PRIVACY POLICY

This Privacy Policy describes how Sonarverse Inc. ("SonarX," "Sonarverse," "we," or "us") collects, uses, discloses, and otherwise processes information about you. This Privacy Policy applies to information we collect in connection with our web3 analysis services (the "Services"), when you access or use our websites (collectively, the "Website"), or when you otherwise interact with us, such as through our customer support channels.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy. If we make material retroactive changes, we will provide you with additional notice (such as by adding a statement to the Services or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

Collection of Information

Information You Provide to Us

We collect information directly from you when you visit the Website, create an account, request customer support, or otherwise communicate with us. The categories of information we collect include:

• Identifiers: we collect your name, email address, and your company name. We also generate an ID number that we associate with your account.
• Communication Information: we collect information included in your communications with us.

We may also collect any other information you choose to provide.

Information We Collect Automatically

We automatically collect the following categories of information:

• Blockchain Information: we collect information from blockchains identified on our Website ("Supported Blockchains"), including transactional information like wallet IDs and the dates, times, and amounts of transactions that occur on Supported Blockchains.
• Internet Activity Information: we collect information about how you access our Website and Services, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, and browser type. We also collect information about your activity on our Website, in our Services, and interaction with our communications, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Website or Services.
• Information Collected by Cookies and Similar Tracking Technologies: We use tracking technologies, such as cookies and pixels, to collect information about your interactions with our Website and communications. These technologies help us improve our Website and communications, see which areas and features of our Website are popular, count visits, and track clicks. You may be able to adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Services.

Information We Collect from Other Sources

We obtain information from other sources. For example, we may collect Identifiers and Internet Activity Information from advertising networks and data analytics providers. We may also collect information you share when you interact with us on social media platforms like LinkedIn.

Derived Information

We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address.

Use of Information

We use the categories of information we collect for the following business and commercial purposes:

• Service Delivery: we use information to provide and maintain our Services, including to authenticate your account.
• Support and Communication: we use information to communicate with you about SonarX and our Services, including to respond to your questions, inform you of price or Services changes, and send you other transactional or relationship messages.
• Marketing and Advertising: we use information to send direct marketing messages (including via email) and target advertisements to you on third-party platforms and websites as described below. You can opt out of direct marketing messages we send by clicking "unsubscribe" in the emails or by contacting us.
• Research and Development: we use information to monitor and analyze Website and Services trends, usage, and activities, improve our Website and Services, develop new products and services, and generate de-identified data that we will not attempt to re-identify.
• Protection and Compliance: we use information to detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of SonarX and others, and comply with our legal and financial obligations.
• Notice/Consent: we may also use information in other circumstances after giving you notice and/or getting your consent.

Targeted Advertising and Analytics

We engage others to provide analytics services, serve advertisements, and perform related services across the web and in mobile applications. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Website, including your IP address, web browser and mobile network information, pages viewed, time spent on pages, and links clicked. This information is used to deliver advertising targeted to your interests on other companies' sites or mobile apps and to analyze and track data, determine the popularity of certain content, and better understand your activity. Some of the activities described in this section may constitute "targeted advertising," "sharing," or "selling" under certain laws.

You can also learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance, by visiting www.aboutads.info/choices.

Disclosure of Information

We disclose the categories of information described above as follows:

• Customers: we disclose Blockchain Information to customers that purchase our Services.
• Vendors: we disclose information to vendors, service providers, contractors and consultants that need this information to provide services to us, such as companies that assist us with web hosting, payment processing, fraud prevention, customer service, data enrichment, analytics, and marketing and advertising.
• Advertising Partners: we disclose information to third parties for the Marketing and Advertising purposes described above.
• Professional Advisors: we disclose information to our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
• Legal Authorities: we may disclose information to legal authorities and others for the Protection and Compliance purposes described above, including if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements and if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of SonarX, our users, the public, or others.
• Corporate Transactions: we reserve the right to disclose information in connection with, or during negotiations of certain corporate transactions, including the merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliates: we reserve the right to disclose information between and among SonarX and any current or future parents, affiliates, subsidiaries, and other companies under common control and ownership.
• Consent: we may disclose information when we have your consent or you direct us to do so.

We also disclose de-identified information that cannot reasonably be used to identify you.

Residents of Certain US States

Privacy laws in certain states like California, Colorado, Connecticut, Utah, and Virginia require additional disclosures and grant their residents certain rights. If you are a resident of one of these states, this section applies to you.

Additional Disclosures

We collect the following categories of personal information: Identifiers, Commercial Information (including the Blockchain Information described above), Communication Information, Internet Activity Information, and Derived Information. We collect this information from the following categories of sources: directly from you, from Supported Blockchains, from the third-party sources identified above, and by automated means. Please see the Collection of Information section above for more information.

We collect and disclose personal information for the following business and commercial purposes (described in more detail in the Use of Information section above): Service Delivery, Research and Improvement, Communication, Marketing and Advertising, Conducting Analytics, and Protection and Compliance.

We use and disclose personal information as follows (described in more detail in the Use and Disclosure of Information sections above):

Your Privacy Rights

Access, Correction, and Deletion

You have the right to (1) request to know more about and access your personal information, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information.

Contact us to exercise these rights.

We may verify your request by asking you to verify your email address and/or provide information related to your recent interactions with us. If we deny your request, you may appeal our decision by contacting us.

Opting Out of Sales, Sharing, and Targeted Advertising

As described in the Targeted Advertising and Analytics section above, we process personal information to understand and improve your experience with our Website and to serve you advertisements on non-SonarX properties. These activities may result in us selling or sharing Identifiers, Internet Activity Information, and Derived Information with our Advertising Partners (including social media platforms) so our Advertising Partners can show ads that are targeted to your interests on other platforms. These activities may be considered targeted advertising under certain laws. You have the right to opt out of sharing, sales, and targeted advertising at any time. You may need to renew your opt-out choice if you use a different browser or device to access our Services, or if you clear your cookies. We do not "share" or "sell" any other categories of personal information nor do we knowingly "sell" or "share" personal information about consumers under the age of 16.

Nondiscrimination

We will not treat you differently for exercising your privacy rights.

Authorized Agents

If you are submitting a rights request as an authorized agent, you are required to submit proof of your authorization to make the request, such as a valid power of attorney or proof that you have signed permission from the individual who is the subject of the request. Please do not provide any sensitive personal information in connection with this request, such as a driver's license or other government-issued ID. In some cases, we may be required to contact the individual who is the subject of the request to verify his or her own identity or confirm you have permission to submit this request. If you are an authorized agent seeking to make a request, please contact us.

Data Retention

We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.

Individuals in Europe

This section supplements this Privacy Policy if you are in the European Economic Area ("EEA"), the United Kingdom, or Switzerland.

Legal Basis for Processing

When we process your personal information as described above, we do so in reliance on the following lawful bases:

• To perform our responsibilities under our contract with you (e.g., Service Delivery).
• When we have a legitimate interest in processing your personal information to operate our business or protect our interests (e.g., Support and Communication, Research and Development, and Marketing and Advertising that does not require consent).
• To comply with our legal obligations (e.g., Protection and Compliance).
• When we have your consent to do so (e.g., Marketing and Advertising activities that require your consent). When consent is the legal basis for our processing your personal information, you may withdraw such consent at any time.

Data Subject Requests

You have the right to request access to or deletion or correction of your personal information. In addition, you have the right to object to certain processing or request we restrict certain processing. To exercise any of these rights, please contact us.

If you have a concern about our processing of personal information that we are not able to resolve, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:

• For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en
• For individuals in the UK: https://ico.org.uk/global/contact-us/
• For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

Data Transfers

We may transfer personal information from the EEA, the United Kingdom, or Switzerland to non-adequate countries like the United States. We rely on appropriate safeguards such as the standard contractual clauses ("SCCs") to do so, and you may obtain a copy of the SCCs by contacting us.

Data Retention

We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us through our Website.

EU Representative

UK Representative