PRIVACY POLICY

LAST UPDATED: MAY 7, 2026

1. Personal Information We Collect

(a) Personal Information You Provide to Us Directly

We collect several types of information users of the Service provide to us, through means such as web forms, account creation, payment screens, Profile creation, and social media linkage, including:

• Contact Information, such as your first and last name, and email address.
• Personal Identification Information: Full name, date of birth, nationality, gender, signature, phone number, home address, and current state or country of domicile.
• Profile Information, such as your username that you may set to establish an online account or Profile on the Service, biographical details, links to your profiles on social networks, associated media files (such as video content that discloses or otherwise displays Personal Information), interests, preferences, and any other information that you add to your Profile.
• Communications that We Exchange With You, including when you contact us through the Service, social media, email or otherwise.
• Transactional Information, such as information relating to or needed for subscriptions or sales on or through the Service, which includes transactional details, fees, and sales prices.
• Marketing Information, such as your preferences for receiving our marketing communications and details about your engagement with them.
• User-generated Content, such as Profile pictures, photos, images, music, videos, comments, questions, messages, works of authorship, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata, including any data or materials submitted to any AI that is part of the Service.
• Financial Information, such as your credit card or bank account information, billing address, linked virtual currency or wallet accounts, stored value accounts, and associated details.
• Sensitive Personal Information, such as:
  • Medical/Health Information, such as height, weight, vitals, biometric data and other health information that may be relevant or necessary for determining eligibility for continuing in a Project or phase of a Project.
  • Formal Identification Information, such as citizenship status, nationality, immigration status, Government issued identity document and photograph such as Passport, Driver's License, National or State Identity Card.
  • Precise Location Data Information.

(b) Personal Information Collected Automatically

We may collect personal information automatically when you use the Service, including the following:

• Device Information. We may collect device information automatically when you use the Service, such as your Internet protocol (IP) address, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, browser or device information, operating system, Internet service provider, and information regarding the location of certain routers through which your device has connected to the Service.
• Usage Information. We may collect personal information automatically about your interactions with the Service, like the content you view, the searches you conduct, any content you post or share, any information input into any AI tools provided by us, and the dates and times of your visits.
• Social Media Analytics and Information. When you use any hashtags associated with us, Projects, and/or the Service, such as #SERASpace, on or near your content that appears on social media channels linked to your Profile, you consent to us receiving information from the social media platform where such hashtag was used related to the content associated with the hashtag, such as user information, view count, engagement data, metadata and any other data provided by such social media channel related to the hashtag, which may or may not contain additional personal information.

(c) Personal Information from Cookies (and Other Technologies)

We, as well as third parties, may use cookies, pixel tags, and other technologies (“Technologies”) to automatically collect personal information through your use of the Site.

• Cookies. Cookies are small text files placed in device browsers that store preferences and facilitate and enhance your experience.
• Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in the Service that collects information about engagement on the Service. The use of a pixel tag allows us to record, for example, that a user has visited, a particular web page or clicked on a particular advertisement. We may also include web beacons in e-mails to understand whether messages have been opened, acted on, or forwarded.

See the “Your Privacy Choices” section below to for further details on your choices regarding these Technologies.

2. How We Use Your Personal Information

We use your personal information for a variety of business purposes, including to provide the Service, for administrative purposes, and to provide you with marketing materials, as described below.

(a) Provide the Service

We use your personal information to provide the Service, including:

• Managing your information;
• Creating your Profile;
• Providing access to certain areas, functionalities, and features of the Service, including nationality or citizenship information to establish eligibility for certain Projects or phases of a Project;
• Allowing other users to share your Profile or personal information within the Service and through social media channels;
• Answering requests for support; and
• Communicating with you.

(b) Administrative Purposes

We use personal information for various administrative purposes, including:

• Pursuing our legitimate interests such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
• Measuring interest and engagement in the Service;
• To train automated processes, such as our AI, models and algorithms that we utilize to provide the Service;
• Improving, upgrading, or enhancing the Service, including the AI, models and algorithms we utilize to provide the Service;
• Carrying out analytics;
• Developing new products and services;
• Ensuring internal quality control and safety;
• Authenticating and verifying individual identities, including requests to exercise your rights under this Privacy Policy;
• Debugging to identify and repair errors with the Service;
• Auditing relating to interactions, transactions, and other compliance activities;
• Sharing personal information with third parties as needed to provide the Service;
• Sharing personal information with third parties as needed to engage in ID Verification;
• Sharing personal information with SERA Partners as necessary for them to execute their duties;
• Completing purchases through the Service;
• Enforcing our agreements and policies; and
• Carrying out activities that are required to comply with our legal obligations.

(c) With Your Consent

We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent, such as providing third-party ID Verification services you engage with only the necessary amount of information required for such service to perform its duties.

(d) Other Purposes

We also use your personal information for other purposes as requested by you or as permitted by applicable law.

3. How We Disclose Personal Information

We do not sell any of your personal information, and we will not do so in the future. We disclose your personal information to third parties for a variety of business purposes, including to provide the Service, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below. We require all third parties, including business partners and SERA Partners, to follow rules about how they can and cannot use and disclose the personal information provided to them by us and/or by you through the Service.

(a) Disclosures to Provide the Service

The categories of third parties with whom we may share your personal information are described below:

• Service Providers. We may share your personal information with our third-party service providers and vendors that assist us with the provision of the Service. This includes service providers and vendors that provide us with analytics, marketing services, IT support, hosting, customer service, and related services.
• Google Analytics. For more information about how Google uses your personal information, please visit Google Analytics' Privacy Policy. To learn more about how to opt-out of Google Analytics' use of your personal information, please click here.
• Business Partners. We may share your personal information with business partners to provide you with a product or service you have requested, including, but not limited to, partners that provide ID Verification. We may also share your personal information with business partners with whom we jointly offer products or services.
• SERA Partners. We may share your personal information with SERA partners to the extent necessary for such SERA Partners to execute their duties, which may include using your personal information in advertising or promotional materials.
• Other Users. We may share your personal information with other users that view, access, or share your personal information on the Service or through social media channels.
• Affiliates. We may share your personal information with our corporate affiliates.

(b) Disclosures to Protect Us or Others

We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others' rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

(c) Disclosure in the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets, transition of service to another provider, or other similar corporate transaction, your personal information may be disclosed, sold, or transferred as part of such a transaction.

(d) Public Information

Certain personal information is visible to all users of the App, including name, username, Profile picture, country and city, state, province or region of domicile/origin, affiliated institution (if provided), biographical information (if provided), links to social media channels that you add to your Profile, and when you created a Profile (“Public Information”). Public Information can be sent to anyone on, across or off the Service (for example, users may share Public Information about another user in a social media post). Public Information may be seen, accessed, reshared or downloaded through the Service, or other third-party services like search engines, APIs, the media and other apps, websites or services connected to the Service. If you participate in a Project, for example submitting an idea or proposal, we may display within the Service information concerning this and any previous submissions, including the points earned by each through community voting, if applicable.

4. Your Privacy Choices

The privacy choices you may have about your personal information are described below:

• Email Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails. We may also send you certain non-promotional communications regarding us and the Service, and you will not be able to opt out of those communications (e.g., communications regarding the Service or updates to this Privacy Policy).
• Mobile Devices. We may send you push notifications through the App or the Service. You may opt out from receiving these push notifications by changing the settings on your mobile device. With your consent, we may also collect precise location-based information via the App. You may opt out of this collection by changing the settings on your mobile device.
• “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to nor honor DNT signals or similar mechanisms transmitted by web browsers.
• Cookies and Personalized Advertising. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, the Service may not work properly. Please note that cookie-based opt-outs are not effective on mobile applications, such as the App. However, you may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others.

The online advertising industry also provides websites from which you may opt out of receiving targeted ads from organizations that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative and the Digital Advertising Alliance.

5. International Transfers of Personal Information

All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.

If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses.

For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below.

6. Retention, Access, Correction, Requests About and Deletion of Personal Information

We store the personal information we collect as described in this Privacy Policy for as long as you use the Service, or as necessary to fulfill the purpose(s) for which it was collected, provide the Service, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and/or comply with applicable laws.

You may request a correction of any personal information appearing on the Service by contacting privacy@sera.space. You may request us to provide all personal information that we have about you or your Profile by contacting privacy@sera.space. If you would like to submit an inquiry related to how we use your personal information or you would like to file a complaint about our use of personal information, such message can be sent to privacy@sera.space. We will process and respond to such message within thirty (30) days.

To withdraw consent to processing your personal information, to object to or otherwise restrict our use of your personal information, to obtain a portable copy of your personal information, or opt in or opt out of certain processing activities, please send such request to privacy@sera.space and we will process such request within thirty (30) days. If you request a restriction or limiting of processing personal information, certain features or functionalities of the Service may not be available.

You may delete your account or Profile, partially or completely, by contacting privacy@sera.space. If you delete your account and/or Profile on the Service, we delete your information, including your Profile and any associated content or media, unless we need to keep such data to comply with applicable law or if needed for a legitimate business purpose. Any content or characteristic of the Profile, including SpaceDust, that is associated with a deleted account or Profile will be removed and shall not be redeemable, refundable or replaceable. Once your account or Profile is deleted, you won't be able to access, change, or reactivate it, and you won't be able to retrieve information, including any content you posted.

If you request deletion of your account or Profile, it may take up to ninety (90) days to delete your information, account or Profile. After your information is deleted, it may take up to another ninety (90) days to remove it from our backup files.

7. Data Protection Measures and Security

To protect your personal information from unauthorized access and use, we use security measures that comply with all applicable law. These physical and electronic safeguards include, but are not limited to, encrypting data, secure storage protocols, restricting employee access of personal information solely to employees who need to use that information for a business purpose, and entering into contractual agreements that provide controls for confidential customer information shared with third parties.

8. Supplemental Notice for EU/UK Residents

This Supplemental Notice for EU/UK GDPR only applies to our processing of personal information that is subject to the EU or UK General Data Protection Regulation.

In some cases, providing personal information may be a requirement under applicable law, a contractual requirement, or a requirement necessary to enter into a contract. If you choose not to provide personal information in cases where it is required, we will inform you of the consequences at the time of your refusal to provide the personal information.

Our processing of your personal information may be supported by one or more of the following lawful bases:

• Performance of a Contract (i.e., to provide the Service to you)
• Legitimate Interest
• Consent
• For Compliance with Legal Obligations

9. Children's Personal Information

The Service is not directed to children, and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has uploaded personal information to the Service without your consent, you may contact us as described in the “Contact Us” section below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child's account and/or Profile, if applicable.

10. Third-Party Websites/Applications

The Service may contain links to other websites/applications and other websites/applications may reference or link to the Service. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.

We may require, as part of establishing eligibility for further participation in a Project or phase of a Project, that you engage in an identity verification program provided by a third party that verifies your national identity or citizenship status (“ID Verification”). ID Verification may require the payment of fees, either in a fiat or virtual currency, as required by the third party providing the ID Verification. ID Verification may be only performed by third parties of our choosing, and such third parties may have additional requirements, conditions and policies that you are required to comply with to receive ID Verification. If you choose to engage in an ID Verification, you hereby consent to our sharing of the minimum amount of personal information required for the third-party to perform ID Verification and you consent to the third party providing us with the necessary personal information to confirm national identity, citizenship status, and/or eligibility for participation in a Project or phase of a Project.

11. Changes to Our Privacy Policy

It is our policy to post any changes we make to the Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Service. Users of the App will receive a notification in the App disclosing the Privacy Policy has changed and was updated. If we make material changes to how we treat our users' personal information, we may notify you through email, a notice on the Site home page or any other method permitted by applicable law. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and this Privacy Policy to check for any changes.

12. Contact Information

To ask questions or comment about the Privacy Policy and our privacy practices, contact us at: privacy@sera.space.