Effective Date: April 1, 2026 Last Updated: April 1, 2026

This Privacy Policy describes how Propel Business Services Corp ("Propel," "we," "us," or "our") collects, uses, discloses, and protects information about visitors to www.propelbusinessservices.com (the "Website") and users of our client portal (the "Portal"). By using the Website or Portal, you agree to the practices described in this Privacy Policy.

We collect information in the following ways:

• Contact Information: Name, email address, phone number, business name, and mailing address when you contact us, request information, or sign up for services.
• Account Information: Username, password, and profile details when you create an account on our client portal.
• Payment Information: When you make payments through our Website, payment card details are collected and processed by our payment processor, Stripe, Inc. We do not store full credit card numbers on our servers. See Section 4 for more information about Stripe.
• Communications: Information you include in messages, support requests, or other communications with us.

When you visit our Website, we automatically collect certain information about your device and browsing activity:

• Device and Browser Information: IP address, browser type, operating system, device type, screen resolution, and language preferences.
• Usage Data: Pages visited, time spent on pages, referring website addresses, click activity, and other browsing behavior.
• Cookies and Similar Technologies: We use cookies, pixels, and similar tracking technologies to operate the Website and understand how it is used. See Section 5 for details.

• Google Analytics: We use Google Analytics to understand how visitors interact with our Website. Google Analytics may collect information such as your IP address (typically anonymized), pages visited, and time spent on the Website.

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Website, Portal, and services
• To process payments and complete transactions
• To respond to inquiries, provide customer support, and communicate with you about our services
• To authenticate users and secure access to the client portal
• To analyze Website usage and improve our content, features, and user experience
• To detect, prevent, and address technical issues, fraud, or unauthorized access
• To comply with legal obligations and enforce our Terms of Service

We do not sell your personal information.

We may share your information in the following circumstances:

We share information with trusted third-party service providers who perform services on our behalf, including:

• Stripe, Inc. — payment processing
• Google LLC — website analytics (Google Analytics)
• Web hosting and infrastructure providers
• Email service providers (for transactional emails such as account notifications)

These providers are contractually obligated to use your information only to perform services for us and to protect it appropriately.

We may disclose information when required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud or security issues.

If Propel is involved in a merger, acquisition, sale of assets, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

We may share your information for any other purpose with your consent.

Payments made through our Website are processed by Stripe, Inc. When you submit payment information, it is transmitted directly to Stripe over an encrypted connection. Stripe is responsible for the security and processing of your payment information in accordance with their own privacy policy and security standards (including PCI-DSS compliance).

We do not store your full credit card number, CVV, or other sensitive payment credentials on our servers. We may receive limited information from Stripe such as the last four digits of your card, card brand, expiration date, and transaction status.

For more information about how Stripe handles your data, please see Stripe's Privacy Policy at https://stripe.com/privacy.

We use cookies and similar tracking technologies to operate the Website, remember your preferences, authenticate users on the Portal, and analyze how the Website is used.

• Strictly Necessary Cookies: Required for the Website and Portal to function, including authentication and session management.
• Analytics Cookies: Used by Google Analytics to collect information about how visitors use the Website. This data is aggregated and helps us improve the user experience.
• Functional Cookies: Remember your preferences and settings.

Most web browsers allow you to control cookies through browser settings. You can typically choose to block, delete, or be notified about cookies. Please note that disabling cookies may affect the functionality of the Website and Portal, including your ability to log in.

You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-Out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

Some browsers offer a "Do Not Track" (DNT) signal. We do not currently respond to DNT signals because no industry standard has been adopted.

We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These include encrypted connections (TLS/SSL), secure authentication, access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your portal login credentials.

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it.

Specific retention periods vary depending on the type of data:

• Account information: Retained while your account is active and for a reasonable period afterward
• Transaction records: Retained as required by tax, accounting, and other legal obligations (typically 7 years)
• Analytics data: Retained according to Google Analytics' default retention settings
• Communications: Retained as needed to respond to inquiries and maintain service records

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights regarding your personal information:

You have the right to request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which the personal information was collected
• The business or commercial purpose for collecting the information
• The categories of third parties with whom we share personal information
• The specific pieces of personal information we have collected about you

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as information required to complete a transaction, comply with legal obligations, or detect security incidents).

You have the right to request that we correct inaccurate personal information we maintain about you.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising purposes.

We do not use sensitive personal information for purposes that would require us to offer this right.

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge you different prices, or provide a different level or quality of services solely because you exercised your privacy rights.

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email, phone number, IP address, account username
• Customer Records: Billing address, payment information (handled by Stripe)
• Commercial Information: Services purchased, transaction history
• Internet Activity: Browsing history, search history, and information regarding interaction with our Website
• Geolocation Data: Approximate location based on IP address
• Professional Information: Business name, job title (when provided)

We collect this information from you directly, automatically through your use of the Website, and from third-party service providers (such as analytics providers).

To exercise your CCPA rights, please contact us using the information in Section 12. We will verify your request before processing it, which may include asking you to confirm information we already have on file. You may also designate an authorized agent to make a request on your behalf, subject to verification.

We will respond to verifiable requests within 45 days. If we need more time, we will inform you of the reason and extension period.

The Website and Portal are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete it.

Our Website may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and may provide additional notice (such as a banner on the Website or an email notification).

Your continued use of the Website or Portal after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Propel Business Services Corp: 5673 W Las Positas Blvd, Ste 202 Pleasanton, CA 94588

Email: privacy@propelbsc.com Phone: (925) 365-6526

For California residents exercising CCPA rights, please include "California Privacy Rights Request" in the subject line of your email.

This Privacy Policy was last updated on April 1, 2026.