← RSAAID Holdings Corporation
Legal

Privacy Policy

Effective date: May 6, 2026 · Last updated: June 20, 2026
DRAFT — FOR REVIEW BY COUNSEL

This Privacy Policy describes how RSAAID Holdings Corporation, a Delaware corporation ("RHC," "we," "us," or "our"), collects, uses, discloses, and protects personal information in connection with the website at rsaaidholdings.com (the "Site"). By using the Site, you consent to the practices described in this Policy.

1. Information We Collect

1.1 Information you provide

When you request investor access or otherwise interact with the Site, we collect the information you submit, which may include your full name, email address, telephone number, investor classification (for example, angel, venture capital, family office, strategic, or developer), firm or fund name, the password you create, and your certification regarding accredited-investor status.

1.2 Information collected automatically

When you access the Site, we automatically collect certain technical information, including your Internet Protocol (IP) address, browser type and version (user agent), device information, access times, and pages viewed. We use session cookies to maintain authentication and security; see our Cookie Policy.

1.3 Access and activity logs

For security and compliance, we maintain logs of sign-ins, access-code entries, and views of confidential materials, which may be attributed to your account.

2. How We Use Information

3. Legal Bases for Processing

We process personal information as necessary to take steps at your request prior to entering into a potential investment relationship, for our legitimate business interests (including security and verification), to comply with legal obligations, and, where applicable, with your consent. Because RHC conducts offerings under Rule 506(c), verification of accredited status and retention of related records is a regulatory necessity.

4. How We Share Information

We do not sell your personal information. We may share it in the following circumstances:

RecipientPurpose
Service providersHosting, email delivery, and verification services acting on our behalf under contractual confidentiality obligations
Professional advisorsLegal, accounting, and financial advisors in connection with the offering
Affiliates & subsidiariesRHC subsidiaries where relevant to your investor relationship
AuthoritiesRegulators, courts, or law enforcement where required by law or to protect our rights
SuccessorsAn acquirer or successor in connection with a merger, financing, or sale of assets

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. Passwords are stored using one-way hashing, and tier-access codes are stored in hashed form. Despite these measures, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to administer the investor relationship, and to satisfy legal, regulatory, tax, and accounting requirements. When information is no longer required, we will delete or de-identify it.

7. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, update, port, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact Investor Relations. We will respond consistent with applicable law; certain information must be retained to meet our legal obligations. You may decline cookies through your browser, but disabling session cookies will prevent sign-in to restricted areas.

8. International Users

The Site is operated from the United States. If you access it from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. [Counsel to advise on GDPR/UK GDPR and any required transfer mechanisms if non-U.S. investors are solicited.]

9. Children's Privacy

The Site is not directed to individuals under 18, and we do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. We will post the revised version with a new effective date. Material changes will be communicated as required by law.

11. Contact

For privacy questions or to exercise your rights, contact Investor Relations, RSAAID Holdings Corporation, at the email address provided on the Site.

© 2026 RSAAID Holdings Corporation, a Delaware corporation. All rights reserved.
This document has been prepared for review by counsel and is subject to revision. It does not constitute legal advice.