MixRank Privacy Policy

Online Media Group, Inc (d/b/a MixRank), together with its subsidiaries and affiliates ("MixRank", "we", "us", "our") is a Data-as-a-Service (DaaS) company that specializes in providing data products and subscriptions, Data APIs, and web-platform offerings (collectively, the "Services") to our customers. Our solutions empower businesses to build sales & marketing solutions, recruitment & ATS platforms, enhance their own sales or recruitment processes, and/or make data-driven investment decisions. We are committed to delivering world-class data that allows our customers to drive meaningful results.

At MixRank, we value the trust you place in us by choosing to use our services. As such, we are dedicated to safeguarding the privacy and security of your personal information. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy regulations.

This Privacy Policy applies to all users of MixRank's website at mixrank.com (the "Site"), applications, and services, as well as any interactions you may have with us through email, phone, or other communication channels. This Privacy Policy is a notice describing our practices, not a contract. Our contractual commitments to customers are set out in our agreements with them.

As a Data Controller: MixRank acts as a data controller when collecting and using information about visitors to our Site, and for creating and maintaining our Professional Records and providing our Services. To contact MixRank's Privacy Team, please email privacy@mixrank.com.

As a Data Processor: When using our Services, our customers act as data controllers and are responsible for ensuring lawful processing of personal information. MixRank acts as a data processor, receiving personal information as an agent of our customers for processing only as instructed by our customers. Our customers are solely responsible for determining the use of our Services and ensuring that all legal requirements for processing personal information through our Services have been met. MixRank's obligations for personal information as a data processor are defined in our agreements with our customers, including our Data Processing Addendum, and not covered in this Policy. In certain cases, MixRank may act as an independent controller of personal information when customers agree to contribute data to our database.

"Personal Data" refers to information that can be directly or indirectly connected to, associated with, or reasonably linked to a specific individual. We may collect additional Personal Data not explicitly listed here, which we will use according to this Privacy Policy or as disclosed during the time of collection.

MixRank creates profiles for business professionals and companies, known as "Professional Records" and "Company Records," respectively. Upon collecting data about an individual or company, we may combine multiple data points related to a single person or company into a Professional or Company Record. The resulting directory of Professional and Company Records (the "Directory") is then made accessible to users of the Site, as well as our customers and strategic partners. A Professional Record may contain information such as name, email addresses (including business and other addresses like Gmail, Yahoo, Hotmail, etc.), job title and department, phone numbers, company name, company postal address, and business-related individual postal address, employment history, and education history. A Professional Record may also include links to articles by, about, or quoting an individual, and links to an individual's social media profiles.

MixRank acquires data for the Directory in several ways, including:

• Scanning the web and collecting publicly available information using our search technology.
• Licensing information from other companies.
• Receiving information about themselves or others from our users and customers.
• Conducting market research surveys and other research by our in-house research team.

A. Customer Information

We may collect the following Customer Information from or about our customers: (1) User Information - personal contact details of users of the Services; (2) Uploaded Information - information uploaded or otherwise provided to our system by a user of the Services; (3) Usage Logs - usage data of the Site and Services, including logins, actions taken, timestamps, IP addresses, and other data; and (4) Related Information - any other information related to users of our Services.

Some users may access the Site through their company's license agreement, allowing specific users to have global rights to access all information of every user connected to that company's MixRank account. Concerns or questions about the access rights of other individuals in your company should be directed to your company.

Customer Information may be used for MixRank's legitimate business interests, including responding to user inquiries, fulfilling user requests, completing transactions, providing customer service, sending administrative information, and personalizing user experience on the Site. We may use Customer Information to understand our users, develop, improve, test, and enhance our Services and Site, and to contact customers or their users about services, promotions, opportunities, and other general information about MixRank. We may also use Customer Information to investigate and prosecute potential breaches of MixRank's security or license agreements.

MixRank will not disclose Customer Information to any third party, except in connection with legitimate uses outlined in this Policy, in relation to a bona fide legal dispute where such information is relevant, in response to valid and compulsory legal process, in response to a valid data subject request where required by applicable law, or as otherwise required by law. MixRank will strive to obtain confidentiality agreements from any service providers who receive Customer Information and ensure they commit to implementing appropriate technological security measures.

MixRank employs reasonable security and backup procedures to protect Customer Information. We encourage users to keep copies of all Uploaded Information on their own systems.

B. Other Ways MixRank Collects Information

• Information submitted through our Site: Site visitors can choose to submit their name, email address, phone number, and other information to learn more about our Services or apply for job positions at MixRank. By accessing, using, and/or submitting information through the Site, including filling out forms on our website, users are informed of the practices described in this Policy concerning the information collected about them. Users may block, delete, or disable cookies or web beacons to the extent permitted by their browsers and devices, but doing so may limit the performance of certain features of the website or cause it not to work at all.
• Managing Professional Profiles: MixRank allows any person to claim their Professional Profile and update the information listed about them. We use the submitted information solely to verify the person's identity, update their Professional Profile, and honor their privacy preferences. For additional information, see the "Your Rights And Choices" section below.
• Use of our Services: To use certain MixRank Services, users may need to register. Occasionally, we may use a user's email address to send information about our products and services. Recipients can opt out of receiving such emails. We may also communicate with users regarding their use of our Services or Site, including changes to this Policy.
• Providing information to our customers: We receive information about our customers' end-users from or on behalf of our customers. This information typically includes names, contact information, and company details such as company names. Any information provided through a website, application, or service where a customer uses our Services is subject to the customer's privacy policy and applicable terms. When we provide our Services to a customer, we generally act as a "data processor," and the customer is considered the "data controller," as further described in the "As a Data Controller" and "As a Data Processor" sections above.
• Purchasing our Products and Services: Purchasers of our online subscription-based Services may need to provide credit card or other payment information. We use that information solely for fulfilling the purchase request. We store credit card or other payment information in encrypted form and do not sell, share, or use it again without prior consent, except as described in the sections below on "Disclosures to Service Providers," "Disclosures for Legal Reasons," and "Asset Transfer or Company Acquisition."
• From our affiliates: MixRank may obtain personal information from our affiliates, such as our current and future parents, subsidiaries, or other companies under common control and ownership with MixRank. We may use this information to enhance the information we already maintain, improve the accuracy of our records, and for other purposes described in this Policy.
• From third parties: MixRank may obtain personal information from third-party sources, such as our service providers and strategic partners. We may use this information to enhance the information we already maintain, improve the accuracy of our records, and for other purposes described in this Policy.
• Creation of aggregated information: MixRank may aggregate collected information about our users in a form that does not allow users to be personally identified. We do this to understand our customer base and enhance the Site and the Services we and our strategic partners and customers can provide you.
• Automated information collection: Whenever you use the MixRank website or our Services, we automatically receive and record information in our server logs from your browser, which may include your IP address, information about your web cookies, and the page or feature you interacted with. Cookies are web identifiers we, and other services, transfer to your browser to recognize your browser when you visit our site.

We use cookies and similar technologies on the Site to keep you signed in, remember preferences, secure the Site, and understand how the Site is used. These include cookies that are strictly necessary for the Site to function, and analytics cookies that help us measure and improve Site performance. We do not use cookies to serve third-party advertising, and we do not disclose cookie-derived data to third parties for cross-context behavioral advertising.

You can control cookies through your browser settings, including blocking or deleting them; doing so may limit some features of the Site. Where required by law, we will request your consent before setting non-essential cookies. For information about opt-out preference signals such as Global Privacy Control, see "Your California Privacy Rights" below.

In addition to the purposes described in the previous section, MixRank may also use Directory information and/or Personal Data for one or more of the following purposes:

• Enhance and maintain the Services.
• Update, verify, and maintain Directory information and other data provided through the MixRank website or other methods outlined in this Policy.
• Provide Services, process transactions, and send related information, such as communications and invoices.
• Send technical notices, support messages, security alerts, and administrative communications.
• Provide customer support and address inquiries and requests.
• Create MixRank accounts and authenticate users accessing their accounts.
• Communicate about MixRank's products and services.
• Monitor and analyze usage trends and activities related to the Services.
• Detect, investigate, and prevent fraudulent and illegal activities.
• Protect the rights and property of MixRank, our customers, and other parties.
• Personalize and enhance the user experience on the MixRank website.
• Notify users of significant changes to the Services, including updates to this Privacy Policy.
• Consider potential employment candidates for MixRank and communicate about job opportunities or submitted applications.
• Respond to requests from individuals to access, correct, or delete their information or exercise other rights related to their information under applicable law.
• Generate aggregated statistical data, inferred non-personal data, or anonymized or pseudonymized data (rendered non-personal and non-identifiable), which MixRank or our business partners or customers may use to provide and improve our respective services.
• Fulfill our contractual and legal obligations, resolve disputes with users, and enforce our agreements.
• Address any other purpose outlined at the time the information was collected.

Where the GDPR, UK GDPR, or Swiss data protection law applies, we process Personal Data on the following legal bases:

• Legitimate interests (Article 6(1)(f)): We compile and license the Directory in reliance on our legitimate interests, and those of our customers, in making accurate, business-relevant professional information available for legitimate commercial purposes such as sales, marketing, recruiting, and investment research. The Directory is limited to professional and business-related information; we have assessed that this processing does not override the interests, rights, and freedoms of the individuals concerned, taking into account the business context of the data, the safeguards described in this Policy, and the rights available to individuals, including the rights to object and to erasure described below. We also rely on legitimate interests to secure and improve the Services and to prevent fraud and abuse.
• Performance of a contract (Article 6(1)(b)): We process account, billing, and support information as necessary to provide the Services to our customers and users.
• Legal obligation (Article 6(1)(c)): We process Personal Data where necessary to comply with legal requirements, including responding to data subject requests and lawful requests from authorities.
• Consent (Article 6(1)(a)): Where we rely on consent (for example, for non-essential cookies where required) you may withdraw it at any time.

Where we process Personal Data that we did not collect from you directly, the categories of data, the sources, and the purposes are described in the "Information We Collect" and "How We Use Your Information" sections of this Policy.

In addition to the specific situations discussed elsewhere in this Privacy Policy or at the point of collection, MixRank may share your Personal Data with the entities or individuals set forth below.

• Disclosures of Directory Records: We may make any Directory information that our users contribute for inclusion in our Directory, collected from public web sources, collected through market research surveys and phone interviews conducted by our in-house research team, licensed from third parties, or otherwise collected as described in this Policy available to users of the Site, our strategic partners, and our customers. Information provided, including Directory information, in creating or updating a Professional Record, will be included in the Directory and thus can be viewed by third parties.
• Disclosures to Affiliates: We may share Personal Data with our affiliates who may act for us for any of the purposes set out in this Privacy Policy, including our current and future parents, subsidiaries, and other companies under common control and ownership with MixRank.
• Asset Transfer or Company Acquisition: We may choose to buy or sell assets, and may share and/or transfer customer and other user information in connection with the evaluation of and entry into such transactions. Also, if we (or our assets) are acquired, merged, reorganized, or if we go out of business, enter bankruptcy, or go through some other change of control or similar event, you acknowledge that Personal Information could be one of the assets transferred to or acquired by a third party.
• Disclosures to Service Providers: We employ other companies and individuals to perform tasks on our behalf and need to share your information with them to provide products or services to you; for example: data storage services; marketing services; and payment processing companies to receive and process your financial transactions for us.
• Disclosures for Legal Reasons: Regardless of any choices you make regarding your Personal Data (as described in the "Your Rights and Choices" section), MixRank may disclose your Personal Data if it believes in good faith that such disclosure is necessary (i) to comply with lawful requests, subpoenas, search warrants, or orders by public authorities, including meeting national security or law enforcement requirements; (ii) to address a violation of the law; (iii) to protect the rights, property, or safety of MixRank, its users, or the public; (iv) to allow MixRank to exercise its legal rights or respond to a legal claim; or (v) to respond to data subject requests for access to data to the extent necessary to comply with applicable laws.

We will keep your Personal Data, including sensitive Personal Data, for as long as necessary to fulfill the purpose of collection. This includes meeting legal, accounting, or reporting requirements, defending legal claims, preventing fraud, and meeting our legal obligations. Copies of your information may be included in backups to protect our Services. Backup copies are deleted in the ordinary course of our backup rotation cycles and remain protected by the safeguards described in this Policy until deleted. When determining the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, as well as the potential risk of unauthorized use or disclosure, and the applicable legal requirements.

We follow industry standards to protect the information submitted to us during transmission and storage. However, no Internet transmission or electronic storage method is entirely secure. While we aim to use commercially acceptable means to protect information, we cannot guarantee its absolute security.

As a user of our services, you have certain rights concerning your personal information. We respect and uphold these rights in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This section outlines your rights and how you can exercise them.

• Right to Access: You have the right to request access to the personal information we hold about you. Upon request, we will provide you with a copy of your personal data in a commonly used electronic format.
• Right to Rectification: If you believe that any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent for processing (if applicable).
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal information under certain circumstances, such as when you contest the accuracy of the data or when you have objected to the processing.
• Right to Object: You have the right to object to the processing of your personal information based on legitimate interests, or for direct marketing purposes.
• Right to Data Portability: You have the right to request that we provide you with your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another organization without hindrance from us.
• Right to Withdraw Consent: If we process your personal information based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• U.S. State Privacy Rights: If you are a resident of California or another U.S. state with a comprehensive privacy law, you have additional rights described in "Your California Privacy Rights" and "Additional U.S. State Privacy Rights" below.

To exercise any of your rights, please visit our web portal at https://mixrank.com/privacy-request or contact us at privacy@mixrank.com. We will respond to your request within a reasonable timeframe, and in accordance with any applicable laws.

Please note that we may need to verify your identity before processing your request. In some cases, we may also be unable to fulfill your request due to legal obligations or other legitimate reasons. If this occurs, we will inform you of the reasons for not complying with your request.

This section applies to California residents and supplements the rest of this Policy.

Categories of Personal Information. In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA), from the sources and for the purposes described in this Policy:

Sales of Personal Information. MixRank licenses the Directory to customers and strategic partners. Under the CCPA's broad definition, this constitutes a "sale" of the Directory categories identified above. We do not sell Customer Information, Usage Logs, or payment information. We do not "share" personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes requiring a right to limit under the CCPA. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Right to Opt Out of Sale. You may direct us not to sell your personal information at any time by submitting a request through our portal at https://mixrank.com/privacy-request ("Do Not Sell or Share My Personal Information") or by emailing privacy@mixrank.com. We honor opt-out preference signals, including Global Privacy Control (GPC), as valid requests to opt out of sale for the associated browser or device.

Data Broker Registration and DROP. MixRank is registered as a data broker with the California Privacy Protection Agency. In addition to the portal above, California residents may submit a single deletion request to all registered data brokers through the CPPA's Delete Request and Opt-Out Platform (DROP) at https://cppa.ca.gov. We access and process DROP deletion requests as required by the Delete Act.

Other California Rights. You have the rights to know/access, correct, and delete personal information, subject to legal exceptions; the right to opt out of sale (above); and the right not to receive discriminatory treatment for exercising your rights. We do not offer financial incentives in exchange for personal information. You may designate an authorized agent to submit requests on your behalf; we may require proof of the agent's authority and verification of your identity. We will verify requests using the information reasonably necessary for the type of request, and will explain the reason if we cannot fulfill a request.

Request Metrics. Our request-handling metrics for the prior calendar year appear in the "CCPA Request Metrics" section below.

If you reside in another U.S. state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Texas, Oregon, and others), you may have similar rights, including the rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling. We honor these rights through the same channels: our portal at https://mixrank.com/privacy-request or privacy@mixrank.com. We do not engage in targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.

Appeals. If we decline to act on your request, you may appeal our decision within a reasonable period by replying to our response or emailing privacy@mixrank.com with the subject line "Privacy Request Appeal." We will respond to appeals within the timeframe required by your state's law. If your appeal is unsuccessful, you may contact your state Attorney General or data protection authority.

Privacy laws in other jurisdictions (including, where applicable, the United Kingdom, Brazil, Canada, Australia, Japan, and India) may grant you rights similar to those described in this Policy, such as rights to access, correct, delete, or object to the processing of your personal information. As a matter of practice, we extend the core rights described in "Your Rights and Choices" to all individuals, regardless of where they live. You may exercise them through our portal at https://mixrank.com/privacy-request or by emailing privacy@mixrank.com, and we will honor your request in accordance with the laws that apply to you. If you believe your local law grants you a right we have not honored, contact us and we will review your request under that law.

A. Legal Basis for Transfers

MixRank is committed to protecting your personal data and complying with international data transfer regulations. Our data center facilities are based in the United States, which is outside the European Economic Area (EEA), Switzerland, and the United Kingdom. In order to facilitate the transfer of personal data to and from countries outside the EEA, Switzerland, and the UK, MixRank relies on legal mechanisms that have been recognized by the relevant data protection authorities as providing an adequate level of protection for personal data.

B. Data Transfer Mechanisms

• Standard Contractual Clauses: MixRank primarily relies on the Standard Contractual Clauses (SCCs) approved by the European Commission, which ensure that personal data transferred from the EEA, Switzerland, or the UK to third countries, including the United States, is adequately protected. These clauses are included in our agreements with vendors and customers that process personal data on our behalf, providing a contractual obligation for both parties to adhere to data protection standards equivalent to those required by European, Swiss, or UK data protection law.
• Other Legal Mechanisms: In some cases, MixRank may rely on other legally recognized mechanisms for data transfers, such as Binding Corporate Rules (BCRs), codes of conduct, certification mechanisms, or other suitable legal bases, where recognized under applicable data protection law, depending on the specific circumstances of the data transfer.
• Derogations: In certain situations, MixRank may use derogations provided under the applicable data protection laws, such as contractual necessity derogation, when no other mechanism is applicable for processing personal data. This may be used, for example, when the transfer of personal data is necessary for the performance of a contract between MixRank and a customer, or for the implementation of pre-contractual measures taken at the request of the data subject. MixRank will use derogations only when appropriate and in accordance with the requirements of the relevant data protection laws.

Where we transfer personal data internationally, your personal data may be transferred to and processed in countries outside the EEA, Switzerland, or the UK, including the United States, in accordance with the data transfer mechanisms outlined in this section.

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

• Switzerland
• European Union (EU)
• United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/18988180505

Services are not intended for use by individuals under the age of 16. We do not knowingly collect or use any information from individuals under 16 years of age. If we become aware that we have inadvertently collected such information, we will promptly delete it. If you believe that we may have collected information from a child under 16, please contact us at privacy@mixrank.com so that we can promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our data practices. We will notify you of any material changes to this Policy by posting a notice on our website or sending an email to the email address associated with your account, before the changes become effective. We encourage you to review this Policy periodically to stay informed about our data practices. Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acceptance of the updated Privacy Policy.

A. Privacy Team

MixRank maintains a dedicated Privacy Team responsible for the appropriate handling of personal data and compliance with relevant data protection regulations. If you have any questions, concerns, or requests regarding our Privacy Policy, the processing of your personal data, or your rights under data protection laws, you may contact our DPO at:

Privacy Team, Online Media Group, Inc (d/b/a MixRank), 51 Moraga Way, Suite 2, Orinda, CA 94563. Email: privacy@mixrank.com

B. Contact Details for Inquiries and Complaints

If you have any inquiries or complaints about our Privacy Policy, data protection practices, or if you wish to exercise your rights as a data subject, you may contact us using the following details:

Online Media Group, Inc (d/b/a MixRank), Attn: Privacy Team, 51 Moraga Way, Suite 2, Orinda, CA 94563. Email: privacy@mixrank.com

We are committed to addressing your concerns and will make every effort to resolve any issues in a timely and efficient manner. However, if you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.