SLATE FINANCIAL TECHNOLOGIES INC.

CONSUMER DATA COLLECTION AND USE POLICY

Effective Date: February 6, 2026

Last Updated: February 6, 2026

Important Notice

This Consumer Data Collection and Use Policy (“Policy”) explains how Slate Financial Technologies Inc. (“Slate,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you apply for and use our future earnings purchase services. This Policy is provided in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including the British Columbia Personal Information Protection Act (PIPA).

By submitting an application or using our services, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

This Policy applies specifically to individual workers (“Workers”) who apply for or enter into Future Earnings Purchase Agreements (“FEPAs”) with Slate. If you are a business applying for receivables purchase services (Merchant Cash Advance), please refer to our Data Collection and Use Policy at /data-collection.

Nature of Our Services

Slate provides future earnings purchase services, not loans. When you use our services, you sell a portion of your future Platform Earnings to Slate in exchange for an immediate, upfront payment. This is a true sale of future earnings, not a debt or loan.

The terminology in this Policy (such as “underwriting” and “risk assessment”) refers to our evaluation of the quality and collectability of your future Platform Earnings, not creditworthiness for lending purposes. You are not borrowing money or incurring debt — you are selling future earnings at a discount.

1. Information We Collect

We collect the following categories of personal information in connection with your application and our ongoing services:

1.1 Identity Information

1. Full legal name
2. Date of birth
3. Social Insurance Number (SIN)
4. Government-issued photo identification (e.g., driver’s licence, passport)
5. Biometric or liveness verification data (facial images captured during identity verification)
6. Current residential address
7. Email address
8. Phone number

1.2 Financial Information

9. Personal bank account details (institution, transit number, account number)
10. Bank account transaction history (to assess income patterns and cash flow)
11. Credit report and credit score from Canadian credit bureaus (TransUnion, Equifax)
12. Existing debts, consumer proposals, or bankruptcy history

1.3 Platform Earnings Information

13. Platform Partner identity and your account status
14. Historical Platform Earnings (amounts, frequency, and duration)
15. Work history and earnings history on the Platform Partner’s platform
16. Platform ratings, reviews, or performance metrics (where available and relevant to earnings assessment)
17. Projected future Platform Earnings

1.4 Transaction Information

18. FEPA terms (Purchase Price, Purchased Amount, Factor Rate, Remittance Amount)
19. Remittance payment history (PAD transactions, Direct Remittance records)
20. Returned payment records
21. Earnings Decline Adjustment requests and outcomes
22. Communication records between you and Slate

1.5 Device and Usage Information

23. IP address and approximate geolocation
24. Browser type and operating system
25. Device identifiers
26. Pages visited on the Slate Platform and actions taken
27. Date and time of access

2. How We Collect Your Information

We collect your personal information through the following methods:

28. Directly from you: When you complete an application form, submit documents, communicate with us, or interact with the Slate Platform.
29. From your Platform Partner: With your consent, we receive Platform Earnings data, work history, and account information from your Platform Partner to assess your eligibility and administer your FEPA.
30. From credit bureaus: With your authorization, we obtain your credit report and credit score from TransUnion Canada and/or Equifax Canada.
31. From identity verification providers: We use third-party identity verification services (currently Veriff) to verify your identity in compliance with PCMLTFA requirements.
32. From your financial institution: With your consent, we may access bank account information and transaction history through secure banking integrations.
33. Automatically: Through cookies, analytics tools, and similar technologies when you use the Slate Platform.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Application Assessment and Underwriting

34. Verifying your identity in compliance with PCMLTFA and FINTRAC requirements
35. Assessing the quality, reliability, and collectability of your future Platform Earnings
36. Evaluating your overall financial profile and creditworthiness for the purpose of assessing earnings risk
37. Determining eligibility, Purchase Price, Factor Rate, and Remittance Amount
38. Making approval or decline decisions on your application

3.2 FEPA Administration and Servicing

39. Processing PAD collections and Direct Remittances
40. Monitoring remittance performance and managing returned payments
41. Processing Earnings Decline Adjustment requests
42. Communicating with you about your FEPA status, upcoming payments, and account activity
43. Enforcing the terms of the FEPA in the event of a breach

3.3 Regulatory Compliance

44. Fulfilling our obligations under the PCMLTFA, including record-keeping and suspicious transaction reporting to FINTRAC
45. Complying with credit bureau reporting obligations
46. Responding to lawful requests from law enforcement or regulatory authorities
47. Maintaining records as required by applicable tax laws

3.4 Risk Management and Improvement

48. Monitoring portfolio performance and risk across our FEPA portfolio
49. Improving our underwriting models and risk assessment processes
50. Detecting and preventing fraud, identity theft, and financial crime
51. Improving the Slate Platform, user experience, and service offerings

4. How We Share Your Information

We may share your personal information with the following parties, for the purposes described:

4.1 Platform Partners

We share limited information with your Platform Partner as necessary to administer your FEPA, including activating and managing Direct Remittance arrangements. We do not share your credit report, SIN, or banking details with Platform Partners.

4.2 Credit Bureaus

We share information about your FEPA and remittance history with TransUnion Canada and/or Equifax Canada, as authorized by you in the Credit Check Authorization Terms. This may include information about your account status, payment history, and any Events of Breach.

4.3 Service Providers

We use trusted third-party service providers who process personal information on our behalf, including:

52. Identity verification: Veriff (identity document and biometric verification)
53. Payment processing: ZumRails (PAD processing and bank verification)
54. Electronic signatures: HelloSign (FEPA execution)
55. Cloud hosting: Secure cloud infrastructure providers for data storage
56. Analytics: Platform usage analytics tools

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.4 Affiliated Entities

Slate is a wholly owned subsidiary of Dropp Labs, Inc., a Delaware corporation. We may share personal information with Dropp Labs for corporate administration, financial reporting, and risk management purposes. When information is transferred to the United States, it is subject to U.S. laws, which may differ from Canadian privacy laws. We implement contractual protections to safeguard your information in such transfers.

4.5 Legal and Regulatory Authorities

We may disclose your personal information when required by law, in response to a valid court order, subpoena, or regulatory request, or to comply with our obligations under the PCMLTFA, tax laws, or other applicable legislation.

4.6 With Your Consent

We may share your personal information with other parties if you provide specific, informed consent for such disclosure.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, including:

57. Active FEPAs: For the duration of any active FEPA, plus a reasonable period for account administration.
58. Completed FEPAs: For a minimum of five (5) years after the completion or termination of the FEPA, to comply with FINTRAC record-keeping requirements and for legal and audit purposes.
59. Declined applications: For a minimum of five (5) years to comply with regulatory requirements.
60. Credit reports: Retained for the duration of the FEPA plus the legally required retention period.
61. Identity verification records: Retained for a minimum of five (5) years in compliance with PCMLTFA.

After the applicable retention period, your personal information will be securely destroyed or de-identified.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

62. Encryption of personal information in transit and at rest
63. Access controls limiting who within Slate can view your personal information
64. Secure authentication and authorization mechanisms
65. Regular security assessments and vulnerability monitoring
66. Employee and contractor training on data protection and privacy
67. Incident response procedures for potential data breaches

While we take reasonable precautions to protect your information, no method of electronic transmission or storage is completely secure. If you become aware of a potential security issue, please contact us immediately at admin@tryslatehq.com.

7. Your Rights

Under PIPEDA and applicable provincial privacy legislation, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request access to the personal information we hold about you. We will respond to your request within thirty (30) days.

7.2 Right of Correction

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

7.3 Right to Withdraw Consent

You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Please note that withdrawing consent may result in Slate being unable to continue providing services to you, including the administration of an active FEPA.

7.4 Right to Complain

If you believe your privacy rights have been violated, you have the right to file a complaint with:

Office of the Privacy Commissioner of Canada

30 Victoria Street

Gatineau, Quebec K1A 1H3

Toll-free: 1-800-282-1376

Website: www.priv.gc.ca

In British Columbia, you may also file a complaint with the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC).

8. Cookies and Tracking Technologies

The Slate Platform uses cookies and similar technologies to improve your experience, analyze usage, and provide our services. For details on the types of cookies we use and how to manage your cookie preferences, please refer to our Privacy Policy at /privacy.

9. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through the Slate Platform at least thirty (30) days before the changes take effect. The “Effective Date” at the top of this document indicates when this Policy was last revised.

10. Contact Information

If you have questions, concerns, or requests regarding this Policy or how we handle your personal information, please contact our Privacy Officer:

Slate Financial Technologies Inc.

Attention: Privacy Officer

1322 West Broadway St Unit 1006

Vancouver, BC V6H 1H2

Canada

Email: admin@tryslatehq.com

Phone: (778) 653-9468

For our general Privacy Policy covering website visitors, please visit: /privacy

Document Version: 1.0 (aligned with FEPA v2.6 and Consumer Terms and Conditions v1.0)