Ambrook Inc. ("We", "Our", "Us") respect your privacy. This Privacy Policy (the "Policy") describes the ways We collect and process personal information related to you, as a visitor to Our Site and/or as a user of Our mobile application and services (collectively "Services"), how we use and disclose such information, and the steps we take to protect such information. By visiting the Site and/or using the Services, you consent to the privacy practices described in this Policy, including the use and sharing of your personal information as set forth below.

This Policy is incorporated into and is subject to our Terms of Service. Capitalized terms used but not defined in this Policy have the meaning given to them in such Terms of Service. When used herein, "personal information" shall mean personally identifiable information.

We collect and use the following information:

Personal Information

Our Services provide you the ability to explore and apply for grants, loans, and financial assistance for your agricultural operation. We collect personal information that you provide Us through the Site and/or the Services as follows:

• When you use Our payments calculator or when you fill in your contact details. Such information includes (but is not limited to) your contact details, the location of your business, information related to your economic status and any other details you provide to Us.

• When you register to use Our Services and create an Account, you will be asked to provide further information which is required to make funding recommendations, assess your funding eligibility and to submit your application with the relevant Sponsor. Such information includes:

  • your name, date of birth, mailing address, email address, phone number, social security number, or other tax identification number, and your title and relationship to the organization submitting the funding application;

  • your race, ethnicity and gender, US citizenship status, and whether you qualify for underrepresented minor affiliations if required by the funding Sponsor or application;

  • business information related to your organization, such as new or existing farmer status, programs of interest, information about farm production (e.g. products, revenues, quantity), entity type (individual, LLC, corporation, sole proprietorship, partnership), business formation date land use, adjusted gross income, and previous interactions with the USDA and other Sponsors; and

  • data relating to the types of agricultural products and services you grow or distribute or for which you are seeking funding.

• If you are making payments to Us via the Services,are using Our Wallet feature, or are using Our Cards, then you will be required to provide financial information such as bank account details and debit/credit card information. We may also need to collect additional information to verify your identity such as your date of birth, a social security or taxpayer identification number, your physical address and other information that will allow us to reasonably identify you; requiring you to take steps to confirm ownership of your email address, phone number or financial instruments; ordering a credit report from a credit reporting agency, or verifying your information against third party databases or through other sources; or requiring you to provide your driver's license or other identifying documents.

You may also provide Us with personal information when you contact customer support, sign up for marketing materials, or otherwise communicate with Us. Please note that if you choose not to share certain personal information with Us, or refuse certain contact permissions, We might not be able to provide certain parts of the Services.

Usage Information

We collect information about how you interact with the Site and the Services, such as device type, IP address, operating system, browser type, activity on Our Site, and other system activity. We may collect certain information by automated means using technologies such as cookies, web beacons, pixels, browser analysis tools, and server logs. See the section titled "Cookies and Trackers" below for additional information.

Third-Party Cookies

When you visit the Site or use the Services, we may also use third-party services, such as Google Analytics and Facebook, which may use cookies to collect information about you for analytics purposes. Third parties may also use cookies, web beacons, or other devices to collect information when you visit the Site or use the Services. We do not control any cookies or other data collection tools that may be placed on the Site or the Services by a third party, and this Policy does not cover the use of such cookies and/or other data collection tools by any third party. We encourage you to read the privacy policies of such third parties to find out more about the information that may be collected by them and the choices you have regarding the collection, use, and sharing of such information. You may be able to "opt out" of the collection and use of information through cookies or other tracking technology by actively managing the settings on your browser.

We will use your personal information:

• to operate, optimize and enable the Site and the Services, including processing any transactions within the Services, such as voluntary contributions you make in connection with any funding applications we submit;

• to make funding recommendations;

• to create and submit funding applications with applicable Sponsors;

• to perform "Know Your Customer" and "Know Your Business' verifications to prevent fraud and for legal compliance;

• to conduct research and analysis relating to agriculture and agricultural funding;

• to contact and communicate with you;

• to develop new features;

• to improve and customize the Site and Services and users' experience with the Site and Services, such as by performing analytics and conducting research;

• to send Services-related updates, notices and announcements;

• to provide customer support and to troubleshoot and protect against errors;

• to protect the rights of Our employees, users, suppliers, business partners, and Our own rights;

• to enforce Our Terms of Service for using the Site and Services;

• to exercise or defend legal claims;

• to take any action in any case of dispute, or legal proceeding;

• to prevent and remediate fraud, misappropriation, infringements, identity theft, cyber-attacks and other illegal activities and misuse of the Site and Services; and

• to comply with any requests and orders of law enforcement agencies and authorities.

How Do We Share Personal Information?

We do not sell, rent, or lease personal information to third parties. We do share this information for certain purposes, and by visiting the Site or using the Services, you are authorizing Us to share your information:

• that you direct Us to disclose to others. For example, by submitting a funding application through our Service you direct us to disclose the information contained in that application to the applicable sponsor. This may include data related to yield/production records, business entities, conservation practices, location, and more;

• with Our third-party business partners, vendors, and consultants who perform services on Our behalf or who help Us provide the Services, such as accounting, managerial, technical, marketing, or analytic services. We require such third parties to follow this Policy when using your information;

• with third parties in connection with research and analytical activities in which we may participate, provided that you can opt-out of such sharing by notifying us at support@ambrook.com;

• with third-party payment processors and vendors who enable Us to provide the Wallet and Cards and other features of the Services, such as Stripe and Plaid and with Evolve Bank & Trust, which provides the banking services for your Wallet account and with Celtic Bank, which provides the card issuance services for your Card. Please see the section entitled Third-Party Services and Linked Sites for further information on the data privacy practices of such processors and vendors ;

• if required to do so by law or in the good-faith belief that such action is necessary to comply with local, state, federal, or international laws, or to respond to a court order, judicial or other governmental subpoena or warrant, or in the event of bankruptcy proceedings;

• if We believe in good faith that doing so is reasonably necessary or appropriate to protect the rights, property, or safety of Us, Our users, Our employees, copyright owners, third parties, or the public, including without limitation to protect Us or Our users from fraudulent, abusive, inappropriate, or unlawful use of the Site or Services;

• to enforce or apply this Policy, Our Terms of Service or Our other policies or agreements, and to exercise and defend legal claims; and

• in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition, or in any other situation where information may be disclosed or transferred as one of Our business assets, including, but not limited to, as part of a bankruptcy proceeding.

We may use anonymous, statistical and aggregated data that We derive from personal information related to you, to drive insights, statistics, trends and predictions for Our internal use, to improve and develop new Services, and for underwriting purposes and We may share these with third parties without your consent. This Policy in no way restricts or limits our collection and use of aggregated or de-identified information; however, you may opt-out of the use of your personal information in creating such aggregated and de-identified database by contacting us at support@ambrook.com. However, this will not affect any aggregate or de-identified databases we created prior to receiving your opt-out.

THIRD PARTY SERVICES AND LINKED SITES

The Site and/or Services may contain links to, or connect with, other websites, some of which may be required to provide the Site and/or Services. For example, the financial account and banking services provided through our Wallet are provided by Stripe, Inc ("Stripe") and Evolve Bank, and the card issuance services provided through our Card are provided by Stripe and Celtic Bank. By registering for and using the Wallet, you agree to the privacy policies of Stripe and Evolve Bank. By registering for and using Cards, you agree to the privacy policies of Stripe and Celtic. We are not responsible for the practices employed by websites or services linked to or from the Site or Services (including, but not limited to, Stripe,Evolve, and Celtic or any Third-Party Providers), nor the information or content provided to or contained therein. Please remember that when you use a link to go from Our Site or the Services to another website, or use any portion of the Site or Services that are connected to another website, this Policy does not apply to those third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link on the Site or Services, are subject to that third party's own rules and policies. Please read those rules and policies before proceeding.

You have the right to object to or opt out of certain uses of your personal information in the following situations:

• Where such an opt-out or objection is required by applicable law.

• Where we have collected and processed your personal information based solely on your consent. In such a case, you may withdraw that consent at any time and prevent further processing by contacting Us at support@ambrook.com. Even if you opt out, however, We may still collect and use non-personal information regarding your activities on Our Site or Services for other legal or lawful purposes as described above.We use your personal information to send you email communications about the Site and Services and funding opportunities from Sponsors and other third party products and services we think may interest you. If you wish to no longer receive such email communications, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding use of Our Site and Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to our Terms or this Policy).

• Please note that we do not sell your personal information as such term is defined under Nevada law. However, if you wish to opt-out of such a sale, please contact us at support@ambrook.com.

If you find that personal information related to you is not accurate, complete or up-to-date, please contact us at support@ambrook.com and provide Us the necessary information to correct it.

At any time, you can contact Us at support@ambrook.com to request information regarding, access to or the correction or deletion of the personal information that We keep about you. In connection with such requests, we will ask you to provide Us certain credentials to make sure that you are who you claim to be before responding. We will use reasonable efforts to respond to any requests to the extent required by law, but reserve the right to decline any request if permitted by applicable law.

We retain a copy of your personal information for as long as necessary to fulfill the purposes of using such information under this Policy and as permitted by law, including for the purposes of satisfying any legal, accounting, or reporting requirements. We may also retain and use your Personal Information for as long as necessary to resolve disputes and/or enforce Our rights. We will delete or de-identify potentially identifiable information when We no longer need to process the information in an identifiable form or upon request from you if required by applicable law.

Cookies are small files that a web server sends to a user's device, when the user browses online. Your device removes session cookies when you close your browser session. Persistent cookies last for longer periods. You can view the expiry date of each cookie, through your browser settings.

We use both types. We use persistent cookies to remember your log-in details and make it easier for you to log-in the next time you access the Site or Services. We also use this type of cookies, and session cookies, for additional purposes, such as to facilitate the use of the Services' features and tools, to improve the user's experience with Our Services, for web analytics and for marketing purposes.

In many cases the information We collect using cookies and other tools is only used in a non-identifiable manner without reference to your personal information. For example, We may use information We collect to better understand website traffic patterns and to optimize your experience. In some cases, We associate the information We collect using cookies and other technology with your personal information. We track users' use of the Site and the Services, but we do not track users across third party websites. We do not process or respond to web browsers' "do not track" signals or other similar transmissions that indicate a request to disable online tracking of users who visit the Site or use the Services.

Every browser allows you to manage your cookies preferences. You can block or remove certain or all cookies through your browser settings. Please bear in mind that blocking or removing cookies may impact your user experience with Our Site and Services. For example, disabling or blocking Our cookies will require you to re-enter your log-in details, or even prevent you from using features of the Services.

You can find more information about cookies and other online tracking technologies through the US Federal Trade Commission website at: https://www.consumer.ftc.gov/articles/0042-online-tracking.

You can find instructions on how you can opt out of receiving targeted advertising at: http://www.networkadvertising.org/choices/#completed.

We take reasonable measures to protect personal information related to you from loss, misuse and unauthorized access, disclosure, alteration and destruction. However, although We make efforts to protect your privacy, We cannot guarantee that the Site and Services will be immune from cyber-attacks, malicious activities, malfunctions, honest mistakes or other types of abuse and misuse. To protect the confidentiality of information maintained in your Account, you must keep your password confidential and not disclose it to any other person. You are responsible for all uses of the Services by any person using your password. Please advise Us immediately by contacting Us at the email address below if you believe your password has been misused or if you suspect a security breach. We will notify you if we discover a security breach involving your information in the manner required by applicable law.

We offer our Site and Services from the United States for use in the United States. If you access the Site and Services from outside the United States, you assume all responsibility for compliance with applicable laws in your jurisdiction and agree that your personal information will be transferred to the United States, which may offer less protection for your personal information than your jurisdiction of residence.

California law permits California residents to request and obtain from Us once a year, free of charge, a list of the third parties to whom We have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties. See the "Contact Us" section for where to send such requests. We do not share your personal information with third parties for their own direct marketing purposes without your prior consent. Accordingly, you can prevent disclosure of your personal information to third parties for their direct marketing purposes by withholding consent.

We reserve the right to change the provisions of this Policy at any time. Please revisit this page periodically to stay aware of any changes. If We modify this Policy, We will make it available through the Site and the Services and indicate the date of the latest revision. If you have an account with Us, you will be provided notice of and required to accept the revision when you next log into your account. Your continued use of the Site or the Services after the revised Policy has become effective indicates that you have read, understood, and agreed to the current version of this Policy.

Please contact Us at support@ambrook.com for further information.