Your Privacy Matters: Catchlight Privacy Policy

Last updated: September, 2026

This privacy policy (the “Privacy Policy”) explains how we collect, use and disclose personal information and other information about you in connection with your use of https://catchlight.ai (this “Website”), Catchlight^SM and any other applications, products and services (collectively, “Services”) that may be available to you on this Website or that otherwise link to this Privacy Policy. References to “You” or “Your” in this privacy policy are references to individuals who represent or are associated with entities that have/had a current, prospective and/or past business relationship with Catchlight or individuals who are current, prospective and/or past customers of Catchlight clients. This Website and the Services are intended for use only for business purposes by persons located in the United States. They are not intended to be used by persons that are not located in the United States or for personal, family or household purposes.

This Privacy Policy applies only to this Website and the Services. If you use other websites and/or other products or services offered by us or any of our affiliated entities, please review the applicable privacy policy (or policies) associated with those websites, products and services.

This Website contains links to third party websites, such as a link to the website of a third party that you or your firm may use to remit payments to us for you or your firm’s use of the Services. Please note that these third-party websites are not subject to this Privacy Policy. We are not affiliated with, nor do we control, any of these third parties. Your use of any such third-party website, and such website’s collection, processing or use of your personal information, is subject to the privacy policy and other terms and conditions associated with such website. Please review the privacy policy and other terms and conditions associated with such website for information about the third party’s privacy practices. We are not responsible for any aspect of any such other website, including, without limitation, its privacy practices, your account on such service or the content of such website.

Who we are

This Website and the Services are made available to you by Catchlight Insights LLC (referred to in this Privacy Policy as “Catchlight”, “we”. “our” and “us”).

Catchlight provides Services to financial professional services firms to help them prioritize their outreach to actual and prospective customers. When Catchlight provides its Services to a financial professional services firm, Catchlight acts as a service provider on the financial professional service firm’s behalf and processes personal information as instructed by them. This Privacy Policy does not address how our financial professional service firm clients process personal information made available to them in connection with their use of our Services. If you would like to learn more about a specific financial professional services firm’s privacy practices, we recommend referring to the financial professional service firm’s own privacy disclosures.

How and why we obtain information

We and our service providers may collect personal information and other information about you when you use this Website or any of the Services, and when you interact with us or our service providers regarding this Website or any of the Services. Personal information means information about an individual that is collected or maintained for business purposes and by which the individual can be identified. Please note that information by which an individual cannot be identified (for example, anonymous, de-identified, or aggregate information) is not considered personal information and therefore is not subject to this Privacy Policy.

We or our service providers may collect certain information about you and consumers you may be engaging with from any of the following sources, and the information we or they receive from a particular source may be linked or combined with information from other sources:

• You, on applications or forms or in your user profile associated with this Website or any of the Services (for example, name and business contact information)
• You, from your interactions (whether via online or other means) with us or our service providers (for example, communications with customer service staff, or information you enter into this Website or when using any of the Services)
• You, from your interactions with emails sent by clients that are powered by Catchlight (for example, whether you clicked on a link embedded in an email that is powered by Catchlight)
• You, from your client’s and prospect’s interactions with emails sent by you that are powered by Catchlight (for example, whether your client opened an email that is powered by Catchlight)
• You, regarding your preferences (for example, managing your communication preferences or for any customizable features of this Website or any of the Services)
• Our clients
• Automatically, via technologies such as cookies and web beacons, when you interact with our digital offerings or electronic communications
• Our affiliated companies
• Third parties that perform services for us or on our behalf or on your behalf
• Other third-party sources, including government sources, data brokers and social networks
• Publicly available sources
• Other sources with your consent or as directed by you.

We may use the information we or our service providers collect:

• to allow you to use this Website and the Services, and to facilitate and personalize your interactions and experiences with us
• to provide Services to our clients, including to measure and report on the effectiveness of their email marketing campaigns that are powered by Catchlight
• to service, maintain, and protect your user account associated with this Website or any of the Services, including verifying your identity
• to respond to inquiries from you and fulfill requests from you
• for marketing and communications purposes
• to provide and improve this Website and the Services (such as to improve the effectiveness of email marketing campaigns that are powered by Catchlight), and develop, offer and deliver other products and services
• for our affiliated companies’ respective business purposes, such as reporting, planning and analytical purposes, and training and quality control purposes
• to detect and prevent fraudulent, malicious or illegal activity, for risk control and mitigation purposes, and to fulfill legal, judicial, contractual and regulatory requirements
• in connection with corporate business transactions, such as a merger, joint venture, corporate reorganization or sale of a business
• to enable integrations with third party products and platforms that you elect to use
• to comply with applicable laws

How we protect information about you

We employ physical, administrative, technical and organizational measures designed to protect personal information and we regularly adapt these controls to respond to changing requirements and advances in technology. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Additional information” section below.

How we share information about you with our affiliates

We may share personal information with various affiliated companies that are providing services to us, such as administrative, business and data processing services. In addition, we may share information about you with affiliated companies for use in their businesses, including developing, marketing, offering and delivering their products and services.

How we share information about you with third parties

We may share personal information with the following third parties:

• Our clients;
• Unaffiliated service providers and other third parties with which we or our affiliated companies have a business relationship;
• Government agencies, other regulatory bodies and law enforcement officials;
• Other organizations conducting research or performing academic or similar activities;
• Other third parties, as directed by you;
• Other organizations as permitted or required by law (for example, for fraud prevention or to respond to a subpoena);
• The firms you are affiliated with; and
• In connection with corporate business transactions, such as a merger, joint venture, corporate reorganization or sale of a business or a portion thereof.

Our unaffiliated service providers are obligated to keep the personal information we share with them confidential and use it only to provide the services specified by us.

Our Website and Services may have links to third party sites. If you choose to use or indicate your interest in using a product, service or investment offering that is offered by a third party and made available through Catchlight, we may share personal information with that third party in connection with your use or interest of that product, service or investment offering.

Cookies and similar technologies

Catchlight and our third-party service providers may use cookies and similar technologies (“cookies”) to support the operation of and maintain our digital offerings. Cookies are small amounts of data that a website or online service exchanges with a web browser or application on a visitor's device (for example, computer, tablet, or mobile phone). Cookies help us to collect information about users of our digital offerings, including date and time of visits, pages viewed, links clicked, amount of time spent using our digital offerings, or general information about the device used to access our digital offerings. Catchlight cookies are also used for security purposes and to personalize your experience, such as customizing your screen layout.

Both Catchlight and third-party service providers we hire may use cookies and other technologies, such as web beacons, pixel tags, or mobile device ID, in online advertising as described below. Most browsers and mobile devices offer their own settings to manage cookies. If you use those settings to refuse or delete cookies it may negatively impact your experience using our digital offerings, as some features and services on our digital offerings may not work properly. For example, you may not be able to sign in and access your account, or we may not be able to recognize you, your device, or your online preferences. Depending on your device and operating system, you may not be able to delete or block all cookies.

We may also use cookies and similar technologies in emails sent by clients that are powered by Catchlight, and in emails that we send to you ourselves. Depending upon the email client/service that you use, you may have the option to prevent the automatic downloading of images which would suppress these cookies and similar technologies.

We may collect analytics data or use third-party analytics tools such as Google Analytics to, among other things, help us measure traffic and usage trends for our digital offerings, to improve the effectiveness of our online advertising, and to understand more about the demographics of our users. You can learn more about Google’s practices with Google Analytics by visiting Google's privacy policy. You can also view Google’s currently available opt-out options.

Advertising on Non-Catchlight Digital Offerings

Catchlight also advertises our products and services on digital offerings not affiliated with us and we contract with third-party advertising companies to display these ads. These third-party advertising companies may use cookies and similar technologies to collect technical and web navigational information, such as device type, browser type, Internet protocol address, and pages visited. Catchlight and these third-party online advertising companies may use the data collected, along with other information we have about you and your Catchlight relationships, to serve relevant ads to you. The advertisements may be relevant to your interests, as determined by your activity on Catchlight and non-Catchlight websites. These advertisements are known as "interest-based advertisements".

You may opt-out of receiving interest-based advertisements from online advertising companies, including those used by Catchlight, by clicking on the AdChoices icon and following the opt-out instructions. If you generally want to “opt out” of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in a self-regulatory programs like the Digital Advertising Alliance DAA program or the Network Advertising Initiative (NAI), please follow the instructions at WebChoices: Digital Advertising Alliance's Consumer Choice Tool for Web US (aboutads.info) to place an “opt-out” cookie on your device indicating that you do not want to receive interest-based advertisements. If you want to “opt out” of receiving online interest-based advertisements on mobile devices, please follow the instructions at YourAdChoices.com | AppChoices .

Connecting with Catchlight on social media platforms

Catchlight provides experiences on social media platforms that enable online sharing and collaboration among users who have registered to use them. We may collect information you provide by interacting with us via social media, such as photographs, opinions, or social media account ID. Any content you post, such as pictures, information, opinions, or any personal information that you make available to other participants on these social platforms, is also subject to the terms of use and privacy policies of those platforms. Please refer to them to better understand your rights and obligations with regard to such content.

Children's privacy

Catchlight’s Website and Services are not directed to individuals under the age of thirteen (13). We do not intentionally collect information on our websites and services from those we know are under 13, and we request that these individuals do not provide personal information through our digital offerings. If we do provide a Website or Service that is intended to be used by individuals under the age of thirteen, it will have a separate privacy policy.

Updates

We may change this Privacy Policy at any time, and without notice to you, by posting an updated Privacy Policy on this Website. When we make changes to this Privacy Policy, we will change the “Last Updated” date specified at the beginning of this Privacy Policy. All changes shall be effective from the date the updated Privacy Policy is published, unless otherwise specifically stated in the updated Privacy Policy. We encourage you to review this Privacy Policy on a regular basis so that you will be aware of any changes to it.

Additional information

If you have questions or concerns about this Privacy Policy, please contact us at privacy@catchlight.ai.

Additional Information for California Residents

This section is provided for purposes related to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA") and applies solely to the personal information received by Catchlight that is subject to the CCPA. As used in this section, "personal information" means information that meets the definition of "personal information" as set forth in the CCPA and is not otherwise excluded from the scope of the CCPA.

Your Rights Under the CCPA

The CCPA gives certain rights to California residents and imposes certain obligations on those businesses that are subject to the CCPA. As required by the CCPA, set forth below is a description of certain rights that California residents generally have under the CCPA. As used below, a "consumer" means a resident of the State of California and a "covered business" means a business that is subject to the CCPA.

• Right to Know/Right to Access. A consumer has the right to request that a covered business that collects a consumer's personal information disclose to that consumer the categories and specific pieces of information the business has collected. A consumer also has the right to request that a covered business that collects a consumer's personal information disclose to that consumer the following:
  1. The categories of personal information it has collected about that consumer
  2. The categories of sources from which personal information is collected
  3. The business or commercial purpose for collecting, selling, or sharing (if applicable) personal information
  4. The categories of third parties to whom the covered business discloses personal information
  5. The specific pieces of personal information that the covered business has collected about that consumer
• Right to Know/Right to Access. You have the right to make a verifiable request to Catchlight about the personal information the business has collected about you.

These disclosures are not required to include any information about activity that occurred prior to January 1, 2022. Please also note that a covered business is not required to honor more than 2 of these requests from the same consumer during any 12-month period.

• Right to Delete. A consumer has the right to request that a covered business delete any personal information that the business has collected from the consumer, subject to certain exceptions.
• Right to Delete. You have the right to make a verifiable request to Catchlight to delete any personal information that the business has collected, subject to certain exceptions.

• Right to Correct. A consumer has the right to request that a covered business correct inaccurate personal information that a business maintains about a consumer.
• Right to Correct. You have the right to make a verifiable request to Catchlight to correct inaccurate personal information that a business maintains about you.

• Right to Opt-Out of Sale/Sharing. If a covered business sells or shares personal information, a consumer has the right to opt-out of the sale or sharing of their personal information by the business.
• Right to Opt-Out of Sale/Sharing. You have the right to request Catchlight to opt-out of the sale or sharing of their personal information by the business.

• Right to Limit Use and Disclosure of Sensitive Personal Information. If a covered business uses or discloses sensitive personal information for reasons other than those set forth in the CCPA, a consumer has the right to limit the use or disclosure of sensitive personal information by the business.
• Right to Limit Use and Disclosure of Sensitive Personal Information. You have the right to request that Catchlight limits the use or disclosure of sensitive personal information for targeted advertising and profiling.
• Non-Discrimination. A consumer has the right not to receive discriminatory treatment by the covered business for the exercise of privacy rights conferred by the CCPA.
• Non-Discrimination. You have the right not to receive discriminatory treatment by Catchlight for exercising privacy rights.

Categories of personal information we may collect about you

In general, if you are a customer of ours or you otherwise interact with us, we collect various types of personal information about you. The amount and types of personal information we collect will vary depending on the nature of your relationship and your interactions with us, and on the products and services that we provide to you. The categories of personal information that we may collect about you are:

• Personal identifiers such as your name, postal address, email address, age, date of birth, gender, government-issued identifiers (e.g., social security number, driver license number and similar identifiers), account name, internet protocol address, device identifier, or other similar identifiers
• Information covered by California's records-destruction law (California Civil Code §1798.80), such as your signature, telephone number, and financial account information
• Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories, interests or tendencies
• Characteristics of protected classifications under California or federal law, for example, gender
• Internet/Electronic network activity information, including, but not limited to, browsing history, search history, and other information regarding your interactions with our digital offerings or our advertisements
• Geolocation data
• Audio, electronic, visual, and similar data, such as call recordings
• Professional or employment-related information, such as job title and business contact information
• Education information
• Inferences drawn from any of the information listed above to create a profile about you, such as a profile that reflects your preferences, characteristics, behavior, and attitudes
• Sensitive personal information, such as Social Security number, account login, password, or credentials allowing access to your account(s) or to our digital offerings

The retention periods for data elements within each category listed above vary depending on the nature of the data element and the purposes for which it is collected and used. Our retention period for the data elements within each category is set based on the following criteria: (1) the length of time that the data is needed for the purposes for which it was created or collected, (2) the length of time the data is needed for other operational or record retention purposes, (3) the length of time the data is needed in connection with our legal, compliance and regulatory requirements, legal defense and legal holds, (4) how the data is stored, (5) whether the data is needed for security purposes and fraud prevention, and (6) whether the data is needed to ensure the continuity of our products and services.

Categories of sources from which personal information is collected

In addition to the sources described in the section above entitled "How and why we obtain information", depending on the nature of your relationship and your interactions with us, and on the products and services that we provide to you, we may obtain personal information from the following sources:

• You or your representative, such as when using our products, services, or digital offerings, when interacting with us or any of our service providers regarding our products, services, or digital offerings; or when otherwise communicating with us
• Providers of publicly available information
• Another person or other persons (typically people who know you) who provide referral information about you to us or who use the capabilities we offer on specific websites and applications to forward an article or other information to you
• Third parties that provide products and services to you through your relationship with us
• Third parties that perform services for us or on our behalf
• Other third-party sources, including government sources, data brokers and social networks
• Automatically, via technologies such as cookies and tags when you interact with our digital offerings or electronic communications

Why we collect personal information

Please see the section above entitled "How and why we obtain information" for a description of some of the business or commercial purposes for which we collect personal information, including sensitive personal information. In addition to those purposes described above, below are additional business or commercial purposes for which we collect personal information:

• To provide you with information about products and services that may interest you
• To maintain the accuracy and integrity of our records
• For marketing and communication purposes
• For reporting and analytical purposes
• For personalizing your interactions and experiences with us
• For training and quality-control measures
• To verify your identity
• To protect against malicious, fraudulent, or illegal activity
• For business analysis, planning, and reporting
• For customer education
• For effectiveness measurement

Categories of personal information disclosed for business purposes

Like most businesses, we disclose personal information, including in some cases certain sensitive personal information, to third parties for our business purposes. Depending on the nature of your relationship and your interactions with us, and on the products and services that we provide to you, we disclose to third parties for business purposes the personal information that is encompassed by one or more of the categories described in the "Categories of personal information we may collect about you" section above, with the categories of third parties listed in the section above entitled "How we share information about you with third parties".

Selling/sharing of personal information

Some of the ways in which we share your personal information with third parties on our websites may, under the CCPA, be considered a “sale” of personal information or “sharing” of personal information for “cross-context behavioral advertising” (as those terms are used in the CCPA).

We engage third party service providers, including marketing and advertising providers, and social media platforms (providers) to personalize your browsing experience on our Websites/Apps, to provide certain targeted advertising services for us, and to help us measure the effectiveness of our Websites/Apps and our online advertising. When you visit our websites, we and our providers collect certain information about your activity on our Websites/Apps, including cookies and similar data stored on or collected from your browser or device. In some cases, our providers may combine this information collected on our Websites/Apps with information about your activity on other, unaffiliated websites or social media platforms to deliver our ads to you when you are visiting other websites or platforms. This sharing of your information with certain third parties via cookies and similar methods, and our providers' use of certain cookies, may be considered to be a "sale" of personal information or "sharing" of personal information for "cross-context behavioral advertising" under the CCPA.

California residents covered by the CCPA have the right to opt out of this "sale" or "sharing" of personal information. For those Websites/Apps where we engage in these activities and are covered by the CCPA, if we determine that you are visiting the Websites/Apps from a location in California, you will see a "Do Not Sell or Share my Personal Information" link on the footer of the Website's/App’s homepage. To opt out of this sale or sharing of your personal information, please click on the link and follow the prompts.

Note that Catchlight permits all visitors to certain portions of our catchlight.ai website to automatically exercise their right to opt out of this sale or sharing of this personal information through the use of the Global Privacy Control (GPC) signal, without having to make individualized opt-out requests. If you've enabled the GPC signal in your browser, we will honor your request to opt out of this sale or sharing of personal information as communicated via the GPC signal. These opt-outs (whether via the toggle above or via the GPC signal) are a setting that is specific to the device or browser you're using. You'll need to opt out again if you visit our applicable Websites/Apps from a different device or browser, change your browser settings, or clear your cookies.

In the 12 months preceding the date of this notice, we "sold" and/or "shared" personal information for "cross-context behavioral advertising", with respect to California residents covered by the CCPA. We do not knowingly "sell" or "share" for "cross-context behavioral advertising" personal information of minors under 16 years of age.

CCPA Exemptions

Please note that certain types of personal information collected or maintained by a covered business are exempt from the CCPA. For example, a covered business has limited obligations, or in some cases, no obligations, under the CCPA with regard to the following types of personal information:

• Personal information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (Public Law 106-102) and implementing regulations, or pursuant to the California Financial Information Privacy Act (Division 1.4 [commencing with Section 4050] of the California Financial Code)
• Medical information governed by the Confidentiality of Medical Information Act or protected health information that is collected by a covered entity or business associate pursuant to the Health Insurance Portability and Accountability Act of 1996.

In addition, some businesses are not subject to the CCPA, such as the following:

• A business that does not do business in the State of California
• A business that is not organized or operated for the profit of financial benefit of its shareholders or other owners
• A business that does not determine the purposes and means of the processing of consumers' personal information
• A business that has annual gross revenue of $26,625,000 or less

Furthermore, under the CCPA, there are a number of situations where a covered business under the CCPA is not obligated to honor a CCPA request to delete a consumer's personal information and is allowed to continue to maintain the personal information. Some examples include situations where retention of the personal information is reasonably necessary to:

• Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer or reasonably anticipated within the context of the covered business’s ongoing business relationship with the consumer, or otherwise perform a contract between Catchlight company and the consumer
• Help to ensure security and integrity to the extent the use of the personal information is reasonably necessary and proportionate for those purposes
• Debug to identify and repair errors that impair existing intended functionality
• Exercise free speech, ensure the right of another consumer to exercise that consumer's right of free speech, or exercise another right provided by law
• Enable solely internal uses that are reasonably aligned with consumer expectations based on the consumer's relationship with the business and compatible with the context in which the consumer provided the information
• Comply with a legal obligation

Please note that the description of the CCPA set forth in this privacy policy is a summary of only certain aspects of the CCPA and is not and should not be considered a complete description of the CCPA. In addition to what is described above, the CCPA includes other exemptions that apply to particular types of personal information and particular businesses, as well as additional situations where a covered business is not required to honor a consumer’s request to delete the consumer's personal information.

Submitting a CCPA Request

If you wish to submit a CCPA request, you may initiate your request through the Catchlight Privacy Request (s) Form or by emailing privacy@catchlight.ai.

You should generally expect to receive a response within 45 days of the date we receive your request. However, in some instances, we may require an additional 45 days to process your request, in which case we will notify you and explain why the extension is necessary.

We will need to verify your identity before we can process your request. Through the request process, we will make you aware of any information that you will need to provide to us to process your request. You may have to confirm that you are a California resident and verify your identity or the identities of those authorized to submit requests on your behalf. Additionally, the information you provide will be used to help verify your identity.

During calendar year 2025, Catchlight did not receive any CCPA requests.

Additional Information for Texas Residents

Residents of Texas have the right to submit the following privacy rights to Catchlight regarding your personal information:

Texas residents have the right to appeal our refusal to take action on a consumer rights request. Appeals must be submitted within 60 days after receipt of our decision. To appeal, contact us at privacy@catchlight.ai. If your appeal is denied, we will provide information regarding how you may contact the Texas Attorney General to submit a complaint.

If you wish to submit a privacy request, you may initiate your request through the Catchlight Privacy Request (s) Form or by emailing privacy@catchlight.ai.

We will need to verify your identity before we can process your request. Through the request process, we will make you aware of any information that you will need to provide to us to process your request. You may have to confirm that you are a TX resident and verify your identity or the identities of those authorized to submit requests on your behalf. Additionally, the information you provide will be used to help verify your identity.

1054778.5.0