Effective date: August 16, 2025

UInvest, Inc. (“UInvest”, “we”, “our”, or “us”) operates a technology platform that connects accredited investors (“LPs”) with deal sponsors (“GPs”). We are not a broker-dealer, investment adviser, or funding portal. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, create an account, or use our services (together, the “Services”).

If you have questions or wish to exercise privacy rights, contact support@uinvest24.com.

1. Information we collect

a) Information you provide

- Identification and contact
: name, email, phone, address.
- Account and profile: role (GP or LP), investment preferences, biography, credentials.
- Accreditation and verification: documents or attestations used to verify accredited-investor status and identity, for example income or net-worth evidence, CPA or attorney letters, government ID.
- Deal materials: pitch decks, financials, legal documents, term sheets, data room contents, messages and meeting notes exchanged through the platform.
- Communications: questions, support requests, survey responses, and marketing preferences.

b) Information collected automatically

- Usage and device data
: IP address, browser type, device identifiers, pages viewed, actions taken, timestamps, referring pages.
- Cookies and similar technologies used for authentication, security, preferences, and analytics. See “Cookies” below.

c) Information from other sources

- Public records and open registers
: corporate registrations, litigation records, regulatory filings.
- Accreditation and identity service providers that help verify eligibility and prevent fraud.
- Counterparties who share information with your permission in the context of a deal.

2. How we use information

We use personal information to:

- Provide, maintain, and improve the Services, including AI-assisted matching of GPs and LPs to the criteria they set.
- Verify identity and accredited-investor status and run initial automated screening of open public records and reputation signals.
- Operate permissioned data rooms and control document access.
- Communicate with you about matches, activity, updates, and support.
- Enforce our terms, protect against fraud and misuse, and comply with law.
- Perform analytics, research, and product development using aggregated or de-identified data.
- Send optional marketing communications. You can opt out at any time.

3. How we share information

We share personal information only as described here:

- With matched counterparties you approve so they can evaluate a potential transaction.
- With service providers that host, process, or secure data, perform accreditation and identity checks, provide analytics, communications, and support. They are bound by contractual confidentiality and security obligations.
- For legal, safety, and compliance purposes when we believe disclosure is required by law or to protect rights, safety, or the Services.
- Business transfers such as a merger, acquisition, or financing, subject to this Policy.
- With your consent or at your direction.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

4. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

- Encryption at rest (AES-256) and in transit (TLS 1.2+).
- Infrastructure and controls aligned with SOC 2 Type II and ISO 27001.
- Strict access controls, least-privilege permissions, logging, and regular audits.
- Watermarking and permission controls for documents to discourage unauthorized distribution.

No system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your credentials.

5. Data retention and deletion

- Deal materials
: When a deal closes or is withdrawn, associated documents are removed from our active systems. Backup copies are purged on their standard lifecycle schedule. We may retain limited records as needed for fraud prevention, accounting, dispute resolution, or to comply with legal obligations.

- Account data: We retain your account information while your account is active. If you request deletion, we will delete or de-identify your personal information unless we must keep some data for legal or legitimate business purposes.

To request deletion, email support@uinvest24.com.

6. Your choices

- Access, correction, deletion
: You can request access to, correction of, or deletion of your personal information.
- Marketing: You can opt out of marketing emails at any time. Transactional and service messages will still be sent.
- Cookies: You can control cookies through your browser settings and, where available, our cookie banner.

7. State privacy disclosures (United States)

Depending on where you live, you may have additional rights under state laws such as the California Consumer Privacy Act (CCPA/CPRA), Virginia, Colorado, Connecticut, and Utah privacy laws. These may include the right to know, access, correct, delete, and obtain a portable copy of certain personal information, and to limit use of sensitive personal information.

UInvest does not sell personal information and does not share personal information for cross-context behavioral advertising. We use sensitive personal information (for example, identity or financial data supplied for accreditation) only to provide the Services and to comply with law.

Submit requests at support@uinvest24.com. We will verify your request and respond within the time required by law. You may authorize an agent to submit a request on your behalf.Where applicable to our activities, we maintain safeguards consistent with the Gramm-Leach-Bliley Act (GLBA) for handling nonpublic personal information.

8. International visitors

If you access the Services from outside the United States, your information may be processed in countries that may have privacy laws different from those in your jurisdiction. Where required, we use approved safeguards, such as standard contractual clauses, for transfers.

9. Automated matching and profiling

Our platform uses automated scoring and matching based on the criteria that GPs and LPs set. You can review your criteria at any time, request human review of a match, or ask us to adjust matching that you believe is not working as intended.

10. Children’s privacy

The Services are intended for users 18 years and older. We do not knowingly collect personal information from children.

11. Third-party links and services

The Services may link to third-party sites or integrate third-party services. Their privacy practices are governed by their own policies.

12. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy and update the effective date. Your continued use of the Services after an update means you accept the changes.

13. Contact us

Questions about this Policy or our privacy practices:
- Email: support@uinvest24.com

14. Important regulatory note

UInvest is not a broker-dealer, investment adviser, or funding portal and does not provide investment, legal, or tax advice. Automated screening of public records and reputation signals is for preliminary risk flags only. Final due diligence and investment decisions remain the responsibility of participating GPs and LPs and their professional advisers.

Cookies

UInvest will not use cookies to collect personally identifiable information about you. You can use your browser settings to restrict or block cookies set by our website. If you decide you wish to do this simply use the help function in your browser. If you do decide to restrict or block cookies this may impact the functionality of our website. For a more comprehensive guide visit www.aboutcookies.org. If you want to delete cookies on a mobile phone refer to your handset manual process.