1. About this Privacy Policy This is the Data Protection and Privacy Policy (“Policy”) of Groupify Inc. (“Groupify” “we” or “us”), a company incorporated in Delaware. It applies to all subsidiaries and affiliates of Groupify to the extent that they process personal data.

Groupify treats personal data that it receives through its websites, portals, and any other means with due care and is dedicated to safeguarding any personal data it receives. This Policy is designed to inform you about the type of information that Groupify collects when using our website and our application and the purposes for which this information is being processed, used, maintained, and disclosed (collectively the “Services”).

This Privacy Policy aims to explain in a simple and transparent way what personal data we gather about you and how we process it. By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. 2. Personal Data Personal data refers to any information that tells us something about you or that we can link to you. Groupify processes any information we receive from you, including when you or your business enquire or make an application for Groupify’s services, register to use and/or use any of our services and when you communicate with us through e-mail, SMS, WhatsApp, a website or portal, telephone or any other electronic means.

Such information may include your: name including first name and family name, nationality, place of birth, date of birth, street name, street number, street number suffix, postal code, city, country of residence, phone number, e-mail address, gender, photograph, document type, ID document (picture), document number, issue date, expiration date, geolocation and a selfie.

Groupify processes your personal data in accordance with the applicable Data Protection Law in its jurisdiction of incorporation. By processing, we mean everything we can do with this data such as collecting, recording, storing, adjusting, organising, using, disclosing, transferring or deleting. 3. Sensitive Data We do not record sensitive data relating to your health, ethnicity, or religious or political beliefs unless it is strictly necessary. When we do it is limited to specific circumstances. 4. What We Do With Your Personal Data We only use your personal data for legitimate business reasons. This includes: 1. Administration When you provide us with information by filling in a form on our website or through the application, we are legally obliged to collect personal data that verifies your identity (such as a copy of your ID card or passport) and to assess whether we can accept you or your company as a customer. We also need to know your address or phone number to contact you. 2. Managing Customer Relationships We may ask you for feedback about our products and services and share this with certain members of our staff to improve our offering. We might also use notes from conversations we have with you online, by telephone, or in-person to customize products and services for you. 3. Providing you with the Best-Suited Products and Services When you visit our website, call our customer service centre or visit a branch we gather information about you. We analyze this information to identify your potential needs and assess the suitability of products or services. We assess your needs in relation to key moments when a specific financial product or service may be relevant to you. We assess your interests based on the simulations you participate in on our website. 4. Improving and Developing Products and Services Analyzing how you use our products and services helps us understand more about you and shows us where we can improve. For instance, we analyze the results of our marketing activities to measure their effectiveness and the relevance of our campaigns. 5. Preventing and Detecting Fraud and Data Security We have a duty to protect your personal data and to prevent, detect and contain data breaches. This includes information we are obliged to collect about you, for example, to comply with regulations against money laundering, terrorism, and tax fraud. 6. Internal and External Reporting We process your data for our operations and to help our management make better decisions about our operations and services. To comply with a range of legal obligations and statutory requirements (anti-money laundering legislation and tax legislation, for example). 5. Who We Share Your Data With And Why Whenever we share personal data internally or with third parties in other countries, we ensure the necessary safeguards are in place to protect it. To be able to offer you the best possible services and remain competitive in our business, we share certain data both internally as well as outside of Groupify for operational, regulatory or reporting purposes. We may also transfer data to centralized storage systems or to process it globally for more efficiency.

In addition, to comply without regulatory obligations, we may disclose data to the relevant regulatory, judicial/investigative authorities. Furthermore, when we use other service providers. However, we only share personal data that is required for the particular task we involve the service provider for. Without limiting the foregoing, if our business enters into a joint venture with or is sold to or merged with another business entity, your information may be disclosed to our new business partners or owners.

Your information may also be used for other purposes for which you give your specific permission, or when required by law, or where permitted under the terms of the laws of the relevant jurisdiction. 6. Your Rights And How We Respect Them We respect your rights as a customer to determine how your personal information is used. These rights include: 1. Right to Access You have the right to ask us for an overview of your personal data that we process. 2. Right to Rectification If your personal data is incorrect you have the right to ask us to rectify it. If we shared data about you with a third party that is later corrected, we will also notify the party 3. Right to Object to Processing You can object to Groupify using your personal data for its own legitimate interests. There is a list of contact details at the end of this Privacy Policy. We will consider your objection and whether processing your information has any undue impact on you that requires us to stop doing so. You can also object to receiving personalized commercial messages from us. You cannot object to us processing your personal data if we are legally required to do so, even if you have opted out of receiving personalized commercial messages. 4. Right to Erasure You may ask us to erase your personal data if (a) we no longer need it for its original purpose, (b) You withdraw your consent for processing it, (c) You object to us processing your data for our own legitimate interests or for personalised commercial messages, (d) Groupify unlawfully processes your personal data. 5. Right to Complain Should you for any reason be unhappy with the way Groupify treats your personal data, you can file a complaint with Groupify’s Compliance Officer via [email protected] 7. How We Protect Your Personal Data We apply an internal framework of policies and minimum standards to keep your data safe. These policies and standards are periodically updated to keep them up to date with regulations and market developments.

More specifically and in accordance with the law, we take appropriate technical and organizational measures (policies and procedures, IT security, etc.) to ensure the confidentiality and integrity of your personal data and the way it is processed.

In addition, Groupify employees are subject to confidentiality and may not disclose your personal data unlawfully or unnecessarily. 8. How Long We Keep Your Personal Data Groupify will store and process your personal data only as long as it is necessary to perform our obligations under the agreement with you or as long as the law requires us to store it. Therefore, we keep your personal data as long as you are using our Services and for six (6) years after termination of the agreement to comply with the law. There may be circumstances whereby we are obliged to store your personal data even longer. 9. Contact Us If you want to know more about Groupify’s data policies and how we use your personal data or have any comments about our Privacy Policy, you can send us an e-mail at the following dedicated email address: [email protected]