PRIVACY POLICY Last updated Jan 15, 2024 Privacy notice for The Q Space LLC Welcome to The Q Space LLC (“we,” “us,” or “our”). The QSpace is committed to protecting your privacy. This privacy notice explains our practices regarding the collection, use, and disclosure of your information through our Services when you: ■ Download and use our mobile application, The QSpace, or any other application of ours that links to this privacy notice. ■ Engage with us through sales, marketing, or events, and other related activities. Age Restriction: The QSpace is intended for users who are at least 18 years old. If you are under 18, you are not permitted to use or register for the services. Definition of “Services”: “Services” refers primarily to The QSpace mobile application (iOS, Android, or any other compatible platform) and any features, updates, or enhancements made available within it. In addition, Services also include: ■ The QSpace website (including any web-based access to the same content or features offered in the mobile application, if available); ■ Any related platforms, features, or functionalities developed, operated, or maintained by The Q Space LLC under the brand “The QSpace,” including social media pages, APIs, or other integrated tools that link to or reference this Privacy Policy; ■ Events, marketing activities, or promotions hosted or sponsored by The Q Space LLC that reference or link to this Privacy Policy; ■ Any communications or content (emails, text messages, push notifications, newsletters, etc.) that The Q Space LLC sends in connection with your use of the mobile application or website; ■ Any other products or services under The QSpace brand that explicitly reference or link to this Privacy Policy;

■ For clarity, “Services” do not include any external (third-party) websites, apps, or services that The Q Space LLC does not own or control—even if they are linked to or accessed through The QSpace. We process your information based on your consent, the necessity to fulfill our contractual obligations with you, our legal obligations, and our legitimate business interests. Understanding your privacy rights and choices is crucial. Should you disagree with any aspect of our policies, please refrain from using our Services. For questions or concerns, please contact us at admin@theqspace.gay SUMMARY OF KEY POINTS This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for. What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Do we process any sensitive personal information? We may process sensitive personal information, when necessary, with your consent or as otherwise permitted by applicable law. Do we collect any information from third parties? We do not collect any information from third parties. How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud-prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over

the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Residents of certain U.S. states, including California, Virginia, Colorado, Connecticut, Utah, Montana, Maryland, and others, have specific rights regarding the use, sale, and access of their personal data. These rights may include the ability to opt-out of data sales, request access to personal data, and request deletion of personal data. Please refer to the relevant section for more details. How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws. TABLE OF CONTENTS 1. WHAT INFORMATION DO WE COLLECT? 2. HOW DO WE PROCESS YOUR INFORMATION? 3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? 4. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES? 5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? 6. HOW DO WE HANDLE YOUR SOCIAL LOGINS? 7. HOW LONG DO WE KEEP YOUR INFORMATION? 8. HOW DO WE KEEP YOUR INFORMATION SAFE? 9. DO WE COLLECT INFORMATION FROM MINORS? 10. WHAT ARE YOUR PRIVACY RIGHTS? 11. CONTROLS FOR DO-NOT-TRACK FEATURES 12. DO RESIDENTS OF CERTAIN STATES HAVE SPECIFIC PRIVACY RIGHTS? 13. DO WE MAKE UPDATES TO THIS NOTICE? 14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE? 15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? 16. DISPUTE RESOLUTION 17. POLICY REVIEW AND UPDATES

1. WHAT INFORMATION DO WE COLLECT? Personal information you disclose to us In Short: We collect personal information that you provide to us. We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following: ■ names; ■ phone numbers; ■ email addresses; ■ mailing addresses; ■ usernames; ■ passwords; ■ contact preferences; ■ contact or authentication data; ■ billing addresses; ■ debit/credit card numbers; ■ 3rd party api process’s identity verification Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: ■ biometric data; ■ data about a person's sex life or sexual orientation; ■ information revealing race or ethnic origin; ■ information revealing political opinions; ■ information revealing religious or philosophical beliefs; ■ information revealing trade union membership;

■ student data Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Facebook, Twitter, or other social media account. If you choose to register in this way, we will collect the information described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below. API integration for external platforms: In our ongoing effort to enrich the user experience and provide more comprehensive Queer event information, we have expanded our data integration capabilities to include secure API connections with external platforms such as Instagram, Facebook, and Eventbrite. These integrations allow us to offer you real-time updates and a broader array of event options, enhancing our service offering. Data Collection and Use: Through these APIs, we collect detailed information that includes event names, descriptions, dates, times, locations, and organizer details. This information helps us curate a diverse and dynamic event listing tailored to the interests and needs of our community. Security and Privacy Standards: To protect your data, we employ OAuth 2.0 protocols for all data transmissions. This advanced method includes stringent token management and encryption practices to safeguard data against unauthorized access and breaches. Our security measures are designed to comply with the highest industry standards, ensuring that your personal information is handled securely and responsibly. User Control and Data Management: We are committed to transparent data practices and offer you control over the data collected through these integrations. Within your account settings, you can manage permissions and modify what information is collected and utilized. This empowers you to tailor your experience according to your privacy preferences. Web Scraping Practices: Additionally, we utilize web scraping technologies to gather event information from various Queer community websites. This scraping is conducted in full compliance with legal and ethical standards, ensuring that it respects the terms and privacy policies of the sourced websites. We adhere strictly to data protection regulations, such as GDPR, by obeying robots.txt files and ensuring that all data collection is performed transparently and responsibly. Data Retention and Access: The data collected via these APIs and scraping practices is retained only as long as necessary to fulfill the purposes outlined in our Privacy Policy, after which it is

securely deleted or anonymized. You have the right to access any personal information we hold about you and may request corrections or deletion in accordance with our data protection policies. Impact on User Experience: The integration of external data sources significantly enhances our ability to offer tailored and relevant event information, making it easier for you to discover events that match your interests. This customization is part of our commitment to creating a user-centric platform that values and respects the privacy and preferences of its community. By using our Services, you consent to this data collection and use as described above. If you have any questions about how we handle data integration or wish to change your data settings, please contact us at admin@theqspace.gay. Data normalization and quality assurance. Data Normalization Process: At The QSpace, we ensure that all data collected, whether through direct user inputs, external APIs, or web scraping, is transformed into a consistent format. This normalization process aligns data into our standardized event schema, which facilitates smoother integration, improves data accuracy, and enhances user experience by providing a uniform presentation of event details across our platform. • Standardization Techniques: We utilize advanced data transformation tools that convert varied data inputs into a unified format. This includes aligning date and time formats, standardizing location data, and harmonizing event descriptions using predefined templates. • Integration of Data: Once normalized, data is seamlessly integrated into our existing database, ensuring that new entries complement and enhance our comprehensive event listings without duplication. Quality Assurance (QA) Protocols: To maintain the high reliability and accuracy of our data, we implement rigorous QA protocols at various stages of data processing: • Automated Checks: Immediately after data normalization, automated systems review the data for completeness and accuracy. This includes checks for missing information, logical inconsistencies, and duplication errors. • Manual Review: Data flagged by our automated systems as incomplete or incorrect undergoes a manual review process. Our data team meticulously verifies and corrects these entries, ensuring that only the most reliable data is made available to our users. • Continuous Improvement: We continually refine our data normalization and QA processes based on feedback and performance analytics. This proactive approach allows us to adapt to new challenges and improve data handling methodologies over time.

User Feedback Loop: In addition to our internal checks, we value user feedback as a critical component of our QA process. Users can report any discrepancies or issues they encounter with event information directly through the app. These reports are prioritized and addressed promptly to ensure continuous improvement and user satisfaction. Security and Compliance: All data handling and processing within The QSpace adhere to strict security standards and compliance with relevant data protection regulations, such as GDPR. We ensure that all personal information is processed, normalized, and stored with the highest level of security and only for the purposes explicitly stated in our Privacy Policy. By implementing these comprehensive data normalization and quality assurance processes, we ensure that the information our users receive is not only accurate and reliable but also secure and compliant with global data protection standards. If you have any questions about our data processing practices or wish to learn more about how we ensure the accuracy of our data, please do not hesitate to contact us. Data Synchronization. To ensure the timely and accurate presentation of event information, we perform periodic synchronization of data from these external APIs. This includes multiple daily updates from Instagram to capture the latest event-related posts and twice-daily updates from Facebook and Eventbrite, maintaining our database's relevance and accuracy. Event Data from External Platforms. We integrate with external APIs (e.g., Instagram, Facebook, Eventbrite) and occasionally perform limited web scraping on Queer community websites to aggregate event information (“Event Data”). This Event Data can include: ■ Dates, Times, and venue or location data; ■ Publicly available organizer or host details (e.g., email, social, media handle); ■ Hashtags or tags referencing the event We collect only publicly available or authorized information and use it to provide you with curated Queer event listings within The QSpace application. If you do not want your event publicly displayed in The QSpace, please contact us support@theqspace.gay

Business Claiming Data. If you use our “Claim This Event” feature to verify your business or organizational ownership of an event, we collect certain data to confirm your identity and connection to the event. This may include: ■ Business or organization name; ■ Contact details (e.g., email, phone number); ■ Proof of ownership or affiliation (e.g., a verification code, documentation, or matching email) We use this data solely for verification and to enable you to manage and update your claimed event. Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission: ■ Geolocation Information: We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device's settings. ■ Mobile Device Access: We may request access or permission to certain features from your mobile device, including your mobile device's calendar, contacts, camera, microphone, social media accounts, storage, sms messages, reminders, sensors, and other features. If you wish to change our access or permissions, you may do so in your device's settings. ■ Mobile Device Data: We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed. ■ Push Notifications: We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt-out from receiving these types of communications, you may turn them off in your device's settings.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes. All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information. Information automatically collected In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. The information we collect includes: ■ Log and Usage Data: Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings). ■ Device Data: We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, internet service provider and/or mobile carrier, operating system, and system configuration information.

■ Location Data: We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt-out of allowing us to collect this information either by refusing access to the information or by disabling your location setting on your device. However, if you choose to opt-out, you may not be able to use certain aspects of the Services. 2. HOW DO WE PROCESS YOUR INFORMATION? In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud-prevention, and to comply with U.S. Privacy laws. We may also process your information for other purposes with your consent. At The QSpace, we employ advanced data handling and analysis techniques to process your information securely and efficiently. Our processes are designed to enhance user engagement and ensure the highest standards of data security and privacy. Below are the specific ways we use your personal information: ■ Account Management: We process your information to facilitate account creation, authentication, and ongoing management. This includes maintaining your account in working order and assisting you with any account-related queries or issues. ■ Service Delivery: We use your information to deliver and facilitate the delivery of services, including processing transactions and providing seamless user support. ■ Communications: We send you administrative information, updates about our services, and changes to our terms and policies. Additionally, we enable user-to-user communications and solicit feedback to enhance our services. ■ Marketing and Promotions: We process your personal information to send marketing communications in line with your preferences. Furthermore, we develop and display personalized advertising tailored to your interests and locations, based on the information you provide and your activities on our platform. ■ Security Measures: To protect our services, we implement rigorous fraud monitoring and prevention practices. This includes using advanced technologies to detect and prevent unauthorized access or potential security threats. ■ Performance Evaluation: We regularly evaluate and improve our services, products, marketing, and your overall experience by analyzing usage trends and the effectiveness of our promotional campaigns.

■ Data Aggregation and Integration: We aggregate event data from external sources using secure connections to third-party APIs (e.g., Instagram, Facebook, Eventbrite) and web scraping techniques. This allows us to compile up-to-date and comprehensive event listings, which we normalize and standardize for display within our platform. ■ Automated Event Categorization: Utilizing natural language processing (NLP), we automate the categorization of events with relevant QTags based on their descriptions. This helps streamline content discovery and enhances user engagement. ■ Event Claiming by Businesses: Businesses can claim events on our platform, where we verify the authenticity of claims using provided contact information and other verification data. Once verified, businesses can manage event details, interact with attendees, and access engagement metrics from their dashboard. ■ Enhancing User Interaction: Our platform allows users to add or modify QTags for events, facilitating personalized categorization and enhancing the community-driven aspect of our service. This user interaction helps tailor the content relevance to individual preferences. ■ Sensitive Personal Information: We process sensitive personal information only when necessary for providing our services or with explicit consent. Users have the right to limit the use of their sensitive information, which can be exercised through account settings or by contacting support. ■ Testimonials and Reviews: We post-testimonials on our services that may contain personal information. We obtain consent from our users before posting any personal reviews to ensure their privacy is respected. We are committed to maintaining transparency in our data processing practices and providing you with control over your information. If you have any questions or need further details about how we handle your data, please feel free to contact us. 3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? In Short: We may share information in specific situations described in this section and/or with the following third parties. We may need to share your personal information in the following situations or in compliance with applicable privacy laws:

■ Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. ■ Business Partners: We may share your information with our business partners to offer you certain products, services, promotions, or offers that align with user interests. ■ Other Users: When you share personal information (for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly made available outside the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile. ■ Event-Claim Verification: If you request to claim an event, we may share limited details (e.g., your submitted business name or contact email) with the event’s original source or hosting platform—only if needed to verify that you are the legitimate organizer. ■ Third-Party Service Providers: We engage third parties to help with essential functions, such as payment processing, data analytics, marketing, and fraud-prevention. They are obligated to protect your data and only use it for designated purposes. ■ User Control: ▪ Public Sharing: Users can control their contributions to public areas through privacy settings; ▪ Social Media Logins: Users can manage social media sharing via the platform’s privacy settings. 4. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES? In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services. The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us, and which may link to other websites, services, or applications. Accordingly, we do not make any guarantee regarding any such third

parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link toward a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy notice. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions. If you believe a third-party link or advertisement poses a security concern, please contact The QSpace support team at support@theqspace.gay Scraping and API Compliance: We gather event information from third-party websites and APIs. We respect each site’s robots.txt directives, adhere to their Terms of Service, and only collect publicly available or properly authorized information. However, we do not control these external websites or their data practices. We recommend reviewing their respective privacy notices if you have concerns about how they handle personal data. 5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? In Short: We currently do not use cookies but may implement tracking technologies in the future. 6. HOW DO WE HANDLE YOUR SOCIAL LOGINS? In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you. Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or Twitter logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, and profile picture, as well as other information you choose to make public on such a social media platform. We will use the information we receive only for the purposes that are described in this privacy notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media

provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps. Opt-out and management: ■ You can disconnect your social media accounts from The QSpace through the platform's privacy settings or by contacting our support team. 7. HOW LONG DO WE KEEP YOUR INFORMATION? In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. In Short: We retain your personal information only as long as necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law. Retention Periods: ■ Account Information: We retain personal information related to your account for as long as your account remains active or as needed to provide you with our services. If you close your account, we will delete your personal information within 12 months unless legal obligations or operational needs require a longer retention period. ■ Legal Requirements: Specific information may be retained longer due to legal mandates: ■ Financial Records: Retained for seven years for tax and accounting purposes; ■ Service Usage Records: Certain data may be retained based on legal mandates or to improve our services. Post-Account Deletion: ■ Following account deletion, your personal information may still exist in backup and archival copies for a limited time due to our data protection processes. It will be isolated from any further processing until final deletion.

Data deletion and Anonymization: ■ Once your data is no longer required for our operational or legal needs, we will either delete or anonymize it. If deletion is temporarily impracticable (e.g., data stored in backup archives), it will remain securely stored until it can be removed. Your Choices and Rights: In Short. You have specific rights and choices regarding the management and use of your personal information. Exercising Your Rights: ■ Access & Portability: Request information about how we process your personal data and obtain a machine-readable copy of that information. ■ Delete Account and Information: Delete your account and associated information at any time. Residual data may be retained for legal reasons or other purposes outlined in this privacy notice. ■ Update or Correct Information: Update or correct your personal data directly via your account settings. ■ Opt-Out of Marketing Communications: Opt-out of promotional emails by following the unsubscribe link in those messages or by updating your preferences. ■ Restrict Processing & Withdraw Consent: Limit or withdraw consent for the processing of your personal information, subject to applicable legal requirements. ■ Non-Discrimination: Exercise your privacy rights without any form of discrimination. Learn more and exercise your rights: ■ To understand more about your privacy choices, or to make a request regarding your personal data, please contact us legal@theqspace.gay 8. HOW DO WE KEEP YOUR INFORMATION SAFE? In Short: At The QSpace, we prioritize the security of your personal information, including sensitive data, with high-level protection measures and continuous improvements. Commitment to security:

■ Active Security Measures: Our team works tirelessly to uphold the integrity, confidentiality, and availability of our services. We employ industry-standard security measures such as encryption, firewalls, and secure socket layer (SSL) technology. ■ Ongoing Vigilance: We constantly evaluate our security practices and adapt our defenses to counter new and emerging threats, ensuring that we maintain strong protections for your personal and sensitive information. Acknowledging Risks: ■ Limitations of Security Measures: Despite our best efforts, no method of transmission over the internet or electronic storage can be guaranteed to be 100% secure. While we strive to protect your personal information, we cannot ensure, warrant, promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment. ■ Service Disclaimer: Our security, safety, and privacy features are provided on an "as-is" basis. Their effectiveness and error-free operation cannot be guaranteed, and we cannot ensure absolute confidentiality, anonymity, or personal safety. Legal compliance and notification: ■ Data Breach Notification: In accordance with legal requirements, should there be any unauthorized access to your personal information, we are prepared to inform you promptly. Notification procedures may include electronic or written communication, depending on the nature of the breach and applicable laws. User Responsibility: ■ Secure Environment Recommendation: We recommend that you access our services only within a secure environment and remain vigilant in protecting your own personal information; ■ Opt-Out for Concerned Users: Individuals with specific security concerns about how their data is managed may consider not using the services, reflecting the serious consideration we advise all users to take regarding their personal data security.

9. DO WE COLLECT INFORMATION FROM MINORS? In Short: We do not knowingly collect data from or market to children under 18 years of age. We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at legal@theqspace.gay 10. WHAT ARE YOUR PRIVACY RIGHTS? In Short: You have the right to review, change, or terminate your account at any time, as well as exercise various rights regarding your personal information, as outlined below: Your Rights: You have specific rights under applicable U.S. state and international data protection laws. These rights include:

• Right to Know: You can ask whether we are processing your personal data and request access to this data; • Right to Access: You are entitled to request copies of the personal data we hold about you; • Right to Correct: If you believe that any personal data we hold about you is incorrect or incomplete, you have the right to request that we correct or update it; • Right to Deletion: You can request the deletion of your personal data from our systems, subject to certain exceptions; • Right to Portability: Where applicable, you can request that we provide your data to you in a portable and usable format; • Right to Non-Discrimination: Exercising your privacy rights will not result in discriminatory treatment; • Right to Opt-Out: You have the right to opt-out of certain uses of your personal data, including targeted advertising, the sale of personal data, or profiling; • Right to Withdraw Consent: If our processing of your personal information is based on consent, you may withdraw that consent at any time. How to Exercise Your Rights: To exercise any of these rights, please use the contact details provided in the “How Can You Contact Us About This Notice?” section. You may also manage many aspects of information collection and use directly from your account settings. Designating an Authorized Agent: You can designate an authorized agent to make a request on your behalf. To do so, your agent will need to provide proof of authorization. We will verify the identity of the agent in the same manner as we do with direct user requests. Request Verification: Upon receiving a request, we need to verify your identity to ensure that we are dealing with the correct individual. This process may involve asking you to provide information that we can match with data we already hold. We use personal information provided in your request solely for the purposes of verification. Withdrawing Consent:

• Process: You can withdraw your consent at any time by contacting us using the methods outlined in our contact section. • Effects of Withdrawal: Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. Opting Out of Marketing and Promotional Communications: • Unsubscribe: You can opt-out of receiving marketing emails from us at any time by clicking the unsubscribe link at the bottom of our emails or by contacting us directly. • Service-Related Communications: Opting out of marketing communications will not stop service- related communications, such as account verification, purchase confirmations, and responses to customer support inquiries. Reviewing and Modifying Account Information: • Access and Changes: You can review or change the information in your account at any time by logging into your account and visiting the account settings page. • Account Termination: Should you choose to terminate your account; you can contact us using the provided contact information. Please note that some information may need to be retained for legal reasons. How to Contact Us About Your Rights: For more detailed information on managing your privacy rights or to make specific requests regarding your personal information, please contact us via the contact information provided in the “How Can You Contact Us About This Notice?” section. 11. CONTROLS FOR DO-NOT-TRACK FEATURES Most web browsers, some mobile operating systems, and certain applications offer a Do-Not-Track ("DNT") feature or setting that signals a privacy preference not to have data about your online browsing activities tracked. However, there is currently no industry-standard technology or framework for recognizing or implementing these signals. California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

Our Approach: ■ DNT Signals: We do not currently respond to DNT browser signals or other mechanisms that automatically communicate your choice not to be tracked online due to the lack of a uniform standard. ■ Future Standards: While we do not currently respond to DNT signals due to the lack of a uniform industry-standard, we are committed to monitoring regulatory changes. If an industry-standard or legal requirement for recognizing DNT signals is established, we will adjust our practices accordingly and update this privacy notice to reflect these changes. 12. DO RESIDENTS OF CERTAIN STATES HAVE SPECIFIC PRIVACY RIGHTS? In Short: If you are a resident of California, Colorado, Connecticut, Utah Virginia, Montana, and Maryland and others listed below, you are granted specific rights regarding access to your personal information. Each section below describes specific rights under different U.S. state privacy laws. If you reside in a state that enacts or modifies its law, we will comply with the most current legal requirements even if this policy has not yet been updated to reflect those changes. What categories of personal information do we collect? Category Examples Collected A. Identifiers Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, IP address, email address, and account name YES B. Personal information as defined in the California Customer Records statute Name, contact information, education, employment, employment history, and financial information YES C. Protected classification Gender and date of birth

characteristics under state or federal law YES D. Commercial information Transaction information, purchase history, financial details, and payment information YES E. Biometric information Fingerprints and voiceprints YES F. Internet or other similar network activity Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements YES G. Geolocation data Device location YES H. Audio, electronic, visual, thermal, olfactory, or similar information Images and audio, video or call recordings created in connection with our business activities NO I. Professional or employment- related information Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us NO J. Education Information Student records and directory information NO K. Inferences drawn from collected personal information Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics NO

L. Sensitive personal Information Account login information, biometric data, contents of email or text messages, debit or credit card numbers, drivers' licenses, passport numbers, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, sex life or sexual orientation and state id card numbers YES We will use and retain the collected personal information as needed to provide the Services or for: ■ Category A - As long as the user has an account with us; ■ Category B - As long as the user has an account with us; ■ Category C - As long as the user has an account with us; ■ Category D - As long as the user has an account with us; ■ Category E - As long as the user has an account with us; ■ Category F - As long as the user has an account with us; ■ Category G - As long as the user has an account with us; ■ Category L - As long as the user has an account with us Category L information may be used, or disclosed to a service provider or contractor, for additional, specified purposes. You have the right to limit the use or disclosure of your sensitive personal information. We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of: ■ Receiving help through our customer support channels; ■ Participation in customer surveys or contests; and ■ Facilitation in the delivery of our Services and to respond to your inquiries. How do we use and share your personal information? Learn about how we use your personal information in the section, "HOW DO WE PROCESS YOUR INFORMATION?" Will your information be shared with anyone else?

We may disclose your personal information with our service providers under a written contract between us and each service provider. Learn more about how we disclose personal information in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers. California California Civil Code § 1798.83, also known as the "Shine The Light" law permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below. If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.). California Consumer Privacy Act (C.C.P.A.) Privacy Notice This section applies only to California residents. Under the California Consumer Privacy Act (C.C.P.A.), you have the rights listed below.

The California Code of Regulations defines a “resident” as: (1) every individual who is in the State of California for other than a temporary or transitory purpose and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose All other individuals are defined as "non-residents." If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information. Your rights with respect to your personal data Right to Request Deletion of the Data — Request to Delete You can request the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities. Right to Be Informed — Request to Know Depending on the circumstances, you have a right to know: ■ whether we collect and use your personal information; ■ the categories of personal information that we collect; ■ the purposes for which the collected personal information is used; ■ whether we sell or share personal information to third parties; ■ the categories of personal information that we sold, shared, or disclosed for a business purpose; ■ the categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose;

■ the business or commercial purpose for collecting, selling, or sharing personal information; and ■ the specific pieces of personal information we collected about you. In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request. Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights We will not discriminate against you if you exercise your privacy rights. Right to Limit Use and Disclosure of Sensitive Personal Information If the business collects any of the following: ■ social security information, drivers' licenses, state ID. cards, passport numbers ■ account login information; ■ credit card numbers, financial account information, or credentials allowing access to such accounts; ■ precise geolocation; ■ racial or ethnic origin, religious or philosophical beliefs, union membership; ■ the contents of email and text, unless the business is the intended recipient of the communication; ■ genetic data, biometric data, and health data; ■ data concerning sexual orientation and sex life you have the right to direct that business to limit its use of your sensitive personal information to that use which is necessary to perform the Services. Once a business receives your request, they are no longer allowed to use or disclose your sensitive personal information for any other purpose unless you provide consent for the use or disclosure of sensitive personal information for additional purposes.

Please note that sensitive personal information that is collected or processed without the purpose of inferring characteristics about a consumer is not covered by this right, as well as the publicly available information. To exercise your right to limit use and disclosure of sensitive personal information, please visit: theqspace.gay. Verification Process Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate. We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you. Other Privacy Rights ■ You may object to the processing of your personal information. ■ You may request correction of your personal data if it is incorrect or no longer relevant or ask to restrict the processing of the information. ■ You can designate an authorized agent to make a request under the C.C.P.A. on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the C.C.P.A. ■ You may request to opt-out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.

To exercise these rights, you can contact us by visiting theqspace.gay, by email at development@theqspace.gay, or by referring to the contact details at the bottom of this document. If you have a complaint about how we handle your data, we would like to hear from you. Financial Incentives "Financial incentive" means a program, benefit, or other offering, including payments to consumers as compensation, for the disclosure, deletion, sale, or sharing of personal information. The law permits financial incentives or a price or service difference if it is reasonably related to the value of the consumer’s data. A business must be able to explain how the financial incentive or price, or service difference is reasonably related to the value of the consumer’s data. The explanation must include: ■ a good-faith estimate of the value of the consumer’s data that forms the basis for offering the financial incentive or price or service difference; and ■ a description of the method the business used to calculate the value of the consumer’s data. If we offer financial incentives in exchange for the retention, sale, or sharing of your personal information, we will provide a good-faith estimate of the value of your personal data. This estimate will be based on factors such as the cost of data collection, storage, and the potential revenue generated from the use of your data. The value of your personal data is calculated using industry- standard methodologies and is reasonably related to the nature of the incentive or price difference offered. You can withdraw from any financial incentive at any time by emailing legal@theqspace.gay. Colorado This section applies only to Colorado residents. Under the Colorado Privacy Act (CPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. ■ Right to be informed whether or not we are processing your personal data; ■ Right to access your personal data; ■ Right to correct inaccuracies in your personal data; ■ Right to request deletion of your personal data;

■ Right to obtain a copy of the personal data you previously shared with us; ■ Right to opt-out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling") To submit a request to exercise these rights described above, please visit legal@theqspace.gay If we decline to act regarding your request and you wish to appeal our decision, please email us at legal@theqspace.gay. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. Connecticut This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. ■ Right to be informed whether or not we are processing your personal data; ■ Right to access your personal data; ■ Right to correct inaccuracies in your personal data; ■ Right to request deletion of your personal data; ■ Right to obtain a copy of the personal data you previously shared with us; ■ Right to opt-out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling") To submit a request to exercise these rights described above, please email legal@theqspace.gay

If we decline to act regarding your request and you wish to appeal our decision, please email us at legal@theqspace.gay. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. Utah This section applies only to Utah residents. Under the Utah Consumer Privacy Act (UCPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. ■ Right to be informed whether or not we are processing your personal data; ■ Right to access your personal data; ■ Right to request deletion of your personal data; ■ Right to obtain a copy of the personal data you previously shared with us; ■ Right to opt-out of the processing of your personal data if it is used for targeted advertising or the sale of personal data To submit a request to exercise these rights described above, please email legal@theqspace.gay Virginia Under the Virginia consumer data protection act (VCDPA): "Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context. "Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information. "Sale of personal data" means the exchange of personal data for monetary consideration.

If this definition of "consumer" applies to you, we must adhere to certain rights and obligations regarding your personal data. Your Rights with Respect to Your Personal Data ■ Right to be informed whether or not we are processing your personal data; ■ Right to access your personal data; ■ Right to correct inaccuracies in your personal data; ■ Right to request deletion of your personal data; ■ Right to obtain a copy of the personal data you previously shared with us; ■ Right to opt-out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling") Exercise Your Rights Provided Under the Virginia VCDPA You may email legal@theqspace.gay If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf. Verification Process We may request that you provide additional information reasonably necessary to verify you and your consumer's request. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request. Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension. Right to Appeal

If we decline to act regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at legal@theqspace.gay. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint. Maryland If you are a resident of Maryland, the following rights apply to you under the Maryland Online Data Privacy Act, effective October 1, 2024: Right to Access You have the right to request access to the personal data we have collected about you. This includes: ■ The categories of personal data we have collected; ■ The specific pieces of personal data we hold; ■ The purposes for which your personal data was collected or processed; ■ The categories of third parties with whom your personal data has been shared. Right to Delete You have the right to request that we delete your personal data, subject to certain legal exceptions. These exceptions may include: ■ Data necessary to complete a transaction, provide a service, or for security purposes; ■ Data required for detecting and protecting against fraudulent or illegal activities; ■ Data required for compliance with legal obligations, such as record retention; ■ Data required for free speech or for ensuring the right of another consumer to exercise their rights under the law. Right to Opt-Out You have the right to opt-out of the sale of your personal data or the processing of your personal data for purposes of targeted advertising. This includes: ■ The right to direct us not to sell your personal data to third parties;

■ The right to direct us not to use your personal data for targeted advertising based on your online behavior, interests, or location. Once we receive your request to opt-out, we will act on it within 15 business days and ensure that your data is no longer used for those purposes. Right to Data Portability You have the right to request a copy of your personal data in a portable and readily usable format. Upon request, we will provide your personal data in a structured, commonly used, and machine- readable format so that it can be transferred to another entity. Right to Rectify Inaccuracies If any personal data we hold about you is inaccurate or outdated, you have the right to request that we correct or update that information. We will review your request and ensure that the necessary changes are made to keep your personal data accurate and up-to-date. We will notify you of any exceptions that apply to your deletion request and provide a reason for why certain data must be retained. Right to Non-Discrimination You have the right to exercise your privacy rights under the Maryland Online Data Privacy Act without facing discrimination. This means we will not deny you services, charge different prices, or provide a different level of service based solely on your decision to exercise these rights. How to Exercise Your Rights To exercise your rights under the Maryland Online Data Privacy Act, you may contact us via: ■ Email: Send your request to legal@theqspace.gay. ■ Verification Process: In order to protect your privacy and ensure your request is valid, we will take steps to verify your identity before acting on any request. This may involve providing additional information or answering security questions. ■ Response Timeline: We will acknowledge receipt of your request within 10 days and provide a substantive response within 45 days. If additional time is needed to fulfill your request, we may extend the timeline by an additional 45 days but will notify you of the extension and the reason for the delay.

To exercise your right under the Maryland Online Data Privacy Act, you may email legal@theqspace.gay Montana Residents If you are a resident of Montana, the following rights apply to you under the Montana Consumer Data Privacy Act (MCDPA), effective October 1, 2024: Right to Access You have the right to request access to the personal data we have collected about you. This includes: ■ The categories of personal data collected; ■ The specific pieces of personal data we hold; ■ The purposes for which your personal data was collected or processed; ■ The categories of third parties with whom your personal data has been shared. You may request this information free of charge up to two times within a 12-month period. We will respond to your request within 45 days. If the request is excessive, repetitive, or manifestly unfounded, we may charge a reasonable fee or decline the request, providing a clear explanation. Right to Delete You have the right to request that we delete your personal data, subject to certain legal exceptions. These exceptions may include: ■ Personal data required to complete a transaction, provide a service, or ensure security; ■ Data necessary for fraud detection and prevention, and the protection against illegal activities; ■ Data required for compliance with legal obligations or regulatory requirements, including record retention; ■ Data needed to exercise free speech, or to protect the right of another individual to exercise their legal rights. If we deny your request for deletion based on these exceptions, we will inform you of the reason. Right to Opt-Out You have the right to opt-out of the sale of your personal data and the processing of your personal data for targeted advertising. This right includes:

■ Directing us not to sell your personal data to third parties; ■ Directing us not to process your personal data for targeted advertising, which involves using your data to display ads based on your behavior, preferences, or location. Beginning January 1, 2025, we will honor universal opt-out preference signals for targeted advertising and the sale of personal data. These signals will be implemented in accordance with the Montana Consumer Data Privacy Act. If you have opted out through a universal mechanism, we will ensure that your personal data is no longer used for these purposes within 15 business days. For more information, please contact us at legal@theqspace.gay. Right to Correct Inaccuracies You have the right to request that any inaccuracies in your personal data be corrected. Upon receiving your request, we will make reasonable efforts to correct the data as needed to ensure it is accurate and up-to-date. Right to Data Portability You have the right to request a copy of your personal data in a portable format. We will provide your data in a structured, commonly used, and machine-readable format, so you can transfer it to another service or organization if desired. Right to Non-Discrimination You have the right to exercise your privacy rights under the Montana Consumer Data Privacy Act without facing discrimination. We will not deny you services, charge different prices, or provide a different level of service because of your decision to exercise your rights. Right to Cure Violations Montana residents have the right to notify us of any violations of the Montana Consumer Data Privacy Act. Upon receiving such notification, we will have a 60-day period to cure the violation before enforcement action can be taken by the Montana Attorney General. If you believe we have violated your privacy rights, please contact us at legal@theqspace.gay to initiate the cure period. How to Exercise Your Rights To exercise your rights under the Montana Consumer Data Privacy Act, you may contact us via: ■ Email: Send your request to legal@theqspace.gay.

■ Verification Process: To ensure the security of your personal data and the validity of your request, we will need to verify your identity before acting on your request. This verification may involve providing additional information or responding to security-related questions. ■ Response Timeline: We will confirm receipt of your request within 10 days and provide a full response within 45 days. If more time is needed, we may extend the timeline by an additional 45 days and will notify you of the extension and reason. Delaware Residents of Delaware are entitled to specific rights under the Delaware Personal Data Privacy Act (DPDPA), effective January 1, 2025. These rights include: Right to Access Delaware residents have the right to confirm whether we process their personal data and request access to such data. Right to Correction You have the right to request corrections to inaccuracies in your personal data. Right to Deletion You may request the deletion of personal data that we have collected or processed about you. Right to Data Portability You may request a copy of your personal data in a portable and readily usable format. Right to Know Third-Party Sharing You may request a list of the specific third parties with whom we have shared your personal data. Right to Opt-Out Delaware residents have the right to opt-out of:

■ The sale of their personal data; ■ The processing of personal data for targeted advertising; ■ Profiling in furtherance of decisions that produce legal or similarly significant effects, such as decisions impacting financial or employment opportunities. How to Exercise Your Rights To exercise these rights, you may: ■ Submit a request via email to legal@theqspace.gay; ■ Enable universal opt-out preferences through your browser or device settings. We will respond to your request within 45 days. If additional time is needed to process your request due to complexity, we will notify you and respond within an additional 45 days. Sensitive Data We process sensitive personal data—such as biometric data, genetic data, precise geolocation, and information revealing racial or ethnic origin, sexual orientation, or health conditions—only with your explicit consent. If you wish to limit or opt-out of the processing of sensitive data, please contact us at legal@theqspace.gay. Appeals Process If we deny your request, you may submit an appeal within 60 days by contacting us at legal@theqspace.gay. We will respond to your appeal in writing within 60 days. If you are not satisfied with our response, you may contact the Delaware Department of Justice. Non-Discrimination We will not deny goods or services, charge different prices, or provide different quality levels based on your exercise of these rights. However, certain services may require the processing of personal data to function.

Data Protection and Security We implement appropriate administrative, technical, and physical safeguards to protect your personal data. If a data breach affecting your personal information, we will notify you promptly in accordance with Delaware law. Iowa Residents of Iowa are entitled to specific rights under the Iowa Consumer Data Protection Act (ICDPA), effective January 1, 2025. These rights include: Right to Access Delaware residents have the right to confirm whether we process their personal data and request access to such data. Right to Access Iowa residents have the right to confirm whether we process their personal data and to request access to such data. Right to Deletion You may request the deletion of personal data that you have provided to us. Right to Data Portability You may request a copy of personal data that you previously provided to us, in a portable and, to the extent technically practicable, readily usable format that allows you to transmit the data to another controller without hindrance. Right to Opt-Out Iowa residents have the right to opt-out of the sale of their personal data.

How to Exercise Your Rights To exercise these rights, you may: ■ Submit a request via email to legal@theqspace.gay. We will respond to your request within 90 days. If additional time is required due to the complexity of your request, we will notify you and respond within an additional 45 days. Sensitive Data We process sensitive personal data—such as racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data, and precise geolocation data—only if: 1. You have been provided clear notice, and 2. You have been given the opportunity to opt-out of such processing. If you wish to limit or opt-out of the processing of sensitive data, please contact us at legal@theqspace.gay. Appeals Process If we deny your request, you may submit an appeal within 60 days by contacting us at legal@theqspace.gay. We will respond to your appeal in writing within 60 days. If you are dissatisfied with our response, you may contact the Iowa Attorney General for further assistance. Non-Discrimination We will not deny goods or services, charge different prices, or provide different quality levels based on your exercise of these rights. However, certain services may require the processing of personal data to function. Data Protection and Security

We implement appropriate administrative, technical, and physical safeguards to protect your personal data. If a data breach affecting your personal information, we will notify you promptly in accordance with Iowa law. Nebraska Residents of Nebraska are entitled to specific rights under the Nebraska Data Privacy Act (NDPA), effective January 1, 2025. These rights include: Right to Access Consumers have the right to confirm whether we are processing their personal data and to access such data. Right to Correct Consumers may request that we correct inaccuracies in their personal data, considering the nature of the data and the purposes of processing. Right to Delete Consumers have the right to request the deletion of personal data provided by or obtained about them. Right to Data Portability Consumers may obtain a copy of the personal data they have previously provided to us in a portable, and to the extent technically feasible, readily usable format. This applies if the data is processed by automated means. Right to Opt-Out

Consumers have the right to opt-out of: • The sale of personal data; • The processing of personal data for targeted advertising; • Profiling in furtherance of decisions that produce legal or similarly significant effects. How to Exercise Your Rights To exercise any of these rights, Nebraska residents may submit a request by contacting us at: legal@theqspace.gay We may require additional information to verify your identity before processing your request. If we cannot verify your identity, we will inform you of this and may request additional information. Appeals Process If we decline to act on a request, you have the right to appeal the decision. Appeals can be submitted through the same contact methods listed above. We will review your appeal and provide a written response within 60 days. If your appeal is denied, you may submit a complaint to the Nebraska Attorney General. Sensitive Data Processing We will not process sensitive data, such as data revealing racial or ethnic origin, health diagnosis, precise geolocation, or data of known children, without obtaining your prior opt-in consent. For children under the age of 13, we comply with the federal Children’s Online Privacy Protection Act (COPPA). Data Collection and Use We collect and process personal data for the following purposes: • Providing services and fulfilling your requests; • Marketing and communications; • Complying with legal obligations.

The categories of personal data we may process include, but are not limited to, contact information, account details, and browsing activity. Sharing of Personal Data We may share personal data with service providers and other third parties as necessary to fulfill the purposes outlined in this policy. We do not sell personal data unless explicitly disclosed and permitted under the NDPA. Opt-Out Mechanisms Nebraska residents may opt-out of the sale of personal data, targeted advertising, and profiling decisions by contacting us at legal@theqspace.gay. Data Security We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, use, or disclosure. Retention Policy We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as required by law. When personal data is no longer needed, it will be securely deleted or de- identified. New Hampshire Residents of New Hampshire are entitled to specific rights under the New Hampshire Expectation of Privacy Act (RSA Chapter 507-H), effective January 1, 2025. These rights include: Access and Confirmation You have the right to confirm whether we are processing your personal data and to access such data, unless doing so would require the disclosure of a trade secret.

Correction You may request corrections to inaccuracies in your personal data, considering the purposes of processing. Deletion You can request the deletion of personal data provided by or obtained about you. Data Portability You may obtain a copy of your personal data processed by us in a portable and, where technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, provided such processing is carried out by automated means. This right does not apply if it would require us to reveal a trade secret. Opt-Out You may opt-out of the processing of personal data for the following purposes: • Targeted advertising; • Sale of personal data; • Profiling in furtherance of automated decisions that produce legal or similarly significant effects concerning you. Exercising Your Rights To exercise your rights, you may contact us at legal@theqspace.gay. You may also designate an authorized agent to act on your behalf by providing verifiable documentation of authorization. We will respond to your request without undue delay, but no later than 45 days after receipt of your request. Where reasonably necessary, we may extend the response period once by an additional 45 days and will inform you of the extension within the initial period. If we decline to act on your request, we will inform you of the reasons for our decision and provide instructions on how to appeal.

Appeals Process If you believe your rights request was improperly denied, you may submit an appeal by contacting us at legal@theqspace.gay. We will respond to your appeal within 60 days. If your appeal is denied, we will provide you with information about how to contact the New Hampshire Attorney General to submit a complaint. Data Protection and Security We implement reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of your personal data. We limit the collection of personal data to what is adequate, relevant, and reasonably necessary in relation to the disclosed purposes. Sale and Targeted Advertising If we sell personal data to third parties or process personal data for targeted advertising, we will provide clear and conspicuous disclosures of such activities, as well as information on how you may opt-out. Contact Us For any questions or to exercise your privacy rights, please contact us at legal@theqspace.gay New Jersey Residents of New Jersey are entitled to specific rights under the New Jersey Data Privacy Act (NJDPA), effective January 15, 2025. These rights include: Access and Confirmation

You have the right to confirm whether we are processing your personal data and to access such data, unless doing so would require the disclosure of a trade secret. Correction You may request corrections to inaccuracies in your personal data, considering the purposes of processing. Deletion You can request the deletion of personal data provided by or obtained about you. Data Portability You may obtain a copy of your personal data processed by us in a portable and, where technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, provided such processing is carried out by automated means. This right does not apply if it would require us to reveal a trade secret. Opt-Out You may opt-out of the processing of personal data for the following purposes: • Targeted advertising; • Sale of personal data; • Profiling in furtherance of automated decisions that produce legal or similarly significant effects concerning you Exercising Your Rights To exercise your rights, you may contact us at legal@theqspace.gay. You may also designate an authorized agent to act on your behalf by providing verifiable documentation of authorization. We will respond to your request without undue delay, but no later than 45 days after receipt of your request. Where reasonably necessary, we may extend the response period once by an additional 45 days

and will inform you of the extension within the initial period. If we decline to act on your request, we will inform you of the reasons for our decision and provide instructions on how to appeal. Appeals Process If you believe your rights request was improperly denied, you may submit an appeal by contacting us at legal@theqspace.gay. Appeals will be reviewed and responded to within 60 days. If your appeal is denied, we will provide you with information on how to contact the New Jersey Attorney General’s Office to submit a complaint. Categories of Personal Data Processed We process the following categories of personal data: • Personal identifiers (e.g., name, email address, phone number); • Biometric data (e.g., fingerprints, voiceprints, iris scans) when applicable; • Precise geolocation data; • Internet activity or other electronic network activity; • Sensitive data, such as racial or ethnic origin, health information, or sexual orientation, where provided and processed with consent Categories of Personal Data Shared We may share the following categories of personal data with third parties: • Personal identifiers; • Internet or electronic activity; • Precise geolocation data Categories of Third Parties We May Share Personal Data With: • Service providers and processors acting on our behalf;

• Affiliates or subsidiaries; • Third parties for business transactions (e.g., mergers or acquisitions) Sensitive Data Processing We will not process sensitive data, including biometric data or precise geolocation data, without your explicit consent, unless permitted or required by law. Opt-Out Mechanism If applicable, you may opt-out of the sale of personal data or the use of personal data for targeted advertising by contacting us at legal@theqspace.gay or by utilizing any mechanisms provided in this Privacy Policy. Data Security We implement reasonable administrative, technical, and physical safeguards to protect personal data from unauthorized access, use, or disclosure. Contact Information For questions about this policy or to exercise your rights, you can contact us at • Email: legal@theqspace.gay 13. DO WE MAKE UPDATES TO THIS NOTICE? In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws. We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information. 14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE? For general support, email support@theqspace.gay. For privacy-related requests under the laws described in this policy, please email legal@theqspace.gay. For development or technical integration

inquiries, please email development@theqspace.gay. If you are unsure, you may contact admin@theqspace.gay and your message will be routed appropriately. 15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please email: legal@theqspace.gay. Right to Rectify Inaccuracies You have the right to request that we correct any inaccurate or outdated personal data we hold about you. To request corrections or updates to your personal information, please contact us at legal@theqspace.gay, and we will promptly address your request. 16. DISPUTE RESOLUTION All disputes arising from or relating to this Privacy Policy are subject to the arbitration clause, governing law, and venue provisions set out in our Terms of Service, which you agree to by using our Services (The QSpace). If you disagree with any part of our dispute resolution process, you should discontinue using the Services. 17. POLICY REVIEW AND UPDATES The QSpace LLC regularly reviews and updates this Privacy Policy to ensure compliance with applicable laws and regulations, reflecting changes in our data processing practices or in the legal framework. This policy may be updated to accommodate new state laws, changes to existing laws, or adjustments in our internal procedures that impact the way we collect or handle your data. Notification of Changes: Whenever this policy is updated, we will notify you by updating the "Last updated" date of this privacy notice and, depending on the nature of the changes, we may provide additional notice such as posting a notice on our digital platforms or sending you direct communication.

We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information and to be aware of any changes that might affect your rights and freedoms regarding your personal data. Effective Date: This policy and any amendments become effective upon posting on our website or as otherwise communicated to you.