At Kurtosis Technologies, Inc. (“Kurtosis” or the “Company”), we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data.

By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and disclose your information as described in this Privacy Policy.

Remember that your use of the Company’s Services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

You may print a copy of this Privacy Policy by clicking HERE

As we continually work to improve our Services, we may need to change this Privacy Policy from time to time. We will alert you of material changes by placing a notice on the Company’s website, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Please note that if you utilize our Services in connection with an Enterprise Customer, your Personal Data will be processed in accordance with our Services to such Enterprise Customer, as further described in “Enterprise Customers” section below.

Table of Contents

What this Privacy Policy Covers  This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services, including our website, www.kurtosis.com. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” or “sensitive personal information” under applicable data privacy laws, rules or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage.

Personal Data

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months:

| Category of Personal Data (and Examples) | Business or Commercial Purpose(s) for Collection   **** | Categories of Third Parties With Whom We Disclose this Personal Data | | --- | --- | --- | | Profile or Contact Data such as first and last name and email address. | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate | | Payment Data such as payment card type, last 4 digits of payment card, and billing address, phone number, and email. | ·  Providing, Customizing and Improving the Services ·  Corresponding with You | ·  Service Providers (specifically our payment processing partner, currently Stripe, Inc.) | | Commercial Data such as purchase history of products and services. | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate | | Device/IP Data such as IP address and type of device to access the Services. | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate | | Web Analytics such as web page interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Services. | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate | | Geolocation Data such as IP-address-based location information. | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate | | Inferences Drawn From Other Personal Data Collected such as attributes, user behavior, and predispositions. | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate | | Other Data such as additional information you provide us voluntarily, such as in communications to us. . | ·  Providing, Customizing and Improving the Services ·  Marketing the Services ·  Corresponding with You | ·  Service Providers ·  Parties You Authorize, Access or Authenticate |

Our Commercial or Business Purposes for Collecting Personal Data

Other Permitted Purposes for Processing Personal Data

In addition, each of the above referenced categories of Personal Data may be collected, used, and disclosed with the government, including law enforcement, or other parties to meet certain legal requirements and enforcing legal terms including: fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities; protecting the rights, property or safety of you, the Company or another party; enforcing any agreements with you; responding to claims that any posting or other content violates third-party rights; and resolving disputes.

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice or obtaining your consent.

Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources: