Privacy Policy

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy describes how we may collect and use your personal information when you use our products and services, including those offered through our websites, communications (including without limitation phone calls, texts, chatbots and emails), and mobile applications (collectively, the "Service"). The terms "we", "us", "BMH" and "ByMyHonor" refer to: (i) ByMyHonor Inc., a Delaware corporation with its headquarters in Orange Park, Florida, unless you are a European Resident; Capitalized terms not defined in this Privacy Policy have the same meaning as defined in ByMyHonor's Terms of Service.

2. THE SERVICE

As additionally detailed below, we process your personal information for various purposes related to the Service, including, but not limited to, providing the Service's functionality, fulfilling your requests, improving the Service, conducting research and analysis relating to the Service, personalizing your experience, monitoring usage of the Service, providing feedback to businesses listed on the Service, displaying advertising, providing customer support, communicating with you, maintaining system and data backups, enhancing the security of the Service, and complying with legal obligations.

3. DATA YOU SHARE WITH US

When you use our Service, we may collect and use personal information that you share with us as described below.

4. DATA WE COLLECT FROM YOUR USE OF OUR SERVICE

We collect personal information in connection with your use of the Service as described below.

5. DATA WE COLLECT FROM THIRD PARTIES

In order to better provide our Service, we may collect personal information about you from third parties as described below.

6. DATA WE SHARE WITH THIRD PARTIES

We may share personal information about you as described below.

7. MANAGING YOUR PERSONAL INFORMATION

Be mindful that visitors to the Service may be able to identify you, or associate you with your account, if you choose to include personal information in the content you post publicly. Your Honor Score and Validation Score becomes public information once you join ByMyHonor. ByMyHonor users can also use the search feature to find one another based on their names, account numbers or email addresses. Please also note that the messages you send or receive using the Service are only private to the extent that both you and the recipient(s) of your messages keep them private.

You may access and update certain personal information through your account settings. Specifically, you may:

• Update your profile information (name, photo, location, etc.)
• Manage your notification preferences
• Request deletion of your account and associated data
• Request a copy of your personal data (data portability)
• Opt out of targeted advertising
• Manage your privacy settings, including profile visibility and search discoverability

8. ARTIFICIAL INTELLIGENCE

We may use machine learning and other artificial intelligence (AI) technologies ("AI Technologies") to provide and improve our Service. For example, we may use such AI Technologies to analyze and process your contributions and interactions to provide you with personalized experiences, content recommendations, and relevant information based on your activity on ByMyHonor; develop new products and features; train or fine-tune AI models; provide interactive services such as AI powered chats, virtual assistants, and automated answering services for tasks and to help identify content that may violate our Content Guidelines and/or Terms of Service.

ByMyHonor does not train generative AI models on your personal information without your explicit consent. Any AI-assisted features within the Service process your data only to provide you with the requested functionality and do not use your data to train or improve AI models unless you have opted in to such use.

Where AI Technologies make or contribute to decisions that significantly affect you (e.g., automated content moderation, Validation Level determinations, or Honor Score calculations), you have the right to request human review of such decisions. Contact us at the address in Section 12 to request human review of any automated decision that affects you.

9. ACCOUNT CLOSURE AND DATA RETENTION

Information on how to close your account is available on the user account settings tab. When you close your account, we remove certain public posts from view and/or dissociate them from your account profile, but may retain information about you for the purposes authorized under this Privacy Policy and consistent with our data retention policy, unless prohibited by law. You can request that we delete personal information associated with your account.

Important: Honor Note and Account Deletion Timeline. When you request deletion of your account or an Honor Note, the deletion process does not occur instantaneously. Instead, ByMyHonor initiates a mandatory seven (7) year countdown period from the date the deletion request is activated. During this period, your account and/or Honor Note will be marked as "pending deletion" and will no longer be publicly visible. After the seven-year countdown period expires, the data is permanently and irreversibly deleted from our systems, including all backups and archives. This extended retention period exists because:

• Honor Notes are permanent public records of character and trustworthiness that may have legal significance for the individuals involved.
• The seven-year period ensures compliance with applicable statutes of limitations and legal hold requirements.
• It protects against fraudulent or coerced deletion requests that could be used to erase negative but truthful records.

During the seven-year countdown, you may cancel the deletion request at any time through your account settings. ByMyHonor retains information for as long as reasonably necessary for the purposes for which it was collected, or as otherwise permitted or required by law. Specific retention periods include:

• Account data: Retained for the life of your account plus seven (7) years after deletion.
• Validation documents: Retained for the life of your account plus seven (7) years after deletion.
• Transaction records: Retained for seven (7) years after the transaction date, consistent with financial record-keeping requirements.
• Access logs (Secure Information): Retained for two (2) years from the date of the access event.
• Support tickets: Retained for three (3) years after resolution.
• Cookies and tracking data: Deleted within thirty (30) days of account closure unless required for legal compliance.

10. CHILDREN

ByMyHonor does not knowingly collect personal information from children, and our Service is not directed to children. Access or use of the Service by anyone under the age of 18 is not allowed. Please contact us by email to report the impermissible use of ByMyHonor Services by children. If we become aware that a child under 18, or under the applicable age of consent, has provided us with personal information without parental consent, we will take steps to remove such information and terminate the child's account.

11. SECURITY

We use various safeguards to protect the personal information ByMyHonor processes, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication mechanisms, including secondary passcode protection for sensitive administrative areas
• Regular security assessments and penetration testing
• Employee training on data protection and security practices
• Incident response procedures

However, no method of transmission over the internet or via mobile device, or method of electronic storage, is completely secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Breach Notification. In the event of a data breach that compromises the security, confidentiality, or integrity of your personal information, ByMyHonor will:

• Notify affected individuals within seventy-two (72) hours of discovering the breach, or as soon as reasonably practicable.
• Provide a clear description of the breach, including what information was affected, what we are doing in response, and what steps you can take to protect yourself.
• Notify relevant regulatory authorities as required by applicable law, including within 72 hours for EU/EEA residents under the GDPR.
• Implement corrective measures to prevent similar breaches in the future and document the incident for review.

12. HOW TO CONTACT US

You may contact us online concerning our Privacy Policy, or write to us at the relevant address based on your jurisdiction:

Data Protection Officer (DPO). ByMyHonor has appointed a Data Protection Officer who can be reached at:

For security purposes, we may take such steps as we deem necessary to confirm your identity before completing your request or sharing any personal information with you.

13. MODIFICATIONS

We may modify this Privacy Policy from time to time. The current version of the Privacy Policy will govern our collection, use, and disclosure of information about you. If we make material changes to this Privacy Policy, we will notify you by email and/or by posting a notice on the Service prior to or on the effective date of the changes. By continuing to access or use the Service after those changes become effective, you acknowledge the revised Privacy Policy.

14. UNITED STATES RESIDENTS: YOUR PRIVACY RIGHTS

ByMyHonor does not sell your personal information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, we do not offer financial incentives associated with our collection, use, or disclosure of your personal information. ByMyHonor does not knowingly sell or share the personal information of consumers under 18 years of age.

Residents of certain states may have additional rights around ByMyHonor's collection, use, and sharing of their personal information, including rights to access, correct, delete, port, and opt out of targeted advertising and sale of personal data. Information on state-specific privacy rights for California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), and Utah (UCPA) residents is available in ByMyHonor's U.S. State Privacy Rights Notice.

We do not disclose your personal information to third parties for the purpose of directly marketing their goods or services to you unless you request such disclosure.

ByMyHonor may engage in "targeted advertising" as that term is defined by applicable law. Residents of certain states have the right to opt-out of targeted behavioral advertising, which you can do on your user profile settings tab. We also recognize Global Privacy Control opt-out signals enabled through your browser in states where we are required to do so by law.

A more detailed description of the information ByMyHonor collects and how we use it is provided above in Section 3 (Data You Share With Us).

Section 6 (Data We Share With Third Parties) describes the categories of third parties with whom we share personal information, and what information may be shared under different circumstances.

California Residents (CCPA/CPRA): You have the right to know, delete, correct, opt-out of sale/sharing, and limit use of sensitive personal information. We will not discriminate against you for exercising these rights.

Colorado, Connecticut, and Virginia Residents (CPA/CTDPA/VCDPA): You have the right to access, correct, delete, and port your personal data. You may also opt out of targeted advertising, sale, and profiling that produces legal or similarly significant effects. You have the right to appeal a decision regarding a privacy request.

Utah Residents (UCPA): You have the right to access, delete, and port your personal data. You may also opt out of targeted advertising and sale of personal data.

To exercise any of these rights, contact us at privacy@bymyhonor.com or submit a request through your account settings. For full details on each state's specific rights, verification procedures, authorized agents, and appeals process, please refer to our U.S. State Privacy Rights Notice.

15. EUROPEAN RESIDENTS: YOUR PRIVACY RIGHTS

If you are a European Resident, you have the right to access your personal data, and the right to request that we correct, update, or delete your personal data. You can object to the processing of your personal information, ask us to restrict processing of your personal information, and request portability of your personal information.

Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. The Service generally provides you with a reasonable means to view and change your profile information and you can opt-out of marketing communications at any time by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you or in your account settings. If you have any questions or comments about the processing of your personal information, you may contact us as described in Section 12 (How to Contact Us).

For European Residents, please note that the personal information we obtain from or about you may be transferred, processed, and stored outside of the EEA, UK, or Switzerland for the purposes described in this Privacy Policy, including in the United States of America.

We take the privacy of our users seriously and therefore take steps to safeguard your information, including ensuring an adequate level of data protection standards in effect as of the date of this Privacy Policy. These steps include use of Standard Contractual Clauses for transfers of personal information between our group companies, which require all group companies to protect European Residents' personal information in accordance with applicable data protection laws. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

For European Residents, our legal basis for collecting and using the information described in Section 3 of this Privacy Policy (Data You Share With Us) will depend on the specific information concerned and the context in which we collect it. We, however, will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person (for instance, to prevent, investigate, or identify possible wrongdoing in connection with the Service or to comply with legal obligations or to ensure you are the person you claim to be). If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). ByMyHonor does not train generative AI models using the personal information of European Residents.

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will typically be to operate our Services, communicate with you in relation to our Services, or for our other legitimate commercial interests, for instance, when responding to your queries, to analyze and improve our platform, engage in marketing, or for the purposes of detecting or preventing fraud. ByMyHonor's legitimate interests also include displaying information about professionals—including sole traders—non-profits and government agencies to allow users to share their experiences and to help consumers make informed decisions. Consumer experiences are a matter of public interest, and consumers themselves have guaranteed rights to information and to exercise their freedom of speech, including through the Service. Additionally, ByMyHonor has a legitimate interest in its own freedom of expression, and in processing information to detect and prevent fraud on the Service.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at the address listed above in Section 12.

Right to Complain to a Supervisory Authority. If you believe that ByMyHonor's processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, your place of work, or the place of the alleged infringement. We encourage you to contact us first at privacy@bymyhonor.com so that we can try to resolve your complaint directly before you lodge it with a supervisory authority.

16. QUEBEC RESIDENTS: YOUR PRIVACY RIGHTS

If you are a resident of Quebec, Canada, you have specific rights under the Act Respecting the Protection of Personal Information in the Private Sector (Law 25). ByMyHonor is committed to complying with Law 25 and provides you with the following rights:

• Right to Access: You have the right to access the personal information we hold about you and to obtain a list of third parties to whom we have disclosed that information.
• Right to Rectification: You have the right to request the correction of any personal information we hold about you that is inaccurate, incomplete, or ambiguous.
• Right to Data Portability: You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit this information to another organization, where technically feasible.
• Right to Deletion: You have the right to request the deletion of your personal information, subject to our legal retention obligations.
• Right to De-Indexation: You have the right to request the de-indexation of any personal information concerning you that is the subject of a dissemination request, where such de-indexation does not conflict with the freedom of expression and information.
• Right to Be Informed: You have the right to be informed of any incident involving your personal information that could result in a significant risk of serious injury, and to be informed of the third parties to whom your personal information has been disclosed.

Privacy Officer. ByMyHonor has designated a Privacy Officer responsible for ensuring compliance with Law 25. You may contact our Privacy Officer at:

Consent and Withdrawal. You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. We will inform you of the implications of withdrawal of consent.

Automated Decision Making. ByMyHonor may use automated decision-making processes (e.g., for content moderation, Validation Level determinations, or Honor Score calculations). You have the right to be informed of any automated decision-making and to request that such a decision be reconsidered. Contact us at privacy@bymyhonor.com to exercise this right.

Complaints. If you believe that ByMyHonor has not complied with Law 25, you may file a complaint with the Commission d'accès à l'information (CAI) at: www.cai.gouv.qc.ca.

17. BYMYHONOR PLATFORM-SPECIFIC DISCLOSURES

This section provides additional disclosures specific to ByMyHonor's platform features and how they affect your privacy.

Validation Process and Identity Verification

ByMyHonor operates a multi-tier Validation System that allows users to earn a publicly displayed Validation Level badge on their profile. The Validation System is designed to verify the identity and trustworthiness of users and includes the following tiers:

• Basic Validation (1 star): Initial identity verification level.
• Verified Validation (3 stars): Enhanced verification with additional document review.
• Trusted Validation (5 stars): The highest level of identity verification.

To request a Validation Level, you may be asked to submit the following types of documents through the Validation Board:

• Government-issued identification documents (e.g., driver's license, passport, national ID card)
• Selfie photographs for facial comparison
• Video recordings for liveness detection and identity confirmation
• Responses to a validation questionnaire

How validation data is processed: Validation submissions are stored securely with encryption at rest and are accessible only to authorized ByMyHonor administrators performing verification review. Your submitted documents are never shared publicly — only your resulting Validation Level badge (including star rating and tier label) is displayed on your profile. We may share validation documents with third-party identity verification service providers solely to assist in confirming document authenticity; these providers are contractually prohibited from using your data for any other purpose.

Validation retention: Validation documents are retained for the duration your account remains active and for up to seven (7) years after account closure, consistent with our data retention policy. If your validation request is rejected, ByMyHonor may retain the rejection reason and associated metadata for dispute resolution purposes. You may request re-evaluation or withdrawal of your validation submission at any time by contacting support.

Secure Information Hub

ByMyHonor provides a Secure Information hub that allows authorized administrators to manage sensitive account data through a secondary passcode-protected interface. The Secure Information hub includes the following sections:

• Fields Table: Detailed personal information fields that are not displayed publicly.
• Private Video: Video content that is restricted to authorized administrator access only.
• Passcode Management: Configuration of secondary authentication credentials for the hub.

Access controls: The Secure Information hub is protected by secondary passcode authentication in addition to standard administrator login credentials. Sessions within the hub automatically expire after fifteen (15) minutes of inactivity, after which re-authentication is required. Each access event is logged for audit purposes, including the timestamp, the administrator identity, which sections were accessed, and the duration of the session.

Access logs: Secure Information access logs are retained for two (2) years from the date of the access event and are used for security audit, dispute resolution, and compliance purposes. Access logs are never shared with third parties and are accessible only to authorized ByMyHonor personnel.

Credit Purchases, Cryptocurrency Payments, and Payment Processing

ByMyHonor offers credits that can be used to access platform features such as placing Honor Notes and Vouchers. Credits can be purchased through the following payment methods:

• Bridge (bridge.xyz) — Stablecoin Payments: ByMyHonor uses Bridge as its primary payment processor for USDC (USD Coin) transactions. Bridge supports deposits on multiple blockchain networks including Ethereum, Polygon, Base, and Solana. When you make a USDC purchase through Bridge, we collect your wallet address, deposit amount, and transaction identifiers necessary to process the deposit.
• Cryptocurrency Payments (CryptAPI): ByMyHonor also supports direct cryptocurrency payments for credit purchases via Bitcoin (BTC), Litecoin (LTC), and Dogecoin (DOGE). These payments are processed through CryptAPI, a third-party cryptocurrency payment gateway. When you make a cryptocurrency purchase via CryptAPI, we collect your wallet address and transaction identifiers necessary to process and confirm the deposit.

What we do not store: ByMyHonor does not store private keys and does not have direct access to your cryptocurrency wallet. We collect only the minimum information necessary to process your transaction.

Transaction receipts: Transaction confirmations and receipts are generated automatically and stored in your account for your reference. You may view your transaction history, including deposit amounts, timestamps, and payment method, through your account settings.

Third-party payment processors: Bridge and CryptAPI process payments on our behalf and are subject to their respective privacy policies. We may share your email address with these processors solely for the purpose of sending you transaction confirmation emails. We do not share your personal information with payment processors beyond what is necessary to complete your transaction.

Blockchain transparency: Cryptocurrency transactions may be subject to blockchain transparency, meaning transaction details (amount, wallet addresses, timestamps) are publicly visible on the respective blockchain. ByMyHonor is not responsible for the public visibility of blockchain transactions.

Failed or pending deposits: If a deposit fails, is underfunded, canceled, or refunded by the payment processor, ByMyHonor will notify you of the status change. Failed deposit information (including the reason for failure and associated transaction identifiers) is retained for dispute resolution and financial record-keeping purposes for up to seven (7) years.

Honor Notes Lifecycle

Honor Notes are permanent public records placed on your profile by other ByMyHonor users. They serve as character references and trustworthiness endorsements. The lifecycle of an Honor Note includes the following stages:

• Creation: A user creates an Honor Note on your profile, including their name, profile photo, and the content of the note. The note is publicly visible immediately upon creation.
• Footprints: When users interact with your Honor Note (e.g., viewing, reacting), Footprint records are created and associated with the note. Footprints include timestamps, interaction types, and author information.
• Dispute: You may dispute an Honor Note if you believe it is inaccurate, inappropriate, or violates ByMyHonor's Content Guidelines. Disputed Honor Notes are flagged and may be hidden from public view pending resolution.
• Resolution: ByMyHonor reviews disputed Honor Notes and may remove, modify, or reinstate them at its discretion. The dispute resolution outcome is recorded.
• Deletion Request: You may request deletion of an Honor Note through your account settings. Upon deletion request, a seven (7) year countdown period begins, during which the note is marked as "pending deletion" and is no longer publicly visible. After the countdown expires, the note and all associated data are permanently and irreversibly deleted.

Public visibility: Once published, an Honor Note becomes a permanent part of your public profile and includes the author's name, profile photo, and the content of the note. ByMyHonor retains metadata about Honor Notes (creation date, author, interactions, dispute history) for the life of the Service. You can limit the public visibility of some of your public content through your account settings, though Honor Notes placed by others on your profile remain subject to the author's publication choices.

Vouchers Lifecycle

Vouchers are public recognitions placed on your profile by other ByMyHonor users. The lifecycle of a Voucher includes the following stages:

• Placement: A user places a Voucher on your profile, including their name, profile photo, and the Voucher note. The Voucher is publicly visible once placed.
• Acceptance: You may accept a Voucher to acknowledge it. Accepted Vouchers are displayed with an "accepted" status on your profile.
• Dispute: You may dispute a Voucher if you believe it is inaccurate or inappropriate. Disputed Vouchers may be hidden from public view pending resolution.
• Resolution: ByMyHonor reviews disputed Vouchers and may remove, modify, or reinstate them at its discretion.

ByMyHonor retains Voucher metadata (creation date, author, recipient, status) for the life of the Service.

Public Profile and Profile View Tracking

Your ByMyHonor profile is public by default and may be indexed by search engines. Your profile includes your name, profile photo, Honor Score, Validation Level, Honor Notes, and Vouchers. ByMyHonor records when other users view your profile for the purpose of providing profile view analytics to you.

What we track: When another user views your profile, we record a pseudonymous visitor identifier (hash), the date and time of the view, and the viewed user's account ID. We do not collect the viewer's name, email, or other personally identifiable information in the profile view record — only a pseudonymous hash that allows you to see that someone viewed your profile without revealing their identity to you.

How you can access this data: Profile view analytics (who viewed your profile and when) are available to you through your account settings. This data is not shared with third parties.

Visibility controls: You may adjust your profile visibility settings in your account settings, though certain information (name, Honor Score, Validation Level) may remain publicly visible regardless of your settings. Adjusting visibility settings does not prevent administrators from accessing your profile for legitimate operational purposes.

Support Tickets and Customer Communications

When you submit a support ticket through ByMyHonor's support center, we collect the following information:

• Your name and email address
• Your account ID
• The subject and category of your ticket (e.g., General, Billing, Payment, Account, Support, Feedback, Complaint, Request)
• The priority level you assign (low, medium, or high)
• The content of your message and any attachments
• Subsequent messages and replies within the ticket thread

Access controls: Support tickets are accessible only to you and authorized ByMyHonor support staff. Each ticket receives a unique ticket ID (e.g., TKT-XXXXXXXX) for reference. Ticket messages are stored chronologically and include timestamps and sender identification.

Retention: We retain support ticket data for three (3) years after the ticket is resolved (status changed to "closed"), after which it is permanently deleted from our systems. During the retention period, ticket content may be used in aggregate (anonymized form) to improve our Service.

Third-party sharing: We may share support ticket content with third-party service providers who assist in providing customer support, subject to contractual obligations consistent with this Privacy Policy. Support ticket content is not shared with other users or third parties beyond what is necessary to resolve your inquiry.

Footprints and Activity Records

Footprints are interaction records associated with your Honor Notes and profile. They provide a transparent record of how your Honor Notes and profile have been accessed and interacted with. Footprint data includes:

• Timestamps of interactions
• Interaction types (e.g., view, reaction, comment)
• Author information (name, profile photo) of the interacting user
• Any associated metadata

Visibility: Footprints are visible to you and to other users who have access to the associated Honor Note. ByMyHonor retains Footprint data for the life of the associated Honor Note or account, whichever is longer.

Security Questions

Security questions are used for account recovery and identity verification. Your security question answers are encrypted at rest using industry-standard encryption algorithms and are accessible only to you. ByMyHonor staff cannot view your security question answers in plaintext.

What we collect: When you set up security questions, we store the question identifiers and the encrypted answers. We do not store your answers in plaintext at any point.

Retention: Security question data is retained for the life of your account and deleted within thirty (30) days of account closure. You may update your security questions at any time through your account settings; previous security question answers are overwritten and cannot be recovered.