Privacy Policy

Privacy Policy Last Updated: September 9, 2026 Engage for Teams ("Engage", "we", "us", or "our") operates the website engageforteams.com and the Engage web application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect information when organizations, communities, administrators, planners, and participants use our Service. By using the Service, you acknowledge the practices described in this Privacy Policy. 1. Information We Collect 1.1 Organization and Account Information Organizations, companies, communities, or other entities using Engage may provide information necessary to create and manage their account. Depending on the Service configuration, this may include: • Email address • First and last name • Username • Department or similar organizational information • Account and authentication information • Subscription and payment-related information • Information necessary to administer the organization’s use of the Service We do not require organizations to provide additional business information unless such information is necessary for a particular Service feature or required for account, billing, security, or legal purposes. 1.2 Participant Information An organization using Engage may add participant information directly to the Service or create and share participant links. Participant information may include: • First and last name • Email address • Username • Department or similar information • Other information that the organization chooses to provide in connection with an event or application The organization is responsible for determining what participant information it provides to Engage and for having an appropriate legal basis, authorization, or consent to provide such information where required by applicable law. 1.3 Event and Application Information Engage may process information related to events and applications created by an organization or planner, including: • Event date and time • Application configuration • Participation rules • Assignment rules • Participant selections • Application results • Prize or reward information • Other information necessary to operate the selected application The specific information processed may vary depending on the application selected and its configuration. 2. How Engage Works Engage provides web-based applications that organizations and communities can use to organize events, activities, assignments, competitions, selections, and reward-based experiences. An organization or planner may define the rules, event date, time, participant information, and other parameters for an application. Participants use the relevant application according to the rules presented to them during the event planning or participation process. Some Engage applications may use automated or randomized assignment mechanisms. Where an application uses random assignment, the assignment is generated automatically by the software based on the applicable application logic. Engage does not manually select or intervene in individual random assignments. The organization using the Service is responsible for defining the applicable rules and determining how rewards or prizes are distributed, unless otherwise expressly stated. 3. How We Use Information We may use collected information to: • Provide, operate, and maintain the Service • Create and manage user and organization accounts • Authenticate users • Process event and application configurations • Facilitate participation in events and applications • Generate application results and assignments • Provide customer support • Process subscriptions and payments • Communicate with users about the Service • Detect, prevent, and address fraud, abuse, security incidents, and technical problems • Monitor and improve the performance and functionality of the Service • Conduct analytics and understand how the Service is used • Comply with applicable legal obligations • Protect our rights, users, and the security of the Service 4. Organization Responsibility for Participant Data Organizations using Engage may provide participant information to us for the purpose of operating their events and applications. The organization is responsible for: • Providing participant information lawfully; • Obtaining any consent or authorization required by applicable law; • Informing participants about the processing of their information; • Providing participants with any legally required notices; • Ensuring that the information provided to Engage is accurate and appropriate for the intended use. Engage generally processes participant information on behalf of the organization in connection with the organization's use of the Service. Participants who have questions regarding why their information was provided to Engage or how their organization uses their information should generally contact the relevant organization or event administrator first. 5. Sharing of Information We do not sell personal information. We may disclose information to: • Service providers that help us operate the Service; • Hosting, infrastructure, security, analytics, communication, and technical service providers; • Payment and billing providers; • Professional advisers where reasonably necessary; • Government authorities or other parties where required by law; • Parties involved in a merger, acquisition, financing, restructuring, or sale of assets. Service providers may only process information as necessary to provide services to us and subject to appropriate contractual or legal requirements. 6. Payments Payments for Engage subscriptions or other paid services may be processed through third-party payment providers. Depending on the applicable transaction and configuration, payment information may be processed directly by the relevant payment provider. Engage does not intend to store complete payment card numbers on its own systems. 7. Cookies and Analytics Engage may use cookies, similar technologies, and analytics tools to operate the website and application, understand usage patterns, improve functionality, maintain security, and measure service performance. These technologies may collect information such as: • Browser and device information • IP address • Approximate geographic information • Pages or features accessed • Referring pages • Usage and interaction information • Technical and diagnostic information Where required by applicable law, we will obtain consent for non-essential cookies or similar technologies. 8. Authentication and Login Methods Engage may support different authentication or login methods depending on the Service configuration. Authentication providers may process information necessary to authenticate a user and maintain account security. The availability of particular login methods may change over time. 9. Data Retention We retain information for as long as reasonably necessary to: • Provide the Service; • Maintain user and organization accounts; • Fulfill contractual obligations; • Resolve disputes; • Enforce agreements; • Maintain security; • Comply with legal, accounting, or regulatory obligations. Organizations may be responsible for determining appropriate retention periods for participant information they provide to Engage, subject to applicable law and the functionality of the Service. When information is no longer required, we may delete or anonymize it, subject to applicable legal and operational requirements. 10. Data Security We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. 11. International Data Transfers Engage and its service providers may process information in countries other than the country in which a user or organization is located. Where required by applicable law, appropriate safeguards may be used for international transfers of personal information. 12. Children's Privacy The Service is primarily intended for organizations, communities, businesses, and their users. Engage does not knowingly seek to collect personal information directly from children in violation of applicable law. Organizations are responsible for ensuring that their use of the Service and collection of participant information complies with applicable age and child-protection requirements. 13. Your Rights Depending on your location and applicable law, you may have rights regarding your personal information, including the right to: • Request access to your information; • Request correction of inaccurate information; • Request deletion of information; • Request restriction of processing; • Object to certain processing; • Request portability of certain information; • Withdraw consent where processing is based on consent. If your information was provided to Engage by an organization, we may direct your request to that organization where appropriate because the organization may control the relevant participant information. 14. Payment Information and Third-Party Payment Processing Payments for the Service may be processed by third-party payment providers, including Paddle. When you make a payment, payment card information may be collected and processed directly by the applicable payment provider rather than by Engage. Engage does not intentionally store complete payment card numbers, CVV/security codes, or other sensitive payment credentials on its own systems. Because payment information may be processed by third-party providers, the security and processing of such information may also be subject to the provider's own privacy policy, security practices, and terms. Engage does not control the internal systems of third-party payment providers and cannot guarantee the security of information processed within those third-party systems. If a security incident occurs within a third-party payment provider's systems, the relevant provider may be responsible for investigating and addressing the incident in accordance with applicable law and its own policies. Where Engage becomes aware of a security incident affecting personal information for which Engage has legal notification obligations, we will take reasonable steps to investigate, mitigate, and provide notifications as required by applicable law. 15.Security We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction. However, no online service or electronic transmission can be guaranteed to be completely secure. Security risks may arise from circumstances beyond our reasonable control, including compromised user credentials, phishing, malware, cyberattacks, vulnerabilities in third-party software or infrastructure, zero-day vulnerabilities, unauthorized actions by third parties, and failures of third-party providers. Users and organizations are responsible for protecting their account credentials and for promptly notifying Engage if they suspect unauthorized access to their account. Where participant information is provided by an organization, the organization is also responsible for ensuring that it has appropriate authorization or legal basis to provide that information to Engage.

16. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date above. Material changes may also be communicated through the Service or other appropriate means. 17. Contact Us If you have questions about this Privacy Policy or our privacy practices, contact us at: Email: info@engageforteams.com Website: engageforteams.com