Privacy Policy

1. What This Privacy Policy Covers

This Privacy Policy covers how we treat personal data that we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we do not own or control or people we do not manage. In addition, this Privacy Policy does not apply to information we collect about job candidates or employees.

1.1 Categories of Personal Data We Collect

Below are the categories of Personal Data, including sensitive Personal Data, that we collect and have collected over the past 12 months:

• Device/IP data (e.g., IP address, browser type, operating system)
• Usage Analytics (e.g., interactions with our web properties and newsletters)
• Contact Information (e.g., name, email address, phone number, company name)
• Demographic Data (e.g., investor type, industry affiliation)
• Geolocation Data (e.g., IP-address-based location information)
• Financial Information (e.g., investor qualification status, investment interest level)
• Other Identifying Information that You Voluntarily Provide (e.g., information in emails, inquiry forms, or letters you send us)

1.2 Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

• You — When you provide such information directly to us or when Personal Data about you is automatically collected in connection with your use of our Services.
• Third Parties — Vendors: Analytics providers, customer support tools, or investor relations management services.
• Third Parties — Business Partners: Co-investors, portfolio company representatives, or other business partners in the ordinary course of our investment activities.

1.3 Information Collected Automatically

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript (collectively, "Cookies") to enable our servers to recognize your web browser and tell us how and when you visit and use our Services. We use the following types of Cookies:

• Essential Cookies. Required for providing features or services you have requested.
• Functional Cookies. Used to record your choices and settings and recognize you when you return.
• Performance/Analytical Cookies. Allow us to understand how visitors use our Services and measure performance of our content.

You can decide whether or not to accept Cookies through your internet browser's settings. Most browsers have an option for turning off the Cookie feature.

2. How We Use Your Personal Data

We process Personal Data to operate, improve, understand, and personalize our Services, including:

• Responding to investor inquiries, partnership requests, and general contact forms.
• Communicating about the Services, including announcements, updates, or opportunities.
• Managing investor relations and maintaining investor and partner records.
• Delivering newsletters, emails, and facilitating events.
• Improving and developing the Services through testing, research, and analysis.
• Protecting against fraudulent, illegal, or harmful actions.
• Complying with legal or contractual obligations and enforcing our Terms of Service.
• Responding to law enforcement requests and applicable law, court order, or governmental regulations.

3. How We Share Your Personal Data

3.1 Service Providers

Third-party service providers that help us operate our business, including analytics, security, hosting, communications providers, and staff augmentation. They may only use your Personal Data for the specific purposes of assisting us.

3.2 Business Partners and Co-Investors

In the ordinary course of our investment activities, we may share certain contact information with co-investors, strategic partners, or portfolio company management, subject to appropriate confidentiality obligations.

3.3 Successors to Our Business

Your Personal Data may be transferred to a third party if we undergo a merger, acquisition, bankruptcy, reorganization, or similar transaction. We will notify you of any such change in ownership or control of your Personal Data.

3.4 Legal Compliance

We may disclose Personal Data if required by law or reasonably necessary to: comply with legal process; enforce our Terms of Service; respond to claims of rights violations; or protect the rights, property, or safety of Defiant International, its users, and the public.

4. Data Security and Retention

We seek to protect your Personal Data from unauthorized access using appropriate physical, technical, organizational, and administrative security measures. The Services use industry-standard SSL technology for encryption of Personal Data you provide. No method of transmitting data over the Internet is completely secure, and we cannot guarantee the complete security of any data you share with us.

We retain Personal Data for as long as reasonably necessary for the business purposes specified in this Policy, including to comply with legal obligations, resolve disputes, and enforce our contractual agreements.

5. Personal Data of Children

We do not knowingly collect or solicit Personal Data about children under 13 years of age. If we learn we have collected Personal Data from a child under 13, we will delete that information as quickly as possible. Contact us at privacy@defiantinc.co if you believe a child may have provided us Personal Data.

6. Your Privacy Rights

6.1 Texas Residents

The Texas Data Privacy and Security Act ("TDPSA") provides you with certain rights, including the right to:

• Know whether we are processing your Personal Data and to access such data;
• Correct inaccuracies in your Personal Data;
• Delete Personal Data you have provided to us;
• Obtain a copy of your Personal Data in a portable and readily usable format; and
• Opt out of processing for targeted advertising, sale of your Personal Data, or profiling for automated decisions.

We will respond to verified requests within 45 days, with a possible extension of an additional 45 days when reasonably necessary.

6.2 California Residents

Under the CCPA/CPRA, you have the right to:

• Know the categories and specific pieces of Personal Data we have collected;
• Delete Personal Data we have collected, subject to certain exceptions;
• Correct inaccurate Personal Data;
• Opt out of the sale or sharing of your Personal Data;
• Limit the use and disclosure of your sensitive Personal Data; and
• Non-discrimination for exercising your CCPA rights.

6.3 Exercising Your Rights

Submit a request by:

• Emailing: privacy@defiantinc.co
• Writing to: Defiant International, Inc., 2711 Lyndon B Johnson Freeway, Suite 800, Dallas, TX 75234

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by placing a notice on our website, sending you an email, or by some other means prior to the change becoming effective.

8. Contact Information