PRIVACY POLICY ("PRIVACY POLICY")

SUMMARY

PII We Collect. In order to provide and improve our Services, we may collect information you provide and other information as detailed below.

How We Use Your PII. We use your PII for purposes such as providing you with, improving and operating our Services, to understand the usage trends and preferences of our users and in order to protect the Services from threatening activities.

Artificial Intelligence ("AI"). AI tools may be used on our Services. These assist us in improving our Services and efficiency.

Cookies and Web Beacons. Web beacons, tags and scripts may be used on our Services. These assist us in delivering cookies, counting visits to our Services, understanding usage effectiveness. You can disable cookies but then your online experience on our Services might be limited or disabled.

Links. The Services may contain links to other services, sites and applications that are subject to their own privacy and data protection policies.

Children. We do not intend to collect PII from anyone we know to be under eighteen (18) years old. If you believe that we might have collected such information, please contact us.

PII Sharing. We grant access to your PII to our affiliates, agents, representatives, and third party providers. In addition, we may share your PII: if required for the provision, maintenance and improvement of the Services; to satisfy applicable law; when permitted by you; to prevent fraud or harm; or in the event of a merger, acquisition or other structural change or form of sale of part or all of our assets.

PII Security. We follow generally accepted industry standards to protect against unauthorized access, alteration, disclosure or destruction of your PII, however we cannot guarantee its absolute security. We keep your PII only for as long as reasonably necessary to fulfill a legitimate business need or to comply with any applicable legal or ethical reporting or document retention requirements.

Data Integrity. We process PII only for the purposes for which it was collected and take reasonable steps to ensure that the PII we process is accurate, complete and current. However, we depend on you to rectify your PII when necessary.

Your Rights. At any time, you may contact us and request to exercise your rights in accordance with applicable law. For more details see Section 9 below.

Enforcement. We will cooperate with the appropriate regulatory authorities to resolve any formal written complaints regarding processing of PII that cannot be resolved between us and the complaining individual.

Transferring of PII. Your PII may be stored and processed in a country outside the country of your residence or from which you access the Services.

Your California Privacy Rights. For more details see Section 14 below.

POLICY

1. Information We Collect and How We Use It

In order to provide and improve our Services and to understand the usage trends and preferences of our users or for our business purposes, we may collect and process PII, including the following types of information:

Processing which is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (GDPR Article 6(1)(b)) OR Processing which is necessary for compliance with a legal obligation to which Company is subject (GDPR Article 6(1)(c)):

Information You Provide. We may collect and process PII such as full name, e-mail address, mobile phone number and billing address.

Processing which is necessary for the purposes of the legitimate interests pursued by Company or by a third party (GDPR Article 6(1)(f)) of providing efficient and effective Services to our customers, including:

Third Parties. We sometimes supplement the information that you provide with information that is received from third parties including without limitation any PII obtained through Your AI agents.

User Communications. When you send email or other communication to the Company, we may retain those communications in order to process your inquiries, respond to your requests and improve our Services. We may send you push notifications to send you news and updates in respect of the Services. We may also send you newsletters and promotional communications, you may opt-out of this service at any time by submitting a request to the following e-mail: support@thenvoi.com

User Information. When you use the Services, we may automatically receive and record information from your browser, including without limitation information and statistics about your online/offline status, your IP address, internet service provider, search history, type of browser, your regional and language settings and software and hardware attributes. Our systems may automatically record and store technical information regarding the method and nature of your use of the Services. An IP address is a numeric code that identifies your browser on a network, or in this case, the Internet. Your IP address is also used to gather broad demographic information. The Company uses all of the PII that we collect to understand the usage trends and preferences of our users.

2. Aggregate and Analytical Data

In an ongoing effort to better understand and serve the customers of the Services, we often conduct research on its customer demographics, interests and behavior based on the PII and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and we may share this aggregate data with its affiliates, agents and business partners. This aggregate information does not identify you personally. We may also disclose aggregated user statistics in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.

3. Artificial Intelligence

We may use AI tools in order to improve the quality and/or efficiency of the Services. By accessing and/or using the Services you hereby consent that your PII will be accessed, stored and processed by such AI tools.

4. Cookies and Web Beacons

In order to collect the data described herein we may use temporary cookies that remain on your browser for a limited period of time. We may also use persistent cookies that remain on your browser until the Company's Services are removed, in order to manage and maintain the Services and record your use of the Services. Cookies by themselves cannot be used to discover the identity of the user. A cookie is a small piece of information which is sent to and stored on your browser. Cookies do not damage your browser. Most browsers may allow you to block cookies but you may not be able to use some features on the Services if you block them. You may set most browsers to notify you if you receive a cookie (this enables you to decide if you want to accept it or not). We may also use web beacons via the Services to collect information. Web beacons or "gifs", are electronic images that may be used in our Services or in our emails. We use Web beacons to deliver cookies, count visits and to tell if an email has been opened and acted upon.

5. Links

Links to or interactions with other services, sites, resources, databases and applications may be provided or required by the Company as part of the Services. The Company is not responsible for the privacy practices or the content of other services, sites, resources, databases and applications and you visit and use them at your own risk and Company shall not be responsible or liable for damages or losses caused in connection therewith. This Privacy Policy applies solely to PII collected and processed by the Company.

6. Children

If you are a child under the age of eighteen (18), you must obtain parental consent prior to using our Services. The Company will not knowingly contact or engage with children under the age of eighteen (18) without said parental consent. If you have reason to believe that a child has provided us with their PII, please contact us at the address given above and we will endeavor to delete that PII from our databases.

7. Information Sharing

As part of providing the Services Company's affiliates, service providers, agents and representatives may have access to your PII. The Company may also share PII in the following circumstances: (a) as required for the provision, maintenance and improvement of the Services; (b) when permitted by you; (c) if we become involved in a reorganization, merger, consolidation, acquisition, or any form of sale of some or all of our assets, with any type of entity, whether public, private, foreign or local; and/or (d) to satisfy applicable law or prevention of fraud or harm or to enforce applicable agreements and/or their terms, including investigation of potential violations thereof or in response to a court order, judicial or administrative subpoena or warrant, or to otherwise cooperate with law enforcement investigations; (f) to our affiliates or other trusted businesses or persons, agents, third party service providers, subcontractors and representatives for the purpose of processing PII on our behalf.

8. Information Security and Retention

We follow generally accepted industry standards to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of PII. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your PII, we cannot guarantee its absolute security. We retain your PII only for as long as reasonably necessary for the purposes for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements.

9. Data Integrity

The Company processes PII only for the purposes for which it was collected and in accordance with this Privacy Policy or any applicable service agreements. We review our data collection, storage and processing practices to ensure that we only collect, store and process the PII needed to provide or improve our Services. We take reasonable steps to ensure that the PII we process is accurate, complete, and current, but we depend on our users to update or correct their PII whenever necessary. Nothing in this Privacy Policy is interpreted as an obligation to store information, and we may, at our own discretion, delete or avoid from recording and storing any and all information.

10. Your Rights

Subject to certain exemptions or derogations, the following rights may apply to certain individuals:

Right of Access and Rectification. You have the right to know what PII we collect about you and to ensure that such data is accurate and relevant for the purposes for which we collected it. We allow our users the option to access and obtain a copy of their PII and to rectify such PII if it is not accurate, complete or updated. However we may first ask you to provide us certain credentials to permit us to identify your PII.

Right to Delete PII or Restrict Processing. You have the right to delete your PII or restrict its processing. We may postpone or deny your request if your PII is in current use for the purposes for which it was collected or for other legitimate purposes such as compliance with legal obligations.

Right to Withdraw Consent. You have the right to withdraw your consent to the processing of your PII. Exercising this right will not affect the lawfulness of processing your PII based on your consent before its withdrawal.

Right of Data Portability. Where technically feasible, you have the right to ask to transfer your PII in accordance with your right to data portability.

You may exercise the above rights by sending a request to support@thenvoi.com

Right to Lodge Complaint. You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your PII.

11. Enforcement

The Company regularly reviews its compliance with this Privacy Policy. Please feel free to direct any questions or concerns regarding this Privacy Policy or our treatment of PII by contacting us as provided above. When we receive formal written complaints it is the Company's policy to contact the complaining user regarding his or her concerns. We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of PII that cannot be resolved between the Company and an individual.

12. Changes to This Privacy Policy

The Company may update this Privacy Policy. We will notify you about material and significant changes in the way we treat PII by sending a notice to the email address provided by you or by placing a prominent notice on the Services. We encourage you to periodically review this Privacy Policy for the latest information about our privacy practices.

13. Consent to Processing

By providing any PII to us pursuant to this Privacy Policy, all users, including, without limitation, users in the United States, Israel and member states of the European Union, fully understand and unambiguously consent to this Privacy Policy and to the collection and processing of such PII abroad. The server on which the Services are hosted and/or through which the Services are processed may be outside the country from which you access the Services and may be outside your country of residence. Some of the uses and disclosures mentioned in this Privacy Policy may involve the transfer of your PII to various countries around the world that may have different levels of privacy protection than your country and may be transferred outside of the European Economic Area. If there is a transfer of your PII outside the EEA we will, in the absence of an EC Adequacy decision relevant to the destination country or to the transfer, enter into appropriate EC approved standard contractual clauses (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en). By submitting your PII through the Services, you consent, acknowledge, and agree that we may collect, use, transfer, and disclose your PII as described in this Privacy Policy.

Questions. If you have any questions about this Privacy Policy or concerns about the way we process your PII, please contact us at support@thenvoi.com

14. Collection and Use of Personal Data of California Residents

Scope. Except as otherwise provided, this part of the Privacy Policy applies only if you are a California resident. For purposes of this section, "Personal Information" has the meaning given in the California Consumer Privacy Act of 2018 ("CCPA"), the California Privacy Rights Act of 2020 ("CPRA"), and any regulations promulgated under either law, in each case, as amended from time to time. This Section does not apply to:

• information exempted from the scope of the CCPA;
• activities governed by a different privacy notice, such as notices we give to California personnel or job candidates; or
• Personal Information we collect, use, and share on behalf of our customers as a "service provider" under the CCPA.

Your California Privacy. Under the CCPA, California consumers may have the following rights:

Right to Information/Know. You can request whether we have collected your Personal Information, and in certain cases, the following information about how we have collected and used your Personal Information during the past twelve (12) months:

• The categories of Personal Information we have collected.
• The categories of sources from which we collected the Personal Information.
• The business or commercial purpose for collecting, sharing, and/or selling Personal Information.
• The categories of Personal Information that we sold or disclosed for a business purpose.
• The categories of third parties to whom Personal Information was sold, shared, or disclosed for a business purpose.

Right to Access. You can request a copy of the Personal Information that we have collected about you during the past twelve (12) months.

Right to Correction. You can request that we correct inaccurate Personal Information that we have collected about you.

Right to Deletion. You can ask us to delete the Personal Information that we have collected from you.

Right to Opt-Out of Tracking for Targeted Advertising Purposes. While we do not sell Personal Information for money, like many companies, we use services that help deliver targeted ads (also known as interest-based ads) to you, as we have described in the "How and Why We Use Your Personal Data" section above. The CCPA classifies our use of some of these services as "sharing" your Personal Information with the advertising partners that provide the services, from which you have the right to opt-out.

Right to Nondiscrimination. You are entitled to exercise the rights described above free from discrimination prohibited by the CCPA.

How to Exercise Your Rights

Right to Information/Know, Access, Correction, and Deletion. You can exercise any of these rights by submitting a request through our dedicated email here: support@thenvoi.com

Right to Opt-Out of Tracking for Targeted Advertising Purposes. You can submit requests to opt-out of tracking for targeted advertising purposes by referring to our Cookie Policy. Your request to opt-out will apply only to the browser and the device from which you submit the request.

Verification of Identity. If we receive any request from You, we will use a two-step process for online requests where the California consumer must first, clearly submit the request and then second, separately confirm the request. We will use other appropriate measures to verify requests received by mail or telephone. If you are a California consumer submitting a request, you must provide sufficient information to identify yourself, such as name, e-mail address, home or work address, or other such information that is on record with us so that we can match such information to the Personal Information that we maintain. Do not provide social security numbers, driver's license numbers, account numbers, credit or debit card numbers, medical information or health information with requests. If your request is unclear or submitted through means other than described above, we will give you specific directions on how to submit the request or remedy any deficiencies. If we cannot verify your identity, we may deny the request.

Response Timing and Format. We endeavor to respond to a verifiable consumer request within forty five (45) days of its receipt. If we require more time (up to an additional forty five (45) days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail. Disclosures we provide may only cover the twelve (12) month period preceding a California consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Personal Information that we Collect, Use and Disclose. The table below describes our Personal Information practices by reference to the categories in the "Information We collect and How we Use it" section above and the categories described in the CCPA (Cal. Civ. Code Section 1798.140(v)) and describes our practices currently and during the twelve (12) months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, may contain other categories of personal information not described below. Note that:

• We do not "sell" personal information as defined by the CCPA and have not sold Personal Information in the preceding twelve (12) months.
• We do not use or disclose sensitive personal information for purposes that California residents have a right to limit under the CCPA.