Privacy Policy

Civitas is a product of Hyrule Capital, LLC, a Georgia limited liability company ("Civitas," "we," "us").

You can reach us at civitas@hyrulecapital.com.

This policy explains what we collect when you use the Civitas workspace and the civitasplatform.com website, and what we do with it.

Account information. The name, email address, and role of each staff member you create a login for. Your chamber's name and location.

Onboarding information. The chamber details you provide when you set up your workspace, including your town, member count, dues structure, event calendar, publishing preferences, and your town position document.

Content you enter. Everything typed, pasted, or uploaded into the workspace, including past newsletters, member information, and event details.

Content we produce. The documents the workspace generates for you.

Usage information. Which features you use, how often, and when.

Technical information. IP address, browser type, device type, and similar data collected automatically when you visit the site or use the workspace.

Payment information. Billing is processed by a third-party payment processor. We do not receive or store full payment card numbers.

To provide the workspace and produce the documents you request. To maintain and improve the service. To bill you. To provide support. To communicate with you about your account. To comply with law.

The Civitas workspace uses third-party artificial intelligence providers to generate documents. Content you enter and content the workspace produces is transmitted to those providers to fulfill your requests.

Under our agreements with those providers, your inputs and outputs are not used to train their models.

We rely on those agreements. We do not control the providers' systems and we make no independent warranty about their conduct, security, or continued availability. See Section 11 of our Terms of Service.

We do not sell, rent, or trade your information. We do not share your content with other customers. We do not use your content to train any model of our own.

Each chamber's content, onboarding information, and documents are isolated to that chamber's account. No other customer can access them.

The shared knowledge base that supports the workspace contains general methodology and industry reference material. It contains no customer data. We do not add your content to it.

We use third parties to host infrastructure, process payments, generate documents, deliver email, and measure site usage. Each receives only what is needed to perform its function.

A current list of our service providers is available on request at civitas@hyrulecapital.com.

Content is encrypted in transit and at rest, and is hosted on servers located in the United States.

We take reasonable measures to protect your information. No system is completely secure and we cannot guarantee that your information will never be accessed without authorization. You are responsible for keeping your login credentials confidential and for the activity of anyone using your account.

We do not hold a SOC 2 report. If your organization requires one, tell us before subscribing.

While your account is active, we retain your content so the workspace can continue to learn your preferences and so your documents remain available.

On request, you may ask us to delete specific content at any time by writing to civitas@hyrulecapital.com. We will action the request within [30 — CONFIRM] days.

After cancellation, all account data, including every document produced, is permanently deleted 90 days after the cancellation date.

There is no bulk export function. Save anything you want to keep before you cancel. Once deleted, content cannot be recovered.

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to civitas@hyrulecapital.com and we will respond within 30 days.

Depending on where you live, you may have additional rights under applicable law. Contact us and we will tell you what applies.

We use cookies, tracking pixels, tags, web beacons, local storage, session recording, and similar technologies on the website and, in some cases, in the workspace.

We deploy these through Google Tag Manager, which lets us add, change, and remove tracking tools without changing the site's code. The specific tools running at any given time may change without notice to you.

These technologies collect information including:

• Pages you visit, links you click, buttons you press, and forms you start or complete
• How long you spend on a page and how far you scroll
• The site or advertisement that referred you
• Your IP address, and the general geographic location inferred from it
• Your browser, operating system, device type, and screen size
• A persistent identifier that lets us recognize your browser across visits

We use this information to understand how the site is used, to measure which pages and messages lead to signups, to improve the product, and to measure and target advertising.

Third parties. Some of these technologies are operated by third parties, including analytics providers, advertising platforms, and social media platforms. Those third parties may set their own cookies, may receive information about your visit directly from your browser, and may combine it with information they already hold about you from other sites and services. Their use of that information is governed by their own privacy policies and is outside our control.

Advertising. We may use this information to show you advertisements for Civitas on other websites and platforms, and to build audiences of people similar to visitors who signed up. We may share hashed identifiers, such as a hashed email address, with advertising platforms for this purpose.

Your choices. Most browsers let you refuse or delete cookies. Many advertising platforms offer their own opt-out controls. You can also use browser settings or extensions that block tracking. Blocking these technologies may affect how parts of the site function. We do not currently respond to Do Not Track browser signals.

Workspace content. The tracking described in this section relates to how you navigate and use the site and the product. It does not extend to the content of the documents you produce inside the workspace, which is covered by Sections 2 through 10.

The service is intended for use by chamber of commerce staff in the course of their work. It is not directed at anyone under 18 and we do not knowingly collect information from anyone under 18.

You are responsible for making sure that entering third-party information into the workspace, including information about your members, complies with your own commitments to those parties and with any law that applies to your organization.

We may update this policy. When we do, we will change the date at the top and, for material changes, notify account holders by email. Continuing to use the service after a change takes effect means you accept it.

civitas@hyrulecapital.com

Hyrule Capital, LLC

PO BOX 4381 Cartersville GA