Privacy Policy

(Last Updated: August 6, 2025)

Web of Trust, operated by WOT Services LP ("WOT"), is a worldwide community of millions of users dedicated to creating and maintaining a safe and trustworthy web experience. The WOT services are offered via: (i) our website: https://www.mywot.com/("Website"); (ii) our iOS mobile app ("iOS App"); (iii) our Android mobile app ("Android App") (the iOS App and the Android App shall be referred to collectively herein as the "Apps"); (iv) our web service API; and (v) our browser add-on extensions ("WOT Extension"), all of (ii)-(v) above shall be referred to herein as the "WOT Products" and (i)-(v) above shall be referred to herein as the "Services".

This privacy policy ("Privacy Policy") is intended to make our users ("Users" or "You") fully aware of the data we collect, the way it is stored, used, and disclosed, and our users' rights in relation to such data and practices. We greatly value our users and their privacy rights, and we encourage all of our users to read and become familiar with this Privacy Policy so that they may understand those rights and how to protect them.

The use of any of the WOT Products are subject to each of their respective the WOT Terms of Use, available at https://www.mywot.com/en/terms ("Terms of Use") and the WOT Community Guidelines, available at https://www.mywot.com/en/guidelines. All capitalized terms used but not otherwise defined herein shall have the meaning ascribed to them in our Terms of Use.

This Privacy Policy applies to all users worldwide. If you are a resident of California, please refer to Section 12. Additional Privacy Information for California Residents for information about the categories of Personal Information we may collect and your rights under California privacy laws. If you are a resident of other U.S. states (e.g., Colorado, Connecticut, Virginia, Montana, Oregon, Texas or Utah) please refer to Section 13. Additional Privacy Information for Certain United States Residents, which includes additional information about privacy rights for residents of certain other U.S. jurisdictions.

We reserve the right to periodically amend or revise the Privacy Policy at our sole discretion. Such changes and updates will be effective immediately upon the display of the revised Privacy Policy. Thus, we encourage you to check this Privacy Policy regularly for updates, so that you are fully informed of how your data is collected and used by the Company and your related rights. The last revision date will be reflected in the "Last Updated" heading. Your continued use of the WOT Products or the Services following the display of such amendments constitutes your acknowledgement of such amendments to the Privacy Policy. We will make an effort to notify you via the relevant WOT Product or the Website (as applicable) in the event of material changes that will adversely affect your use of the relevant WOT product or Service or the data collection by us.

IF YOU OBJECT TO ANY OF THE TERMS INCLUDED HEREIN, PLEASE DO NOT ACCESS, DOWNLOAD, INSTALL, OR USE THE APP OR SERVICES IN ANY MANNER.

1. Information We Collect

We may collect, from you and about you, information that identifies or can reasonably be used to identify an individual (referred to herein as "Personal Information") and information that does not and cannot identify you (referred herein as "Non-Personal Information").

WOT goes to great lengths, and invests substantial resources, to avoid disclosing Personal Information. This includes the use of various state-of-the-art anonymization, data cleaning and aggregation techniques to identify and remove Personal Information from information we collect with the goal of storing only Non-Personal Information.

Information Users Provide Directly:

We may collect information directly from you, as follows:

• Customer Support Information: You may voluntarily provide us with information when you contact us for customer support including via our WOT Help Center, such as your name and email address. We will use any Personal Information received for customer support purposes to communicate with you and support you, and we will not disclose it with any third parties, except as reasonably necessary to provide customer support.

• Registration Information (not relevant for the iOS App): You may choose to become an active member of the WOT community and register as a WOT user. Among other things, this will allow you to join and participate in our forums, share your experience, contribute your comments and otherwise take part in group discussions with other WOT users. You may register with us directly through https://www.mywot.com/en/signup. If you do choose to register, then we will collect from you certain registration information including your name, email address, user name and password. In addition, once you have registered, you may choose to enter certain information about you in your user profile. All of this data, including Personal Information, we receive in relation to your registration is referred to herein as "Registration Information". Note that, with the exception of the WOT API, registration is not mandatory and currently you may use all other WOT Products and Services without registration. We may also receive Registration Information about you if you register through a social network (e.g. Google+, LinkedIn, Twitter, Facebook, and others). This Registration Information may include any information (such as profile picture, public and basic information, status and photos) as provided by you to the applicable social network operator, and which such social network operator permits to be disclosed to third parties. The data we receive from your social network operator depends on your privacy settings with the social network operator, and we will not post information about you on third party social media sites without your consent. You should review and, if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the WOT Products or Services.

• User-Generated Content: Content provided by you and other users of the Services can be added by Users of the Website or the WOT Extension, for purposes of sharing with other members of the WOT community. Such content is referred to as "User-Generated Content" and may include Personal Information, such as your name, if you include such information with your User-Generated Content.

• Payment Information: In order to access and use certain WOT Products, such as the WOT API, you may need to purchase a license or a subscription. We use third-party payment tools and services such as Stripe or PayPal to process transactions on our behalf. In order to complete such transactions, you will be required to provide Stripe or PayPal, as applicable, with certain Personal Information, such as a credit card number and related account and billing information, and invoice-related information. WOT does not directly collect any credit card or other payment method information. Stripe's privacy policy is available at https://stripe.com/privacy and PayPal's privacy policy is available at https://www.paypal.com/va/webapps/mpp/ua/privacy-full; the use of any Personal Information in connection with such transactions is governed by and subject to the applicable third party's privacy policy. When you make a purchase using Stripe or PayPal, as applicable, Stripe or PayPal provide us with confirmation of payment for your user ID, which we use to grant you access to the applicable WOT Services that you purchased. The information we receive from Stripe or PayPal does not include the details of your payment method or any other Personal Information.

• Customer Support Information: You may voluntarily provide us with information when you contact us for customer support including via our WOT Help Center, such as your name and email address. We will use any Personal Information received for customer support purposes to communicate with you and support you, and we will not disclose it with any third parties, except as reasonably necessary to provide customer support.

• Registration Information (not relevant for the iOS App): You may choose to become an active member of the WOT community and register as a WOT user. Among other things, this will allow you to join and participate in our forums, share your experience, contribute your comments and otherwise take part in group discussions with other WOT users. You may register with us directly through https://www.mywot.com/en/signup. If you do choose to register, then we will collect from you certain registration information including your name, email address, user name and password. In addition, once you have registered, you may choose to enter certain information about you in your user profile. All of this data, including Personal Information, we receive in relation to your registration is referred to herein as "Registration Information". Note that, with the exception of the WOT API, registration is not mandatory and currently you may use all other WOT Products and Services without registration. We may also receive Registration Information about you if you register through a social network (e.g. Google+, LinkedIn, Twitter, Facebook, and others). This Registration Information may include any information (such as profile picture, public and basic information, status and photos) as provided by you to the applicable social network operator, and which such social network operator permits to be disclosed to third parties. The data we receive from your social network operator depends on your privacy settings with the social network operator, and we will not post information about you on third party social media sites without your consent. You should review and, if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the WOT Products or Services.

• User-Generated Content: Content provided by you and other users of the Services can be added by Users of the Website or the WOT Extension, for purposes of sharing with other members of the WOT community. Such content is referred to as "User-Generated Content" and may include Personal Information, such as your name, if you include such information with your User-Generated Content.

• Payment Information: In order to access and use certain WOT Products, such as the WOT API, you may need to purchase a license or a subscription. We use third-party payment tools and services such as Stripe or PayPal to process transactions on our behalf. In order to complete such transactions, you will be required to provide Stripe or PayPal, as applicable, with certain Personal Information, such as a credit card number and related account and billing information, and invoice-related information. WOT does not directly collect any credit card or other payment method information. Stripe's privacy policy is available at https://stripe.com/privacy and PayPal's privacy policy is available at https://www.paypal.com/va/webapps/mpp/ua/privacy-full; the use of any Personal Information in connection with such transactions is governed by and subject to the applicable third party's privacy policy. When you make a purchase using Stripe or PayPal, as applicable, Stripe or PayPal provide us with confirmation of payment for your user ID, which we use to grant you access to the applicable WOT Services that you purchased. The information we receive from Stripe or PayPal does not include the details of your payment method or any other Personal Information.

Your Responsibility for User-Generated Content

Any User-Generated Content provided by you, including any of your Personal Information or third-party Personal Information contained therein (including comments, recommendations, images, or other content), may be subject to data protection, intellectual property and other laws and regulation, and you are fully and solely responsible for compliance with such laws and regulations with respect to such User-Generated Content. When including your Personal Information or Personal Information of others in any User-Generated Content provided by you, we require that you exercise due care and assume full responsibility for the disclosure and use of such information and for protecting the rights of such third parties. You acknowledge and, where relevant, agree that we may monitor the User-Generated Content and may remove any parts thereof at our sole discretion.

Automatically Collected Information: When you install and use any of the WOT Products, we also may collect information related to your use of the applicable WOT Product. This information may include the following from each applicable WOT Product listed below:

• Information Collected Via the WOT Extension (collectively, "Extension Data"): Internet Protocol ("IP") address (irreversibly encrypted and hashed on a daily basis as well as trimmed to permanently remove specific location information other than country, city and postal code); WOT user ID, which is a random number we generate to keep track of the data sets we collect; device type, operating system and browser type; information related to your purchases on e-commerce websites including the names, quantities, and prices of products you purchased ("E-Commerce Data"); your submissions to various chatbots (i.e., chatbot inputs and outputs (including uploaded files, attachments and images) ("Chatbot Data"); data about the advertisements you access or see when you are browsing on your device ("Ad Data"); search data which includes search engine results pages (SERPs), the keywords searched, the order and index of results, result links, titles, and descriptions ("Search Data") and browsing data that includes the web pages visited, browser type and time stamp of the visit ("Browsing Data"). To avoid processing any Personal Information, we make an effort to clean and scrub the information that we collect from you on your device prior to transferring it to our servers.

• Information Collected Via the WOT API: IP address (irreversibly encrypted and hashed on a daily basis as well as trimmed to permanently remove specific location information other than country, city and postal code) and your WOT user ID (collectively, "WOT API Data").

• Information Collected Via the iOS App (collectively, "iOS App Data"): IP address (irreversibly encrypted and hashed on a daily basis as well as trimmed to permanently remove specific location information other than country, city and postal code), your device model, GUID (a randomly generated ID number), Browsing Data, installed applications - this includes metadata about the apps installed on your device, including the app name, ID, type, installation and update dates, version number, total usage time, whether the app appears on your home screen and the time stamp of when we collect the above information from your device ("Installed Apps Data").

• Information Collected via the Android App (collectively, "Android App Data"): IP address - your IP address is collected and trimmed to permanently remove specific location information, retaining only the country, city, and postal code; device information - this includes your device model name, operating system version, screen size, whether the device is rooted, and a device ID that is permanently and irreversibly encrypted ("Device Data"); Installed Apps Data and information about how you engage with apps, including when apps are opened or closed, duration of use, and whether you are using a VPN connection ("Application Usage and Engagement"); Installed Apps Data; Browsing Data; Search Data across various applications and related interactions with search results; Ad Data displayed across multiple apps including the advertiser domain, creatives shown, engagement (e.g., clicks), and associated metadata where visible; Chatbot Data; E-Commerce Data from e-commerce platforms, including product views, cart contents, and completed purchases; messaging activity - we collect the text of messages you type and send using certain messaging apps ("Messaging Data"); and other in-app activity monitoring: we collect behavioral data on your interactions within certain apps, limited to user interface engagement such as navigation patterns or clicks, without collecting actual content unless otherwise specified above ("In App Activity"). For the purposes of this Privacy Policy the data collected from in app activity monitoring from the Android App including, In App Activity, Messaging Data, Search Data (for the Android App), Chatbot Data, E-Commerce Data, and Ad Data shall be referred collectively herein as: "In App Activity Data". To minimize privacy risks, we apply technical safeguards such as on-device cleaning and de-identification processes before transferring any data to our servers. No raw personal content or identifiable message history is collected unless explicitly mentioned above.

Permissions Requested:

Depending on which WOT Product you are using, we may request your permission to collect: (i) Browsing Data; (ii) Ad Data; (iii) Chatbot Data; (iv) Messaging Data; (v) In App Activity Data; (vi) Installed Apps Data; (vii) Application Usage and Engagement; and (viii) Search Data (collectively (i)-(viii) shall be referred to herein as "Permission Data"). Some of our features are supported by our affiliates' technologies, and your Personal Information including within the above mentioned information may be disclosed to such affiliates to enable us to provide you with our browsing protection features and for market intelligence purposes. To access these permissions, you will need to explicitly enable them through an in-app permission. You may opt-out at any time through "Your Privacy Choices" within the settings menu. If you opt out, features that rely on these technologies will no longer work.

To support our Services and enable the collection of the data described above, we may request or rely on the following permissions, depending on the WOT Product that you use:

iOS App: VPN Permission – we use to collect the Browsing Data and Installed Apps Data in order to provide the Services.

Android App: VPN Permission – we use to collect Browsing Data and Application Usage and Engagement; Accessibility Permission – used to capture In App Activity Data in a privacy-conscious manner, without recording sensitive personal content; and Usage Stats Permission – allows us access to Application Usage and Engagement all to provide the Services.

WOT Extension: Web Request/Network Monitoring Permission – enables the Extension to access Browsing Data, Search Data, Ad Data, and E-Commerce Data to provide the Services; Tabs and History Permissions – allows the Extension to detect user navigation behavior, such as the sequence and timing of visited pages.

Website: Google OAuth Permission – if you choose to log in using your Google account, we collect basic profile information (e.g., name, email) as authorized by you through Google's OAuth protocol.

2. How We Use Your Information and Our Legal Basis

WOT uses the information collected from or about our users for operational and business purposes in the following ways:

• Customer Support Information: we use this information solely to provide you with the support you have requested. The lawful basis for processing this data is the legitimate interest we have in addressing your request.

• Registration Information: We process this information to create and manage your WOT user account, enable you to participate in the WOT community (e.g., forums, reviews, discussions), personalize your experience, and allow you to interact with other users. When you choose to register through a social network, we process the information provided by the network to facilitate the registration process and associate your account with your profile. Our lawful basis for processing this information is the performance of our contract with you as well as our legitimate interests in maintaining a secure and engaged user community.

• User-Generated Content: We process this information to enable Users to share information, reviews, and feedback with the WOT community. This content contributes to the core functionality of our services and supports the community-driven nature of the platform. By voluntarily submitting content (e.g., reviews, comments), you consent to its display and processing within the WOT platform. We also rely on our legitimate interest in providing a collaborative platform that enables user interaction, transparency, and community contribution.

• Payment Information: We process limited payment confirmation information to enable and manage paid services such as WOT API access. As explained above, all actual payment processing is handled by trusted third-party providers (e.g., Stripe, PayPal), and we do not store or process your payment method information directly. Our lawful basis for processing this information is the performance of a contract as we need to process these confirmations in order to fulfill your purchase and provide the associated Services. Additionally in some cases, we may have a legal obligation to retain records of payments or transactions to comply with financial or tax regulations.

• WOT Extension Data: we use the WOT Extension Data for our legitimate interests in enhancing, improving and providing the WOT Services. Alternatively, we may process the E-Commerce Data, Chatbot Data, Ad Data, Search Data and Browsing Data based on your consent, if we are required to do so under applicable law.

• WOT API Data: This data is processed to provide core WOT API functionality, such as identifying repeat API usage, associating requests with user accounts, protecting against abuse, and generating country-level usage statistics. We process this data in order to fulfill our contract with you by providing you with the Services. Additionally, we process this data in our legitimate interests in order to ensure the integrity, availability and security of the WOT API Service.

• iOS App Data: We process this data to support app functionality, detect patterns in browsing behavior and app installations, generate aggregated usage analytics, and enhance our services. The GUID helps, in a pseudonymized way, associate user activity across sessions for analytics while maintaining user privacy. We process this data to provide you with the Services, in order to fulfill our contract with you. Some of this data we process in our legitimate interests to improve the performance, relevance, and reliability of the iOS App. Alternatively, in the event that we are required to do so under applicable law, we will obtain your consent in order to process the applicable data (e.g., Browsing Data).

• Android App Data: We process this data to support app functionality, generate aggregated usage analytics, and provide and enhance our services. This data also allows us to analyze how users engage with their device ecosystem across apps and web content, helping to provide insights into digital behavior trends, improve service offerings, support market research, and optimize app performance. Data is processed using privacy-preserving techniques such as on-device cleaning and pseudonymization before transmission. We process this data to provide you with the Services, in order to fulfill our contract with you. Some of this data we process in our legitimate interests to improve the performance, relevance, and reliability of the Android App. Alternatively, in the event that we are required to do so under applicable law, we will obtain your consent in order to process the applicable data (e.g., Browsing Data and In App Activity Data).

• Disclosing Collected Data to Third Parties

We may disclose Personal Information for the purposes described in this Privacy Policy to the following parties:

• Vendors and Service Providers: We may disclose Personal Information we collect to our service providers, processors, and vendors who perform functions on our behalf to allow us to provide the Services.

• Affiliates: We may disclose Personal Information we collect to our affiliates, who may use this Personal Information in connection with their market intelligence or analytics services and otherwise in accordance with the principles of this Privacy Policy.

• Third Party Platforms and Networks: We may disclose or make available Personal Information to third parties in support of our marketing, advertising, and campaign management.

• Business Partners: If we, our affiliates, or subsidiaries are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. We may also disclose certain Personal Information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and third-party advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.

• Others as permitted or required by applicable law: We may disclose Personal Information to third parties to the extent permitted or required by applicable law. This may include regulators, government entities, and law enforcement. It may also include certain disclosures that we are required to make.

• Security and protection of rights: We may disclose your Personal Information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Privacy Policy, or as evidence in litigation in which we are involved.

• Aggregated Data and Non-Identifiable Data

We may use and disclose aggregated and other non-identifiable data related to our business and the Services for quality control, analytics, research, development, and other purposes. Some of this information may be considered "de-identified" under U.S. privacy laws (i.e., data that is no longer linked or reasonably linkable to an identified or identifiable consumer). Where we rely on data that has been "de-identified" as defined by U.S. privacy laws, we will: (i) take reasonable measures to ensure that the de-identified information cannot be associated with an individual, household, or device; (ii) commit to maintain and use the information in de-identified form and not attempt to re-identify the information; and (iii) contractually obligate any further recipient to comply with this Section 4.

5. Cookies and Third-Party Tools

We use "cookies" and similar tracking technologies such as software developer kits ("SDK") on the WOT Products and for our Services. A cookie is a small text file that a website places and stores on your device while you are viewing a website. Cookies are very helpful and can be used for various purposes. These purposes include: (i) allowing you to navigate between pages efficiently; (ii) enabling automatic activation of certain features; (iii) remembering your preferences; and (iv) making the interaction between you and our services quicker and easier. The SDKs create the opportunity to enhance our functionality. Cookies are also used to help customize your experience. You can find more information about cookies at www.allaboutcookies.org.

Website:

Our website may use third party content (e.g., www.youtube.com), third party tools (e.g. www.google.com/analytics/), or embedded badges from social networks (e.g., www.facebook.com). These third parties may use and store their own cookies on your device, which may collect information about you, including Personal Information, subject to their own privacy practices. These cookies may collect information such as how often users access the WOT website, what pages users visit and when.

We use Hotjar in order to better understand our users' needs and to optimize our service. Hotjar is a technology service that helps us better understand our users' experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and do not like) which enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behavior and their devices (in particular device IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar's privacy policy by clicking on this link.

You can opt out of the creation of a user profile, Hotjar's storing of data about your usage of our site and Hotjar's use of tracking cookies on other websites, by following this opt-out link.

For more information on third party Cookies, check with the relevant third party. For more information about the third party tools we use at any given time, please contact us at support@mywot.com.

We use the information we receive from third parties such as Google Analytics to improve the Services. We do not combine the information collected through the use of Google Analytics with any Personal Information that we collect from you. You may remove Cookies by following the instructions on your device for setting your preferences. Our Cookies do not enable any access to or inspection of other information on your computer. If you wish to be notified of when they are placed, you may set your web browser to provide such notices.

WOT Extension:

When you use the WOT Extension, we may use the following third party tools:

We use the information we receive from third parties such as Google Analytics to improve the Services. We do not combine the information collected through the use of Google Analytics with any Personal Information that we collect from you. For more information, please review Google's privacy policy available here, as well as Google Analytics opt out available here.

We further use Sentry in order to monitor and fix errors and crashes in real time. For more information please review Sentry's privacy policy available here.

In order to provide you with the Data Breach Monitoring feature, we use the service offered by Have I Been Pwned? ("HIBP"). If you choose to enable the Data Breach Monitoring feature, we will disclose your email address to HIBP, which will handle your email address in accordance with their privacy policy, available here. You may disable the Data Breach Monitoring feature by accessing the menu and changing the feature toggle to "off".

Apps:

We currently use App Google Analytics, Appsflyer and Mixpanel SDKs as well as certain SDKs provided by our affiliates for our app performance measurements, such SDKs help us better understand our user's experience, allow us to provide some of the Services and other analytics capabilities. Please see Google's privacy policy here, Appsflyer's privacy policy here and Mixpanel's privacy policy here.

Do Not Track Disclosure:

The Services do not respond to Do Not Track signals. For more information about Do Not Track signals, please see http://www.allaboutdnt.com/.

6. Data Retention

We retain the information we collect as long as it remains necessary for the purposes set forth above, all in accordance with applicable laws. We may at our sole discretion, delete or amend information from our systems, without providing any notice to you, once we deem it is no longer necessary for our purposes.

7. Data Security

While there are inherent risks involved in all data transmissions over the Internet or wireless networks, and other security risks that apply to stored data, and we therefore cannot guarantee the security of your information, we use our best efforts, using industry-standard encryption and security technologies and methods, to collect and store information collected from you in a secure and safe manner.

8. Data Transfers

We may process or store Personal Information within the EEA, US, and internationally. We will take the necessary steps to ensure that international transfers of Personal Information meet all requirements under applicable data protection laws. When Personal Information collected within the European Economic Area ("EEA") or the UK is transferred outside those markets (and not to a recipient in a country that the European Commission has decided provides adequate protection), we will take the steps necessary to ensure that sufficient safeguards are provided to such data during its transfer and processing outside of the EEA or the UK. Some of the measures implemented to safeguard your Personal Information include ensuring that the recipient is bound by specific contractual clauses approved by the European Commission and/or the UK Government to provide adequate protection for Personal Information. Where applicable, you can request a copy of the relevant contractual safeguards that we have put in place.

9. Your Rights

We acknowledge that different people have different privacy concerns and preferences. Our goal is to be clear about what information we collect so that you can make meaningful choices about how it is used. We allow you to exercise certain choices, rights, and controls in connection with your information. Depending on your relationship with us, your jurisdiction and the applicable data protection laws that apply to you, you have the right to control and request certain limitations or rights to be executed.

You can opt out and stop the automated collection and sharing of your Permission Data by opting out of the in App permissions that you granted during the onboarding process via your device settings. Note, that once you opt out or turn off the in App permissions, some or all of the Services provided by the relevant App will no longer be available.

Where provided under applicable law (e.g., within the European Union and United Kingdom), you may have the right:

• To confirm with us whether your Personal Information is processed, and if it is, to request access to the Personal Information processed, the purpose of the processing, and the recipients or categories of recipients of your Personal Information.

• To rectify inaccurate or incomplete Personal Information concerning you. We encourage you to review your information on the Services regularly to ensure that it is accurate and up to date.

• In certain circumstances, to ask us to erase Personal Information concerning you;

• To request that we restrict the processing of your Personal Information in certain circumstances.

• To object to the processing of your Personal Information, where we are relying on a legitimate interest for such processing.

• To object to us processing your Personal Information for direct marketing purposes.

• To receive your Personal Information in a structured, commonly used and machine-readable format or ask that we transfer the Personal Information, to another organization. This right only applies if our lawful basis for such processing is your consent or a contract, we have entered into with you.

• To withdraw your consent at any time, where we are relying on consent to process your Personal Information. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

Note that where your Personal Information has been de-identified, we will not be able to identify you or comply with some of the rights mentioned above. These rights do not apply to de-identified information. Additionally, these rights are not absolute and may therefore be subject to applicable exceptions, such as the interest of other individuals, in order to preserve that information for anticipated litigation or demands from a regulator.

If you wish to exercise any of these rights, please contact our Data Protection Officer at: dpo@mywot.com. Note that we may request proof of your identity, and we reserve the right to charge a fee where permitted by law, such as in circumstances where your request is deemed to be excessive. You may have the right to lodge a complaint with a data protection authority, subject to applicable law (as is the case in the European Union and the UK). You can find information on the relevant EU data protection authorities here and the UK Information Commissioner's Office here.

10. Minors

You represent and warrant that you are (i) at least sixteen (16) years of age if you are located in the EEA; or (ii) if you are located in any other geography and you are above the age defined as "child" under applicable laws in your jurisdiction (collectively, "Child" or "Children"). If you are under 18, please be sure to read the terms of this Privacy Policy with your parents or legal guardians. The Services are not directed or intended for Children, as defined under applicable law, and we do not knowingly collect or solicit information from children. If we later obtain actual knowledge that a user is considered as a Child under applicable law, we will take steps to immediately delete its Personal Information. We request that such individuals do not provide Personal Information through the Services.

If you become aware or have any reason to believe that a Child has disclosed any information to us, please contact us (as detailed below) and we will take reasonable steps to ensure that such information is immediately deleted from our files.

11. Contact Us

If you have any questions or concerns regarding privacy issues, or if you wish to be provided with any other information related to our privacy practices, please contact us at:support@mywot.com.

12. Updates & Revisions

This Privacy Policy may be updated from time to time. We will post the updated policy on our website at: https://www.mywot.com/, and we encourage you to review this Privacy Policy frequently to be kept informed of any updates. Please see the "Last Updated" date at the top of the Privacy Policy in order to determine when the most recent changes have been made.

13. Additional Notice to California Residents

This section applies only to California residents, pursuant to the California Privacy Act of 2018 ("CCPA") effective November 2020, and as amended by the California Privacy Rights Act, effective January 1, 2023.

This section does not address or apply to our handling of publicly available information or to Personal Information that is otherwise exempt under the CCPA. This section also does not address or apply to Personal Information we collect and process about our employees, personnel, and job applicants, which are subject to different privacy notices.

Categories of Personal Information Collected and Disclosed. While our processing of Personal Information varies based upon our relationship and interactions with you, the list below identifies the categories of Personal Information we may collect about you (and may have collected in the previous 12 months), as defined by the CCPA, as well as the categories of third parties to whom we disclosed Personal Information for a business or commercial purpose:

• Identifiers: Online Identifiers; Internet Protocol address. We will disclose the Identifiers with the following categories of third parties: Affiliates; Advisors and agents; Advertising networks; Data Analytics providers; Social networks; Regulators, government entities, and law enforcement (if required to do so by law or court order); Others as required by law.

• Customer Records: May include information such as name, user ID, account name, contact information and other similar types of information. We may disclose Customer Information to the following categories of third parties: Affiliates; Advisors and agents; Regulators, government entities, and law enforcement (if required to do so by law or court order); Others as required by law.

• Internet or other similar network activity: This information may include browsing history, search history, and information regarding a consumer's interaction with an Internet website, application, or advertisement. We may disclose this information to the following categories of third parties: Affiliates; Advisors and agents; Regulators, government entities, and law enforcement (if required to do so by law or court order); Others as required by law.

• Commercial Information: May include records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. We may disclose this information to the following categories of third parties: Affiliates; Advisors and agents; Regulators, government entities, and law enforcement (if required to do so by law or court order); Others as required by law.

Sources of Personal Information. We generally collect Personal Information from the following categories of sources: directly and indirectly from you as further described in Section 1 and 2 above.

Purposes of Collection, Use, and Disclosure. As described above in Section 2. How We Use Your Information and Our Legal Basis and Section 3. Disclosing Collected Data to Third Parties, in general, we may collect, use, disclose and otherwise process the above Personal Information for the following business or commercial purposes and as otherwise directed or consented to by you:

• Operating Services and providing related support

• Analytics and improvement

• Marketing, advertising, and campaign management

• Security and protection of rights

• Compliance and legal process

• Business transfers

• Market intelligence or analytics services of our affiliates

• Provision of Services by us and by our service providers, processors, and vendors

Sales and Sharing of Personal Information:

The CCPA defines "sale" as disclosing or making available Personal Information to a third-party in exchange for monetary or other valuable consideration, and "sharing" includes disclosing or making available Personal Information to a third-party for purposes of cross-context behavioral advertising. We may "sell" the following categories of Personal Information: Identifiers, commercial information, internet and electronic network activity information, profiles and inferences, some of which may by nature of the types of information included in the collected data may be considered sensitive personal information under certain privacy laws. We may "sell" these categories to business customers so that our business customers may better understand consumer behavior and analyze and improve their marketing and advertising campaigns.

We do not knowingly sell personal information about individuals who we know are under age sixteen (16).

Data Retention:

We retain the Personal Information we collect only as reasonably necessary for the purposes described above or as otherwise disclosed to you at the time of collection. When deciding how long to keep your Personal Information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). Rather than delete your data, we may also deidentify it by removing identifying details. Where we have committed to maintaining and using Personal Information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law.

California Consumer Rights

California law grants consumers certain rights and imposes restrictions on particular business practices as set forth below. California consumers have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.

• Right to Opt-out of Sale of Personal Information ("Do Not Sell").

• You may have the right to opt-out of the "sale" or "sharing" of your Personal Information. You can opt out of the sale/sharing of your personal information by opting out of the VPN Permissions through settings.

• Requests for Copy, Deletion and Right to Know

• Subject to certain exceptions, California consumers have the right to make the following requests, at no charge, up to twice every 12 months. Please see "Submitting Requests" for instructions on how to exercise your rights.

  • Deletion: the right to request deletion of personal information that we have collected about you, subject to certain exemptions.

  • Copy: the right to request a copy of the specific pieces of personal information that we have collected about you in the prior 12 months.

  • Right to Know (Collection): Where we have collected personal information about you, the right to request that we disclose certain information about how we have handled your personal information in the prior 12 months, including: the categories of personal information collected; categories of sources of personal information; business and/or commercial purposes for collecting and selling your personal information; and the categories of third parties/with whom we have disclosed your personal information.

  • Right to Know (Disclosure and Sale): Where we have sold or disclosed for a business purpose your personal information, the right to request that we disclose certain information about how we have handled your personal information in the prior 12 months, including: the categories of personal information collected; categories of third parties to whom your personal information has been sold and the specific categories of personal information sold to each category of third party; categories of third parties to whom personal information has been disclosed; and the categories of personal information that we have disclosed or shared with a third party for a business purpose.

• Submitting Requests. You can exercise your rights by emailing us at dpo@mywot.com. When you submit your request, we will take steps to attempt to verify your identity. We will seek to match the information in your request to the personal information we maintain about you. As part of our verification process, we may ask you to submit additional information, use identity verification services to assist us. Please understand that, depending on the type of request you submit, to protect the privacy and security of your personal information, we will only complete your request where we are satisfied that we have verified your identity to an appropriate degree of certainty. We will make every reasonable effort to respond to you within 45 days after we receive a verified request. If we are unable to meet this timescale, we will respond as soon as possible over the next 45-day period.

• Additional Privacy Information for Certain United States Residents

Residents of certain other U.S. states may have additional rights under applicable privacy laws and be entitled to additional disclosures.

Sale of Personal Data: We may sell the following categories of Personal Data: Identifiers, commercial information, internet and electronic network activity information, profiles and inferences, and "sensitive data," as that term is defined under applicable U.S. privacy laws. We sell such categories of Personal Data to our business customers so that they may conduct their own analysis on consumer behaviors and analyze and improve their marketing and advertising campaigns.

Consumer Rights:

Residents of certain U.S. states may have additional rights under applicable privacy laws, subject to certain limitations, which may include:

• Access. The right to confirm whether we are processing their Personal Information and to obtain a copy of their Personal Information in a portable and, to the extent technically feasible, readily usable format.

• Delete. The right to delete their Personal Information provided to or obtained by us.

• Correct. The right to correct inaccuracies in their Personal Information, taking into account the nature and purposes of the processing of the personal information.

• Opt-Out. To opt out of certain types of processing, including: (i) to opt out of the "sale" of their Personal Information; (ii) to opt out of targeted advertising by us; and (iii) to opt out of any processing of Personal Information for purposes of making decisions that produce legal or similarly significant effects.

You may submit a request to exercise most of your privacy rights under U.S. state privacy laws online by emailing us to dpo@mywot.com. When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

Authorized agents may initiate a request on behalf of another individual by contacting us at dpo@mywot.com; authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.