PRIVACY STATEMENT

StandardC, Inc. (“Company,” “we,” “our,” or “us”) is committed to protecting your privacy. This privacy statement (“Privacy Statement”) explains how your personal information is collected, used, and disclosed by the Company. “You” or “your” means, any individual, legal entity or juridical person who accesses our Service (as defined below) whether on your own behalf or on behalf of another (including on behalf of any financial institution).

This Privacy Statement applies to access to, and use of, our websites (available at www.standardc.com), online presence and social media, unified customer management platform and portal, and our software products or services (collectively, our “Service”). This Privacy Statement also describes your privacy rights. More information about your rights, and how to exercise them, is set out in the “Rights and Choices” section.

Safeguards for your privacy: StandardC is SOCII type II certified and is protected by reCAPTCHA, and the Google Privacy Statement and Terms of Service apply.

By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of personal information as described in this Privacy Statement.

This Privacy Statement does not address the privacy practices of any third parties that we do not own, control, or are not affiliated with. Capitalized terms not defined in this Privacy Statement will have the meaning set forth in our Website Terms of Use, Acceptable Usage Terms, AI Disclaimer, and Responsible Disclosure Statement are incorporated by reference into this Privacy Statement.

WHAT INFORMATION DO WE COLLECT AND FOR WHAT PURPOSE?

The categories of information we collect can include:

Information you provide to us directly

● We may collect personal information, such as your name, phone number, location, social security number, and e-mail address, when you access or use our Service or otherwise communicate with us.

● We may also collect any communications between you and Company and any other information you provide to Company.

● To help the government fight the funding of terrorism and money laundering activities, we obtain, verify and record information about beneficial owners and other permitted users of our Services. This means that when you access or use our Services, we may ask for your name, address, date of birth and other information that will allow us to identify you. We may also ask to see other identifying documents, such as a driver’s license. If, for any reason, you are unable to provide the information necessary to verify your identity, you are not permitted to access or use the Services.

Information we receive from a third party

● We may receive personal information about you from third parties, including, but not limited to, business partners, financial service providers, identity verification services, and publicly available sources.

● We may combine that with information we collect through our Service. The data we receive from these third-party sites is subject to that third party’s policies.

Usage and device information collected automatically through tracking technologies

We, and our third-party partners, may use various technologies that automatically record certain technical information from your browser or device when you visit our website, read our e-mails, access or use our Service, or otherwise engage with us. This information is typically collected through a variety of tracking technologies, including cookies, web beacons, embedded scripts, location- identifying technologies, file information, and similar technology (collectively, “Tracking Technologies”).

We use these Tracking Technologies to automatically collect usage and device information, such as:

● Your IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account, and other such information.

● We also collect information about the way you use or access our Service, for example, the site from which you came and the site to which you are going when you leave our website, the pages you visit, the links you click, how frequently you access the Services, whether you open e-mails or click the links contained in e-mails, whether you access the Services from multiple devices, and other actions you take on the Services.

● When you access our Service from a mobile device, we may collect unique identification numbers associated with your device (including, for example, a UDID, Unique ID for Advertisers (“IDFA”), Google AdID, or Windows Advertising ID), mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, phone number and, depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate a device’s location by analyzing other information, like an IP address.

● We collect information about how our Site and Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred.

Microsoft Clarity

We use Microsoft Clarity, a behavioral analytics and session-replay service provided by Microsoft Corporation, solely to troubleshoot errors and diagnose issues that affect the customer experience on our Service (for example, identifying broken pages, failed workflows, layout problems, or performance bottlenecks). Microsoft Clarity captures information such as how you interact with our Service through metrics like mouse movements, clicks, scrolls, page views, session duration, referring URLs, device and browser characteristics, and similar diagnostic data, which may be combined with usage data Microsoft collects in accordance with its own privacy practices. We do not use Microsoft Clarity for advertising, marketing, profiling, sale of personal information, training of our AI Systems, or any purpose other than diagnosing and remediating technical and user-experience issues with our Service. Access to Clarity data within StandardC is limited to personnel who need it to investigate and resolve such issues. For more information about how Microsoft processes data collected through Clarity, please review the Microsoft Privacy Statement at https://privacy.microsoft.com/privacystatement. You may opt out of Microsoft’s collection through Clarity by following the instructions in Microsoft’s documentation or by disabling cookies as described below.

Do Not Track Signals

We are unable to respond to Do Not Track signals set by your browser at this time. If you would prefer not to accept cookies, most browsers will allow you to (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies.

Depending on your mobile device and operating system, you may not be able to delete or block all cookies and you may not be able to block non-cookie technologies and these browser settings that block cookies may have no effect on such techniques.

You may also set your e-mail options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our e-mail and performed certain functions with it.

Deleting cookies does not delete Local Storage Objects (LSOs) such as Flash objects and HTML5. You can learn more about Flash objects, including how to manage privacy and storage settings for Flash cookies, on Adobe’s website. If you choose to delete Flash objects from our sites, then you may not be able to access and use all or part of the sites or benefit from the information and services offered.

For more information on how to remove or manage the Cookies functions, access http://www.aboutcookies.org/how-to-control-cookies.

HOW WE USE YOUR INFORMATION

We use the information we collect for purposes described in this Privacy Statement or as otherwise disclosed to you on our Service or in connection with our Service. For example, we use your information to:

● To provide, maintain, and facilitate any products and services offered to you with respect to your StandardC account, which are also governed by our Website Terms of Use and Acceptable Usage Terms;

● Prevent and investigate fraud, abuse, and violations of our Acceptable Usage Terms, or provide notice of fraud or unlawful or criminal activity, and enforce and carry out contracts and agreements between Company and you;

● Send you transactional information, including confirmations, invoices, technical notices, product and services information, updates, security alerts, support and administrative messages, and information about transactions using the Service;

● Communicate with you, such as to respond to your comments and questions, provide customer service or feedback, or for any other purposes in connection with the Service;

● Conduct research and analytics to understand our visitors and customers, and tailor our product offerings;

● Facilitate contests, promotions and rewards and provide you with news about products and services offered by us and our selected partners;

● Operate, maintain, test, enhance, update, monitor, diagnose, fix and improve our Service, including the use of Microsoft Clarity strictly to troubleshoot errors and customer-experience issues and not for any other purpose; and

● Comply with legal obligations.

● To improve the Sites and Services, including training our AI Systems;

● To enforce our Website Terms of Use and similar terms and agreements, including our Acceptable Usage Terms.

We may use your Inputs and Outputs to train our AI Systems and improve our Services, unless you opt-out by writing to support@standardc.com. Model training may involve automated extraction, structuring, and statistical analysis processes consistent with the purposes described above. Even if you opt-out, we will use Inputs and Outputs for model improvement when: (1) they are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance AI safety usage, or (2) you've explicitly reported the materials to us (for example via our feedback mechanisms).

We also use information we collect to operate, maintain, and provide to you or the entity on whose behalf you are acting (the “Client”) the features and functionality of the Service, as well as to communicate directly with you, such as to send you e-mail messages and push notifications. We may also send you Service-related e-mails or messages (e.g., account verification, updates to features of the Service, technical and security notices).

SHARING OF YOUR INFORMATION

We may share your information, including information about your owner(s) or controlling members or executives: (a) with third parties as required by law or subpoena or if we reasonably believe that such action is necessary to comply with the law and the reasonable requests of law enforcement; (b) to enforce any agreement we may have with you or to protect the security or integrity of our Service; (c) to exercise or protect the rights, property, or personal safety of Company, our visitors, or others; or (d) in connection with claims, disputes or litigation, when otherwise permitted or required by law, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risk, to enforce our legal rights or the legal rights of others, to enforce contractual commitments that you have made, or as otherwise permitted or required by applicable law.

We will also disclose personal data when an individual gives us permission or directs us to disclose this information, including as part of our Services.

CONTROL OVER YOUR INFORMATION

You can stop receiving promotional e-mail communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, technical and security notices).

If you would like to review, correct, or update information that you have previously provided us, you may do so by contacting us at support@standardc.com.

If you are a user of the Services and a California resident, California's "Shine the Light" law (California Civil Code §1798.83) permits you to request and obtain from us once a year, free of charge, information regarding our disclosure of your personal information (if any) to third parties for direct marketing purposes. If this law applies to you and you would like to make such a request, please submit your request in writing to support@standardc.com.

HOW WE STORE AND PROTECT YOUR INFORMATION

Data storage and transfer: Your information collected through our Service may be stored and processed in the United States or any other country in which Company or its parent, subsidiaries, affiliates, or service providers maintain facilities or otherwise stores information. If you are located in other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. In addition, information collected about you may be stored using cloud-based services. Information recorded in the cloud may be maintained by third-party networks in locations in which such third-party networks operate or maintain data storage or processing facilities.

Keeping your information safe: We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through our Service. However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

RIGHTS AND CHOICES

Depending on where you live and the laws that apply in your state or country of residence, you may enjoy certain rights regarding your personal data, as described further below. However, please be aware that these rights are limited, and that the process by which we may need to action your requests regarding our training dataset is complex. We may also decline a request if we have a lawful reason for doing so. That said, we strive to prioritize the protection of personal data and comply with all applicable privacy laws.

To exercise your rights, you or an authorized agent may submit a request by emailing us at support@standardc.com. Upon receipt of your request, we may verify it by requesting information sufficient to confirm your identity. StandardC will not discriminate based on the exercise of privacy rights you may have. Set out below is a summary of the rights which you may enjoy, depending on the laws that apply in your state or country of residence.

● Right to know: the right to know what personal data StandardC processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.

● Access & data portability: the right to request a copy of the personal data StandardC possesses about you, subject to certain exceptions and conditions. In certain cases, and subject to applicable law, you have the right to port your information.

● Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions.

● Correction: the right to request that we correct inaccurate personal data StandardC retains about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request, and we will make a reasonable effort to correct this information—but due to the technical complexity of our AI Systems, it may not always be possible for us to do so.

● Objection: you may have the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications.

● Restriction: the right to restrict our processing of your personal data in certain circumstances.

● Withdrawal of consent: Where StandardC’s processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

● Automated decision-making: StandardC does not engage in decision-making based solely on automated processing or profiling in a manner that produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services).

● Sale & targeted StandardC marketing of its products and services: StandardC does not “sell” your personal data as that term is defined by applicable laws and regulations. You can opt out of sharing your personal data for targeted advertising to promote our products and services, and we will honor global privacy controls.

CHILDREN’S PRIVACY

Our Site and Services are intended solely for individuals who are at least 18 years of age and are not directed to children. We do not knowingly collect, use, or process personal information from anyone under 18, and we prohibit the use of the Site or Services by minors.

If we become aware that a person under 18 has provided personal information through the Site or Services, we will take reasonable steps to investigate and, where appropriate, delete such information. If you believe that a minor has submitted personal data to us, please contact us at support@standardc.io so that we can promptly review the matter.

LINKS TO OTHER WEBSITES AND SERVICES

The Service may contain links to and from third-party websites of our business partners, advertisers, and service providers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third-party sites.

HOW TO CONTACT US

If you have any questions about this Privacy Statement or the Service, please contact us at support@standardc.com

CHANGES TO OUR PRIVACY STATEMENT

We may unilaterally modify or update this Privacy Statement from time to time to reflect the changes in our business and practices, so you should review this page periodically. When we change the Statement in a material manner, we will let you know and update the “last modified” date at the bottom of this page. If you object to any changes, you may close your account. Continuing to use our Service after we publish changes to this Privacy Statement means that you are consenting to the changes.

This Privacy Statement was last modified on May 20, 2026.

‍