CONCOURSE TECHNOLOGIES, INC.

Privacy Policy

Last modified: July 11, 2025

1. Introduction

Concourse Technologies, Inc. ("Concourse," "Company," "we," "our," or "us") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with us.

This Privacy Policy applies to certain personal information we collect and process as a controller when you:

• Access or use our Website at https://concourse.co (the "Website");
• Use our software services, including web or mobile applications that support financial analysis, reporting, forecasting, and related automation workflows (collectively, the "Services");
• Interact with our communications, including emails, newsletters, customer support, and marketing campaigns; and
• Engage with us via third-party platforms, such as social media, digital advertising (together with the Website and Services, the "Business").

This Privacy Policy does not apply to information collected offline or through other channels and websites unrelated to our business.

By accessing or using our Website, Services, or engaging with our Business, you agree to the terms of this Privacy Policy. If you have questions about our privacy practices, please contact us at privacy@concourse.co.

2. Information We Collect

We collect various types of information from and about users of our Website and services, including:

Personal Information You Provide to Us

This includes information you provide when registering on the Website, subscribing to services, contacting customer support, or interacting with features of our platform. Such information may include your name, postal address, email address, telephone number, payment information, and any other identifiers you provide.

Information Collected Automatically

When you interact with our Website and services, we collect certain information automatically, such as IP address, browser type, device identifiers, operating system, pages visited, and usage data through cookies, web beacons, and similar technologies.

Information We Collect from Third Parties

We may obtain personal information about you from third-party sources to support our services and comply with applicable laws and regulations. These sources include:

• Technology and Analytics Providers: Partners providing data enrichment, analytics, and AI model support to help improve accuracy and user experience.
• Marketing and Advertising Partners: Companies assisting with identifying and engaging prospective customers through targeted advertising and performance tracking.
• Social Media Platforms: Data from your interactions with our social media profiles, including aggregate engagement and demographic information.
• Business Partners and Vendors: Service providers, software integrators, and consultants who supplement our platform's capabilities.
• Publicly Available Sources: Information from public websites, news articles, press releases, and other publicly accessible data used for due diligence, market research, and risk assessment.

We ensure that all third parties receiving your information agree to maintain its confidentiality and use it only for authorized purposes in accordance with applicable laws.

3. How We Use Your Information

We use the personal and usage information we collect to operate our business, provide and improve our services, and support your experience on our Website. This includes:

• Providing access to our Website and services, and enabling functionality such as registration, account creation, or service configuration.
• Fulfilling your requests, including responding to inquiries, delivering content or services you request, and processing transactions.
• Operating, maintaining, and improving our products, including usage analysis, product development, and platform performance optimization.
• Communicating with you, including sending updates, support responses, administrative messages, marketing communications, and service-related notifications.
• Personalizing your experience, such as tailoring content or features based on your activity, preferences, or organization profile.
• Conducting research and analysis, including usage trends and engagement metrics across customer accounts.
• Supporting legal, compliance, audit, or risk management activities, including fraud prevention, enforcing our terms, or responding to lawful requests.

Any other purpose disclosed at the time we collect your information, or with your consent. If you choose not to provide certain information, some features of the Website or services may not be available to you.

4. Disclosure of Your Information

We may disclose personal information we collect to third parties in the course of operating our business, providing our services, and fulfilling legal and contractual obligations. We disclose information only where necessary and in accordance with applicable law and contractual commitments.

We may share personal information with:

• Enterprise Customers. If you access the Services on behalf of a business or organization, we may share your information (such as usage data, activity logs, and user profile information) with that organization's administrators or authorized representatives to support account management, compliance, and analytics.
• Service Providers and Vendors. We engage third-party providers to perform services on our behalf, including infrastructure hosting, analytics, security, AI processing, customer support, marketing, billing, and software development. These service providers may access personal information as needed to perform their functions and are contractually required to protect it and use it only for authorized purposes.
• Analytics, Marketing, and Advertising Providers. We may share information with analytics platforms and marketing technology vendors to help us understand Website and product usage, improve performance, and conduct targeted marketing or outreach. This may include cookie data, device identifiers, or business email enrichment providers (such as RB2B or similar vendors) to help us reach relevant audiences. You may opt out of certain uses (see Your Choices and Controls).
• Connected Platforms and Integration Partners. If you choose to connect Concourse to third-party systems—such as ERP, accounting, BI, communication, or collaboration tools—we may share information with or receive data from those platforms to facilitate the integration. These connections are optional and governed by your account settings or explicit authorization.
• Professional Advisors and Legal Entities. We may share information with our legal counsel, auditors, insurers, and other professional advisors where necessary to protect our business interests, ensure compliance, or manage risk.
• Corporate Transactions. If we are involved in a merger, acquisition, financing, due diligence process, reorganization, or sale of assets, your information may be shared or transferred as part of that transaction, subject to appropriate confidentiality and data protection agreements.
• Legal and Regulatory Requirements. We may disclose personal information where required to comply with applicable law, regulation, legal process, or government request. We may also disclose information to enforce our terms, investigate potential violations, detect or prevent fraud, or protect the rights, property, or safety of Concourse, our users, or others.
• With Your Consent. We may disclose your personal information to a third party when you direct us to do so or provide explicit consent.
• Aggregated and De-Identified Data. We may share aggregated or de-identified information that cannot reasonably be used to identify any individual. This data may be used for analytics, benchmarking, research, or reporting purposes.

5. Your Choices and Controls

We provide individuals with choices about how their personal information is collected, used, and shared. Below are the tools and mechanisms available to manage your preferences:

• Cookies and Tracking Technologies. You can manage your cookie preferences through your browser settings. Most web browsers allow you to block or delete cookies. Please note that disabling cookies may affect the availability or functionality of certain parts of the Website or Services. You may also use browser-based opt-out tools (such as those provided by the Network Advertising Initiative or Digital Advertising Alliance) to opt out of interest-based advertising.
  • Some of our marketing service providers may use cookies, pixels, or similar technologies to associate your Website activity with other identifiers, such as your business email address. This allows us to reach users with relevant communications and improve our marketing effectiveness. You may opt out of this type of advertising by contacting us at privacy@concourse.co or by visiting the opt-out link provided in applicable communications.
• Marketing Communications. You can opt out of receiving promotional or marketing emails from us at any time by clicking the "unsubscribe" link in any marketing email we send or contacting us at privacy@concourse.co
  • Please note that you may still receive non-promotional communications, such as those related to your account or critical service updates.
• Opt Out of Targeted Advertising and "Sales" or "Sharing" of Personal Information. While we do not sell personal information in the traditional sense, some of our marketing practices may be interpreted as a "sale" or "sharing" of personal information under laws such as the California Consumer Privacy Act (CCPA/CPRA). You can opt out of these practices by contacting us at privacy@concourse.co.
• Opt Out of Audio or Video Recording. If you participate in a support call, product demo, webinar, or other session that may be recorded, you will be notified at the time. You may opt out of being recorded by choosing not to participate or by requesting alternative support arrangements. To request non-recorded support or to object to recording, contact us at privacy@concourse.co.
• Do Not Track. We do not currently respond to "Do Not Track" (DNT) signals. However, you may use browser-based or device-level tools to control certain data collection.

6. State-Specific Privacy Rights

Depending on your location, you may have specific rights regarding your personal information under state laws such as the California Consumer Privacy Act (CCPA/CPRA), the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act.

These rights may include, where applicable:

• The right to know what personal information we collect, use, disclose, and sell or share
• The right to access and obtain a copy of your personal information
• The right to correct inaccurate personal information
• The right to delete your personal information, subject to certain exceptions
• The right to opt out of the sale or sharing of your personal information
• The right to opt out of targeted advertising or profiling
• The right to data portability
• The right to not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us at privacy@concourse.co. We may require you to verify your identity before processing your request to protect your privacy.

If you are a California resident, you have the right to request information about our disclosure of your personal information to third parties for their direct marketing purposes ("Shine the Light" request). You may submit such a request by contacting us at privacy@concourse.co.

California law also provides residents with additional rights regarding their personal information, including the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of personal information, subject to certain exceptions
• Opt out of the sale or sharing of personal information (we do not sell personal information)
• Not be discriminated against for exercising these rights

To exercise these rights, please contact us at privacy@concourse.co. We will respond in accordance with applicable law.

7. International Data Transfers

If you are located outside of the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States or other countries where we or our service providers maintain facilities. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal information across borders, we implement appropriate safeguards to protect your data, such as standard contractual clauses or other mechanisms required by applicable law.

By using our Website or Services, you consent to the transfer of your personal information to the United States or other countries as described in this Privacy Policy.

8. Accessing, Correcting, and Deleting Your Information

You have the right to request access to, correction of, or deletion of your personal information that we hold. To make such a request, please contact us at privacy@concourse.co. We may ask you to verify your identity before processing your request to protect your privacy and security.

We will respond to your request in accordance with applicable laws and strive to comply promptly, except where we are legally permitted or required to retain certain information (such as for compliance, dispute resolution, or legitimate business purposes).

If you use Concourse Services through an employer or other organization, please note that the organization may control the personal information you provide, and you may need to direct your requests to that organization.

9. Data Security

We take reasonable administrative, technical, and physical measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These safeguards include, but are not limited to, encryption, access controls, secure development practices, and regular security assessments.

Despite these efforts, no security system is impenetrable, and we cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your devices.

If you believe your account has been compromised, please notify us immediately at privacy@concourse.co.

10. Data Retention

We collect and store personal information for the purposes outlined in this Privacy Policy. Subject to applicable law, we retain personal information for as long as we have a legitimate business or operational purpose to do so and as necessary to comply with our legal or regulatory obligations, resolve disputes, prevent fraud, and enforce our rights.

Please note that our retention obligations may require us to retain your personal information even after you cease using our Services or after your organization's contract with us ends. These obligations may also limit our ability to delete certain personal information upon request.

When the applicable retention period ends, we will securely delete, de-identify, or anonymize your personal information in accordance with our internal policies and procedures.

11. Children's Privacy

Our Website and Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 without verified parental consent.

If you are under 16, please do not provide any personal information through our Website or Services, including your name, address, telephone number, email address, or any user-generated content.

If we learn that we have collected personal information from a child under 16 without appropriate consent, please contact us immediately at privacy@concourse.co.

12. Changes to Our Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on our Website. Your continued use of the Website or Services after such changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@concourse.co

We will make reasonable efforts to respond to your inquiries and resolve any issues promptly.