Dear User/Visitor,

Your privacy is important to us.

Pitchwise is a product of Bantaba AB, a company registered in Sweden (Aktiebolag) with organisation number 559320-2640 and having its registered address at c/o Magine Pro, Östermalmsgatan 26A, 114 26 Stockholm, Sweden ("Pitchwise", "Bantaba", "we" or "us").

We provide a web- and mobile-based platform designed to enable customers who have a Pitchwise account ("Users") to share materials including but not limited to presentations, files, folders, newsletters, and other marketing communications ("Content") with third-party recipients ("Visitors") in a controlled application environment provided at www.pitchwise.se (the "Webpage"), (collectively the "Services" or "Service").

Under the General Data Protection Regulation (2016/679), we are responsible for the processing of personal data for which we decide the purposes and the means of processing. With "personal data" we mean information which is directly or indirectly referable to a natural living person and which are processed in connection with the Service. With "Data Controller" we mean the person or entity that decides for which purposes and in what way the personal data is processed in accordance with Applicable Law. "Processor" is the person or entity that processes personal data on behalf of the Controller and thus may only process personal data in accordance with the Controller's instructions, this Privacy Policy, and Applicable Law. "Applicable Law" means the General Data Protection Regulation (EU) 2016/679 (GDPR), the Swedish Data Protection Act (2018:218), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and any other applicable data protection or privacy legislation as amended from time to time.

This document (the "Privacy Policy") contains information about our collection, use and processing of personal data, which parties whom we may share such data and your rights in relation to personal data about you. When you use the Service, we will process personal data for a number of purposes, as set forth below.

Processed Personal Data

We collect and use the following types of personal data to deliver and maintain efficient and secure Services:

(a) When you register an account as a User, you may be asked to provide personal data including without limitation, your name, phone number, and email address. You may also choose to submit personal data to us when you send us an email or use any interactive features that we may make available on the Service.

(b) If you are a Visitor, a User may request that you provide them with information (including personal data) via the Service in order to view that User's Content. In particular, in order to access Content that a User wants to share with Visitors, a Visitor may be asked to provide personal data including without limitation, the visitor's name, and email address upon opening User's link on the Service.

(c) We process on behalf of Pitchwise Users, information included in the Content that Users upload, download, or access with, share, or send through the Services.

(d) We may also receive personal data (such as your email address) through other Users, for example, if they have tried to share something with you or tried to refer Pitchwise to you.

(e) When you use our Service, certain information will be collected automatically from your device, its software and your activity using the Service, including:

• Information about your use of the Service
• Technical data, which may include the URL from which you navigated to the Website, your IP address, location, unique device ID, network and computer performance, browser type, language and identifying information, operating system, and time stamps associated with the actions
• Metadata about Content you are viewing, and other interactions with the Content and the Services
• For Visitors, we automatically collect information about your interaction with Content shared with you by Pitchwise Users through the Service including date and time viewed, number of times and length of time Content was viewed, and which parts of the Content were viewed

Purposes of Processing and Legal Bases

We will process the information set out above for the following purposes:

(a) We will use your contact information to respond to your request and/or provide information to you.

(b) We use personal data provided by Users in connection with the purchase, sign-up, use or support of the User account to administrate your account, to enable and provide access to the Service. The processing of personal data for this purpose is based on the necessity for the fulfilment of our agreement with you.

(c) We process personal data relating to Visitors on Users' behalf for the purpose of providing the Services and to provide our Users with reporting and analytics relating to Visitor's interaction with Users' Content and our Service.

(d) To send you alerts or messages by email or otherwise, including to provide you with marketing of our products and services, and updates of the Service based on our legitimate interest to keep you posted about developments of the Services.

(e) To ensure the technical functioning of the Services and to prevent use of the Services in breach of the terms of use.

(f) To enforce the terms of use, including to protect our rights, property and safety and also the rights, property and safety of third parties if necessary.

(g) To fulfil requirements by law, based on our obligation to comply with such laws.

Retention of Personal Data

As the main rule, we store your personal data for only as long as necessary to perform the Service, unless there is a legal obligation to store the data for longer.

After you have closed your account, personal data connected to the account will be stored for 90 days at most.

Visitor tracking data (including email addresses, IP-derived location, viewing activity, and interaction records) is retained for the duration of the User's active account and deleted within 90 days of account closure.

Contact information used for sending marketing and information is stored for as long as your account is active, and will be deleted when you unsubscribe from our mailing list.

Personal data used to improve the Service are anonymised as soon as possible, however in no case longer than twelve months after collection.

Personal data processed pursuant to a legal obligation are stored for as long as the legal obligation warrants. This includes bookkeeping purposes, where account details are stored during the current year and until the tenth year after the end of the calendar year which the fiscal year ended.

Disclosure of Personal Data

(a) For Users: We will display your personal data on your profile page and elsewhere on the Service according to the preferences you set in your account.

(b) For Visitors: We show a Visitor's email address and name to the User who sent the Content through our Service, if the Visitor has provided his or her email address.

(c) We may also share or disclose your information with your consent, for example, if you use a third party application to access your account.

(d) We will disclose your personal data to our employees as necessary to deliver the Service, and we may use certain third party companies and individuals to help us provide, support, analyze, and improve the Service.

Automated Decision-Making and Profiling

Pitchwise does not engage in automated decision-making or profiling that produces legal effects concerning you or that similarly significantly affects you, within the meaning of Article 22 of the GDPR.

While our Service collects analytics data about how Visitors interact with shared Content, this data is presented as an informational report to the User. No automated decision is made by Pitchwise about any individual based on this data.

Cookies, Pixels and Other System Technologies

We collect information through technology like cookies, pixels and local storage. For information about how we use system technologies and analytic tools and how you can prevent the use of cookies, please see our Cookie Policy.

Responding to Legal Requests and Preventing Harm

We may access, preserve and share your information in response to a legal request (like a search warrant, court order or a subpoena), or when necessary to detect, prevent and address fraud and other illegal activity.

Some Other Things You Need to Know

Links to other webpages

You should be aware that when you are on our Webpage you may be directed to other sites operated by third parties where the personal information collected is outside of our control.

Change of Control

If the ownership of our business changes, we may transfer your information to the new owners so they can continue the Service. The new owner will still have to honour the commitments we have made in this Privacy Policy.

Notice of Changes

If we make changes to this Privacy Policy, we will notify you by publication at pitchwise.se/privacy-policy and/or by notifying you via the Service and your email address.

Your Privacy Rights Under EU Law

You have an absolute right to object to the processing of your personal data for direct marketing. You also have the right to recall your prior given consent.

You have the right to request access, correction, erasure, or restriction of processing of your personal data. You have the right to obtain a copy of the personal data that we process relating to you free of charge once (1) every calendar year.

You have the right to data portability where the processing is based on consent or fulfilment of contract.

We will respond to your request without undue delay and in any event within one month of receipt. In cases of complexity, we may extend this period by a further two months.

To exercise these rights, please contact us at: privacy@pitchwise.se or Bantaba AB, c/o Magine Pro, Östermalmsgatan 26A, 114 26 Stockholm, Sweden.

If you have complaints regarding our processing of your personal data, you may file a complaint to the competent data protection authority. The primary supervisory authority is the Integritetsskyddsmyndigheten (IMY), which can be reached at www.imy.se.

Your Privacy Rights Under US Law (CCPA/CPRA)

This section applies to residents of California and supplements the rest of this Privacy Policy.

Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information from California residents:

• Identifiers — name, email address, IP address, and unique device identifiers
• Commercial information — pricing plan selected and subscription history
• Internet or other electronic network activity — browsing activity within the Service, document interaction data, time spent per page, and download activity
• Geolocation data — approximate location derived from IP address
• Professional or employment-related information — company name and job title, where voluntarily provided

We Do Not Sell or Share Your Personal Information

Pitchwise does not sell your personal information to third parties, and does not share your personal information with third parties for cross-context behavioural advertising purposes.

Your Rights as a California Resident

• Right to Know — You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete — You have the right to request that we delete personal information we have collected from you.
• Right to Correct — You have the right to request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — We do not sell or share personal information. No opt-out is required.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your rights.

No Collection of Data from Consumers Under 16

Pitchwise does not knowingly collect personal information from consumers under the age of 16. If you believe we have inadvertently collected such information, please contact us at: privacy@pitchwise.se.

How to Submit a Request

To exercise any of the rights described above, please contact us by emailing privacy@pitchwise.se with the subject line "California Privacy Request", or writing to us at Bantaba AB, c/o Magine Pro, Östermalmsgatan 26A, 114 26 Stockholm, Sweden.

We will respond within 45 days. If we require more time (up to 90 days), we will inform you in writing.

Right to Appeal a Denied Request

If we decline your request, you may appeal by emailing privacy@pitchwise.se with the subject line "California Privacy Appeal". We will respond within 60 days. If denied, you may submit a complaint to the California Privacy Protection Agency at cppa.ca.gov.

Contact Our Privacy Team

If you want to contact our privacy team, you can do so at:

• privacy@pitchwise.se
• Bantaba AB, c/o Magine Pro, Östermalmsgatan 26A, 114 26 Stockholm, Sweden