SUMMARY OF KEY POINTS

This summary highlights key points from our Privacy Notice. For more details on any topic, use the table of contents below to jump to the relevant section.

• What personal information do we process? We process information that you provide to us (e.g., name and contact details) and limited data automatically collected via cookies and similar technologies.
• Do we process sensitive information? We do not knowingly process sensitive information.
• Do we receive information from third parties? We may receive data from social login providers if you choose to connect an account.
• How do we use your information? To provide, improve, and secure the Services, communicate with you, and comply with law.
• Do we share personal information? Only with your consent, to comply with laws, to provide you with Services, to protect your rights, or to fulfill business obligations (e.g., a merger).
• What are your rights? Depending on where you live, you may have rights to access and delete your data, and to opt out of certain processing such as targeted advertising.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you request information, create an account, subscribe to a newsletter, submit a form, or otherwise contact us.

Personal Information Provided by You

The personal information we collect depends on the context of your interactions with us and the Services, and may include:

• Names
• Company and role
• Email addresses and phone numbers
• Account credentials (hashed passwords)
• Contact preferences
• Support messages and form submissions

Sensitive Information

We do not intentionally process sensitive personal information.

Social Media Login Data

If you choose to register or log in using a social media account, we may receive certain profile information from that provider as described in Section 6.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services; communicate with you; ensure security and prevent fraud; and comply with law.

We may also process your information for other purposes with your consent. Examples include:

• Creating and managing accounts, and enabling authentication
• Delivering services, features, and customer support
• Sending administrative information, service notices, and marketing communications (where lawful)
• Analyzing usage to improve performance, quality, and user experience
• Protecting against, identifying, and investigating security incidents and fraud
• Complying with legal obligations and enforcing our terms, conditions, and policies

3. WHAT LEGAL BASES DO WE RELY ON?

In Short: We only process your personal information when we have a valid legal basis.

If you are in the European Economic Area (EEA) or United Kingdom (UK), we rely on one or more of the following legal bases: (i) consent; (ii) performance of a contract; (iii) compliance with legal obligations; (iv) legitimate interests (such as improving our Services, communicating with you, and ensuring security), balanced against your rights and freedoms; or (v) vital interests in rare emergencies.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

In Short: We share information only in specific situations.

• Service Providers. We may share information with vendors who perform services for us (e.g., hosting, analytics, customer support) under contracts that require them to protect your data.
• Business Transfers. We may share or transfer information in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal Requirements. We may disclose information to comply with applicable law, governmental requests, judicial proceedings, or to protect rights, property, and safety.
• With Your Consent. We may share information for any other purpose with your consent.

5. COOKIES AND OTHER TRACKING TECHNOLOGIES

In Short: We use cookies and similar technologies for essential site functions, analytics, and (where applicable) advertising.

We use cookies, web beacons, and similar technologies to maintain security, prevent crashes, save your preferences, and analyze traffic. Certain third parties may also set cookies for analytics and, where applicable, advertising. Where required by law, we request your consent before using non-essential cookies. You can manage preferences via your browser settings or our cookie banner (if available). For more details, see our Cookie Notice.

6. HOW DO WE HANDLE SOCIAL LOGINS?

In Short: If you choose to use a social login, we may receive certain profile information from that provider.

The information we receive may include your name, email address, profile picture, and other information you choose to make public. We use the information only for purposes described in this Notice. Your use of social platforms and the information they collect is governed by their own privacy policies and settings.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information only as long as necessary to fulfill the purposes outlined in this Notice, unless otherwise required by law.

We retain personal information for the period necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we will delete or anonymize the information. If deletion is not possible (e.g., in backups), we will securely store your information and isolate it from further processing until deletion occurs.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We implement organizational and technical safeguards designed to protect your personal information.

We employ reasonable security measures appropriate to the nature of the information we process. However, no electronic transmission or storage system can be guaranteed 100% secure. You should access the Services within a secure environment and take steps to protect your credentials.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, and to withdraw consent or object to processing.

To exercise these rights, contact us at support@crystalgatedigital.com. We will respond consistent with applicable laws. You may unsubscribe from marketing emails by using the "unsubscribe" link in those emails.

10. DO-NOT-TRACK CONTROLS

Most browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting. At present, no uniform standard for recognizing DNT signals has been adopted, and we do not respond to DNT signals. If a standard is adopted, we will update this Notice.

11. U.S. STATE-SPECIFIC DISCLOSURES

Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia, and Utah) may have specific rights regarding personal information, such as the right to access, delete, correct, and opt out of targeted advertising or certain data sharing.

• Right to Know/Access & Deletion: You may request access to or deletion of your personal information.
• Right to Correct: You may request we correct inaccurate personal information.
• Right to Opt Out: To the extent our use of cookies or similar technologies is considered a "sale"/"sharing" for targeted advertising, you may opt out by contacting us or adjusting cookie preferences where offered.
• Authorized Agent: You may designate an authorized agent to make requests on your behalf where permitted by law.
• Appeals: If we deny a request, you may appeal by replying to our decision notice.

Submit a request by emailing privacy@crystalgatedigital.com with the subject line: Privacy Request. We may verify your request by asking for information matching our records.

12. CHANGES TO THIS NOTICE

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible.

13. CONTACT US

CrystalGate Digital
1235 S Clark St, Arlington, VA 22202
Email: support@crystalgatedigital.com • privacy@crystalgatedigital.com
Phone: +1 737 321 8057

14. REVIEW OR DELETE YOUR DATA

Depending on the laws of your country or state, you may request to review, update, or delete the personal information we maintain about you. To submit a request, email privacy@crystalgatedigital.com.