TerraYield Capital Inc. ("TerraYield", "we", "our", or "us") recognizes that privacy is fundamental to maintaining the trust of our users. This Privacy Policy explains how TerraYield collects, uses, stores, protects, discloses, transfers, and otherwise processes personal information when individuals access or use our websites, applications, dashboards, APIs, subscription services, artificial intelligence systems, or any other products and services we make available (collectively, the "Platform").

This Privacy Policy applies to all users of the Platform, including individual subscribers, enterprise customers, business users, prospective customers, visitors to our website, and any other person whose personal information is processed by TerraYield.

By accessing or using the Platform, users acknowledge that their personal information may be processed in accordance with this Privacy Policy.

Nothing in this Privacy Policy limits any rights that users may have under applicable privacy legislation.

TerraYield is committed to handling personal information responsibly and in accordance with applicable privacy legislation in the jurisdictions in which it operates.

Depending upon the user's location, applicable laws may include, among others:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA);
• applicable provincial privacy legislation;
• the European Union General Data Protection Regulation (GDPR);
• the United Kingdom GDPR;
• United States state privacy legislation where applicable;
• Australia's Privacy Act;
• Singapore's Personal Data Protection Act;
• and other applicable privacy legislation.

Because TerraYield serves users across multiple jurisdictions, the rights available to individual users may vary depending upon their country or province of residence.

Where a conflict exists between this Privacy Policy and mandatory privacy legislation, the applicable legislation shall prevail to the extent of that conflict.

TerraYield collects only the information reasonably necessary to operate, improve, secure, and administer the Platform.

The categories of personal information we collect may include the following.

(a) Account Information

When users create an account, subscribe to the Platform, or otherwise register for services, TerraYield may collect information including:

• full name;
• business name;
• email address;
• telephone number;
• mailing address;
• professional title;
• organization;
• authentication credentials;
• encrypted password;
• account preferences;
• preferred language;
• time zone;
• subscription level;
• account status;
• account identifiers;
• billing identifiers; and
• customer support history.

Passwords are never stored in plain text and are maintained only in securely hashed form.

(b) Identity Verification Information

Where identity verification is necessary for fraud prevention, enterprise onboarding, compliance, or account recovery, TerraYield may collect additional identifying information including government-issued identification or verification information through trusted third-party verification providers.

TerraYield endeavors to minimize the amount of identity information collected and generally relies upon third-party verification services rather than storing complete identity documents itself.

(c) Payment Information

Subscription payments may be processed by independent payment processors such as Stripe or other commercially available payment service providers.

TerraYield does not receive or store complete payment card numbers, CVV numbers, or other sensitive payment credentials.

Instead, TerraYield may receive limited payment-related information necessary to administer subscriptions, including:

• payment status;
• invoice identifiers;
• subscription renewal dates;
• transaction confirmations;
• billing country;
• currency;
• tax information required for invoicing; and
• partial payment identifiers.

Users acknowledge that payment information is subject to the privacy policies of the applicable payment processor.

(d) Technical Information

When users interact with the Platform, TerraYield automatically collects certain technical information to improve security, reliability, and performance.

Such information may include:

• IP address;
• approximate geographic location;
• browser type;
• browser version;
• operating system;
• device identifiers;
• screen resolution;
• language settings;
• internet service provider;
• referring website;
• pages visited;
• timestamps;
• API requests;
• session identifiers;
• login history;
• crash reports;
• performance diagnostics; and
• security logs.

This information assists TerraYield in monitoring system performance, detecting fraud, identifying technical problems, improving user experience, and maintaining Platform security.

(e) Usage Information

TerraYield collects information describing how users interact with the Platform.

Examples include:

• searches performed;
• countries viewed;
• cities viewed;
• investment filters selected;
• saved watchlists;
• dashboards accessed;
• reports generated;
• analytical tools used;
• subscription activity;
• AI features used;
• notifications created;
• alerts configured;
• time spent using Platform features; and
• general interaction history.

Usage information assists TerraYield in improving Platform functionality and developing future features.

(f) User-Generated Content

Users may voluntarily upload documents or information to the Platform.

Examples include:

• investment reports;
• financial models;
• spreadsheets;
• due diligence documents;
• PDFs;
• research materials;
• market reports;
• photographs;
• notes;
• transaction records; and
• other documents submitted by users.

TerraYield processes uploaded content solely for purposes reasonably necessary to provide requested Platform functionality, including organization, search, summarization, structured extraction, analytics, and user-requested artificial intelligence features.

Users remain responsible for ensuring they possess all legal rights necessary to upload such information.

(g) Communications

When users contact TerraYield, we may retain communications including:

• customer support requests;
• technical support conversations;
• feedback;
• feature requests;
• survey responses;
• emails;
• billing inquiries;
• dispute correspondence;
• legal notices; and
• communications relating to account administration.

These communications help TerraYield respond to inquiries, improve customer service, investigate issues, and comply with legal obligations.

TerraYield does not intentionally collect categories of personal information that are unnecessary for operation of the Platform.

Unless specifically required by law or voluntarily provided by the user, TerraYield does not intentionally request or require information concerning:

• racial or ethnic origin;
• religious beliefs;
• political opinions;
• trade union membership;
• genetic information;
• biometric identifiers;
• sexual orientation;
• health information;
• criminal records; or
• other categories of highly sensitive personal information.

Users are requested not to upload sensitive personal information unless such information is strictly necessary for the intended Platform functionality.

Where sensitive personal information is voluntarily submitted, users acknowledge that TerraYield may process such information only to the extent reasonably necessary to provide requested services or comply with applicable law.

TerraYield processes personal information only for legitimate business purposes and only to the extent reasonably necessary to provide the Platform.

Depending upon the circumstances, TerraYield may use personal information for purposes including:

• creating and administering user accounts;
• authenticating users;
• processing subscriptions;
• providing requested Platform functionality;
• generating dashboards;
• operating artificial intelligence tools;
• organizing uploaded information;
• improving Platform performance;
• developing new features;
• improving search functionality;
• conducting analytics;
• generating investment intelligence;
• personalizing user experiences;
• responding to customer support requests;
• processing billing;
• preventing fraud;
• detecting unauthorized access;
• protecting Platform security;
• enforcing contractual rights;
• complying with legal obligations;
• resolving disputes;
• conducting internal audits;
• maintaining backup systems;
• performing research and development;
• measuring Platform usage; and
• communicating with users regarding Platform operations.

TerraYield does not sell users' personal information to third parties.

A. Canadian Users

TerraYield collects, uses, and discloses personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial privacy legislation where applicable.

Where required by law, TerraYield obtains meaningful consent before collecting, using, or disclosing personal information. Depending on the circumstances, consent may be express or implied, having regard to the sensitivity of the information and the reasonable expectations of the individual.

TerraYield collects, uses, and discloses personal information only for purposes that a reasonable person would consider appropriate in the circumstances and only to the extent reasonably necessary to provide the Platform, comply with legal obligations, protect legitimate business operations, or for other purposes permitted or required by applicable law.

TerraYield may also collect, use, or disclose personal information without consent where authorized or required by applicable law, including for fraud prevention, legal proceedings, regulatory compliance, investigations, emergency situations, or other statutory exceptions.

Where TerraYield transfers personal information to third-party service providers, including providers located outside Canada, TerraYield remains accountable for such information and uses contractual and other appropriate safeguards to ensure that personal information receives a comparable level of protection while being processed on TerraYield's behalf.

B. Users in the European Economic Area and United Kingdom

Where the GDPR or UK GDPR applies, TerraYield processes personal information on one or more of the following lawful bases:

• performance of a contract;
• compliance with a legal obligation;
• the user's consent;
• TerraYield's legitimate interests, except where overridden by the individual's interests or fundamental rights and freedoms; or
• any other lawful basis recognized under applicable data protection legislation.

TerraYield uses artificial intelligence to improve the efficiency, organization, and analytical capabilities of the Platform.

Artificial intelligence may assist with:

• document summarization;
• structured extraction;
• classification;
• translation;
• trend identification;
• comparative analysis;
• analytical assistance and comparative information;
• search optimization;
• organization of uploaded materials;
• confidence estimation; and
• other analytical functions.

Artificial intelligence assists TerraYield's services but does not independently make legally binding decisions on behalf of users.

Where appropriate, TerraYield incorporates human oversight into AI-assisted workflows.

Additional information concerning TerraYield's use of artificial intelligence is contained in the Responsible AI Policy.

Where permitted by applicable law, including Canada's Anti-Spam Legislation (CASL) where applicable, TerraYield sends commercial electronic messages only where it has obtained the recipient's consent or otherwise has lawful authority to do so. Such communications may include:

• product updates;
• new Platform features;
• educational content;
• newsletters;
• webinars;
• service announcements;
• promotions; and
• industry research.

Recipients may withdraw their consent or unsubscribe from marketing communications at any time by using the unsubscribe mechanism contained in the communication or by contacting TerraYield. TerraYield will give effect to unsubscribe requests within the time required by applicable law.

Withdrawal of consent to receive marketing communications does not affect TerraYield's ability to send transactional or operational communications relating to account administration, security, subscriptions, billing, legal notices, or other communications necessary to provide the Platform or comply with legal obligations.

TerraYield does not sell, rent, or trade users' personal information for monetary consideration or for the purpose of third-party advertising.

Personal information is disclosed only where reasonably necessary to operate the Platform, fulfill contractual obligations, comply with legal requirements, or protect the legitimate interests of TerraYield, its users, or the public.

Depending upon the circumstances, TerraYield may disclose personal information to carefully selected service providers that assist in delivering Platform functionality. Such providers may include cloud hosting providers, authentication providers, payment processors, artificial intelligence providers, analytics providers, customer support providers, communications providers, security monitoring providers, infrastructure providers, backup and disaster recovery providers, and professional advisers including lawyers, accountants, auditors, insurers, and consultants.

Each service provider is expected to process personal information only for authorized purposes and under contractual obligations requiring confidentiality, commercially reasonable security safeguards, and compliance with applicable privacy laws.

TerraYield may also disclose personal information where disclosure is reasonably necessary to:

• comply with a court order, subpoena, warrant, or other lawful governmental request;
• respond to investigations by regulatory authorities;
• establish, exercise, or defend legal claims;
• investigate suspected fraud, abuse, security incidents, or unlawful activity;
• enforce TerraYield's contractual rights;
• protect the safety or rights of users or the public; or
• facilitate a merger, acquisition, financing, sale of assets, corporate reorganization, or other business transaction involving TerraYield.

In the event of a corporate transaction, TerraYield will take commercially reasonable steps to ensure that any successor entity continues to protect personal information in a manner substantially consistent with this Privacy Policy.

TerraYield operates an international cloud-based technology platform. As a result, personal information may be collected, processed, stored, backed up, or otherwise handled in jurisdictions outside a user's country of residence.

Depending upon Platform configuration and operational requirements, information may be processed by infrastructure providers located in Canada, the United States, member states of the European Union, or other jurisdictions where TerraYield or its authorized service providers maintain operations.

Platform infrastructure currently relies upon reputable commercial cloud service providers for database hosting, application hosting, content delivery, authentication, artificial intelligence processing, payment processing, communications, monitoring, and related operational services. These providers may process information in accordance with their own infrastructure architecture and applicable contractual commitments.

Where required by applicable law, TerraYield will implement appropriate safeguards governing international transfers of personal information. Such safeguards may include contractual protections, technical security measures, organizational controls, encryption, access restrictions, and other mechanisms recognized under applicable privacy legislation.

Users acknowledge that privacy laws applicable in foreign jurisdictions may differ from those in their country of residence and that governmental authorities in those jurisdictions may, in certain circumstances, have lawful access to information under their own domestic legislation.

Certain Platform functionality requires the use of artificial intelligence technologies supplied by TerraYield or by reputable third-party artificial intelligence providers.

Information submitted for AI-assisted processing may be used solely for purposes reasonably necessary to provide requested Platform functionality, including summarization, extraction of structured information, categorization, translation, comparative analysis, confidence estimation, organization of documents, search optimization, and other analytical functions requested by the user.

TerraYield endeavors to minimize the amount of personal information transmitted to artificial intelligence systems and applies commercially reasonable technical and organizational measures to protect such information during processing.

Artificial intelligence systems may generate inaccurate, incomplete, inconsistent, or outdated outputs. Users should independently verify any information generated through AI-assisted features before relying upon such information for legal, financial, investment, taxation, immigration, or other significant decisions.

Additional information regarding TerraYield's use of artificial intelligence is contained in the Responsible AI Policy.

TerraYield retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Retention periods vary depending upon the nature of the information, legal obligations, contractual commitments, operational requirements, security needs, dispute resolution requirements, and legitimate business interests.

For example, TerraYield may retain information for purposes including:

• maintaining active user accounts;
• administering subscriptions;
• preventing fraud;
• investigating security incidents;
• complying with taxation, accounting, and regulatory obligations;
• preserving audit trails;
• maintaining system backups;
• resolving disputes;
• enforcing contractual rights; and
• defending legal claims.

Where personal information is no longer required, TerraYield will take commercially reasonable steps to securely delete, anonymize, or permanently de-identify the information unless continued retention is required by law.

Deletion of an account does not necessarily require the immediate destruction of all associated information where retention remains reasonably necessary for legal compliance, fraud prevention, backup integrity, or other legitimate operational purposes.

Depending upon applicable privacy legislation, users may possess one or more of the following rights regarding their personal information.

These rights may include the right to:

• obtain confirmation regarding whether TerraYield processes their personal information;
• access personal information held by TerraYield;
• request correction of inaccurate or incomplete personal information;
• request deletion of personal information where legally permissible;
• request restriction of certain processing activities;
• object to processing in circumstances recognized by applicable law;
• withdraw consent where processing is based upon consent;
• receive personal information in a portable format where applicable;
• request information regarding international transfers;
• request information regarding categories of third parties receiving personal information; and
• submit complaints to applicable privacy regulators.

Requests concerning privacy rights may be submitted using the contact information provided at the end of this Privacy Policy.

Before responding to requests, TerraYield may require reasonable verification of the requester's identity in order to protect personal information against unauthorized disclosure.

Certain requests may be denied where permitted or required by law, including where disclosure would adversely affect the rights of others, interfere with ongoing investigations, reveal confidential commercial information, or conflict with TerraYield's legal obligations.

Protecting personal information is a fundamental component of TerraYield's operations.

TerraYield maintains administrative, technical, physical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, accidental loss, misuse, or unlawful processing.

Security measures may include encrypted communications, encryption of stored information where appropriate, secure authentication systems, password hashing, role-based access controls, audit logging, network monitoring, security testing, vulnerability management, disaster recovery procedures, and access restrictions based upon the principle of least privilege.

Because security technologies continually evolve, TerraYield regularly evaluates and updates its security practices to reflect changes in technology, business operations, and emerging cybersecurity threats.

Additional information concerning TerraYield's security framework is contained within the separate Information Security Policy, which forms part of TerraYield's overall governance framework.

Notwithstanding TerraYield's security measures, users acknowledge that no method of electronic transmission or internet-connected storage can guarantee absolute security.

TerraYield continuously monitors its systems for unauthorized activity and maintains procedures designed to identify, investigate, contain, and remediate suspected security incidents.

If TerraYield determines that a security incident has compromised personal information under its control, TerraYield will investigate the incident promptly and take commercially reasonable steps to minimize potential harm.

Where notification is required by applicable law, TerraYield will notify affected individuals and relevant regulatory authorities within the timeframes prescribed by law.

Notifications may describe, where reasonably appropriate:

• the nature of the incident;
• categories of affected information;
• actions taken by TerraYield;
• recommended protective measures for affected individuals; and
• contact information for additional assistance.

Nothing contained in this Privacy Policy constitutes a guarantee that unauthorized access or cybersecurity incidents will never occur.

The Platform is intended exclusively for individuals who have reached the age of majority or otherwise possess legal capacity to enter binding agreements within their jurisdiction.

TerraYield does not knowingly solicit, collect, or process personal information from children except where expressly permitted by applicable law and appropriate parental or guardian authorization has been obtained.

If TerraYield becomes aware that personal information has been collected from a child contrary to applicable law, TerraYield will take commercially reasonable steps to delete such information promptly, unless retention is legally required.

Parents or legal guardians who believe a child has provided personal information to TerraYield may contact TerraYield using the information provided below.

The Platform uses cookies and related technologies to improve functionality, maintain security, remember user preferences, authenticate users, measure Platform performance, and enhance user experience.

Cookies may also assist TerraYield in understanding how users interact with the Platform so that future improvements can be made.

A detailed explanation of TerraYield's use of cookies, tracking technologies, consent mechanisms, and user choices is contained in the separate Cookie Policy, which forms part of TerraYield's privacy framework.

Users may manage cookie preferences through browser settings or other mechanisms provided by TerraYield where required by applicable law.

Disabling certain cookies may reduce or eliminate portions of the Platform's functionality.

The Platform may contain links to third-party websites, external databases, government resources, research publications, or other online services that are not owned or controlled by TerraYield.

This Privacy Policy applies solely to TerraYield's Platform.

TerraYield is not responsible for the privacy practices, content, security, or policies of third-party websites.

Users are encouraged to review the privacy policies of any third-party services before providing personal information.

TerraYield may amend this Privacy Policy from time to time in response to changes in applicable law, technological developments, business operations, security requirements, Platform functionality, or other legitimate business needs.

Where material changes are made, TerraYield will take commercially reasonable steps to notify users through the Platform, electronic communications, or other appropriate means.

The "Last Updated" date appearing at the beginning of this Privacy Policy indicates the most recent revision.

Continued use of the Platform following the effective date of an updated Privacy Policy constitutes acknowledgment of the revised Privacy Policy unless applicable law requires additional consent.

Questions regarding this Privacy Policy or TerraYield's privacy practices may be directed to:

TerraYield Capital Inc.
Email: info@terayieldcapital.com
Website: https://www.terrayieldcapital.com/

Users may also use this contact information to:

• submit privacy requests;
• request access to personal information;
• request correction of inaccurate information;
• withdraw consent where applicable;
• report suspected privacy concerns;
• report suspected security incidents; or
• submit complaints relating to TerraYield's processing of personal information.

TerraYield will endeavor to respond to privacy inquiries within the timeframes required by applicable law.