Privacy Policy

This Privacy Policy explains how Project Underdogs LLC, a Michigan limited liability company based in Dearborn, Michigan, and its affiliates, including any Affiliated Fund (together, "Project Underdogs," "we," "us" or "our"), collect, use, disclose, retain and protect personal information, and the choices and rights available to you.

This Privacy Policy applies to personal information we collect through projectunderdogs.com and related websites, the Readiness Quiz, applications, accounts, online classes, webinars and virtual Events, the Project Underdogs Founder Library, emails, text messages, social media pages, and our other online and offline interactions with you (the "Services"). It covers website visitors, applicants, Program participants, mentors, speakers, investors and prospective investors, partners, and other people who interact with us.

This Privacy Policy does not apply to information collected by third parties, including investors, partners and service providers we introduce you to, which is governed by their own privacy policies. It also does not apply to personal information we process as an employer about our own job applicants, employees and contractors, which is covered by a separate notice.

By using the Services, you acknowledge that you have read this Privacy Policy. Capitalized terms not defined here have the meanings in our Terms of Use.

The categories of personal information we collect, and have collected in the past 12 months, depend on how you interact with us:

Information you should not send us. Do not send us Social Security numbers, financial account numbers, government ID numbers, health information, or other sensitive information unless we specifically request it through a secure channel for investment compliance. We do not ask about immigration or citizenship status, and you should not include it in Submissions.

Information about others. If you give us information about another person, such as a co-founder, employee, reference or a minor's parent or guardian, you represent that you have the authority and any required consent to do so and that you have informed them of this Privacy Policy.

Worksheets. Downloadable worksheets and calculators operate on your device. We do not receive what you enter into them unless you choose to send the file to us.

We use personal information for the following business purposes:

• Provide the Services: operate the website, Library, Readiness Quiz, accounts, classes and Events, and respond to requests
• Review applications: evaluate, verify and make decisions on applications and Program participation, and communicate with applicants
• Operate the Program: support participants, track progress against Program and graduation criteria, coordinate mentors and Contributors, and prepare for investments
• Investments and introductions: evaluate, document, close and administer investments; make introductions you authorize; and meet investor reporting obligations
• Communications and marketing: send newsletters, updates, invitations and other communications about Project Underdogs, subject to your choices
• Improvement and analytics: understand how the Services are used, and develop new programs, content and features
• Impact reporting: prepare aggregated or de-identified reports about the founders and communities we serve, including for investors, partners and the public
• Security and integrity: protect the Services, detect and prevent fraud, misuse, impersonation and security incidents, and debug errors
• Legal and compliance: comply with laws, regulations, securities and tax requirements, anti-money-laundering and sanctions obligations, legal process and government requests; establish, exercise or defend legal claims; and enforce our agreements
• Corporate transactions: evaluate and carry out mergers, acquisitions, financings, reorganizations or sales of assets
• With your consent: for any other purpose disclosed to you when we collect the information or with your consent

Automated decisions. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing. Applications are reviewed by people. Readiness Quiz results are a self-assessment tool and do not determine acceptance.

Artificial intelligence tools. We may use software tools, including tools that use artificial intelligence, to help organize, summarize and review information, subject to human oversight and to contractual protections with the providers of those tools. We do not permit those providers to use your personal information to train their general models.

De-identified information. We may create and use aggregated or de-identified information for any lawful purpose. We maintain de-identified information in de-identified form and do not attempt to re-identify it, except to confirm our de-identification processes.

We collect sensitive personal information only where needed and as permitted by law:

• Voluntary demographic information is collected only with your affirmative opt-in consent, is always optional, never affects acceptance or investment decisions, and is used only for aggregated impact reporting and to improve our support for underrepresented founders. You may withdraw consent at any time.
• Investment compliance information, such as government ID numbers and financial account details, is collected only from people involved in an actual investment, through secure channels, and only to comply with law, verify identity, and complete and administer the investment.

We do not use or disclose sensitive personal information to infer characteristics about you or for any purpose that would give rise to a right to limit its use under California law. We do not collect precise geolocation, biometric, genetic or health information.

We and our service providers use cookies, pixels, web beacons, local storage and similar technologies to operate the Services, remember your preferences, keep the Services secure, and analyze usage. These include:

• Strictly necessary: required for the Services to function, such as security and load balancing
• Functional: remember your preferences and settings
• Analytics: help us understand how the Services are used, through analytics providers that process data on our behalf

We do not use cookies or similar technologies for cross-context behavioral advertising or targeted advertising, and we do not permit third parties to collect personal information about your activity on the Services for those purposes. If this changes, we will update this Privacy Policy and provide any notices, opt-outs and consents required by law before doing so.

You can control cookies through your browser settings and, where available, our cookie preferences tool. Disabling some cookies may affect the functionality of the Services.

Global Privacy Control. We treat a Global Privacy Control signal from your browser as a valid request to opt out of any sale or sharing of personal information and targeted advertising for that browser and any profile associated with it. Do Not Track. Because there is no uniform standard for Do Not Track signals, we do not respond to them, but we honor Global Privacy Control as described above.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising. We have not done so in the past 12 months. We disclose personal information only as follows:

Text messaging. We do not sell, rent or share mobile phone numbers or text-messaging opt-in data with third parties or affiliates for their own marketing purposes. Opt-in data and consent records are disclosed only to service providers that help us deliver messages.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to comply with legal, regulatory, tax, accounting, investment and reporting requirements, resolve disputes and enforce agreements. Criteria we use include the nature of the information, the purposes for which it is processed, applicable statutes of limitations and legal requirements. As a general guide:

When personal information is no longer needed, we securely delete it, de-identify it or, if neither is reasonably possible (for example, in backups), isolate it from further use until deletion is possible.

We maintain reasonable administrative, technical and physical safeguards appropriate to the nature of the personal information, designed to protect it against unauthorized access, use, disclosure, alteration and destruction. These include access controls, encryption in transit, secure storage for investment compliance information, vendor diligence, and limiting access to people who need it. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we learn of a security breach involving your personal information, we will notify you and appropriate authorities as required by applicable federal and state law.

Children under 13. The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act, we will delete it promptly. If you believe a child under 13 has provided personal information to us, contact support@projectunderdogs.com.

Teens aged 13 to 17. Teens may use the Services and apply to the Program only with the involvement and consent of a parent or legal guardian. We collect only the information reasonably necessary for the Services. We do not sell the personal information of anyone under 18, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects, and we do not knowingly send marketing text messages to minors. A parent or guardian may request to review, correct or delete their child's personal information by contacting us.

• Marketing emails: unsubscribe using the link in any marketing email or by contacting us. We may still send transactional and Program-related messages.
• Text messages: reply STOP to any text message to opt out, or HELP for help.
• Cookies: adjust your browser settings or use our cookie preferences tool where available, and use Global Privacy Control.
• Demographic information: decline to provide it, or withdraw consent at any time.
• Testimonials and recordings: ask us to stop future use of your testimonial or recordings of you, subject to our Terms of Use.
• Account information: review and update your account information at any time, where an account is available.

Depending on where you live, you may have the following rights regarding your personal information, subject to verification and to exceptions permitted by law:

• Right to know and access: confirm whether we process your personal information, and obtain the categories and specific pieces of personal information we hold, the categories of sources, the purposes, and the categories of recipients
• Right to correct: correct inaccurate personal information
• Right to delete: delete personal information we collected from or about you
• Right to portability: obtain your personal information in a portable, readily usable format
• Right to opt out: opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in these activities.
• Right to limit or withdraw consent for sensitive data: withdraw consent for, or limit the use of, sensitive personal information
• Right to a list of recipients: obtain a list of the specific third parties, or categories of third parties, to which we have disclosed personal information, where your state's law provides this right
• Right to appeal: appeal our decision on your request
• Right to non-discrimination: not receive discriminatory treatment for exercising your rights

These rights are provided under the comprehensive consumer privacy laws of states including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and of other states that adopt similar laws, to the extent those laws apply to us. As a matter of policy, we will honor requests to access, correct and delete personal information from residents of every U.S. state, whether or not their state's law requires it, subject to the exceptions described below.

Exceptions. We may deny or limit a request where permitted by law, including where we cannot verify your identity, where the information is needed to complete a transaction or investment, comply with legal, regulatory, securities, tax or record-keeping obligations, detect security incidents or fraud,

exercise or defend legal claims, or where fulfilling the request would infringe the rights of others or disclose trade secrets. We will explain the reason for any denial.

• Submit a request: email support@projectunderdogs.com with the subject line "Privacy Request," stating the right you wish to exercise and the state where you live.
• Verification: we will verify your identity by matching information you provide with information we hold, and may request additional information where necessary, particularly for requests involving sensitive information. Information provided for verification is used only for that purpose.
• Authorized agents: you may designate an authorized agent to make a request on your behalf. We may require the agent to provide signed written permission or a valid power of attorney, and may require you to verify your identity directly with us.
• Timing: we will confirm receipt of your request within 10 business days and respond within 45 calendar days. Where permitted by law, we may extend this period by up to an additional 45 days, and we will tell you why.
• Fees: we do not charge for requests, except where requests are manifestly unfounded, excessive or repetitive and a reasonable fee or refusal is permitted by law.
• Appeals: if we decline your request, you may appeal by replying to our decision with the subject line "Privacy Appeal" within a reasonable time. We will respond in writing within 45 days, or the period required by your state's law, explaining our decision. If your appeal is denied, you may contact your state attorney general.

California. This Privacy Policy is our notice at collection and privacy policy under the California Consumer Privacy Act, as amended ("CCPA"). The categories of personal information we collect, their sources, our business purposes, the categories of recipients and our retention criteria are described in Sections 2 to 7. We do not sell or share personal information, including that of consumers under 16, and we do not use or disclose sensitive personal information for purposes requiring a right to limit. Under California Civil Code Section 1798.83 ("Shine the Light"), California residents may request information about disclosures of personal information to third parties for their direct marketing purposes; we do not make such disclosures.

Colorado, Connecticut, Virginia and other states requiring consent for sensitive data. We process sensitive data only with your consent or as otherwise permitted by law, as described in Section 4.

Nevada. We do not sell covered information as defined by Nevada Revised Statutes Chapter 603A. Nevada residents may submit a request to opt out of any future sale by emailing support@projectunderdogs.com.

Consumer health data. We do not collect consumer health data as defined by Washington's My Health My Data Act, Nevada Senate Bill 370, or similar laws.

Michigan and all other states. We comply with applicable state data security and breach notification laws in every state.

The Services may link to or integrate with third-party websites, platforms and services, including video conferencing, scheduling and social media services. Their collection and use of personal information is governed by their own privacy policies, and we are not responsible for their practices. When you interact with our social media pages, the platform may share information with us according to its policies and your settings.

The Services are operated in the United States and intended for users in the United States. If you access the Services from outside the United States, you understand that your personal information will be transferred to, stored and processed in the United States, where data protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. We will post the updated version on the Services and change the Effective Date. If we make material changes, we will provide notice through the Services or by email before the changes take effect, and where required by law, we will obtain your consent before using previously collected personal information in a materially different way.

This Privacy Policy is available in alternative formats on request. Contact support@projectunderdogs.com.

Project Underdogs LLC · Dearborn, Michigan · projectunderdogs.com · support@projectunderdogs.com

We aim to respond to general privacy questions within 48 business hours.