PRIVACY POLICY

Earthivate LLC, operating as Earthivate ("Earthivate," "we,"

"us," or "our"), respects your privacy and is committed to

protecting personal information.

This Privacy Policy explains how we collect, use, disclose, retain,

and protect personal information when you visit earthivate.com,

create an Account, purchase an environmental Membership,

participate in the Earthivate Influencer Program, communicate with

us, or otherwise use Earthivate's websites, applications,

dashboards, technology, programs, and services (collectively, the

"Services").

This Policy also describes certain privacy rights that may be

available to you.

By using the Services, you acknowledge the practices described in

this Privacy Policy.

1. SCOPE

This Privacy Policy applies to personal information processed by

Earthivate in connection with the Services.

It applies to visitors, Customers, Influencers, applicants,

prospective users, and other individuals who interact directly

with Earthivate.

Certain third-party websites, payment providers, social networks,

environmental partners, or other services may maintain their own

privacy policies. Earthivate is not responsible for the independent

privacy practices of third parties.

2. INFORMATION WE COLLECT

Depending on how you interact with Earthivate, we may collect the

following categories of information.

A. INFORMATION YOU PROVIDE

We may collect information including:

• name;

• email address;

• telephone number;

• country, state, province, region, or mailing address;

• username;

• password or authentication information;

• Account profile information;

• Membership selection;

• referral or Influencer information;

• communications with Earthivate;

• support requests;

• survey responses;

• feedback;

• testimonials;

• information submitted through forms;

• tax information where legally required for payouts;

• payout information;

• identity-verification information where necessary;

• promotional or challenge participation information; and

• other information you voluntarily provide.

B. PAYMENT INFORMATION

Payments may be processed by third-party payment processors.

Depending on the payment method, a payment provider may collect

information such as:

• payment-card information;

• bank information;

• billing address;

• payment authentication information; and

• transaction details.

Earthivate generally does not need to store complete payment-card

numbers when a payment is processed directly by an authorized

payment provider.

We may receive transaction information such as:

• payment status;

• transaction identifier;

• amount;

• currency;

• subscription status;

• refund status;

• chargeback information; and

• limited payment-method details.

C. INFLUENCER AND REFERRAL INFORMATION

If you participate in or interact with the Influencer Program, we

may process:

• referral codes;

• referral links;

• referring Influencer;

• attributed Customers;

• commission information;

• qualification status;

• Influencer classification;

• Customer-first classification and related Program eligibility;

• Program-agreement version and acceptance records;

• payout status;

• challenge or incentive progress;

• Account relationships;

• referral history;

• fraud or compliance information; and

• related Program records.

D. AUTOMATICALLY COLLECTED INFORMATION

When you use the Services, we may automatically collect certain

technical and usage information, including:

• Internet Protocol (IP) address;

• browser type;

• device type;

• operating system;

• device identifiers;

• language;

• referring pages;

• pages viewed;

• links clicked;

• approximate geographic location derived from IP address;

• dates and times of access;

• session information;

• login activity;

• error information;

• performance information; and

• security events.

E. COOKIES AND SIMILAR TECHNOLOGIES

Earthivate and authorized service providers may use cookies,

pixels, local storage, software development kits, analytics

technologies, or similar tools.

These technologies may be used to:

• maintain sessions;

• remember preferences;

• authenticate users;

• operate referral attribution;

• understand usage;

• measure performance;

• prevent fraud;

• improve the Services;

• provide relevant communications; and

• comply with legal requirements.

Where required by applicable law, non-essential cookies or similar

technologies will be used subject to appropriate consent.

F. COMMUNICATIONS

If you contact Earthivate, we may retain the communication and

associated information.

This may include email correspondence, support conversations,

contact forms, Influencer messaging and related delivery metadata,

AI-support interactions, or other communications.

G. INFORMATION FROM THIRD PARTIES

We may receive information from authorized third parties such as:

• payment processors;

• payout providers;

• identity-verification providers;

• fraud-prevention providers;

• analytics providers;

• referral sources;

• communications providers;

• social platforms where authorized;

• environmental project partners; and

• other vendors supporting the Services.

3. HOW WE USE PERSONAL INFORMATION

Earthivate may use personal information to:

• provide and operate the Services;

• create and maintain Accounts;

• process Memberships;

• process payments;

• manage subscriptions;

• administer environmental programs;

• operate the Influencer Program;

• attribute referrals;

• calculate commissions;

• administer payouts;

• determine Program qualifications;

• administer contests, challenges, promotions, and incentives;

• provide Customer support;

• respond to inquiries;

• authenticate users;

• protect Accounts;

• detect fraud and abuse;

• maintain Platform security;

• investigate suspicious activity;

• maintain records;

• analyze and improve the Services;

• troubleshoot technical problems;

• develop new features;

• communicate service information;

• send legally required notices;

• send marketing communications where permitted;

• personalize aspects of the user experience;

• comply with tax and accounting requirements;

• enforce our agreements;

• establish, exercise, or defend legal claims;

• comply with law; and

• carry out other purposes disclosed when information is collected.

4. LEGAL BASES FOR PROCESSING

Where laws such as the European Union General Data Protection

Regulation ("GDPR") or United Kingdom GDPR require a legal basis,

Earthivate may process personal information based on:

A. CONTRACT

Processing necessary to provide a Membership, Account, Influencer

Program participation, payment, payout, or other requested service.

B. LEGITIMATE INTERESTS

Processing reasonably necessary for purposes such as:

• securing the Platform;

• preventing fraud;

• improving the Services;

• administering Earthivate's operations;

• understanding service performance;

• protecting Earthivate and its users; and

• communicating about existing Services,

where those interests are not overridden by applicable individual

rights.

C. CONSENT

Where we ask for consent, including for certain marketing,

cookies, or other processing where required.

D. LEGAL OBLIGATION

Where processing is required to comply with tax, accounting,

regulatory, law-enforcement, court, or other legal obligations.

E. OTHER LAWFUL BASES

We may rely on another legal basis where permitted by applicable

law.

5. HOW WE DISCLOSE INFORMATION

Earthivate does not disclose personal information indiscriminately.

We may disclose information in the following circumstances.

A. SERVICE PROVIDERS AND SUBPROCESSORS

We may provide information to vendors that perform services for

Earthivate, including:

• cloud hosting;

• database infrastructure;

• payment processing;

• payout processing;

• authentication;

• email delivery;

• communications;

• analytics;

• fraud prevention;

• security;

• customer support;

• identity verification;

• accounting;

• tax reporting;

• software infrastructure; and

• other operational services.

Providers are given information reasonably necessary to perform

their functions and are expected to handle it in accordance with

applicable contractual and legal obligations.

B. ENVIRONMENTAL PARTNERS

We may provide limited information to environmental project

partners where reasonably necessary to administer environmental

programs, verify activities, provide Customer-requested

recognition, or operate a particular feature.

We seek to minimize personal information shared where identifiable

information is not necessary.

C. LEGAL AND SAFETY DISCLOSURES

We may disclose information where we reasonably believe disclosure

is necessary to:

• comply with law;

• respond to valid legal process;

• respond to lawful governmental requests;

• enforce agreements;

• investigate fraud;

• protect Platform security;

• protect the rights or safety of Earthivate or others; or

• establish, exercise, or defend legal claims.

D. CORPORATE TRANSACTIONS

Information may be transferred in connection with a merger,

acquisition, financing, restructuring, bankruptcy, sale of assets,

or other corporate transaction.

Where required, appropriate privacy protections will apply to such

a transfer.

E. WITH YOUR DIRECTION OR CONSENT

We may disclose information when you direct us to do so or provide

appropriate consent.

6. SALE AND SHARING OF PERSONAL INFORMATION

Earthivate does not intend to sell personal information for money

as the term "sell" is commonly understood.

Certain privacy laws, including California law, may define "sale"

or "sharing" more broadly and may treat some advertising or

cross-context behavioral advertising technologies as "sharing"

even when no money changes hands.

If Earthivate engages in activity legally considered a sale or

sharing of personal information, we will provide notices and

opt-out mechanisms required by applicable law.

Earthivate will not knowingly sell or share personal information

of individuals under the applicable legal age where prohibited.

7. DATA PROCESSORS AND DATA PROCESSING AGREEMENTS

Earthivate may engage third parties to process personal information

on its behalf.

Where applicable law requires a data processing agreement ("DPA")

or equivalent contractual protection between Earthivate and a

processor or business customer, Earthivate intends to maintain or

enter into appropriate contractual arrangements.

Earthivate's service providers may themselves engage authorized

subprocessors subject to applicable contractual and legal

requirements.

Where Earthivate provides services to an organization in a manner

that causes Earthivate to act as a processor or service provider

on that organization's behalf, Earthivate may provide an

appropriate DPA where required.

Ordinary individual Customers are not required to execute a

separate DPA merely to use Earthivate's consumer Services.

8. INTERNATIONAL DATA TRANSFERS

Earthivate may operate and use service providers in more than one

country.

As a result, personal information may be processed outside the

country, province, state, or region where you reside.

Different jurisdictions may have different data-protection laws.

Where required by law, Earthivate will use appropriate mechanisms

for international transfers, which may include:

• adequacy decisions;

• Standard Contractual Clauses;

• contractual safeguards;

• recognized certification frameworks;

• consent where legally appropriate; or

• another lawful transfer mechanism.

9. DATA RETENTION

Earthivate retains personal information only for as long as

reasonably necessary for the purposes for which it was collected

and for legitimate legal, operational, accounting, security, and

compliance requirements.

Retention periods may depend on:

• whether an Account remains active;

• contractual obligations;

• transaction history;

• payment or payout records;

• tax requirements;

• fraud-prevention requirements;

• dispute periods;

• applicable limitation periods;

• regulatory requirements; and

• security needs.

Some information may therefore remain in protected records after

an Account is closed.

Where information is no longer reasonably required, Earthivate

may delete, anonymize, or otherwise securely dispose of it.

10. SECURITY

Earthivate uses administrative, technical, and organizational

measures intended to protect personal information.

Measures may include, where appropriate:

• encryption in transit;

• encryption or equivalent protections at rest;

• authentication controls;

• access controls;

• multi-factor authentication for privileged systems;

• logging;

• monitoring;

• backup procedures;

• vulnerability management;

• restricted administrative access;

• fraud detection; and

• incident-response procedures.

No method of transmission or electronic storage can be guaranteed

to be completely secure.

Users are responsible for protecting their credentials and should

notify Earthivate promptly of suspected unauthorized Account

access.

11. DATA BREACH AND INCIDENT RESPONSE

Earthivate maintains procedures intended to identify, investigate,

contain, and respond to security incidents.

Where a personal-data breach creates notification obligations

under applicable law, Earthivate will provide legally required

notifications to affected individuals, regulators, customers, or

other parties within applicable time periods.

12. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the

right to:

• know whether Earthivate processes your personal information;

• request access to personal information;

• request correction of inaccurate information;

• request deletion;

• request restriction of processing;

• object to certain processing;

• obtain a portable copy of certain information;

• withdraw consent where processing relies on consent;

• opt out of certain marketing;

• opt out of certain sales or sharing;

• limit certain uses of sensitive personal information;

• appeal certain privacy-request decisions; and

• lodge a complaint with an appropriate privacy regulator.

These rights are not absolute. Applicable law may permit or require

Earthivate to retain or continue processing certain information.

13. PRIVACY REQUESTS

Privacy requests may be submitted to:

privacy@earthivate.com

Earthivate may need to verify your identity before fulfilling a

request.

Verification requirements will be proportionate to the nature of

the request and information involved.

Authorized agents may submit requests where permitted by law,

subject to appropriate verification of their authority.

Earthivate will respond within the period required by applicable

law.

14. CALIFORNIA PRIVACY RIGHTS

California residents may have rights under the California Consumer

Privacy Act, as amended by the California Privacy Rights Act

("CCPA/CPRA").

Subject to applicable exceptions, these may include rights to:

• know the categories of personal information collected;

• know sources of personal information;

• know purposes for collection, use, sale, or sharing;

• know categories of recipients;

• access specific pieces of personal information;

• correct inaccurate information;

• delete qualifying personal information;

• opt out of sale or sharing;

• limit certain uses of sensitive personal information where

applicable; and

• receive equal service and pricing without unlawful

discrimination for exercising privacy rights.

Earthivate will not unlawfully discriminate against a person for

exercising applicable CCPA/CPRA rights.

15. EUROPEAN ECONOMIC AREA, UNITED KINGDOM AND SWITZERLAND

Individuals located in the European Economic Area, United Kingdom,

or Switzerland may have rights under the GDPR, UK GDPR, or

applicable local law.

Depending on the circumstances, these may include rights of:

• access;

• rectification;

• erasure;

• restriction;

• objection;

• data portability;

• withdrawal of consent; and

• complaint to a supervisory authority.

Where Earthivate relies on legitimate interests, you may have the

right to object to that processing in circumstances established

by law.

Where processing relies on consent, withdrawal does not affect the

lawfulness of processing conducted before consent was withdrawn.

16. CANADIAN PRIVACY RIGHTS

Where Canadian privacy law applies, Earthivate will process

personal information in accordance with applicable federal and

provincial privacy requirements.

Individuals may have rights to request access to and correction of

personal information and to withdraw consent where legally

available, subject to applicable exceptions.

Earthivate will use personal information for appropriate purposes

and will maintain safeguards proportionate to the sensitivity of

the information.

17. OTHER U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may possess additional privacy

rights under applicable comprehensive state privacy laws.

Where such a law applies to Earthivate and to the individual,

Earthivate will provide and honor the rights required by that law,

subject to applicable exceptions.

This may include access, correction, deletion, portability,

opt-out, and appeal rights.

18. MARKETING COMMUNICATIONS

Where permitted, Earthivate may send information about its

Services, environmental initiatives, programs, promotions, or

other updates.

You may unsubscribe from marketing email using the mechanism

provided in the communication.

Opting out of marketing does not prevent Earthivate from sending

transactional or service communications necessary to administer

your Account, Membership, payments, security, or legal notices.

Earthivate intends to comply with applicable electronic-marketing

laws, including requirements that may apply under Canadian,

U.S., European, or other applicable law.

19. COOKIES AND TRACKING CHOICES

Where legally required, Earthivate will provide appropriate

information and choices concerning non-essential cookies.

Users may also be able to control cookies through browser or

device settings.

Disabling certain technologies may affect Platform functionality.

Earthivate may implement consent-management or preference tools as

required for applicable jurisdictions.

20. DO NOT TRACK AND GLOBAL PRIVACY SIGNALS

Browser-based privacy signals continue to evolve.

Where applicable law requires Earthivate to recognize a legally

valid universal opt-out mechanism, such as Global Privacy Control,

Earthivate will process supported signals as required.

21. CHILDREN AND AGE REQUIREMENTS

Earthivate's Services involving Accounts, Memberships, contracts,

payments, payouts, or Influencer participation are intended only

for adults who are at least eighteen (18) years old.

A person must be at least eighteen (18) to:

• register an Earthivate Account;

• purchase or manage a Membership;

• enter into contractual Services;

• participate as an Influencer;

• receive commissions or payouts; or

• participate in financial or contractual Platform functions.

Earthivate's public website may contain general environmental

information viewable without registration.

The Services are not directed toward children under thirteen (13),

and Earthivate does not knowingly collect personal information

from children under thirteen.

If Earthivate learns that it has collected personal information

from a child in violation of applicable law, we will take

reasonable steps to delete the information.

Parents or guardians who believe a child has improperly provided

information may contact:

privacy@earthivate.com

22. SENSITIVE PERSONAL INFORMATION

Earthivate seeks to limit collection of sensitive personal

information to information reasonably necessary for legitimate

purposes.

Certain information used for identity verification, tax reporting,

payment, or payout administration may be considered sensitive

under applicable law.

Earthivate will process such information in accordance with

applicable legal requirements and will not use sensitive personal

information for unrelated purposes without an appropriate lawful

basis.

23. AUTOMATED SYSTEMS AND ARTIFICIAL INTELLIGENCE

Earthivate may use artificial intelligence or automated systems

for customer support, information retrieval, fraud detection,

security, analysis, recommendations, Platform functionality, or

other operational purposes.

Information submitted to an AI-enabled feature may be processed

by Earthivate or authorized service providers to provide the

requested functionality.

Earthivate will seek to minimize unnecessary personal information

used with such systems.

Users should avoid submitting highly sensitive personal

information to general AI-support features unless specifically

requested through an appropriate secure process.

Where applicable law provides rights concerning solely automated

decisions producing legal or similarly significant effects,

Earthivate will comply with applicable requirements.

24. THIRD-PARTY LINKS

The Services may contain links to third-party websites or services.

Earthivate does not control the privacy practices of independent

third parties.

You should review the privacy policy of a third-party service

before providing personal information to it.

25. ENVIRONMENTAL PARTNERS

Earthivate may work with independent environmental organizations,

vendors, projects, and other partners.

Earthivate generally seeks to avoid providing unnecessary Customer

personal information to environmental partners and to other

Program participants. Influencer-facing features may use aliases or

limited account information rather than Customer names or email

addresses where full identity information is not necessary.

Where identifiable information is required for a particular

service, feature, recognition, or Customer request, the information

will be processed for the relevant purpose and subject to

applicable privacy requirements.

26. BUSINESS CUSTOMER DATA AND DPA READINESS

If Earthivate later provides Services to businesses or

organizations under circumstances in which Earthivate processes

personal information on their behalf, the parties may have

additional privacy obligations.

Where legally or commercially appropriate, Earthivate may provide

a Data Processing Addendum addressing matters such as:

• processing instructions;

• confidentiality;

• security;

• subprocessors;

• international transfers;

• assistance with data-subject rights;

• incident notification;

• deletion or return of information; and

• other requirements imposed by applicable privacy law.

The availability of a DPA does not mean every individual Earthivate

Customer must execute one.

27. ACCOUNT CLOSURE

Closing an Account does not necessarily result in immediate

deletion of every record.

Earthivate may retain information necessary to:

• complete transactions;

• maintain financial records;

• administer commissions;

• comply with tax requirements;

• prevent fraud;

• resolve disputes;

• enforce agreements;

• satisfy legal obligations; or

• maintain legitimate security records.

Information not requiring continued retention may be deleted or

anonymized according to Earthivate's retention practices.

28. CHANGES TO THIS PRIVACY POLICY

Earthivate may update this Privacy Policy to reflect changes in

the Services, technology, business practices, service providers,

or applicable law.

The Last Updated date will identify the current version.

Where required by law or where a change materially affects privacy

rights, Earthivate will provide additional notice or obtain consent

where legally required.

29. CONTACT EARTHIVATE

Questions or concerns regarding this Privacy Policy or Earthivate's

privacy practices may be directed to:

Earthivate

Legal Entity: Earthivate LLC

Privacy Contact: Privacy Team

Address: 2810 N Church St STE 90935, Wilmington, DE 19802, United States

Email: privacy@earthivate.com

Website: earthivate.com

30. DATA PROTECTION REPRESENTATIVES

If Earthivate becomes legally required to appoint an EU

representative, UK representative, Data Protection Officer, or

other privacy representative, the applicable contact information

will be published here or otherwise made available as required.

Last Updated: November 1, 2026