age of majority in their jurisdiction of residence. If you are a minor under local law, you may only use our Services with the express consent or under the direct supervision of a parent or legal guardian.

We do not knowingly collect personal information from individuals under the age of 13. In accordance with the Children's Online Privacy Protection Act (COPPA), if we become aware that we have inadvertently collected personal data from a child under 13 without verified parental consent, we will take immediate steps to delete such information and restrict the child's access to our Services.

If you are a parent or legal guardian and believe your child has provided us with personal information without your consent, please contact us so we can take appropriate action.

13. Business Transfers and Change of Ownership

If Dexponent undergoes a corporate transition, such as a merger, acquisition, reorganization, or sale of assets (in whole or in part), your Personal Information may be transferred as part of that transaction. Any such transfer would remain subject to the commitments made in this Privacy Policy unless you are otherwise notified.

In the event of a change in ownership to an unaffiliated third party, we will make reasonable efforts to notify you, such as by updating this Privacy Policy on our website or, where appropriate, by sending a notice to the email address you have provided (at our discretion).

14. Updates to This Privacy Policy

Dexponent may revise this Privacy Policy from time to time to reflect updates in our legal obligations, data handling practices, or the features of our Services. Whenever we make material changes, we will ensure that an updated version is made publicly available on our platform, with the effective date clearly indicated at the top of the policy.

We encourage you to review this Privacy Policy regularly to stay informed about how we collect, use, and protect your information. Your continued use of Dexponent's Services following any update signifies your acknowledgment and acceptance of the revised terms.

15. Complaints and Concerns

If you have concerns or complaints regarding Dexponent's handling of your personal information or believe your privacy rights have been violated, we encourage you to contact us using the details provided in the "Contact Us" section below. We take all complaints seriously and will aim to investigate and respond to your concerns in a timely and appropriate manner.

Depending on your location, you may also have the right to file a complaint with your local data protection or supervisory authority.

16. Contact Us

If you have any questions or comments about this Privacy Notice, our privacy practices, or if you would like to exercise your rights with respect to your Personal Information, please contact us using this Email: support@dexponent.com

Supplemental Privacy Notice (European Economic Area, United Kingdom, Switzerland, Turkey, and EFTA – "EEA+")

Effective Date: 7th July 2025

This Supplemental Privacy Notice applies only to individuals located in the European Union (EU), European Free Trade Association (EFTA) member states, Switzerland, Turkey, and the United Kingdom ("EEA+"). It supplements the Dexponent Global Privacy Policy and is provided in compliance with data protection laws applicable in these regions, including the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

1. Data Controller

Dexponent Inc. is the data controller of your personal information where we determine the purposes and means of processing.

2. Legal Framework for Handling Your Information

In compliance with applicable data protection laws in the EEA+ region (including the GDPR and UK GDPR), Dexponent is required to inform you of the legal grounds on which we process your personal information. The legal basis may vary depending on the context and purpose of the processing. In some cases, more than one legal ground may apply simultaneously.

Below are the primary legal bases upon which Dexponent relies:

a. Consent

We process your personal information when you have given us explicit permission to do so. This applies to certain marketing communications, optional data sharing for analytics, or when interacting with third-party features. You have the right to withdraw your consent at any time without affecting the legality of prior processing.

b. Contractual Necessity

We process your personal data when it is necessary to enter into or perform a contract with you. For example, we may need your information to:

• Allow access to Dexponent's services and features,
• Respond to inquiries and support requests,
• Fulfill requests made via the platform, or
• Enable functionality that requires basic identity or contact information.

Without this data, we may not be able to offer you our core services.

c. Legitimate Interests

We may process your data based on our legitimate interests, provided such processing does not override your fundamental rights or freedoms. These interests may include:

• Maintaining the security and performance of our platform,
• Providing customer support and service improvements,
• Detecting and preventing fraud or misuse,
• Analyzing usage to improve functionality and user experience.

We always weigh our legitimate interests against your privacy rights and provide options to object where applicable.

d. Legal Obligations

We may process your information when required to do so under applicable laws. This includes:

• Compliance with anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations where relevant,
• Tax, accounting, and regulatory reporting duties,
• Responding to legal claims or complying with lawful governmental or judicial requests.

Dexponent ensures that all personal information collected is processed lawfully, fairly, and transparently. You may contact us at any time to learn more about how these legal bases apply to your personal data.

3. International Transfers of Your Personal Information

Dexponent operates in a globally connected environment, which means your personal information may be transferred to and processed in countries outside your own, including countries that may not offer the same level of data protection as those in the European Economic Area (EEA), Switzerland, Turkey, or the United Kingdom.

If you access our services from one of these regions and provide personal data, you acknowledge that your information may be transferred to and stored on servers located in jurisdictions such as the United States, where privacy laws may differ from those in your country of residence.

When we transfer personal information internationally, we apply appropriate safeguards in line with applicable data protection laws. These safeguards may include:

• Relying on adequacy decisions issued by the European Commission (or equivalent authorities),
• Using standard contractual clauses approved by regulators, or
• Applying other lawful transfer mechanisms permitted under local data protection regulations.

We are committed to protecting your data during such transfers and ensuring it continues to receive a standard of protection essentially equivalent to that required in the EEA+ region.

If you would like more information about the safeguards we rely on when transferring your data across borders, please contact us using the details provided in the "Contact Us" section of this Privacy Policy.

4. How to Raise Concerns or File a Complaint

If you believe that Dexponent has mishandled your personal information or that your data protection rights have been violated, you have the right to file a complaint with the data protection authority in your country or region.

We encourage you to reach out to us first so we can try to address your concern directly. However, if you are not satisfied with our response, or prefer to contact a regulatory authority directly, you may lodge a complaint with the appropriate supervisory authority in your jurisdiction.

For users located in the European Economic Area (EEA), Switzerland, the United Kingdom, or Turkey, a list of national data protection authorities is available online and can typically be found by visiting the official website of your country's data protection agency.

Supplemental U.S. State Privacy Notice

Effective Date: 7 July 2025

This Supplemental Privacy Notice applies only to natural persons residing in U.S. states that have enacted privacy-related consumer protection laws (including, but not limited to, California, Colorado, Connecticut, Utah, and Virginia). This notice is incorporated by reference into Dexponent's Global Privacy Policy and supplements the information contained therein.

Please note: Some of the laws referenced herein are still subject to updates through implementing regulations. As regulatory guidance evolves, Dexponent will update this section and our internal processes accordingly to ensure ongoing compliance.

1. Categories of Personal Information We Collect, Use, and Share

Dexponent does not collect personal data beyond what is necessary for functionality, security, and compliance. The categories of data we may collect over the preceding and upcoming 12 months include:

• Personal Information we collect is set out at section 2 of the Global Privacy Policy.
• How We Use the Personal Information We Collect is set out at Section 3 of the Global Privacy Policy.
• When and With Whom We Share Personal Information is set out at Section 4 of the Global Privacy Policy.

Privacy Rights for U.S. Residents

Depending on your state of residence, you may have some or all of the following rights:

• Right to Know the categories and specific pieces of personal information we collect, use, and disclose.
• Right to Delete personal information we collected from you.
• Right to Correct inaccurate personal information.
• Right to Opt Out of the sale or sharing of personal information, if applicable.
• Right to Non-Discrimination for exercising your rights.
• Right to Access or Data Portability (in a readily usable format).

2. No Sale of Personal Information

Dexponent does not sell your personal information. Under applicable U.S. state privacy laws, the "sale" of personal information typically refers to disclosing personal data to a third party in exchange for monetary or other valuable consideration, for purposes not defined as "business purposes."

We do not engage in such practices. Any information we may share is done strictly to operate our services, fulfill legal obligations, or at your explicit request. Disclosures made to service providers or integrations necessary to support Dexponent's features are not considered a sale under relevant data privacy laws.

3. No Discrimination for Exercising Your Rights

We respect your privacy rights and will never discriminate against you for exercising them. In accordance with U.S. state privacy laws, we will not deny you services, provide you with a different level or quality of service, or charge you different prices because you have exercised your rights under applicable data protection laws.

4. Updates to This Notice

We may revise this Supplemental Privacy Notice from time to time to reflect changes in laws, regulations, or our operational practices. When we make material changes, we will notify you as required under applicable law.