Privacy Policy

1. Introduction

Content Republic, Inc. ("Content Republic," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

We may collect the following categories of information:

• Identifiers: Name, email address, IP address, and other contact details you voluntarily provide when signing up for newsletters or expressing interest in our offerings.
• Internet or Network Activity: Information about how you interact with our website, including browser type, pages visited, referring URL, and time spent on pages.
• Geolocation Data: Approximate location derived from your IP address.
• Sensitive Personal Information: We may collect self-reported residency status (e.g., whether you are a US resident) and accredited investor status through our newsletter signup form. This information is collected on a voluntary basis and is used solely for regulatory compliance and to tailor communications. Under the California Privacy Rights Act (CPRA), certain categories of this data may be considered "sensitive personal information."
• Cookies and Tracking Technologies: We may use cookies, pixels, and similar technologies to enhance your experience and gather analytical data. See Section 13 for details.

3. How We Use Your Information

• To communicate with you about news, updates, and announcements.
• To improve our website and services.
• To comply with legal obligations, including securities regulations.
• To respond to your inquiries and requests.
• To detect, prevent, and address technical issues or fraud.
• To assess regulatory eligibility for investment-related communications.

4. Sharing of Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating our website and conducting our business, subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

• Newsletter subscriber data (email, residency status, accredited investor status, notes): retained until you unsubscribe or request deletion.
• Website usage and analytics data: retained for up to 26 months.
• IP addresses and geolocation data: retained for up to 12 months for rate-limiting and security purposes.

6. Data Security

We implement reasonable security measures to protect your personal information, including encryption in transit and at rest. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal information. To exercise these rights, please contact us at info@content-republic.com.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to purposes necessary for providing our services. We do not use sensitive personal information beyond what is necessary for the purposes disclosed in this policy.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, submit a verifiable consumer request by emailing info@content-republic.com or by writing to us at the address in Section 17. We will verify your identity by matching information you provide with information we have on file. We will respond to verifiable requests within 45 days. This period may be extended by an additional 45 days where reasonably necessary, in which case we will notify you of the extension and the reason for it. You may also designate an authorized agent to make a request on your behalf.

Categories of personal information collected in the preceding 12 months: Identifiers (email, IP address); Internet or network activity (browsing history on our Site); Geolocation data (approximate, from IP); Sensitive personal information (self-reported residency and investor accreditation status).

Categories of personal information sold or shared: None.

9. Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out of sale or sharing request under the CPRA. If your browser or device transmits a GPC signal, we will treat it as a request to opt out of the sale or sharing of your personal information. You can learn more about GPC at globalprivacycontrol.org.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection (FADP):

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: Where you have given explicit consent (e.g., subscribing to our newsletter, accepting non-essential cookies).
• Legitimate Interest: Where processing is necessary for our legitimate business interests, such as improving our website and preventing fraud, provided these interests do not override your rights.
• Legal Obligation: Where we are required to process data to comply with applicable law.

Your GDPR Rights

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at info@content-republic.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.

11. International Data Transfers

If you are located outside the United States, please be aware that your personal data may be transferred to and processed in the United States, where our servers and central database are located. The data protection laws of the United States may differ from those in your jurisdiction. We implement appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) as adopted by the European Commission (Implementing Decision (EU) 2021/914) and the UK International Data Transfer Addendum where applicable, to ensure your data receives an adequate level of protection.

12. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. At this time, we do not respond to DNT signals. However, we do honor Global Privacy Control (GPC) signals as described in Section 9. You may also opt out of certain tracking by adjusting your browser settings or using our cookie consent preferences.

13. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Necessary for the website to function properly (e.g., cookie consent preferences, session management). These do not require consent.
  • cookie-consent — stores your cookie consent preference
• Analytics Cookies: Help us understand how visitors interact with our website. These are only activated with your consent.
  • We currently do not use third-party analytics. If this changes, this section will be updated with specific vendor names and cookie identifiers.

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. You may withdraw your cookie consent at any time by clearing your browser cookies and revisiting the site. Disabling certain cookies may affect website functionality.

14. Children's Privacy

Our website and services are not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold, we will take reasonable steps to delete such information promptly. If you believe that a child has provided us with personal information, please contact us at info@content-republic.com.

15. Data Protection Officer

For any data protection inquiries, you may contact our designated data protection contact at info@content-republic.com.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date and, where required by law, by email or other direct communication.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: