FC LABZ PRIVACY POLICY Effective Date: July 26, 2026 Last Updated: July 26, 2026 1. INTRODUCTION FC Labz, LLC ("FC Labz," "we," "us," or "our") provides AI-powered business tools to companies. This Privacy Policy explains how we collect, use, disclose, and protect personal information. This policy covers our website at www.fclabz.com and the FC Labz platform (together, the "Services"). Please read Section 3 carefully. It explains how we handle information about individuals who are not our customers and who have not interacted with us directly. 2. TWO CATEGORIES OF INDIVIDUALS Our practices differ depending on your relationship to us. This policy addresses both: Who you are Where to read Customers and You created an account, contacted us, or browsed our website Sections 4–7 Visitors Search Subjects You did not interact with us. Your contact information may appear in results our Sections 3, 8 customers retrieve If you believe your information appears in our Services and you have never been our customer, Section 8 explains your rights and how to exercise them, including deletion. 3. INFORMATION ABOUT INDIVIDUALS WHO ARE NOT OUR CUSTOMERS 3.1 What We Provide Certain FC Labz tools allow business customers to look up contact information about an individual — name, postal address, telephone number, and email address. We obtain this information from third-party identity and public-records data providers ("Data Providers"). We do not collect it from you directly, and in most cases we have no relationship with you. 3.2 What We Do Not Provide We do not provide, and our tools do not return: criminal records, arrest records, or court records credit information, credit scores, or financial account data employment history, education, or professional license verification information about relatives, associates, or household members Social Security numbers or government identifiers health information 3.3 We Are Not a Consumer Reporting Agency FC Labz is not a consumer reporting agency under the Fair Credit Reporting Act, and information provided through our Services is not a consumer report. Our Terms prohibit customers from using this information to evaluate, screen, or vet any individual, or as a factor in any employment, hiring, credit, insurance, or housing decision. Customers must certify this before every search, and we log those certifications. FC Labz Privacy Policy | Effective July 26, 2026 Page 1 of 5 3.4 Purpose Contact information is provided for a single purpose: to allow a business to locate and communicate with an individual. 3.5 Your Rights You have rights over this information regardless of where you live, including the right to request deletion and to opt out of our providing your information to others. See Section 8. 4. INFORMATION WE COLLECT FROM CUSTOMERS AND VISITORS 4.1 Information You Provide Account: name, business email, company name, job title, phone number Billing: billing address and transaction records. Card numbers are collected and stored by our payment processor, not by us Content: files, prompts, queries, and materials you submit to the Services Communications: messages you send to support or sales 4.2 Information Collected Automatically IP address, browser type, device identifiers, operating system Pages viewed, features used, referring URLs, timestamps Cookies and similar technologies (Section 12) 4.3 Information From Third Parties Authentication data from single sign-on providers you choose to use Payment confirmation from our payment processor Business contact data from commercial data providers, for our own sales and marketing 5. HOW WE USE INFORMATION We use personal information to: provide, operate, secure, and support the Services process payments and manage accounts respond to inquiries and provide customer support monitor for abuse, fraud, and violations of our Terms log and retain permissible-use certifications and associated query records for audit and compliance purposes analyze usage and improve the Services develop and train our models and workflows (Section 6) send service notices, and — with your consent where required — marketing communications comply with legal obligations and enforce our agreements Legal bases (where GDPR or UK GDPR applies): performance of a contract; our legitimate interests in operating and securing the Services; compliance with legal obligations; and consent where required. 6. ARTIFICIAL INTELLIGENCE AND MODEL TRAINING 6.1 Third-Party AI Providers The Services use third-party AI models. Your inputs are transmitted to those providers to generate output. We select providers that contractually commit not to use business customer data to train their own foundation models. 6.2 Our Use of Your Data FC Labz Privacy Policy | Effective July 26, 2026 Page 2 of 5 We may use customer data and generated output to develop, train, evaluate, and improve the FC Labz platform, including our models, prompts, workflows, and classifiers. 6.3 Your Opt-Out You may opt out at any time through your account settings or by emailing dan@fclabz.com. Opt-out takes effect within 30 days and applies going forward. It does not require us to retrain or reverse improvements already developed. We always retain the right to use aggregated and de-identified data that does not identify you or any individual. 6.4 Accuracy Output is generated automatically and is not verified by us. It may be inaccurate, incomplete, or outdated. Do not rely on it without independent verification. 7. HOW WE DISCLOSE INFORMATION We disclose personal information to: Service providers — hosting, payment processing, analytics, email delivery, customer support, and AI model providers, each under contract limiting their use to providing services to us Data Providers — including permissible-use certifications and query logs, for their audit and compliance purposes Our customers — contact information returned in response to their searches (Section 3) Professional advisors — lawyers, auditors, and insurers Legal and safety — where required by law, subpoena, or court order, or to protect rights, safety, or property Business transfers — in connection with a merger, acquisition, financing, or sale of assets We do not sell personal information for money. 8. INDIVIDUALS WHOSE CONTACT INFORMATION APPEARS IN OUR SERVICES 8.1 Your Rights Regardless of your state or country of residence, you may: Request deletion of your contact information from our Services Opt out of our providing your contact information to customers Request access to the contact information we hold about you Request correction of inaccurate information We honor these requests for all individuals, not only residents of states that require it. 8.2 How to Submit a Request Email dan@fclabz.com with the subject line "Data Subject Request." Include your full name, current address, and any previous addresses or phone numbers you want suppressed. We will ask for information sufficient to verify your identity. We use verification information only to process your request and delete it afterward. 8.3 Our Response We respond within 45 days, and may extend once by an additional 45 days with notice. There is no charge. 8.4 An Important Limitation Deletion from our Services does not delete your information from the original source. We license contact information from Data Providers who compile it from public records and other sources. If you want your information removed at the source, you must contact those providers directly. We will identify the applicable provider on request. We suppress deleted records so they do not reappear in later data refreshes. 8.5 California Residents FC Labz Privacy Policy | Effective July 26, 2026 Page 3 of 5 If you are a California resident, you may submit a deletion request through the California Privacy Protection Agency's Delete Request and Opt-Out Platform (DROP), in addition to contacting us directly. 9. CALIFORNIA PRIVACY DISCLOSURES 9.1 Categories of Personal Information In the preceding 12 months we have collected the following categories under the CCPA: Category Examples Disclosed for a business purpose? Identifiers Name, email, postal address, phone, IP address Yes Customer records Billing address, transaction history Yes Commercial information Subscription and usage records Yes Internet activity Pages viewed, features used Yes Geolocation Approximate location from IP address Yes Professional information Employer, job title Yes We do not collect sensitive personal information as defined by the CPRA, and we do not use or disclose it for purposes requiring a right to limit. 9.2 Sale and Sharing We do not sell personal information for monetary consideration. However, when we provide contact information to a customer in response to a search, that disclosure may constitute a "sale" under the CCPA's broad definition, which includes disclosure for other valuable consideration. We treat it as a sale and provide a full opt-out right. To opt out, email dan@fclabz.com or use the "Do Not Sell or Share My Personal Information" link on our website. We honor Global Privacy Control signals. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16. 9.3 Your California Rights Right to know, delete, correct, opt out of sale or sharing, and non-discrimination for exercising any of them. Submit requests to dan@fclabz.com. You may use an authorized agent with written permission. 10. OTHER STATE PRIVACY RIGHTS Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — have rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling. Submit requests to dan@fclabz.com. If we deny a request, you may appeal by replying with the subject line "Appeal." We respond to appeals within 60 days, and you may contact your state attorney general if the appeal is denied. 11. GDPR AND UK GDPR Where these apply, you have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, and the right to lodge a complaint with your supervisory authority. Where we process personal information on behalf of a customer, that customer is the controller and we act as processor. Direct requests to that customer; we will assist them in responding. International transfers are made under Standard Contractual Clauses or another approved mechanism. FC Labz Privacy Policy | Effective July 26, 2026 Page 4 of 5 12. COOKIES AND TRACKING We use strictly necessary cookies for authentication and security, and analytics cookies to understand usage. You can control cookies through your browser settings; disabling necessary cookies will prevent the Services from functioning. We honor Global Privacy Control (GPC) signals as opt-out requests where required by law. We do not use third-party advertising cookies or engage in cross-context behavioral advertising. 13. DATA RETENTION Data Retention Account information Life of the account, plus 6 years Customer content Life of the account, plus 30 days after termination Permissible-use certifications and query logs 6 years from the search Billing records 7 years, for tax and audit purposes Suppression lists Indefinitely, so deleted records do not reappear Security and access logs 24 months 14. SECURITY We maintain administrative, technical, and physical safeguards including encryption in transit and at rest, access controls, logging, and periodic review. No system is completely secure, and we cannot guarantee absolute security. We will notify affected individuals and regulators of a breach as required by law. 15. CHILDREN The Services are for business use and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact dan@fclabz.com and we will delete it. 16. CHANGES TO THIS POLICY We may update this policy. Material changes will be announced by updating the date above and, for account holders, by email at least 30 days before they take effect. Prior versions are available on request. 17. CONTACT US FC Labz, LLC 455 E Clinton Dr, Kirkwood, MO 63122 Privacy inquiries: dan@fclabz.com General: dan@fclabz.com To exercise privacy rights, email dan@fclabz.com with the subject line "Data Subject Request."