PRIVACY POLICY

Stocks of the Month LLC, a Texas limited liability company ("we," "us" or "Stocks of the Month"), cares about protecting the personal information of our customers and visitors (collectively, our "Users") who use our website at stocksofthemonth.com and any subdomains (collectively the "Site"), or other products and services provided to you by us (collectively along with the Site, the "Services"). This privacy policy provides details about how your personal information is collected, shared and used by us, and your choices regarding your information. If you have any questions about this privacy policy or the practices described herein, you may contact us at privacy@stocksofthemonth.com.

This privacy policy covers personal information, including any information we collect, use and share from you, as described further below. This privacy policy applies to all of our Services. This privacy policy does not cover how our Users may use or share data that they collect using our Services.

When you use our Services, your personal information will be collected, used, and shared consistent with the provisions of this privacy policy.

Stocks of the Month collects information from you in the ways detailed below.

INFORMATION YOU GIVE US

When you access the Services and create an account ("Account"), we may collect certain information about you, including but not limited to:

• Name;
• Email address;
• Password (if you sign up with an email address and password; stored in hashed form);
• Email preferences;
• Billing information (payment card details are collected and processed directly by our payment processor, as described under "Service Providers" below);
• The stocks you request $1 Reports for, and your communications with our support team.

We do not collect your mailing address or phone number.

By voluntarily providing us with personal information, you are consenting to our use of it in accordance with this privacy policy. If you provide personal information to the Services, you acknowledge and agree that such personal information may be transferred from your current location to our servers and the authorized third parties referred to herein.

INFORMATION WE RECEIVE FROM OTHERS

We may receive information about you from others, including but not limited to:

• Google. If you choose to sign in with Google, we receive your name, email address, profile picture and Google account identifier from Google. We do not receive your Google password.
• Stripe. When you make a purchase, we receive limited payment information from Stripe, as described under "Service Providers" below.

INFORMATION COLLECTED FROM YOUR USE OF THE SERVICES

When you use our services, we automatically receive and record information on our server logs from your browser or device, which may include the following:

• IP address, and the approximate location (such as country or city) that can be derived from it;
• Browser and device type;
• Pages viewed and how you use the Services;
• Transaction information (e.g. transaction amount, date and time such transaction occurred);
• Information from cookies — for more information, see "How We Collect Data" section below; and
• Log data (e.g. access times, hardware and software information).

We do not collect precise geolocation (GPS) data.

We use the information we collect, both on its own and combined with any other information we collect about you, for a variety of business purposes, including:

• Effectively provide our Services to you, including for: (1) creation, access, and usage of your profile; (2) providing access to certain functions and features of our Services; and (3) managing your information and Account.
• To present content to you.
• To notify you about changes to the Services.
• To communicate with you about your Account, our Services and policy changes.
• To understand how the Services are used, using our own analytics.
• To remember your preferences.
• To send you emails about our own Services, such as new picks and offers. You can opt out of marketing emails at any time. We do not use your information to market third-party products, and we do not show third-party advertising.
• To analyze and improve our Services pursuant to our legitimate interest, such as: detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity; undertaking research for technological development and demonstration; measuring interest and engagement in our Services and short-term, transient use; developing new products and Services; and enforcing our terms and policies.
• To create de-identified and aggregated information, such as overall usage statistics.

To process your information as described above, we rely on the following legal bases:

• Provide our service to you: Most of the time, the reason we process your information is to perform the contract that you have with us.
• Legitimate interests: We may use your information where we have legitimate interests to do so. For instance, we analyze users' behavior on our services to continuously improve our offerings, we tell you about our own offers we think might interest you, and we process information for administrative, fraud detection and other legal purposes.
• Consent: From time to time, we may ask for your consent to use your information for certain specific reasons. You may withdraw your consent at any time by contacting us at the address provided at the end of this Privacy Policy.
• Legal compliance: If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity affecting us to applicable law enforcement.

We use different technologies to collect, process and store your information. These technologies include:

• Log Files. A log file is a file that records events that occur in connection with your use of the Services, such as your service use data.
• Cookies. A cookie is a small data file stored on your device. We use our own (first-party) cookies to keep you signed in, remember your preferences, support security features, and measure how the Services are used. We do not use advertising cookies and do not allow advertising networks to place cookies through the Services. Cookies can generally be controlled through your browser settings; if you disable cookies, you may not be able to sign in or use some features. Some web browsers have a "Do Not Track" ("DNT") feature. Because we do not track you across other websites, we do not respond differently to these signals.
• Third parties. When you sign in with Google or pay through Stripe, those companies may set their own cookies in order to provide sign-in, payment and fraud-prevention functions. Their use of that information is governed by their own privacy policies.
• Email measurement. Our emails may record whether they were delivered and opened, and which links were clicked.

The information we collect is used to provide and improve the content and the quality of Stocks of the Month. We do not sell your personal information, and we do not share it with third parties for their own marketing or advertising. We share personal information only: (a) with service providers that help us run the Services, (b) when we have your permission, or (c) for legal disclosures and business transfers, as described below.

SERVICE PROVIDERS

We share your information with third-party service providers that process it on our behalf, and only as needed to perform their services. These are:

• Hosting: Amazon Web Services (AWS), which hosts the Services and stores our data;
• Payments: Stripe, which processes payments;
• Sign-in: Google, if you choose to sign in with Google; and
• Email delivery: the provider we use to send account and marketing emails.

Payments. We use Stripe, Inc. ("Stripe") to process payments. When you make a purchase, your payment card details are provided directly to Stripe, and we do not receive or store your full payment card number. We receive limited information from Stripe, such as the card brand, the last four digits and expiration date of your card, your billing postal code and country, and the status and history of your transactions. Stripe may also collect device and usage information to help detect and prevent fraud. Stripe processes your information in accordance with its own privacy policy, available at stripe.com/privacy.

AGGREGATE DATA

We may aggregate or de-identify the information described in this Privacy Policy. We use aggregated or de-identified data for various business purposes, which may include incorporating aggregated or de-identified data in our current or future products and services, or publishing overall usage statistics. Aggregated or de-identified data is not subject to this Privacy Policy.

LEGAL PROCESS

We may disclose any information without notice or consent from you: (a) in response to a legal request, such as a subpoena, court order, or government demand; (b) to investigate or report illegal activity; or (c) to enforce our rights or defend claims. If we have a good faith belief that such disclosure is reasonably necessary, we may disclose your personal information to other relevant third parties, such as internet service providers, to conduct an investigation, bring legal action, protect the rights of our user base, prevent harm to others or pursue other relief when you or a third party are or may be:

• violating our terms and conditions of use;
• causing injury or other harm to, or otherwise violating the property or other legal rights, of us, other users, or third parties; or
• violating federal, state, local, or other applicable law.

BUSINESS TRANSFERS

We may also transfer your information to (a) any affiliate of ours or (b) another company in connection with a merger, financing due diligence, corporate restructuring, sale of any or all of our assets, or in the event of bankruptcy.

We do not sell personal information to third parties, and we do not share it for cross-context behavioral advertising.

You may review or edit your Account information as you wish, by logging into your Account using the information supplied during the registration process. Where you have consented to our use of your personal information, you may withdraw your consent at any time by contacting us at privacy@stocksofthemonth.com. You can request a copy of your personal information by contacting us at privacy@stocksofthemonth.com. If you believe that the information we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion or object to its processing, please contact us at privacy@stocksofthemonth.com.

If you would like to have us delete your Account information, we may do so by deactivating your Account first and then permanently deleting your Account.

After your Account is deleted, we may keep limited information where needed to comply with law, resolve disputes or prevent fraud, as described under "Retention of Personal Information" below.

The Services may contain links to other websites, and other websites may reference or link to our website or other Services. These other websites are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve and are not responsible for the privacy practices or content of such other websites or applications. Visiting, accessing or utilizing these other websites or applications is at your own risk.

The security of your information is a serious issue for us and we are committed to protect the information we receive from you. We use reasonable security measures to protect against the loss, misuse and alteration of your personal information under our control. Notwithstanding such measures, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee the security of any information transmitted to or from the Services.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW WE ASSUME NO LIABILITY OR RESPONSIBILITY FOR DISCLOSURE OF YOUR INFORMATION DUE TO ERRORS IN TRANSMISSION, UNAUTHORIZED THIRD-PARTY ACCESS, OR OTHER CAUSES BEYOND OUR CONTROL. BY USING THE SERVICES OR PROVIDING PERSONAL INFORMATION TO US, YOU AGREE THAT WE MAY COMMUNICATE WITH YOU ELECTRONICALLY REGARDING SECURITY, PRIVACY, AND ADMINISTRATIVE ISSUES RELATING TO YOUR USE OF THE SERVICES. IF WE LEARN OF A SECURITY SYSTEM'S BREACH, WE MAY ATTEMPT TO NOTIFY YOU ELECTRONICALLY BY POSTING A NOTICE ON THE SERVICES, BY MAIL OR BY SENDING AN E-MAIL TO YOU.

You play an important role in keeping your personal information secure. You should not share your password or other security information for your Account with anyone. If you believe there has been any unauthorized access or use of your information, please contact us immediately at support@stocksofthemonth.com.

Marketing emails. Every marketing email we send includes an unsubscribe link. You can opt out at any time by using that link, by changing your email preferences in your Account, or by emailing us at support@stocksofthemonth.com. We will honor your request within 10 business days. Opting out is free and does not require you to close your Account.

Service emails. Some emails are transactional or service communications (for example, receipts, $1 Report deliveries and important account notices). We send these while you have an Account, even if you have opted out of marketing emails.

Cookies. You can block or delete cookies through your browser settings, as described under "How We Collect Data" above.

We store the personal information we receive as described in this privacy policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, prevent fraud, and comply with applicable laws.

Stocks of the Month is based in the United States, and our Services are hosted on Amazon Web Services servers located in the United States. Some of our service providers (such as Stripe and Google) may also process information in other countries. If you use the Services from outside the United States, your information will be transferred to, stored and processed in the United States. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy.

Where the GDPR or UK GDPR applies to a transfer of personal information, we rely on a legally recognized transfer mechanism, such as the European Commission's standard contractual clauses (Commission Implementing Decision (EU) 2021/914) and the UK International Data Transfer Addendum, or an adequacy decision. When we receive formal written complaints, we respond by contacting the person who made the complaint. We will work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.

Where the GDPR or UK GDPR applies and in accordance with any other applicable law, in certain circumstances and subject to data processing agreements, you have rights in relation to the personal information we hold about you. To exercise any of your rights, please contact us at privacy@stocksofthemonth.com. Please note that for each of the rights below we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.

For the purposes of GDPR, the data controller is: Stocks of the Month LLC, a Texas limited liability company, 5900 Balcones Dr Ste 100, Austin, Texas 78731, United States

ACCESS — You have the right to know whether we process personal information about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with. Please contact us at privacy@stocksofthemonth.com.

PORTABILITY — You have the right to receive a subset of the personal information you provide us if we process it on the legal bases of our contract with you or with your consent in a structured, commonly used and machine-readable format and a right to request that we transfer such personal information to another party.

CORRECTION — You have the right to require us to correct any personal information held about you that is inaccurate and have incomplete data completed.

ERASURE — You may request that we erase the personal information we hold about you in the following circumstances:

• where you believe it is no longer necessary for us to hold the personal information;
• we are processing it on the basis of your consent and you wish to withdraw your consent;
• we are processing your data on the basis of our legitimate interest and you object to such processing;
• you no longer wish us to use your data to send you marketing; or
• you believe we are unlawfully processing your data.

RESTRICTION OF PROCESSING TO STORAGE ONLY — You have a right to require us to stop processing the personal information we hold about you other than for storage purposes in the following circumstances:

• You believe the personal information is not accurate for the period it takes for us to verify whether the data is accurate;
• We wish to erase the personal information but you want us to simply restrict the use of that data;
• We no longer need the personal information for the purposes of the processing but you require us to retain the data for the establishment, exercise or defense of legal claims; or
• You have objected to us processing personal information we hold about you on the basis of our legitimate interest and you wish us to stop processing the personal information while we determine whether there is an overriding interest in us retaining such personal information.

OBJECTION — You have the right to object to our processing of data about you and we will consider your request. You also have the right, at any time, to object to our processing of data about you in order to send you marketing, including where we build profiles for such purposes, and we will stop processing the data for that purpose.

WITHDRAWAL OF CONSENT — Where you have provided your consent to us processing your personal data, you can withdraw your consent at any time by emailing us at privacy@stocksofthemonth.com.

Our Services are not directed to persons under the age of 18. We do not knowingly collect personal information from children under the age of 18. If we become aware that a child under the age of 18 has provided us with personal information, we will delete such information from our files. If you suspect that a user is under the age of 18, please contact us at privacy@stocksofthemonth.com.

In the event that you wish to make a complaint about how we process your personal information, please contact us at privacy@stocksofthemonth.com and we will try to deal with your request. Where the GDPR or UK GDPR applies, you also have the right to complain to your local data protection authority.

We reserve the right to modify this privacy policy at any time, so please review it frequently. If we decide to change this privacy policy in any material way, we will notify you here, by email, or by means of a notice on our Site. In all cases, your continued use of any Services constitutes acceptance to any such changes.

If you have any questions about this Privacy Policy or about accessing, changing, or deleting your personal information, or closing your Account with any one of our Services, please visit our Site or contact us at privacy@stocksofthemonth.com indicating the details of the personal information you want to access, change or delete or which Service(s) you wish to close from the email account registered with us.

If you have an inquiry regarding our privacy practices or desire to access your personal data in our possession, we encourage you to contact us at privacy@stocksofthemonth.com.

For questions or opinions regarding this Privacy Policy, please contact us via email at privacy@stocksofthemonth.com or by mail at Stocks of the Month LLC, 5900 Balcones Dr Ste 100, Austin, Texas 78731, United States. For help with your Account or subscription, contact support@stocksofthemonth.com.

This section describes how we handle the personal information of California residents and the rights available under the California Consumer Privacy Act, as amended ("CCPA"). We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not offer financial incentives in exchange for personal information, and we will not discriminate against you for exercising your privacy rights.

Categories of Personal Information We Collect

• Identifiers, such as your name, email address, Google account identifier, or IP address;
• Commercial information, such as your subscription and purchase history;
• Internet or other electronic network activity information, such as pages viewed; and
• Approximate location derived from your IP address.

We collect this information from you directly, automatically when you use the Services, and from Google and Stripe, as described above. We do not collect sensitive personal information other than your Account login credentials, which we use only to sign you in.

Categories of Personal Information Disclosed to Service Providers

We disclose each of the categories above to the service providers listed under "Service Providers" (hosting, payments, sign-in and email delivery), for the business purposes below.

Business Purpose for Which Information May Be Used or Disclosed

• Protecting against security threats, abuse, and illegal activity. Stocks of the Month uses and may disclose information to detect, prevent and respond to security incidents, and for protecting against other malicious, deceptive, fraudulent, or illegal activity.
• Maintaining our services. Stocks of the Month uses information to ensure our services are working as intended, such as tracking outages or troubleshooting bugs and other issues that you report to us.
• Auditing and measurement. Stocks of the Month uses information for analytics and measurement to understand how our Services are used.
• Research and development. Stocks of the Month uses information to improve our services and to develop new products, features and technologies.
• Use of service providers. Stocks of the Month shares information with service providers to perform services on our behalf, in compliance with our Privacy Policy and other appropriate confidentiality and security measures.
• Legal reasons. Stocks of the Month also uses information to satisfy applicable laws or regulations, and discloses information in response to legal process or enforceable government requests, including to law enforcement.

California Consumer Privacy Rights

You have the right to:

• know the categories and specific pieces of personal information we have collected about you, the sources we collected it from, the purposes for which we use it, and the categories of service providers we disclose it to;
• request that we correct inaccurate personal information we hold about you;
• request that we delete the personal information we have collected from you; and
• not receive discriminatory treatment for exercising any of these rights.

How to Submit a Request

To submit a request, contact us at privacy@stocksofthemonth.com with "California Privacy Request" in the email subject line, from the email address registered with your Account if you have one. To help protect your privacy and maintain security, we will take steps to verify your identity before complying with your request. We will respond within 45 days. We do not charge a fee unless a request is clearly unfounded or excessive. You may use an authorized agent to submit a request on your behalf, and we may ask for proof of the agent's authority.

©2026 Stocks of the Month LLC · 5900 Balcones Dr Ste 100, Austin, Texas 78731