Privacy Policy

Muni Data Network LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our municipal bond data platform and league table services (the "Service"). This Privacy Policy applies to information we collect through our website, applications, and services, including when you register for an account, subscribe to our services, or interact with our platform. By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

We collect information that you provide directly to us, information we collect automatically when you use our Service, and information from third-party sources. INFORMATION YOU PROVIDE TO US • Account Information: First name, last name, corporate email address, password, and company affiliation (derived from email domain) • Professional Information: Job title, department, areas of interest in municipal finance • Payment Information: Credit card details, billing address (processed securely through Stripe) • Communications: Inquiries, feedback, and correspondence you send to us • Usage Preferences: Settings, preferences, and customizations you make within the Service INFORMATION WE COLLECT AUTOMATICALLY • Usage Data: Pages viewed, features accessed, search queries, time spent on pages, click patterns • Device Information: IP address, browser type, operating system, device identifiers • Analytics Data: Performance metrics, error reports, usage patterns • Cookies and Tracking: Session cookies, authentication tokens, preference cookies • Location Data: General geographic location based on IP address INFORMATION FROM THIRD PARTIES • Data Verification: Company information from public sources to verify corporate affiliation • Payment Processing: Transaction confirmations from payment processors • Analytics Services: Aggregated insights from third-party analytics providers

We use the information we collect for various purposes essential to providing and improving our Service: SERVICE PROVISION AND MAINTENANCE • Create and manage your account • Authenticate users and ensure security • Provide access to league tables and municipal bond data • Process subscriptions and payments • Deliver customer support SERVICE IMPROVEMENT AND DEVELOPMENT • Analyze usage patterns to improve functionality • Develop new features and services • Conduct research on municipal finance trends • Optimize user experience and interface design • Fix bugs and technical issues COMMUNICATION • Send service-related notifications and updates • Respond to inquiries and support requests • Provide important announcements about platform changes • Send marketing communications (with your consent) • Deliver industry insights and newsletters (if subscribed) BUSINESS OPERATIONS • Monitor and analyze trends and usage • Detect and prevent fraud or abuse • Enforce our Terms of Service • Comply with legal obligations • Protect our rights and property AGGREGATED INSIGHTS • Create anonymized industry reports • Generate market intelligence for the municipal finance sector • Develop benchmarking data for the industry • Produce statistical analyses without identifying individuals

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances: SERVICE PROVIDERS We share information with third-party vendors who perform services on our behalf: • Payment processors (Stripe) for subscription management • Cloud infrastructure providers (Google Cloud Platform) • Email service providers for communications • Analytics providers to understand usage patterns • Customer support tools These providers are contractually obligated to protect your information and use it only for the purposes we specify. BUSINESS TRANSFERS If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy. LEGAL REQUIREMENTS We may disclose your information if required to do so by law or in response to: • Court orders or subpoenas • Government or regulatory requests • Law enforcement investigations • Protection of our legal rights • Prevention of fraud or security threats AGGREGATED DATA We may share aggregated, anonymized information that cannot identify you: • Industry reports and market analyses • Platform usage statistics • Trends in municipal finance activity • General demographic information about our user base WITH YOUR CONSENT We may share your information for other purposes with your explicit consent.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. SECURITY MEASURES • Encryption of data in transit using TLS/SSL protocols • Encryption of sensitive data at rest • Secure authentication mechanisms including password hashing • Regular security audits and vulnerability assessments • Access controls and authentication for internal systems • Employee training on data protection and security practices • Incident response procedures for potential breaches ACCOUNT SECURITY You are responsible for maintaining the confidentiality of your account credentials. We recommend: • Using strong, unique passwords • Enabling two-factor authentication when available • Logging out when using shared devices • Promptly notifying us of any unauthorized access While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users if a breach occurs.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. RETENTION PERIODS • Account Information: Retained while your account is active and for 3 years after closure • Transaction Records: Retained for 7 years for tax and regulatory compliance • Usage Data: Aggregated after 2 years, individual records deleted after 3 years • Communications: Retained for 2 years or as required for legal purposes • Marketing Preferences: Updated immediately upon request DELETION REQUESTS You may request deletion of your personal information by contacting us at privacy@munidata.ai. We will comply with valid requests, except where we are required to retain information for: • Legal obligations • Dispute resolution • Fraud prevention • Enforcement of our agreements • Legitimate business purposes

You have certain rights regarding your personal information: ACCESS AND PORTABILITY • Request a copy of the personal information we hold about you • Receive your data in a structured, machine-readable format • Transfer your data to another service provider CORRECTION AND UPDATE • Update or correct inaccuracies in your personal information • Maintain current account and profile information DELETION • Request deletion of your personal information • Close your account at any time MARKETING COMMUNICATIONS • Opt-out of marketing emails via unsubscribe links • Manage communication preferences in account settings • Note: You cannot opt-out of service-related communications COOKIES AND TRACKING • Adjust browser settings to refuse cookies • Use browser privacy modes • Note: Some features may not function properly without cookies DO NOT TRACK We do not currently respond to Do Not Track browser signals. However, you can control tracking through cookie settings and privacy tools. To exercise these rights, contact us at privacy@munidata.ai. We will respond to valid requests within 30 days.

Our Service is operated from the United States. If you are located outside the United States, please be aware that information we collect will be transferred to and processed in the United States. The United States may have data protection laws less stringent than or otherwise different from the laws in your country. By using our Service, you consent to the transfer and processing of your information in the United States. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): RIGHT TO KNOW • Categories of personal information collected • Sources of personal information • Business purposes for collection • Categories of third parties with whom we share information RIGHT TO DELETE Request deletion of personal information we have collected from you, subject to certain exceptions. RIGHT TO OPT-OUT We do not sell personal information. If our practices change, we will provide an opt-out mechanism. RIGHT TO NON-DISCRIMINATION We will not discriminate against you for exercising your privacy rights. To exercise these rights, California residents may contact us at privacy@munidata.ai or call 1-800-MUNIDATA. We will verify your identity before processing requests. SHINE THE LIGHT California residents may request information about disclosure of personal information to third parties for direct marketing purposes. We do not share personal information for third-party direct marketing.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@munidata.ai. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will: • Update the "Last Updated" date at the top of this policy • Notify you via email or prominent notice on our Service • Obtain your consent if required by applicable law Your continued use of our Service after changes indicates acceptance of the updated Privacy Policy. We encourage you to review this policy periodically. All changes are effective immediately upon posting unless otherwise stated. For material changes affecting how we handle previously collected information, we will seek your consent.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: Muni Data Network LLC Privacy Office Email: privacy@munidata.ai Phone: 1-800-MUNIDATA Website: https://munidata.ai/privacy For general support: support@munidata.ai For legal inquiries: legal@munidata.ai DATA PROTECTION OFFICER You may contact our Data Protection Officer at: dpo@munidata.ai SUPERVISORY AUTHORITY You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.