If you would like to report a security vulnerability with the Levitate marketing web site or any of our software applications, please reference our Vulnerability Disclosure Program.

We do not sell, trade, or otherwise transfer your Personal Information, or data that you provide Levitate (including, but not limited to, your Contact Data) to outside parties, except we may disclose such information to third parties under the following circumstances:

• in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, or pursuant to applicable law, judicial or other government subpoenas, warrants, or orders;
• if it is necessary to protect the safety of Company employees, agents, customers or any person;
• in connection with a merger, sale, or acquisition of the Company, or the Company files for bankruptcy; and
• to our service providers, business partners, suppliers, sub-contractors, or agents who perform services for us, as well as our professional advisers (including our lawyers, bankers, auditors and insurers), and analytics and search engine providers that assist us in the improvement and optimization of the Services;
• to providers of Underlying Models (as defined in the Terms of Service (as defined below)) used to power our AI Models (as defined in the Terms of Service), a current list of which can be found at https://www.levitate.ai/underlying-ai-model-providers;
• to affiliates who assist us with our advertising, marketing and sale efforts; and
• to certain third parties that refer customers to us (to the extent of those customers).

We collect Personal Information from you when you:

• register for an Account (as defined in the Terms of Service);
• enter information on our Website;
• access or use our Website and/or Levitate;
• make a purchase on our Website;
• connect Levitate to your email or calendar systems;
• register for our newsletter;
• contact or correspond with us; or
• respond to a survey or marketing communication from us.

When visiting or registering for an Account, or using Levitate or the Services, you may be asked to provide, and we may collect the following types of Personal Information:

• personal identifying data (given and surname, employee id/reference, job title, location, time zone, photograph, calendar information);
• communication/contact details (email address, telephone number);
• employment related data (employee reference identifier, job title and level, departments, work location, calendar and meeting information); and
• billing information.

Additionally, when you visit the Website and use Levitate, we may automatically collect online identifiers such as internet protocol addresses, cookie information and advertising ID (for mobile users).

Levitate and/or the Services may allow you to create notes about the contacts and/or relationships in your network (the "Notes"). We do not collect any information from Notes. You agree not to create Notes that contain or reference, and understand and agree we have no obligations or liability with respect to: (i) information that can identify an individual in relation to any past, present, or future physical or mental health or condition, provision of health care, or payment for the provision of health care, including, but not limited to, diagnoses, treatment information, medical test results, and prescription information; and/or (ii) an individual's race, ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric data, sex life or sexual orientation. Without limiting the generality of the foregoing, you acknowledge in no event will the Company be liable to you or any third party for any direct, indirect, incidental, lost profits, remote, cover, exemplary, consequential, special, or punitive damages, regardless of the foreseeability of such damages resulting from your use of the Notes.

We will only maintain Personal Information until the termination of your customer agreement with us. For Levitate customers, Personal Information is securely deleted within thirty (30) days following the termination of your Account (and customer agreement) except as otherwise set forth herein or in the Terms of Service. For doubt avoidance purposes, Personal Information that has already been de-identified and disassociated from your Account is no longer considered Personal Information.

We will retain Inputs (as defined in the Terms of Service) and Outputs (as defined in the Terms of Service) submitted through Levitate to perform the Services, and/or for research purposes, product improvement, or system monitoring.

We may retain your questions and feedback in order to improve the Website. Do not send us any information, ideas, suggestions, proposals, or comments that you consider confidential or that you wish to be treated as confidential. If you no longer want us to use or retain the Personal Information you provided to us, you may contact us at support@levitateapp.com and request that we delete your Personal Information from our records. We will honor your Personal Information deletion requests within thirty (30) days except with respect to Personal Information we retain pursuant to this Privacy Policy or the Terms of Service and/or as required to enforce our rights under this Privacy Policy and/or the Terms of Service.

Notwithstanding anything to the contrary set forth herein, we retain your Personal Information, Inputs, and Outputs for longer even after the termination of your Account (and customer agreement) and/or after you request the deletion of your Personal Information for certain reasons, including, but not limited to: (a) complying with applicable laws; (b) protecting you or us from threats (such as security threats or fraud); (c) enabling us to administer our business, such as for quality control and customer service; (d) managing corporate transactions; and/or (e) understanding and improving our business and customer relationships generally.

The Website and Levitate may use Google Analytics and similar web analytics services. Google Analytics is used to track unregistered users on the Website and Levitate, to record multiple visits by unregistered users to the Website and Levitate, and to record all the pages that unregistered users visit at the Website and Levitate. If and when an unregistered user registers with the Website and Levitate, all of his or her previous visits and activity on the Website and Levitate will be associated with his or her registered user profile. Google Analytics tracks registered users' visits to the Website and Levitate whenever they return.

The Website and Levitate will not (and will not allow any third party to) use Google Analytics to track, collect, or upload any data that personally identifies an individual (such as a name, address, or billing information), or other data that can reasonably be linked to such information by Google.

The Website and Levitate may use all features of Google Analytics for Display Advertisers including obtaining specific visitor cookie data, such as the source, medium, and keyword used to visit the Website and Levitate. Google Analytics does not store any visitor-specific data, and the Website and Levitate will not use specific data regarding users in any way related to Google Analytics, Google Adwords, and Remarketing.

The Website and Levitate may use remarketing with Google Adwords and analytics to display content-specific advertisements to users who previously visited the Website and Levitate when those users go to other websites that have Google Display Network implemented.

The Website and Levitate and other third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimize, and serve ads based on users' past visits to the Website and Levitate.

The Website and Levitate will not facilitate the merging of personally identifiable information with non-personally identifiable information that is collected through any Google advertising product or feature unless you specifically and affirmatively provide us with your consent to that merger of personally identifiable and non-personally identifiable information.

You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using Google's Ads Settings.

You can also opt-out of Google Analytics for Display Advertising, to prevent your data from being used by Google Analytics, by going to the Google Analytics opt-out page.

If you would like to learn more about how Google uses information collected through Google Analytics, you can read about it at: https://support.google.com/analytics/answer/6004245.

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. The privacy policies and applicable terms of use of the third-party sites will govern your interaction with such third-party sites. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Website and welcome any feedback about these sites.

We honor "Do Not Track" signals and do not track, plant cookies, or use advertising when a "Do Not Track" browser mechanism is in place.

‍

‍

We may use the Personal Information we collect from you in the following ways:

• to personalize your experience;
• to quickly process your transactions;
• to provide access to your Account;
• to provide you with the Services;
• to respond to your customer service requests;
• to compile data regarding Website traffic and Website interaction to better user experience;
• to understand your use of artificial intelligence capabilities in Levitate; and
• to generate user content through artificial intelligence capabilities in Levitate.

We do not access, use, or share your Contact Data for any purpose other than to provide the Services to you, and only as necessary to fulfill our contractual obligations.

Your Personal Information is contained behind secured networks and is only accessible by a limited number of Company personnel who have special access rights to such systems and are required to keep the Personal Information confidential. We implement a variety of security measures when a user places an order, submits, or accesses their Personal Information to maintain the safety of your Personal Information. Furthermore, in connection with placing an order or making payments on the Website or in Levitate, we will not have access to your payment information such as bank accounts or routing numbers, or your credit and debit card information and no bank accounts or routing numbers or credit or debit card information is stored on our servers. All credit and debit card information will be submitted to, stored by and processed through a third party payment intermediary service (the "Gateway"). All such interactions between you and the Gateway are governed by the Gateway's privacy policy and terms of use.

Google Apps, Office 365, and Hosted Exchange specific functionality

When you allow Levitate to connect with your email and/or calendar systems such as Google Apps for Business, Gmail, Office 365, Outlook.com, or traditional Microsoft Exchange Server, our system will have access to data in your address book, email messages, and calendar. We will use meeting history, metadata about sent email messages (such as: name and email address of the email sender, recipient, and time and date when message was sent), and your address book to help build your contact list in Levitate. Depending on the features available to you pursuant to the Services to which you have subscribed, we may also use statistics about meetings and sent email messages to provide you with reporting, notifications, and analytics to help you better understand the interactions you or your colleagues have with individuals and companies on your contact list.

Levitate also offers optional client-side email add-ins for Microsoft Outlook and Gmail. If you install these add-ins, you will need to grant the add-in permission to review the content of individual emails in order to allow the add-in to function properly. Any content reviewed by the add-in will only be sent to our servers with your active consent, such as when you opt to save the content as a Note in Levitate or opt to save information from an email signature into a contact's profile in Levitate.

Email system functionality (including Google Apps, Office 365, Hosted Exchange, and POP and IMAP email systems)

Levitate requires your permission to send email, place items on your calendar, and update your contacts. Permission to send email allows you to use Levitate to compose email messages to your contacts. Permission to place items on your calendar allows Levitate to set reminders to follow up with contacts or to complete action items. Permission to update your contacts allows Levitate to add contacts to your email address book that were created in Levitate or to sync information from Levitate to your email address book.

Our servers do not store the content of your email messages, unless you tag your emails using the "Track with Levitate" plug-in or allow the optional email lead parser to analyze your emails. In some cases, Levitate may analyze the replies to emails sent through Levitate to detect whether the email message was received or whether the recipient requested to unsubscribe from future emails. In such cases, we do not store the contents of the message. If you opt to use the meeting scheduler functionality to schedule your meetings, Levitate may store information regarding your meetings, including: names of attendees, subject, date and time.

Yes, we use cookies on the Website and in Levitate.

Cookies are small text files that a website or its service providers transfer to your computer's hard drive through your Web browser that enables the website's or its service providers' systems to recognize your browser and capture and remember certain Personal Information about you. Cookies may be used for different purposes (computer authentication, session monitoring, storage of information on specific configurations regarding users that access the server, storage of preferences, etc.).

We use cookies to help us compile data about Website traffic and Website interaction so that we can offer better Website experiences and tools in the future. You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. If you turn cookies off, some of the features that make your Website experience more efficient may not function properly and you may not be able to access all of the functionalities of the Website and Levitate. You do this through your browser settings. Since each browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies. Below are the methods offered by the primary browsers which allow the users to express their options regarding the use of cookies:

• Internet Explorer
• Chrome
• Firefox
• Opera
• Safari

Some of the cookies on the Website and Levitate are set by us and called first-party cookies. We also use third-party cookies on the Website – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Targeting Cookies

These cookies may be set through our Website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. These cookies store Personal Information that uniquely identify your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Website. They help us to know which pages are the most and least popular and track how visitors move around the Website and Levitate. Personal Information collected by these cookies is aggregated and anonymized. If you do not allow these cookies we will not know when you have visited our Website and will not be able to monitor its performance.

The list of cookies currently on the Website and Levitate can be viewed at: https://levitate.ai/cookies

We do not allow third-party behavioral tracking.

Yes, we use artificial intelligence in Levitate.

Use of artificial intelligence technologies

We offer AI Models to provide an interactive user experience. In certain cases, our AI Models may rely on Underlying Models. As outlined in this Privacy Policy, the Terms of Service, and in any agreements governing your use of Levitate and/or the Services, your Inputs, Outputs, and Personal Information may be shared with and processed by these Underlying Models if and to the extent required to enable your use of our AI Models. We do not share your Inputs with Underlying Models for machine learning purposes or to develop, train, or improve any Underlying Models. To the extent you use our AI Models, you hereby grant to us a non-exclusive, perpetual, irrevocable, unlimited, fully paid-up, royalty-free, transferable, fully-sub-licensable (through multiple tiers), license to use non-personally identifiable Inputs in aggregate and blinded formats that do not identify, reference or imply an association with you, for machine learning purposes or to develop, train, and improve our AI Models.

Our AI Functionality

As of the date set forth above, our current AI Models may be deployed within Levitate:

• to generate custom email;
• to generate social media content;
• to generate custom blog content;
• to respond to customer service requests; and
• to provide product support.

You are responsible for ensuring your use of our AI Models complies with our Terms of Service, which can be found at https://www.levitate.ai/terms-of-service (the "Terms of Service"), and our AI Acceptable Use Policy which can be found at https://www.levitate.ai/ai-acceptable-use-policy.

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations. We collect your email address in order to:

• send information, respond to inquiries, and/or other requests or questions;
• process orders and send information and updates pertaining to orders;
• send you additional information related to your product and/or service; and
• market to our mailing list or continue to send emails to our clients after the original transaction has occurred.

To be in accordance with the CAN-SPAM Act, we agree to the following:

• not using false or misleading subjects or email addresses;
• identify the message as an advertisement in some reasonable way;
• include the physical address of our business or site headquarters;
• monitor third-party email marketing services for compliance, if one is used;
• honor opt-out/unsubscribe requests quickly; and
• allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email or email us at support@levitateapp.com and we will promptly remove you from ALL correspondence.

Shine the Light. Under California's "Shine the Light" law, California residents who provide Personal Information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared that information for the immediately prior calendar year (e.g. requests made in 2025 will receive information regarding 2024 sharing activities). To obtain this information, please send an email message to support@levitateapp.com with "Shine the Light Request" on the subject line and in the body of your message. We will provide the requested information to you at your e-mail address in response. Please be aware that not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing will be included in our response.

CA Privacy Laws. The CA Privacy Laws provide certain rights to California residents regarding their Personal Information. A California resident has the right to request that The Company disclose certain information, including: (1) the categories of Personal Information it has collected about that California resident, (2) the categories of sources from which the Personal Information is collected, (3) the business or commercial purpose for collecting or selling the Personal Information, (4) the categories of third parties with whom The Company shares Personal Information, (5) the specific pieces of Personal Information it has collected about that resident, and (6) the categories of Personal Information that The Company has sold about that resident and the categories of third parties to whom that information was sold. A California resident has the right to request that The Company delete their Personal Information. A California resident also has a right to "opt-out" of the sale of that resident's Personal Information. A California resident has the right not to be discriminated against for exercising their privacy rights under the CA Privacy Laws. A California resident has the right request that The Company correct inaccurate Personal Information about the resident. Finally, a California resident has the right to limit The Company's use and disclosure of sensitive Personal Information about the resident; provided, however, that the CA Privacy Laws do not prohibit The Company from offering financial incentives, different prices, rates, levels or qualities of goods or services for the collection of Personal Information if that price or difference is directly related to the value provided by the consumer's data.

You can change your Personal Information:

• By emailing us at support@levitateapp.com

Pursuant to California Civil Code Section 1789.3, California users are entitled to the following consumer rights notice: California residents may reach the Compliant Assistance Unit of the Division of Consumer Services for the California Department of Consumer Affairs by mail at 1625 North Market Blvd., Sacramento, CA 95834, or by telephone at (916) 445-1254 or (800) 952-5210.

When it comes to the collection of Personal Information from children under the age of thirteen (13) years old, the Children's Online Privacy Protection Act ("COPPA") puts parents in control. The Federal Trade Commission, United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online. We do not specifically market to children under the age of thirteen (13) years old.

To protect children's Personal Information, we do not knowingly collect any Personal Information from persons under the age of eighteen (18) that can be used to specifically identify them, and the Company does not permit persons under the age of eighteen (18) to use the Website and Services. If we become aware that a child under the age of eighteen (18) has provided us with Personal Information, we will immediately take steps to delete the Personal Information submitted and terminate the Account.

If you believe we might have any information from or about underage children, please contact us at support@levitateapp.com.

We may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices. You should check our Website frequently to see recent changes. When we change the policy in a material manner, we will update the 'last updated' date at the top of this page. If you object to any changes, you may close your Account. Continuing to use our Services after we publish changes to this Privacy Policy means that you are consenting to the changes.

The Website and Levitate are hosted in the United States ("U.S.") and are intended for users in the U.S. only. They are not intended to solicit data or information from residents in other countries or regions of the world. If you are a consumer accessing the Website and/or Levitate from the European Union, Asia, or any other region with laws or regulations governing personal data collection, use and disclosure that differ from U.S. laws, your continued use of the Website and Levitate, which are governed by U.S. laws and this Privacy Policy, serve as your consent to the transfer of your Personal Information and other information to the U.S. and the treatment thereof by the Company under U.S. laws applicable to the Company.

If there are any questions regarding this Privacy Policy, you may contact us using the information below.