Movik Data Privacy Authorization and Policy

A.1 Consent for Data Collection and Processing

By accepting this Privacy Policy, you expressly consent and authorize Movik to collect, process, use, store, transmit, and disclose your personal information and commercial data as described in this Privacy Policy and as necessary to provide Platform services and Financial Services.

Important: Your consent is essential for us to be able to provide you with our commercial lending and accounts receivable management services.

A.2 Authorization for Specific Data Uses

You specifically authorize Movik to:

• Perform identity verification and Know Your Customer (KYC) checks using internal databases and third-party verification services
• Conduct credit checks, risk assessments, and underwriting analysis using your business and financial information, including searches of credit history through Experian, Plaid, and equivalent sources
• Access and review your business records, including invoices, proof of delivery documents, rate confirmations, bills of lading, and other transaction documentation
• Share limited information with financial partners, banks, payment processors, and service providers solely for the purpose of providing Platform services and Financial Services
• Contact Account Debtors, payment processors, banks, and other third parties to verify transactions, collect payments, and protect Movik's interests
• Monitor and analyze Platform usage patterns, transaction data, and user behavior for fraud prevention, security enhancement, and service improvement
• Aggregate and anonymize data for analytical, statistical, and business intelligence purposes
• Disclose information as required by law, regulation, subpoena, court order, or legal process
• Use and disclose information as necessary to enforce our agreements, protect our rights and property, and ensure the security and integrity of the Platform
• Search for and obtain information from publicly available sources, including public records, government databases, media, and other sources of public information to verify identity, assess credit risk, and comply with regulatory obligations

A.3 Duration of Authorization

7+ Years of Retention

This authorization remains in effect as long as you maintain an Account with Movik, and for the additional period necessary to comply with Movik's legal, regulatory, and contractual obligations, including data retention requirements and agreement compliance. You acknowledge that certain data may be retained indefinitely in aggregated or anonymized form.

A.4 Acknowledgment of Third-Party Access

You acknowledge and agree that Movik may grant access to your information to third-party service providers, including but not limited to:

• Identity Verification Services: Plaid, Stripe Identity, and equivalent services
• Credit Reporting Agencies: Dun & Bradstreet, Experian, and equivalent agencies
• Payment Processors: Stripe, PayPal, and equivalent processors
• Banking Partners: Associated financial institutions
• Cloud Storage Providers: Amazon Web Services, Google Cloud
• Data Analytics Providers: Business intelligence services

All these third parties are contractually obligated to maintain confidentiality and use the information solely for the purposes specified by Movik.

B.1 Information We Collect

B.1.1 Information You Provide

We collect information that you voluntarily provide when creating an Account, using the Platform, or interacting with our services, including:

Business Information:

• Legal business name, DBA, business address, and contact information
• Tax identification number (EIN or SSN for sole proprietors)
• Business structure and ownership information
• Industry type, operating authority numbers, licenses, and permits
• Years in business and business description

Personal Information:

• Name, title, email address, phone number of authorized representatives
• Date of birth and Social Security Number (for personal guarantors)
• Government-issued identification documents

Financial Information:

• Bank account information, routing numbers, and account numbers
• Financial statements and tax returns
• Credit reports and credit scores obtained from Experian, Plaid, and equivalent sources
• Revenue, cash flow, and financial performance data

Transaction Information:

• Invoices, rate confirmations, bills of lading, and proof of delivery
• Account Debtor information (names, addresses, payment history)
• Load details, shipping information, and delivery status
• Payment histories, collection activities, and dispute records

B.1.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information, including:

• Device information (IP address, browser type, operating system, device identifiers)
• Usage data (pages visited, features used, time spent, click patterns)
• Log data (access times, error logs, performance metrics)
• Location data (derived from IP address)
• Cookies and similar tracking technologies

B.1.3 Third-Party Information

We may obtain information about you from third-party sources, including:

• Credit reporting agencies and business information services, including Experian and equivalent agencies
• Identity verification services and KYC providers, including Plaid
• Public record databases (business registrations, liens, judgments)
• Fraud prevention and security service providers
• Account Debtors and payment processors (payment confirmations, disputes)
• Industry databases and transportation authorities
• Media outlets and other publicly available information sources

B.2 How We Use Your Information

We use the collected information for the following purposes:

Platform and Service Delivery:

• Create and manage your Account
• Provide Platform services and Financial Services
• Process transactions and manage Accounts Receivable
• Facilitate payment collection and distribution
• Communicate with you about your Account and transactions

Risk Management and Underwriting:

• Verify your identity and business legitimacy
• Conduct credit assessments and underwriting analysis
• Evaluate the creditworthiness of Account Debtors
• Determine pricing, advance rates, and transaction terms
• Monitor and manage risk exposure

Fraud Prevention and Security:

• Detect, prevent, and investigate fraud, money laundering, and illegal activities
• Monitor suspicious activity and security threats
• Protect the security and integrity of the Platform
• Enforce our agreements and protect our rights

Legal and Regulatory Compliance:

• Comply with applicable laws, regulations, and legal obligations
• Respond to legal processes, court orders, and government requests
• Maintain records as required by financial services regulations
• Conduct audits and compliance reviews

Business Operations and Improvement:

• Analyze Platform usage and user behavior
• Improve Platform functionality, features, and user experience
• Develop new products and services
• Conduct research, analysis, and business intelligence
• Provide customer support and respond to inquiries
• Send operational and transactional communications

B.3 How We Share Your Information

We may share your information with the following categories of recipients:

Service Providers and Business Partners:

• Identity verification and KYC service providers
• Credit reporting agencies and risk assessment providers, including Experian, Plaid, and equivalents
• Payment processors and banking partners
• Cloud hosting and data storage providers
• Fraud prevention and security service providers
• Customer support and communication platforms
• Analytics and business intelligence providers

Account Debtors and Third Parties:

• Account Debtors to verify transactions and collect payments
• Payment processors (Stripe, PayPal, etc.) to redirect payments
• Banks and financial institutions for payment processing and account control

Legal and Regulatory Authorities:

• Law enforcement agencies, regulatory bodies, and government authorities
• Courts, arbitrators, and parties in litigation
• Other entities as required by law, subpoena, or legal process

Corporate Transactions:

• In connection with any merger, acquisition, asset sale, financing, or other corporate transaction, your information may be transferred to the acquiring or successor entity

Aggregated and Anonymized Data:

• We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for any business purpose

B.4 Data Security

We implement commercially reasonable technical, administrative, and physical security measures to protect your information against unauthorized access, disclosure, alteration, and destruction, including:

• Encryption: Data in transit and at rest using industry-standard protocols
• SSL/TLS: Secure Sockets Layer/Transport Layer Security for data transmission
• Authentication: Multi-factor authentication and strong password requirements
• Audits: Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Intrusion detection and prevention systems
• Security awareness training for employees
• Incident response and breach notification procedures
• Regular penetration testing
• Continuous security monitoring

Important Notice: However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information using commercially reasonable measures, we cannot guarantee absolute security. You acknowledge and accept the inherent security risks of providing information and conducting business online.

B.5 Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information and the purposes for which it is used:

• Account Information: For the duration of your Account plus seven (7) years after Account closure
• Transaction records and financial data: Seven (7) years from the date of the transaction
• Tax records: As required by applicable tax laws (typically seven years)
• Legal and compliance records: For the period required by law or regulation
• Aggregated and anonymized data: Indefinitely for analytical and business purposes
• Dispute and litigation records: Until resolution plus the applicable statute of limitations

Upon the expiration of the applicable retention period, we will securely delete or anonymize your information in accordance with our data retention and destruction procedures.

B.6 Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

Access and Portability: You may request access to your personal information and, in certain circumstances, receive a copy in a portable format

Correction and Update: You can update or correct inaccurate information through your Account settings or by contacting us

Deletion: You may request the deletion of your personal information, subject to legal retention requirements and ongoing contractual obligations

Restriction and Objection: You may request restriction of processing or object to certain uses of your information, subject to legal and contractual limitations

Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time; however, this will not affect the lawfulness of processing before withdrawal

To exercise these rights, please contact us at legal@movik.us. We will respond to your request within the timeframe required by applicable law. Please note that certain rights may be subject to limitations based on legal requirements, contractual obligations, or the need for the information to provide services.

B.7 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver targeted content. The types of technologies we use include:

Essential Cookies: Necessary for Platform functionality, authentication, and security Performance and Analytics Cookies: Collect information about Platform usage, performance, and user behavior for improvement purposes

Functionality Cookies: Remember your preferences and settings to provide enhanced functionality

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit the functionality of the Platform. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

B.8 Privacy of Minors

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected information from a minor under 18, we will take steps to delete such information promptly. If you believe we have collected information from a minor under 18, please contact us at legal@movik.us.

B.9 International Data Transfers

Your information may be transferred, stored, and processed in the United States or other countries where Movik or its service providers operate. These countries may have data protection laws that differ from those of your jurisdiction. By using the Platform, you consent to the transfer of your information to the United States and other countries.

Global Processing: Information may be transferred, stored, and processed in the United States or other countries where Movik or its service providers operate.

Varying Data Laws: These countries may have data protection laws that differ from those of your jurisdiction.

User Consent: By using the Platform, you consent to the transfer of your information to the United States and other countries.

Implemented Safeguards: We implement appropriate safeguards to protect your information during international transfers, including standard contractual clauses and other legally recognized transfer mechanisms.

B.10 California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete personal information, the right to opt-out of the sale or sharing of personal information, and the right to non-discrimination. Movik does not sell personal information as defined by California law. To exercise your California privacy rights, please contact us at legal@movik.us. We will verify your identity before processing your request.

Right to Know: Understand what personal information we collect about you.

Right to Delete: Request the deletion of your personal information, subject to legal requirements.

Right to Opt-Out: Choose to opt-out of the sale or sharing of your personal information.

Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights.

B.11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Platform, updating the "Effective Date" at the top of this document, and by sending an email notice or through the Platform. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

Policy Updates: Privacy Policy updated to reflect changes in practices, technologies, or legal requirements.

Notification of Changes: Material changes communicated by posting on the Platform, updating "Effective Date", and email/Platform notice.

Acceptance of Revisions: Continued use of the Platform after changes constitutes acceptance of the revised Privacy Policy.

B.12 Relationship to Other Agreements

This Privacy Policy is incorporated into and forms part of the Movik Platform Terms and Conditions.

Privacy Policy Controls: In the event of any conflict between this Privacy Policy and other Movik agreements regarding data privacy practices, collection, use, disclosure, retention, or User privacy rights, this Privacy Policy shall control.

Other Agreements Control: For all matters not specifically relating to data privacy and personal information protection, the Platform Terms and Conditions and Transaction Documents (if applicable) shall control in accordance with the order of precedence set forth in the Platform Terms.

B.13 Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Movik Financial Services Inc.Data Privacy OfficerEmail: legal@movik.usAddress: Dallas, TexasWebsite: www.movik.us

IMPORTANT STATEMENT

BY CREATING AN ACCOUNT OR ACCESSING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE PRACTICES DESCRIBED IN THIS AUTHORIZATION AND DATA PRIVACY POLICY. YOU EXPRESSLY CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND PROCESSING OF YOUR INFORMATION AS SET FORTH HEREIN.

100% Transparency: Total commitment to protecting your data100% Security: Enterprise-level security measures100% Compliance: Adherence to all applicable regulations

Movik Financial Services Inc. is committed to protecting your privacy and maintaining the security of your information. This policy reflects our ongoing commitment to transparency and best practices in data protection.

For any questions or concerns regarding this policy, please contact us at legal@movik.us

Governing Law

This Privacy Policy and our data practices shall be governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law principles.

Venue

Any action or proceeding arising out of or relating to this Privacy Policy shall be brought exclusively in the state or federal courts located in Dallas County, Texas. You irrevocably consent to the jurisdiction and venue of such courts and waive any objection to the laying of venue in such courts based on inconvenient forum or otherwise.

Waiver of Trial by Jury

YOU AND MOVIK HEREBY KNOWINGLY, VOLUNTARILY, AND INTENTIONALLY WAIVE THE RIGHT TO A TRIAL BY JURY IN ANY ACTION OR PROCEEDING ARISING OUT OF OR RELATING TO THIS PRIVACY POLICY OR THE TRANSACTIONS CONTEMPLATED HEREBY. THIS WAIVER APPLIES TO ANY ACTION WHETHER SOUNDING IN CONTRACT, TORT, OR OTHERWISE.