BILLS ON CHAIN

Your Opt-Out Rights

Depending on your state of residence, you may have certain rights regarding how Bills on Chain (operated by [INSERT LEGAL ENTITY NAME], "Company", "we", "us", or "our") uses and shares your personal information.

If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or another US state that grants similar privacy rights, you may have the right to opt out of:

• The "sale" of your personal information (the disclosure of personal information to a third party in exchange for monetary or other valuable consideration);
• The "sharing" of your personal information for purposes of cross-context behavioral advertising (the disclosure of personal information to a third party so that party can deliver advertising tailored to you based on your activity across multiple, distinct websites or apps);
• The processing of your personal information for purposes of "targeted advertising" (advertising selected based on your personal information obtained from your activity over time and across non-affiliated websites or applications, used to predict your preferences or interests);
• Where applicable, the use of your sensitive personal information beyond purposes necessary to provide the services you reasonably request.

What We Share and Why

We may disclose your personal information to certain third parties, or allow them to collect personal information directly through automated technologies (such as cookies, software development kits, pixels, web beacons, and similar technologies) on the Bills on Chain website and applications, for the purposes of cross-context behavioral advertising, targeted advertising, advertising measurement, attribution, audience building, and similar advertising-related purposes. These disclosures may be made in exchange for monetary or non-monetary consideration.

Under certain US state privacy laws, the activities described above may be considered:

• A "sale" of personal information;
• A "share" of personal information for cross-context behavioral advertising; and/or
• Processing of personal information for purposes of "targeted advertising".

The categories of personal information that we may sell, share, or process for targeted advertising include:

• Identifiers (such as device identifiers, advertising identifiers, IP addresses, and similar online identifiers);
• Internet or other electronic network activity information (such as browsing history, search history, and information regarding your interaction with the Services or with advertisements);
• Inferences drawn from the above categories to create a profile reflecting your preferences, characteristics, behavior, or attitudes;
• Approximate geolocation information.

Our Privacy Policy at [INSERT PRIVACY POLICY URL] describes the broader circumstances under which we collect, use, and disclose personal information.

We do not knowingly sell or share the personal information of consumers under the age of 16 without the affirmative authorization required by applicable law. In particular, we do not knowingly sell or share the personal information of consumers under the age of 13.

How to Opt Out

To exercise your right to opt out of the activities described above, please take both of the following steps. Each step covers a different category of disclosure, so completing only one of the two may leave the other category active.

Global Privacy Control (GPC) Signals

In addition to the methods described above, we honor the Global Privacy Control (GPC) signal where required by applicable law. If your browser or browser extension sends a valid GPC signal, we will treat it as a request to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising for the device and browser sending the signal.

Please note that:

• GPC signals apply only to the device and browser from which they are sent. You may need to enable GPC on each device and browser you use;
• GPC signals generally cannot be linked to your Bills on Chain Account unless you are signed in at the time the signal is received. To apply your opt-out preference to your entire Account, we recommend completing Step 2 above in addition to enabling GPC;
• For more information about Global Privacy Control, please visit https://globalprivacycontrol.org.

Authorized Agents

If you are submitting an opt-out request on behalf of another consumer as an authorized agent, you may do so where permitted by applicable law. We may require:

• Written, signed authorization from the consumer permitting you to act on their behalf;
• Verification of the consumer's identity directly with the consumer; and
• Verification of your identity and authority to act as an authorized agent.

To submit an authorized agent request, please email us at [INSERT PRIVACY CONTACT EMAIL] with the subject line "Authorized Agent Request".

Confirmation, Response Time & Appeals

We will process verified opt-out requests within the time period required by applicable law (generally fifteen (15) business days from receipt). Once your opt-out request is processed, we will not sell or share your personal information for the categories of disclosure covered by your request, except as permitted by applicable law (for example, in response to a lawful request from a government authority or to comply with our legal obligations).

If we deny your opt-out request in whole or in part, we will explain the reason for the denial. Subject to applicable law, you may have the right to appeal our decision. To submit an appeal, please email us at [INSERT PRIVACY CONTACT EMAIL] with the subject line "Privacy Rights Appeal".

If your appeal is denied and you are a resident of a state whose law permits, you may contact your state Attorney General or other applicable privacy regulator to lodge a complaint.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not, on the basis of your exercise of these rights:

• Deny you access to the Services;
• Charge you different prices or rates, or impose penalties or different terms;
• Provide you with a different level or quality of the Services;
• Suggest that you will receive a different price, rate, or level or quality of the Services.

Please note, however, that the Services may include features (such as personalization or certain optional rewards mechanics) that depend on the processing of personal information in ways that you have asked us to limit. In such cases, those features may not function fully or at all once you opt out, in accordance with applicable law.

Other Privacy Rights

In addition to the opt-out rights described above, depending on your state of residence, you may have other rights with respect to your personal information, including:

• The right to know or access the categories and specific pieces of personal information we have collected about you;
• The right to delete personal information we have collected from you, subject to certain exceptions (including, without limitation, the immutable nature of information already recorded on a public blockchain — see the Bills on Chain Privacy Policy);
• The right to correct inaccurate personal information that we hold about you;
• The right to portability of your personal information in a structured, commonly used, machine-readable format;
• The right to limit the use and disclosure of sensitive personal information.

To exercise any of these rights, please refer to the "Your Rights and Choices" section of the Bills on Chain Privacy Policy at [INSERT PRIVACY POLICY URL], or contact us using the details below.

How to Contact Us

If you have any questions about this notice, the Bills on Chain Privacy Policy, or our privacy practices, or if you wish to submit a request or appeal, please contact us at: