WE WILL POST ANY CHANGES TO THIS PRIVACY POLICY IN A NOTICE OF THE CHANGE AT THE BOTTOM OF OUR WEB PAGE WITH A HYPERLINK THERETO. WE WILL ALSO SEND YOU AN EMAIL DESCRIBING SUCH CHANGES. PLEASE REGULARLY REVIEW THIS PRIVACY POLICY. NOTWITHSTANDING IF YOU CONTINUE TO USE OUR SERVICES, YOU ARE BOUND BY ANY CHANGES THAT WE MAKE TO THIS PRIVACY POLICY.

1. INTRODUCTION

10D Inc. (“10D,” “we,” “us,” or “our”) respects the privacy of its Users (“User,” “your,” or “you”). This Privacy Policy (the “Privacy Policy”) explains how we collect, use, disclose, and safeguard your information when you use 10D Platform (“BPR Hub” or the “Platform”) through 10D’ website at www.bprhub.com (the “Website”). 10D, Inc. is an entity registered in the state of Delaware, United States of America. 10D is engaged in the business of providing hosted search analytics services (“Services”)

10D is committed to protecting the privacy of its Users whose information is collected and stored while using 10D’ Platform through our Website. This Privacy Policy is applicable to our Website, Platform and all applications offered for sale to the public.

The capitalized terms have the same meaning as ascribed in our Terms and Conditions and Terms of Use as applicable, unless otherwise noted here.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES REGARDING YOUR INFORMATION AND HOW WE WILL TREAT IT. BY ACCESSING OR USING OUR WEBSITE AND PLATFORM, YOU AGREE TO ACCEPT ALL THE TERMS CONTAINED IN THIS PRIVACY POLICY AND ACKNOWLEDGE AND AGREE WITH THE PRACTICES DESCRIBED HEREIN. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS AND USE OUR WEBSITE AND PLATFORM.

IF YOU HAVE ANY QUESTIONS REGARDING THIS PRIVACY POLICY, PLEASE SEND US AN EMAIL AT privacy@bprhub.com .

WE DO NOT SELL YOUR PERSONAL INFORMATION, NOR DO WE INTEND TO DO SO. WE DO NOT GIVE ACCESS TO YOUR PERSONAL INFORMATION TO THIRD PARTIES EXCEPT TO SUBPROCESSORS TO ASSIST US IN THE PROVISION OF OUR SERVICES TO YOU.

2. TERRITORIAL RESTRICTION

Our Website, and Platform are only available for use and download in the United States. Our Website, and Platform are not available for use or download by residents of, visitors to, or your employees who reside in the European Union (collectively a “European”). If you are a European, please do not download, register, and/or use our Website, or Platform. If you are a resident of the United States (“US”), the laws of the State of Delaware, United States shall apply. You must comply with this Privacy Policy, our Terms and Conditions and Terms of Use, as applicable.

If you have any questions regarding this Section, please email us atprivacy@bprhub.com .

3. WHAT INFORMATION DO WE COLLECT?

When you register to use our Website or Platform, we collect personal information (also referred to as personally identifiable information or “PII”) which may include your name, online contact information such as your email address, screen name, or username, professional or employment-related information such as job title and employer’s name, and other personal information as described in this privacy Policy. You are able to change your personal information via email by contacting us at privacy@bprhub.com or through your profile or account settings on our Website or Platform.

• Persistent Identifiers. Persistent Identifiers are unique data strings or elements that can be used to recognize a user, device, or browser over time and across different websites or online services. These may include, but are not limited to, customer numbers stored in cookies, IP addresses, and unique device or processor identifiers. When you use our Services, we may collect Persistent Identifiers such as (i) your IP address, which may indicate your general geographic region, (ii) unique identifiers stored in cookies on your device, which help us remember your preferences and recognize you on return visits and (iii) device or processor identifiers that are unique to your device, (iv) information about your internet connection, the equipment you use to access our Website or Platform.
• Financial Information. We currently do not collect or store any credit cards or bank information as we use a third party payment processor. However, we will update this Privacy Policy and inform you via reasonable mean if and when we start using and storing such information.

4. HOW DO WE COLLECT INFORMATION?

We collect personal information from you in the following ways:

• When you register to use our Website or Platform;
• In email, text, and other electronic messages between you and our Website or Platform;
• From your responses to a survey;
• From forms filled out by you;
• From records or copies of correspondences (including email addresses) if you contact us;
• When you post information to be published or displayed on our Website, or Platform.
• From you placing an order, which includes details of transactions you carry out on our Website or Platform; and
• From search queries on our Website or Platform.

We collect information from you automatically when you navigate through our Website or Platform in the following ways:

• Usage details;
• IP addresses;
• Information obtained through browser cookies;
• Information obtained through flash cookies;

5. HOW DO WE USE YOUR INFORMATION?

We use the information that you provide to:

• Personalize your experience in using our Platform;
• Provide you with information, products, or services requested from us;
• Present our Website and Platform and their contents to you;
• Provide you with notices about account and/or subscription, including expiration and renewal notices;
• Carry out obligations and enforce rights arising from contracts entered into between you and us, including billing and collection;
• Notify you about changes to our Website and Platform and any products or services;
• Allow you to participate in interactive features on our Website and Platform;
• Improve the Website and Platform;
• Improve our customer service;
• Administer contests, promotions, and surveys or other Website and Platform features;
• Process transactions;
• Anonymize data and aggregate data for statistics;
• Contact you for other purposes with your consent;
• Contact you about our products and services that may be of interest;
• Enable the display of advertisements to our advertisers’ target audiences, although personal information is not shared with advertisers without your consent; and
• Send you periodic emails, in accordance with the CAN-SPAM Act of 2003 as detailed in Section 12, via the email address provided by you to (i) send information, respond to inquiries, and/or other requests or questions; (ii) process orders and send information and updates pertaining to such orders; (iii) send additional information related to your product and/or service; and (iv) market to our mailing list or continue to send email to you after the original transaction has occurred.

6. OUR COOKIE POLICY

Cookies are small pieces of text used to store information on web browsers. Cookies are used to store and receive identifiers and other information on computers, phones, and other devices. Other technologies, including data we store on your web browser or device, identifiers associated with your device, and other software, are used for similar purposes. In this Privacy Policy, we refer to all of these technologies as “Cookies.” We use Cookies on our Website to (a) understand and save your preferences for future visits, (b) keep track of advertisements, (c) compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future, and (d) allow trusted third-party services that track this information on our behalf. You can set your browser to refuse all or some browser Cookies, and it will not affect your user experience. If you choose to decline cookies, you may not be able to sign in or use other interactive features of the Website that may depend on cookies. If you choose to delete cookies, any settings and preferences controlled by those cookies, including advertising preferences, will be deleted and may need to be recreated.

Google, as a third-party vendor, also uses Cookies on our Website and Platform. Google uses first-party Cookies, such as Google Analytics Cookies, to compile data regarding User interactions with ad impressions and other ad service functions as they relate to our Platform. We currently use Google Analytics to collect and process certain Website usage data. To learn more about Google Analytics and how to opt-out, please visit https://policies.google.com/terms/google-partners. We use these Cookies to compile data regarding User interactions as they relate to our Website.

We honor Do Not Track signals and, if one is in place, we will not track, plant cookies, or use advertising. We do not allow third party behavioral tracking and links to third-party web pages. We do not include or offer third party products or services on our website.

7. HOW DO WE PROTECT INFORMATION WE COLLECT?

Our Website receive regular security scans and penetration tests. Our Website also receive regular malware scans. In addition, our Website use an SSL certificate as an added security measure. We require username and passwords for our employees who can access your personal information that we store and/or process on our Platform and servers. In addition, we actively prevent third parties from getting access to your personal information that we store and/or process on our Platform and servers. We accept payment by credit card through a third-party credit card processor on our behalf. We will implement reasonable security measures every time you (a) place an order, or (b) enter, submit, or access your information, (c) register, or (d) access our Platform, on our Website.

8. DATA SECURITY MEASURES

Security Measures: We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website or Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website or Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on our Website or Platform.

Fair Information Practice Principles: In the event of a personal data breach, we will notify you within forty eight (48) via (i) email and/or (ii) our Platform notification system on our Website. We agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.

Data Retention: Your Personal will be retained with 10D as long as it is needed by 10D to provide Services to you. If you wish to cancel your account or request that 10D no longer uses your information to provide Services, you may contact 10D at privacy@bprhub.com. 10D will promptly delete the information as requested. 10D will however continue to retain and use your information as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements or for other business purposes. When 10D has no ongoing legitimate business need to process your information, we will either delete or anonymize it.

Open-Source Software: We use the following open-source software in the provision of our Services, which can be found here.

9. DISCLOSURE OF PERSONAL INFORMATION

10D does not share any Personal Information with any third party without your consent. There are times when we may share Personal Information that you have shared with us may be shared by 10D with others to enable us to provide you over Services, including contractors, service providers, and third parties (“Partners”). This section discusses only how 10D may share such information with Partners. We will ensure that our Partners protect your Personal Information. The following describe how and with whom we may share your Personal Information:

• We may disclose aggregated, de-personalized information about you that does not identify any individual to other parties without restriction, such as for marketing, advertising, or other uses.
• We may disclose personal information to our subsidiaries and affiliates.
• We may disclose personal information to contractors, services providers, and other third parties.
• We require all Partners, contractors, service providers, and other third parties to whom we disclose your personal information to be under contractual obligations to keep personal information confidential and to use it only for the purposes for which we disclose them.
• We may disclose personal information in the event of a merger, sale of business, etc.
• We may disclose personal information for any other purpose for which you have provided it.
• We may only disclose personal information as described in this Privacy Policy or your consent.

Other Disclosure of Personal Information:

• We will disclose personal information (i) to comply with any court order, law, or legal process, including to respond to any government or regulatory request, (ii) to enforce or apply ourTerms and Conditions, Terms of Use and other agreements, including for billing and collection purposes, (iii) if we believe it is necessary or appropriate to protect the rights, property, or safety of 10D our customers or others, and/or (iv) if it is necessary or appropriate to protect the rights, property, or safety of 10D, our customers, or others, and this includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Third Party Disclosure:

• We do not sell, trade, rent, or otherwise transfer personal information to others, unless we provide you with advance notice. This does not include our hosting partners and other parties who assist us in operating our Website or Platform, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.
• We do not provide non-personally identifiable visitor information for marketing purposes.

Choices Users Have About How 10D Uses and Discloses Information:

• Tracking Technologies and Advertising. You can set their browser to refuse some or all the browser cookies, but if you disable or refuse cookies, some parts of our Website may not be accessible or function properly.
• Disclosure of Users’ Information for Third-Party Advertising. We do not include or offer third party products or services on our website. We do not share your Personal Information with third parties for those third parties’ direct marketing purposes unless you consent to such sharing at the time you provide your Personal Information. Users can always opt-out by emailing us their opt-out request at privacy@bprhub.com.

10. PRIVACY RIGHTS

• Your California Privacy Rights 10D does not sell, trade, or otherwise transfer to outside third parties your “Personal Information” as the term is defined under the California Civil Code Section § 1798.82(h). Additionally, California Civil Code Section § 1798.83 permits Users of our Website or Platform that are California residents to request certain information regarding our disclosure of their Personal Information to third parties for their direct marketing purposes. To make a request for such disclosure, or identification and/or deletion of Personal Information in all our systems that we store on you, please send an email to privacy@bprhub.com or write us at 10D, Inc., 10120 Parkwood Dr #1, Cupertino 95014. Note that (i) if we delete your Personal Information as requested, we will no longer be able to provide our services to you and (ii) we may need to keep such Personal Information for a while during the shutting down and billing process. If you would like to discuss our Personal Information storage and processing process with us, please send us an email at privacy@bprhub.com or write us at 10D, Inc., 10120 Parkwood Dr #1, Cupertino 95014.
• Other State Privacy Rights. This Privacy Policy explains how we collect, use, and disclose your Personal Information in the Sections above. This Section describes how to exercise your rights under the various state privacy laws as detailed below (“State Privacy Laws”)
• Massachusetts. The Massachusetts Data Protection Law (201 CMR 17.00), sets standards for the protection of personal information of residents of Massachusetts. Residents of Massachusetts have the following rights under Massachusetts law (i) the right to request access to their personal information that is held by us and to receive a copy of that information; (ii) the right to request the correction of any inaccurate or incomplete personal information; (iii) the right to request that we delete your personal information; (iv) the right to opt-out of the collection, use, or disclosure of your personal information for marketing purposes; (v) the right to be notified in the event of a data breach involving their personal information; and (vi); the right to Opt-in for collection, use or disclosure of Sensitive Personal Information. Further, you have the right to file a complaint with the Massachusetts attorney general if you believe we have violated the Massachusetts Data Protection Law by calling (617) 727-8400 or filing a complaint at https://www.mass.gov/how-to/file-a-consumer-complaint.
• Colorado. The Colorado Privacy Act (Colo. Rev. Stat. § 6-1-1301 et seq.) protects the privacy of Colorado consumers. Residents of Colorado have following privacy rights (i) you have the right to opt out of the processing of your personal data for the purposes of targeted advertising, the sale of your personal data or profiling in furtherance of decisions that produce legal or similarly significant effects; (ii) you have the right to confirm whether we are processing personal data concerning you and to access your personal data; (iii) you have the right to correct inaccuracies in your personal data; (iv) you have the right to delete your personal data; and (v) when accessing your data, you have a right to obtain that data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit that data to another business.
• Connecticut. 10D does not sell, trade, or otherwise transfer to outside third parties your “Personal Data” as the term is defined under Connecticut’s Privacy Act and Act Concerning Personal Data Privacy and Online Monitoring. Connecticut Laws permits residents of Connecticut who are Users of our Website or Platform that are Connecticut residents to request certain information regarding our disclosure of their Personal Information to third parties for their direct marketing purposes. Further, Users have the right to (i) confirm whether or not we are processing the your personal data and access such personal data, unless such confirmation or access would require us to reveal a trade secret; (ii) correct inaccuracies in the User’s personal data; (iii) opt out of the processing of the personal data for the purposes of targeted advertising, sale, or profiling in furtherance of solely automated decisions; and (iv) you have the right to obtain a copy of your personal data processed by the controller, in a portable and, to the extent technically feasible, readily usable format.
• Utah. The Utah Consumer Privacy Act (UCPA § 13-61-102(1)) gives residents of Utah who are users of our Website the right to (i) you to opt out of the processing of your personal data for the purposes of targeted advertising, the sale or profiling; (ii) correct inaccuracies in your personal data; (iv) delete your personal data; and (v) obtain that data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit that data to another business.
• New York: The New York Privacy Act sets strict rules about how businesses must handle consumers’ personal information and gives individuals new rights concerning data. New York residents have the rights to (i) access, correct, deletion, and disclosure regarding your Personal Information; and (ii) know what personal information is being collected about them, how it is being used, and with whom it is being shared.
• Virginia. The Virginia Consumer Data Protection Act (Va. Code § 59.1-571 et seq.) effective from January 1, 2023 provides Virginia residents with certain rights regarding the collection, use, and sharing of their personal information namely (i) the right to know what personal information is being collected about them, how it is being used, and with whom it is being shared; (ii) the right to request that a business delete personal information that the business has collected from the resident; (iii) the right to non-discrimination for the exercise of their privacy right; (iv) the right to access the personal information held about them, including the categories of personal information collected, used, shared, and the categories of third parties with whom the information is shared; (v) the right to obtain a copy of their personal information in a structured, commonly used and machine-readable format.

To exercise any of the rights mentioned in Section 10(b), please (i) send an email to privacy@bprhub.com, or (ii) write to us at Privacy Officer, 10D Inc., 10120 Parkwood Dr #1, Cupertino 95014.

Note that (i) if we delete your Personal Information as requested, we will no longer be able to provide our services to you and (ii) we may need to keep such Personal Information for a while during the shutting down and billing process. We have appointed a Privacy and Data Protection Officer, Milanjeet Singh to make sure the privacy rights of our Users are protected.

11. COPPA COMPLIANCE (FOR CHILDREN UNDER 13 USERS ONLY)

The Children’s Online Privacy Protection Act (“COPPA”) is a federal legislation that applies to entities that collect and store “Personal Information,” as the term is defined under COPPA, from children under the age of 13. We are committed to ensure compliance with COPPA. Our Website and Platform are not meant for use by children under the age of 13. Our Website and Platform do not target children under the age of 13, but we do not age-screen or otherwise prevent the collection, use, and personal disclosure of persons identified as under 13. If you would like to know more about our practices and specifically our practices in relation to COPPA compliance, please email us at privacy@bprhub.com.

IF YOU ARE UNDER 13, PLEASE DO NOT ACCESS OR USE OUR WEBSITE OR PLATFORM.

12. CAN-SPAM ACT OF 2003

The CAN-SPAM Act establishes requirements for commercial messages, gives recipients the right to have businesses stop emailing them, and spells out penalties for violations. Per the CAN-SPAM Act, we will:

• not use false or misleading subjects or email addresses;
• identify the email message as an advertisement in some reasonable way;
• include the physical address of 10D, Inc., which is 10120 Parkwood Dr #1, Cupertino 95014;
• monitor third-party email marketing services for compliance, if one is used;
• honor opt-out/unsubscribe requests quickly; and
• give an “opt-out” or “unsubscribe” option.

If you wish to opt out of email marketing, follow the instructions at the bottom of each email or contact us at privacy@bprhub.com and we will promptly remove you from all future marketing correspondences.

13. LIST OF THIRD-PARTY SERVICE PROVIDERS

10D uses the following third-party service providers for the provision of services as detailed under the Terms and Conditions, as applicable

Additionally, if you have any questions or concerns about our third-party service providers, please email us at privacy@bprhub.com.

14. COPYRIGHT INFRINGEMENT/DMCA NOTICE

If you believe that any content on our Website or Platform violates your copyright, and you wish to have the allegedly infringing material removed, the following information in the form of a written notification (pursuant to the Digital Millennium Copyright Act of 1998 (“DMCA Takedown Notice”)) must be provided to our designated Copyright Agent.

• Your physical or electronic signature;
• Identification of the copyrighted work(s) that you claim to have been infringed;
• Identification of the material on our Website or Platform that you claim is infringing and that you request us to remove;
• Sufficient information to permit us to locate such material;
• Your address, telephone number, and email address;
• A statement that you have a good faith belief that use of the objectionable material is not authorized by the copyright owner, its agent, or under the law; and
• A statement that the information in the notification is accurate, and under penalty of perjury, that you are either the owner of the copyright that has allegedly been infringed or that you are authorized to act on behalf of the copyright owner.

10D’ Copyright Agent to receive DMCA Takedown Notices is DMCA Agent, at dmca@bprhub.com and at 10D, Inc., Attn: DMCA Notice, 10120 Parkwood Dr #1, Cupertino 95014. You acknowledge that for us to be authorized to take down any content, your DMCA Takedown Notice must comply with all the requirements of this Section. Please note that, pursuant to 17 U.S.C. § 512(f), any misrepresentation of material fact (falsities) in a written notification automatically subjects the complaining party to liability for any damages, costs and attorney’s fees incurred by 10D in connection with the written notification and allegation of copyright infringement.

15. ANTI-BRIBERY COMPLIANCE

10D represents and warrants that it is fully aware of and will comply with, and in the performance of its obligations hereunder will not take any action or omit to take any action that would cause it or its customers to be in violation of, (i) U.S. Foreign Corrupt Practices Act, (ii) U.K. Anti-Bribery Act, (iii) India Prevention of Corruption Act of 1988, or (iv) any other applicable anti-bribery statutes and regulations, and (v) any regulations promulgated under any such laws. 10D represents and warrants that neither it nor any of its employees, officers, or directors is an official or employee of any government (or any department, agency or instrumentality of any government), political party, state owned enterprise or a public international organization such as the United Nations, or a representative or any such person (each, an “Official”). 10D further represents and warrants that, to its knowledge, neither it nor any of the Officials has offered, promised, made or authorized to be made, or provided any contribution, thing of value or gift, or any other type of payment to, or for the private use of, directly or indirectly, any Official for the purpose of influencing or inducing any act or decision of the Official to secure an improper advantage in connection with, or in any way relating to, (A) any government authorization or approval involving 10D, or (B) the obtaining or retention of business by 10D. 10D further represents and warrants that it will not in the future offer, promise, make or otherwise allow to be made or provide any payment and that it will take all lawful and necessary actions to ensure that no payment is promised, made or provided in the future by any of the Officials.

16. MODIFICATIONS TO OUR PRIVACY POLICY

We will post any changes to this Privacy Policy in a notice of the change at the bottom of our web page with a hyperlink thereto. We will also send you an email describing such changes. Please regularly review this Privacy Policy. Notwithstanding if you continue to use our services, you are bound by any changes that we make to this Privacy Policy.

17. CONTACT US

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

• Privacy Officer: Milanjeet Singh
• Email: privacy@bprhub.com
• Address: 10D, Inc., 10120 Parkwood Dr #1, Cupertino 95014

PLEASE NOTE: IF YOU USE OUR WEBSITE OR PLATFORM, YOU HAVE AGREED TO AND ACCEPTED THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY AND THETerms and Conditions SET FORTH IN OUR Terms and Conditions, AS APPLICABLE. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY OR OUR Terms and Conditions, PLEASE DO NOT USE OUR WEBSITE OR PLATFORM.