Privacy Statement for California Residents

Last Updated: March 5, 2025

This Privacy Statement for California Residents ("Privacy Statement") supplements the information contained in the Prospect AI Privacy Policy. Primary Byte Ventures, LLC d/b/a Prospect AI ("Prospect AI," "we," "our," or "us") has adopted this statement to comply with the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), and other California privacy laws. This statement applies solely to visitors, users, and customers who reside in the State of California ("consumers" or "you"). Any terms defined in the CCPA/CPRA have the same meaning when used in this Privacy Statement.

Information We Collect

In the last twelve (12) months, we have collected the following categories of personal information:

We do not collect or process the following categories of sensitive personal information for purposes that would trigger a consumer's right to limit their use under the CPRA:

• Social security, driver's license, state identification card, or passport numbers
• Account log-in credentials
• Financial account, debit card, or credit card numbers with required security codes
• Precise geolocation
• Racial or ethnic origin, religious or philosophical beliefs, or union membership
• Contents of mail, email, and text messages unless we are the intended recipient
• Genetic data, biometric information, health information, or sexual orientation

Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, when you register for our services, purchase our products, or engage with our website.
• Indirectly from you. For example, through information we collect from your browsing activity on our website or use of our Chrome Plugin.
• Publicly available sources. Such as information from publicly accessible websites, social media profiles, and company websites.
• Third-party sources. Such as business partners, data providers, social networks, and other third parties.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

• To provide, maintain, and improve our services
• To process transactions and send related information
• To find and verify contact information as part of our core services
• To respond to your inquiries and provide customer support
• To personalize your experience with our services
• To send you marketing communications (with your consent where required)
• To analyze usage patterns and improve our website and services
• To detect security incidents and protect against malicious, fraudulent, or illegal activity
• To comply with laws, regulations, and legal processes
• To create, maintain, customize, and secure your account with us
• For testing, research, analysis, and product development
• For short-term, transient use, such as contextual customization of ads
• For any other purpose described to you when collecting your personal information

Disclosure and Sale of Personal Information

In the preceding twelve (12) months, we have disclosed the following categories of personal information to third parties for business purposes:

• Identifiers
• Personal information categories listed in the California Customer Records statute
• Commercial information
• Internet or other similar network activity
• Geolocation data
• Professional or employment-related information
• Inferences

The categories of third parties to whom we disclose personal information include:

• Hosting and cloud computing providers
• Analytics providers
• Marketing and advertising partners
• Payment processors
• Customer service and support providers
• CRM and business intelligence platforms
• Our corporate affiliates

Under the CCPA/CPRA, the sharing of personal information with third parties for cross-context behavioral advertising purposes is considered a "sale" or "sharing" even if no money is exchanged. In the preceding twelve (12) months, we have "sold" or "shared" the following categories of personal information to third parties:

• Identifiers
• Internet or other similar network activity
• Inferences

The categories of third parties to whom we have "sold" or "shared" personal information include:

• Advertising technology companies
• Marketing partners
• Data analytics providers

We do not sell or share the personal information of minors under 16 years of age.

Your Rights Under the CCPA/CPRA

The CCPA/CPRA provides California residents with specific rights regarding their personal information. This section describes these rights and explains how to exercise them.

Right to Know

You have the right to request that we disclose certain information to you about our collection, use, disclosure, and sale of your personal information over the past 12 months. Once we receive and verify your request, we will disclose to you:

• The categories of personal information we collected about you
• The categories of sources from which the personal information was collected
• Our business or commercial purpose for collecting, selling, or sharing that personal information
• The categories of third parties to whom we disclose that personal information
• The specific pieces of personal information we collected about you
• If we sold or shared your personal information, the categories of personal information sold or shared and the categories of third parties to whom we sold or shared it
• If we disclosed your personal information for a business purpose, the categories of personal information disclosed and the categories of third parties to whom it was disclosed

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and verify your request, we will delete your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service you requested, or reasonably anticipated within our ongoing business relationship with you
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
• Debug products to identify and repair errors that impair existing intended functionality
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
• Comply with the California Electronic Communications Privacy Act
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest
• Enable solely internal uses that are reasonably aligned with consumer expectations
• Comply with a legal obligation
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it

Right to Correct

You have the right to request correction of inaccurate personal information maintained by us. Upon receiving a verifiable request, we will use commercially reasonable efforts to correct your inaccurate personal information.

Right to Opt-Out of Sale or Sharing

You have the right to opt-out of the sale or sharing of your personal information. You may exercise this right by clicking on the "Do Not Sell or Share My Personal Information" link on our homepage or submitting a request through our Privacy Request Form.

We also honor opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of personal information.

Right to Limit Use and Disclosure of Sensitive Personal Information

As mentioned above, we do not use or disclose sensitive personal information for purposes that would trigger a consumer's right to limit under the CPRA.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not:

• Deny you goods or services
• Charge you different prices or rates for goods or services
• Provide you a different level or quality of goods or services
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services

Exercising Your Rights

To exercise the rights described above, please submit a verifiable consumer request to us by either:

• Emailing us at dataprotection@prospectai.com
• Calling us at +1 215-475-5096
• Visiting our Privacy Page and submitting the appropriate form

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information.

Verifiable Consumer Request

To submit a verifiable consumer request, you will need to:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. For an authorized agent to be able to act on your behalf, you must:

1. Provide the authorized agent with written permission to act on your behalf; and
2. Verify your own identity directly with us, unless you have provided the authorized agent with a valid power of attorney in accordance with California Probate Code sections 4000 to 4465.

We may deny a request from an authorized agent that does not meet these requirements.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the receipt of your verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in our Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Changes to Our Privacy Statement

We reserve the right to amend this Privacy Statement at our discretion and at any time. When we make changes to this Privacy Statement, we will post the updated notice on our website and update the notice's effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Privacy Statement, the ways in which Prospect AI collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: dataprotection@prospectai.com

Phone: +1 215-475-5096

Postal Address:

Prospect AI

626 Jacksonville Road, Suite 105

Warminster, PA 18974 USA

Consumer Rights Requests Metrics

During the previous calendar year (2024), Prospect AI received the following number of requests from residents of California: