LSTN2U™

This policy describes how the Democracy Investment Fund ("LSTN2U" "we," "us," or "our") collects, processes, retains, and discloses personal data about you when providing services to you through the LSTN2U platform websites, applications, and services that link to this policy (our "Services"). All information provided to us is optional and LSTN2U does not sell, lease, or otherwise use your data beyond use in connection with the Services. LSTN2U.us is powered by PinPoint Data AI LLC for the Democracy Investment Fund.

This policy applies only to information we collect:

• Through the Services.
• In communications, including email, chat, and other electronic messages, between you and the Services.

It does not apply to information collected by:

• Us offline or through any other means that does not link to this policy; or
• Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Services.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By using the Services, you agree to this Privacy Policy. If you do not agree with our policies and practices, your choice is to not use the Services.

Collection of Personal Information

Types of Information Collected

Personal Data

"Personal Data" is information by which you may be personally identified. LSTN2U may collect the following Personal Data from you:

• Name;
• Email;
• Age;
• Ethnicity;
• Gender;
• Marital Status;
• Phone Number; and
• Any other information voluntarily supplied by you to us.

Your payment information, and other identifying information may be collected by LSTN2U and by our third-party payment processors on our behalf.

Your data may be processed, collected, shared or stored by us and third-party vendors, including but not limited to cloud server hosts, website service providers, website analytics providers, third party payment processors, or other service providers we use to conduct business. Such processing, collection, sharing or storing of data by such third-parties on our behalf may be processed, collected, shared or stored by LSTN2U.

Non-Personal Data

Non-personal data includes any data that cannot be used on its own to identify, trace, or identify a person. We may collect your device information, including GPS data and IP address. When non-Personal Data you give to us is combined with Personal Data we collect about you, it will be treated as Personal Data and we will only use it in accordance with this Privacy Policy.

Privacy of Children

Our Services are not intended for anyone under 16, particularly children under 16 years of age, and we do not knowingly collect Personal Data from children under 16. Participation in our Services is limited to individuals of 16 years old or older. If you are under 16, do not use or register on the Services, use any of the interactive submission features on our Site, or provide any information about yourself to us. If we learn we have collected or received Personal Data from a child under 16 without verification of parental consent, we will delete that information.

How We Collect Information

We collect information when you provide it to us directly through an interaction with us; for example:

• When you fill out registration forms;
• When you fill out feedback forms;
• When you make purchases; or
• When you contact us for any reason.

Why We Collect and How We Use Your Information (Legal Basis)

We collect and use your Personal Data when we have a legitimate purpose to do so, including but not limited to the following reasons:

• to verify your eligibility to use the Services;
• when it is necessary for the general functioning of the Services, including to provide the conversation coaching tools;
• when it is necessary to contact you;
• when it is necessary in connection with any contract you have entered into with us or to take steps prior to entering into a contract with us;
• when we have obtained your or a third party's prior consent;
• when we have a legitimate interest in processing your information for the purpose of providing or improving our Services;
• when we have a legitimate interest in using the information for the purpose of detecting, and protecting against, breaches of our policies and applicable laws.

We may use aggregated (anonymized) information about our users, and information that does not identify any individual, without restriction.

Use and Processing of Collected Information

Automated Data Collection Methods, and Control

As you navigate through and interact with our Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns.

Cookies. A cookie is a small file placed on your computer. LSTN2U does not use cookies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly.

Log Files. We use means through the Services to collect IP addresses, browser type, domain names, and access times. We use this information to optimize our Services, verify location, and maintain system security.

We do not collect personal information automatically, but we may tie this information to Personal Data about you that we collect from other sources or you provide to us.

Do Not Track Settings

We do not track our Users over time or across third party websites to provide targeted advertising and do not specifically respond to Do Not Track ("DNT") signals.

Managing Information

Accessing and Controlling Your Information

If you would like to prevent us from collecting your information completely, you should cease use of our Services. You can also control certain data via these other methods:

• Correction capabilities: You have the ability to access and correct any inaccuracies in your Personal Data through your account.
• Opt-out of non-essential electronic communications: You may opt out of receiving non-essential messages by using the 'unsubscribe' function included in all such messages. You will continue to receive notices and essential transactional emails.
• Optional information: You can always choose not to fill in non-mandatory fields when you submit any form or information linked to our Services.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt-out of personal data processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Either limit or require consent to process sensitive personal data.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to support@lstn2u.us. However, please know we do not currently sell data triggering that statute's opt-out requirements.

The exact scope of these rights may vary by state. To exercise any of these rights please send us an email at support@lstn2u.us. We cannot respond to your request if, (i) we cannot verify your identity; or (ii) your request lacks sufficient details to help us handle the request. We will make best efforts to respond to your request within forty-five (45) days of its receipt. If we cannot respond in forty-five (45) days, we will inform you, in writing, the reason for the delay and will respond to your request within ninety (90) days. Any information we provide will only cover the twelve (12)-month period preceding the request's receipt.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We are not obligated to provide responses to your data requests more than twice in a twelve (12)-month period.

Disclosure of Information

We may use aggregated (anonymized) information about users, and information that does not identify any individual, without restriction. We do not sell Personal Data specific personal or transactional information.

Affiliates and Subsidiaries

We may, for our legitimate interests, share your information with entities under common ownership or control with us who will process your information in a manner consistent with this Privacy Policy and subject to appropriate safeguards.

Successors in Interest

We may, for our legitimate interests, share your information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, in which Personal Data is among the assets transferred. You will be notified of any such change by a prominent notice displayed on our Services or by email. Any successor in interest to this Privacy Policy will be bound to the Privacy Policy at the time of transfer.

Law Enforcement and Other Governmental Agencies

We may share your information when we believe in good faith that such sharing is reasonably necessary to investigate, prevent, or take action regarding possible illegal activities or to comply with legal process. This may involve the sharing of your information with law enforcement, government agencies, courts, and other organizations.

Service Providers

We may, for our legitimate interests, share certain information with contractors, service providers, third party authenticators, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Data confidential and use it only for the purposes for which we disclose it to them. Some of the functions that our service providers provide are as follows:

• Server infrastructure and storage;
• Business analytics services;
• User and identity verification management;
• Payment processing;
• Site log analytics service for activity, performance, and troubleshooting;
• Services management;
• Conducting our Services; and
• Email management services.

We may use and disclose your personal data that you have voluntarily provided to us to third parties who contract with us to conduct our Services. We hereby acknowledge that any such disclosure shall be in compliance with all applicable data privacy laws in any given disclosure ("Applicable Law(s)") and further acknowledge compliance with any such policies of covered third party entities we may work with.

Retention of Information

We keep the categories of Personal Data described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

Transfer of Information

Personal Data is stored within the United States. The Services are only intended to be used inside the United States and we do not seek users from outside such location. If you are using the Services from the EEA or other regions with laws governing data collection and use, please note that you are agreeing to the transfer of your Personal Data to the United States. Such locations may have laws which are different, and potentially not as protective, as the laws of your own country. By providing your Personal Data, you consent to any transfer and processing in accordance with this Privacy Policy. For the avoidance of doubt, our Services are not intended for any users outside of the United States.

Links to Other Resources

LSTN2U is not responsible for the privacy policies or other practices employed by websites linked to, or from, our Services nor the information or content contained therein, and we encourage you to read the privacy statements of any linked third party.

Information Security

LSTN2U employs physical, electronic, and managerial control procedures to safeguard and help prevent unauthorized access to your information. We choose these safeguards based on the sensitivity of the information that we collect, process and store and the current state of technology. Our outsourced service providers who support our operations are also vetted to ensure that they too have the appropriate organizational and technical measures in place to protect your information.

Unfortunately, the transmission of information via the internet is not completely secure. While we do our best to protect your Personal Data, we cannot guarantee the security of your information transmitted to the Services. Any transmission of information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services. In the event that there is a breach in the information that we hold; we shall notify of such breach via email or via a notice on the Services.

Data Breach

In the event we become aware that the security of the Services has been compromised or Personal Information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities.

In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the users as a result of the breach or if notice is otherwise required by law. When we do, we will post a notice in the Services or send you an email. We may report the breach to relevant authorities in accordance with applicable data protection regulations.

Changes and Amendments

It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat Personal Data, we will notify you by email to the primary email address specified in your account or through a prominent notice on the Services. Such changes will be effective when posted. The date the Privacy Policy was last revised is identified at the top of the page. Your continued use of our Services following the posting of any modification to this Privacy Policy shall constitute your acceptance of the amendments to this Privacy Policy. You can choose to delete the App and discontinue of use the Services if you do not accept any modified version of this Privacy Policy.

Contact Us

If you have any questions or comments about this Privacy Policy, or if you would like to file a request about the data we hold or file a deletion request, please contact Customer Support at support@lstn2u.us.