Indent Privacy Statement

Last Updated: Febuary 1, 2020

Indent Inc, our subsidiaries and affiliates ("Indent", "we", or "us") are committed to protecting your privacy. We have prepared this Privacy Statement to describe to you our practices regarding the Personal Information we collect from users of our website (the "Site") and our online services, including the Indent platform (the "Services"). This Privacy Statement also describes your rights and choices with respect with your Personal Information and how you can contact us if you have any questions or concerns but does not apply to Personal Information relating to Indent's employment-related activities.

For the purposes of this policy, "Personal Information" means any information related to an identified or identifiable individual, and does not include data whereby personally identifiable information has been removed (such as anonymous data). Indent Inc is the entity responsible for the processing of your Personal Information and, for the purpose of the European Union's General Data Protection Regulation, is the data controller in respect of the processing of your Personal Information. Where we have an arrangement in place with a customer who is encouraging you to use our services (for example, your employer), we may obtain and process your Personal Information on behalf of and at the instructions of such a customer. Such customers are the data controllers and their privacy policies will apply to the processing of your Personal Information. We encourage you to read their privacy policies.

This Privacy Statement explains:

• What information we collect and why we collect it
• How we use that information and when we disclose it to others
• Your rights regarding that information, including how to access and update your information
• The steps we take to protect your information

Types of Data We Collect.

We collect Personal Information from the various sources as described below.

(a) Information You Provide to Us.

• We will collect account information from you, such as your first and last name, e-mail, username and password when you create an account to log in to our Site and Services ("Account").
• We will collect payment information necessary to complete transactions, including your name, credit card information, and billing information.
• If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply.
• If you have created an Account and upload any log files or other materials to the Services, we will collect those materials in order to provide you the Services you request.
• If you sign up for our newsletter we will collect your e-mail address.
• If you participate in a sweepstakes, contest or other promotion on our Site or Services, we may ask you for your e-mail address and/or home number (to notify you if you win or not). We may also ask for first and last name, and sometimes postal address to verify your identity. In some situations we may need additional information as a part of the entry process, such as a prize selection choice. These sweepstakes and contests are voluntary. We recommend that you read the rules for each sweepstakes and contest that you enter.
• We also collect Personal Information at other points in our Site and Services that state that Personal Information is being collected. We will ask for your consent when we do so.

(b) Information Collected via Automated Means.

• Log Files. As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider ("ISP"), referring/exit pages, operating system, date/time stamp, and clickstream data.
• Cookies. Like many online services, we use cookies to collect information. "Cookies" are small pieces of information that a website sends to your computer's hard drive while you are viewing the Site. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Services. For more information, please see our cookie policy at https://indent.com/legal/cookies.
• Traffic Analytics. We use a number of third-party service providers, such as Google Analytics, to help analyze how users use the Site and Services ("Analytics Companies"). Google Analytics uses first-party cookies to track user interactions which helps show how users use our Site and Services. This information is used to compile reports and to help us improve our Site and Services. The reports disclose user trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our Site by going to https://tools.google.com/dlpage/gaoptout or via Google's Ads settings.

Use of Your Personal information

(a) To provide you with the Service and Site. We use your Personal Information, such as your account information, payment information and any information you upload to the Services, in the following ways:

• facilitate the creation of and secure your Account on our network
• identify you as a user in our system
• provide improved administration of our Services
• provide the Services you request
• send you a welcome e-mail to verify ownership of the e-mail address provided when your Account was created
• send you administrative e-mail notifications, such as security or support and maintenance advisories
• send you newsletters where you have signed up for such notifications

(b) To provide you with support and to respond to your requests and complaints. We use your Personal Information, such as your account information and the contents of your correspondence to us, to provide technical support, including diagnosing and resolving any issues you report, and to respond to your inquiries, including those related to employment opportunities.

(c) Analytics. We also collect some information (ourselves or using third party services) using logging and cookies, such as IP address, which can sometimes be correlated with Personal Information. We use this information for the above purposes and to monitor and analyze use of the Service, for the Service's technical administration, to track users' movements around the Site, to gather demographic information about our user base as a whole, to increase our Service's functionality and user-friendliness, and to verify users have the authorization needed for the Service to process their requests.

(d) Improve or monitor usage of the Site and Services. Log files and cookies are collected to make the Site and Services more useful to you and to help us better understand your needs and interests in order to tailor and improve your experience.

(e) Marketing. We use your e-mail address to send marketing communications, including updates on promotions and events related to products and services offered by us and by third parties with whom we work. You can opt out of receiving promotional communications as described below under "Your Choices Regarding Your Information".

Use of Personal Information (Europe)

If you are in the UK or European Economic Area, we only process your Personal Information when we have a valid legal basis.

• Consent. We may use your Personal Information when you have given your consent to do so. For example, to send you marketing communications.
• Contractual necessity. We may use your Personal Information to perform our end of our contracts with you. For example, to provide you with the Service.
• Legal obligation. We may use your Personal Information when we are legally required to. For example, to comply with tax and accounting obligations, or to comply with a court order.
• Legitimate interest. We may use your Personal Information when we, or a third party, have a legitimate interest in doing so. For example, we have a legitimate interest in understanding the usage and improving the Service. We only rely on our or a third party's legitimate interests to process Personal Information when these interests are not overridden by your rights and interests.

Disclosure of Your Personal information.

We disclose your Personal Information as described below and as described elsewhere in this Privacy Statement.

(a) Third Party Service Providers. We use other companies, agents or contractors ("Service Providers") to perform services on our behalf or to assist us with providing services to you, such as:

• Cloud service providers, who we rely on for data storage, disaster recovery and to perform our obligations to you, such as Google Cloud Platform.
• Analytic providers, who help us understand our user base and how our Site and Services are used, such as Google Analytics.
• Communications and infrastructure providers, who provide us with communication tools, such as Google Workspace.

These third parties have access to your information only for purposes of performing these tasks on our behalf and under obligations similar to those in this Privacy Statement. We require our Service Providers to agree to take reasonable steps to keep the Personal Information that we provide to them secure. We do not authorize them to use or disclose your Personal Information except in connection with providing their services.

(b) Affiliates. We share some or all of your Personal Information with our parent company, subsidiaries, joint ventures, or other companies under a common control, in which case we will require our affiliates to honor this Privacy Statement.

(c) Corporate Restructuring. We may share some or all of your Personal Information in connection with or during negotiation of any merger, reorganization, financing, acquisition, partnership or dissolution, transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or any portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, Personal Information may also be transferred as a business asset. If another company acquires our company, business, or any of our assets, that company will possess the Personal Information collected by us and will assume the rights and obligations regarding your Personal Information as described in this Privacy Statement.

(d) Other Disclosures. Regardless of any choices you make regarding your Personal Information (as described below), Indent may disclose Personal Information if it believes in good faith that such disclosure is necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas, warrants, legal obligations or requests served on Indent; (c) to enforce, protect or defend the rights or property of Indent or users of the Site or Services; and/or (d) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Statement, or our User Agreement.

Your Choices Regarding Your Information.

You have several choices regarding use of information on our Services:

(a) E-mail Communications. When you receive promotional communications from us, you may indicate a preference to stop receiving further promotional communications from us and you will have the opportunity to "opt-out" by following the unsubscribe instructions provided in the e-mail you receive or by contacting us directly (please see contact information below). You will continue to receive service-related communications, including notices of any updates to our User Agreement or Privacy Statement.

(b) Correcting or Deleting Your Personal Information. You may correct any of your Personal Information in your Account by editing your settings within your Account or by sending an e-mail to us at the address listed below. You may request deletion of your Personal Information by us, and we will use commercially reasonable efforts to honor your request, but please note that we may be required to keep such information to fulfill our legal obligations, for fraud prevention or similar purposes.

(c) Industry Opt-out Tools. Some Advertising Service Providers or providers of Tracking Tools may participate in the Network Advertising Initiative's (NAI) Opt-Out Tool (https://www.networkadvertising.org/choices/) and/or the Digital Advertising Alliance (DAA) Consumer Choice Page (https://www.aboutads.info/choices/), and you can opt-out of certain services and learn more about your choices by visiting the links included there. Users in the EU can visit https://www.youronlinechoices.eu/ for more information about your choices and to opt out of participating service providers.

(d) Web Browser Controls. You can prevent the use of certain Tracking Tools, such as cookies, on a device-by-device basis using the controls in your web browser. These controls can be found in the Tools > Internet Options (or similar) menu for your browser, or as otherwise directed by your browser's support feature. Through your web browser, you may be able to:

• Delete existing Tracking Tools
• Disable future Tracking Tools
• Set your browser to provide you with a warning each time a cookie or certain other Tracking Tools are being set

(e) Mobile Opt Out. Your mobile devices may offer settings that enable you to make choices about the collection, use, or transfer of mobile app information for Behavioral Advertising. You may also opt-out of certain Tracking Tools on mobile devices by installing the DAA's AppChoice app on your mobile device (for iTunes, visit https://itunes.apple.com/us/app/appchoices/id894822870?mt=8, for Android, visit https://play.google.com/store/apps/details?id=com.DAA.appchoices&hl=en). For more information, please visit https://support.apple.com/kb/HT4228, https://support.google.com/ads/answer/2662922?hl=en or https://www.applicationprivacy.org/expressing-your-behavioral-advertising-choices-on-a-mobile-device, as applicable.

(f) Do Not Track Signals. Some web browsers may transmit "do not track" signals to the websites and other online services with which your web browser communicates. There is no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise our policy on responding to these signals.

If you are based in the EU, in certain circumstances you may have several additional rights and choices in relation to the Personal Information you provide on our Services and Site:

(a) Access. You have the right to access the Personal Information we hold about you, and to receive an explanation of how we use it and who we share it with.

(b) Object to processing. You have the right to object to our processing of your Personal Information where we are relying on a legitimate interest or if we are processing your Personal Information for direct marketing purposes.

(c) Restrict processing. You have the right to stop us processing your Personal Information other than for storage purposes.

(d) Portability. You have the right to receive, in a structured, commonly used and machine readable format, Personal Information that you have provided to us if we process it on the basis of our contract with you, or with your consent, or to request that we transfer such Personal Information to a third party.

Please note that, prior to any response to the exercise of such rights, we will require you to verify your identify. In addition, we may have valid legal reasons to refuse your request, and will inform you if that is the case. For more information on your rights, please e-mail us at the address listed below.

Cross-Border Data Transfers

Indent is a U.S.-based company that offers our Services to domestic and international business clients. As a result, information that we collect, including Personal Information, may be transferred to our U.S. offices to permit us to comply with our legal and contractual obligations, to provide information and services to prospective and current clients, and to perform related business activities. In addition, we may provide information to third-party service providers in the U.S. and in other countries to the extent necessary to support Indent's business activities, and we may access Personal Information collected by our customers to support the Services that we provide to our customers. As a result, we may transfer your Personal Information outside of the European Economic Area to the U.S. or to other countries different from the country your Personal Information was collected in. When we do so, we shall ensure that relevant safeguards are in place to afford adequate protection for your Personal Information. Further details regarding the relevant safeguards can be obtained from us on request.

Children's Privacy

Our Site and Services are not directed to children, and we do not knowingly collect Personal Information from children under the age of 16. If you learn that a child has provided us with Personal Information in violation of this Privacy Statement, please contact us as indicated below.

Data Retention

We stores all Personal Information for as long as necessary to fulfil the purposes set out in this Privacy Statement, or for as long as we are required to do so by law or in order to comply with a regulatory obligation. When deleting Personal Information, we will take measures to render such Personal Information irrecoverable or irreproducible, and the electronic files which contain Personal Information will be permanently deleted.

Data Security

We use certain physical, managerial, and technical safeguards that are designed to improve the integrity and security of Personal Information that we collect and maintain. However, the transfer of Personal Information through the internet will carry its own inherent risks and we do not guarantee the security of your data transmitted through the internet. You make any such transfer at your own risk.

Our Site may contain features or links to websites and services provided by third parties. Any information you provide on third-party websites or services is provided directly to the operators of such websites or services and is subject to those operators' policies governing privacy and security, even if accessed via our Site. We are not responsible for the content or privacy and security practices and policies of third-parties to which links or access are provided through our Site. We encourage you to learn about third parties' privacy and security policies before providing them with your Personal Information.

Changes to This Privacy Statement.

We will notify you of any material changes so that you have time to review the changes. Continued use of our Sites or Services, following notice of such changes shall indicate your acknowledgement of such changes.

Contact and complaints

If you have any questions or concerns or complaints about our Privacy Statement or our data collection or processing practices, or if you want to report any security violations to us, please contact us at the following address or e-mail:

Indent Inc
182 Howard St #422
San Francisco, CA 94105
support@indent.com

We will endeavor to respond to your complaint as soon as possible. You may also lodge a claim with the data protection supervisory authority in the UK or EU country in which you live or work, where you believe we have infringed data protection laws.