I. INTRODUCTION We recognize that your privacy is very important and take it seriously. This Privacy & Cookies Policy describes PIN’s policies and procedures on the collection, use and disclosure of your information when you access or use the Services and tells you about your privacy rights and how the law protects you. By using the Services, you consent to our use of your information in accordance with this Privacy & Cookies Policy. We will not use or share your personal information with anyone except as described in this Privacy & Cookies Policy. Capitalized terms that are not defined in this Privacy & Cookies Policy have the meaning given them in our General Terms.

Note: California-resident employees, applicants and contractors, please see our PIN Privacy Notice for California Resident Employees, Applicants, and Contractors.

With that in mind, this Privacy and Cookies Policy is designed to describe:

Who we are and how to contact us Your rights relating to your Personal Data Marketing communications preferences What Personal Data we collect How we use your Personal Data and why How we use cookies and other tracking or profiling technologies Who we share your Personal Data with How long we store your Personal Data Where we store your Personal Data How we protect your Personal Data Our policy on children's privacy Links to other websites Third-Party Applications

Changes to our Privacy & Cookies Policy This Privacy & Cookies Policy is intended to meet our duties of transparency under relevant law, including the General Data Protection Regulation ("GDPR") and applicable U.S. state privacy laws, such as the California Consumer Protection Act (as amended by the California Privacy Rights Act of 2020 and the California Consumer Privacy Act Regulations issued thereto (collectively"CCPA")), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act.

We will post any modifications or changes to this Privacy & Cookies Policy on this page.

II. WHO WE ARE AND HOW TO CONTACT US Who we are. PIN is the Controller (for the purposes of the GDPR and applicable U.S. state laws) of your Personal Data (referred to as either "PIN", "Power in Numbers", "we", "us" or "our" in this Privacy & Cookies Policy). Our address is 175 Varick Street, New York, NY 10014.

How to contact us. If you have any questions about our practices or this Privacy & Cookies Policy, please contact us at steph@getpin.xyz.

III. YOUR RIGHTS RELATING TO YOUR PERSONAL DATA You have the right under this Privacy and Cookies Policy, and by law in certain jurisdictions, to:

Request access to your Personal Data. If you are in certain jurisdictions, you have the right to receive a copy of the Personal Data we hold about you in a portable and, to the extent technically feasible, readily usable format, and to check that we are lawfully processing it. As applicable, you may have the right to request that we disclose to you the following information covering the 12 months preceding your request: the categories of Personal Data we have collected about you and the categories of sources from which we collected such Personal Data; the business or commercial purpose for collecting Personal Data about you; and the categories of Personal Data about you that we otherwise disclosed, and the categories of third parties to whom we disclosed such Personal Data (if applicable). Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. Object to processing of your Personal Data. This right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation, which makes you want to object to the processing of your Personal Data on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes. Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you in certain scenarios (for example if you want us to establish its accuracy or the reason for processing it). Request the transfer of your Personal Data. If you are in certain jurisdictions, we will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Request to limit use and disclosure of your Sensitive Personal Data. If you are in certain jurisdictions, you have the right to ask that we limit our use and disclosure of your “Sensitive Personal Data” (defined below) to certain purposes permitted by law. For purposes of this Privacy & Cookies Policy, Sensitive Personal Data may include information such as social security number, driver license number, state identification card, passport number, financial data, etc. Request to stop selling your Personal Data or sharing your Personal Data for cross-context behavioral advertising. PIN does not sell your Personal Data and we have not engaged in such activities in the 12 months preceding the date this Privacy & Cookies Policy was last updated. If you are in certain jurisdictions, you have the right to ask that we limit the sharing of your Personal Data for cross-context behavioral advertising. Opt out of targeted advertising. If you are in certain jurisdictions, you have the right to opt out of targeted advertising based on your Personal Data obtained from your activities over time and across websites or applications. Opt out of profiling. PIN does not process Personal Data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. To the extent that we were to engage in these activities and depending on your jurisdiction, you have the right to request that we stop doing so. Withdraw consent. This right only exists where we are relying on consent to process your Personal Data ("Consent Withdrawal"). If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of our Site. We will advise you if this is the case at the time you withdraw your consent. How to exercise your rights. If you want to exercise any of the rights described above, please contact us using the contact details in Section II (Who We Are and How to Contact Us) herein.

Typically, you will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, except in relation to Consent Withdrawal, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. If we decline to take action on one of your rights outlined above, you can request an appeal by contacting us at steph@getpin.xyz.

PIN will not discriminate against an individual because the individual exercised any of the rights described above.