Privacy Policy and AI Data Processing Policy

PRESS PLAY ECOSYSTEM PRIVACY POLICY AND AI DATA PROCESSING POLICY Effective Date: 06/01/2026 Last Updated: 06/01/2026 OPERATED BY: Song Mates, Inc. 126 W. Van Buren Street Columbia City, Indiana 46725 Email Contacts: privacy@songmates.com support@songmates.com legal@songmates.com copyright@songmates.com dmca@songmates.com SECTION 1 INTRODUCTION Song Mates, Inc. ("Song Mates," "Press Play," "Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, process, and protect information obtained through: • Press Play • Press Play Mosaic • Press Play Radio • Press Play Studio • Press Play Fantasy • Root Note • SongStory • Day Stream • Hooksies • associated mobile applications • websites • APIs • future products and services (collectively, the "Platform"). By using the Platform, you acknowledge and agree to the practices described in this Privacy Policy. SECTION 2 INFORMATION WE COLLECT We may collect information directly from users, automatically through Platform use, and from third-party service providers. Information may include: ACCOUNT INFORMATION • name • username • display name • email address • password credentials (encrypted) • profile photographs • account settings • communication preferences ARTIST INFORMATION • artist names • band names • biographies • links • social media profiles • performance information • uploaded music • uploaded artwork • uploaded videos • merchandise information • payout information FAN INFORMATION • subscriptions • follows • favorites • playlists • purchases • comments • reviews • audio commentary • video commentary • engagement history PAYMENT INFORMATION Payments are processed through Stripe and other payment providers. Press Play generally does not store full payment card numbers. Payment providers may collect: • billing addresses • payment card information • transaction information • fraud prevention information DEVICE INFORMATION • IP address • browser type • operating system • device identifiers • language preferences • geographic region • session information USAGE INFORMATION • pages viewed • features used • interactions • searches • uploads • purchases • listening activity • streaming activity • navigation behavior SECTION 3 USER-GENERATED CONTENT Users may create and upload content including: • music • audio recordings • videos • photographs • text posts • comments • messages • reviews • fan commentary • artist commentary • profile information Such content may be visible to other users based on account settings and Platform functionality. Users are responsible for content they choose to upload. SECTION 4 COMMUNICATIONS We may collect and process communications sent through the Platform including: • messages • support requests • reports • inquiries • feedback • moderation requests Press Play does not actively monitor private communications except where reasonably necessary for: • security purposes • legal compliance • fraud prevention • abuse investigations • enforcement of Terms SECTION 5 COOKIES AND TRACKING TECHNOLOGIES The Platform may use: • cookies • local storage • web beacons • pixels • analytics tools • device identifiers These technologies help us: • authenticate users • improve functionality • analyze usage • maintain security • personalize experiences • measure performance Users may manage cookie preferences through browser settings, although some features may not function properly if cookies are disabled. SECTION 6 HOW WE USE INFORMATION We may use collected information to: • operate the Platform; • authenticate users; • process purchases; • process payouts; • administer subscriptions; • provide customer support; • maintain security; • prevent fraud; • detect abuse; • improve services; • personalize user experiences; • recommend artists and content; • provide analytics; • communicate with users; • comply with legal obligations; • enforce our Terms. SECTION 7 ROOT NOTE AND DISCOVERY FEATURES Press Play may use artist information, metadata, user interactions, influence relationships, content categories, listening activity, and engagement information to power: • Root Note • recommendation systems • artist discovery tools • search functionality • relationship mapping features These systems are intended to improve artist discovery and user experiences within the Platform. SECTION 8 ARTIFICIAL INTELLIGENCE (AI) PROCESSING Press Play Studio and other Platform features may utilize automated systems, machine learning technologies, artificial intelligence-assisted tools, recommendation systems, analytics engines, and content-processing technologies. These tools may be used to: • analyze content; • generate metadata; • organize content; • create previews; • generate clips; • create promotional materials; • improve search results; • improve recommendations; • provide analytics; • assist users in managing content. AI-assisted processing is intended solely to support Platform functionality and user-requested services. SECTION 9 NO AI TRAINING ON ARTIST CONTENT Press Play is committed to protecting artists and creators. Press Play shall not knowingly use artist-uploaded content to train, fine-tune, improve, develop, or build general-purpose artificial intelligence models intended for use outside the Press Play Ecosystem. This commitment applies to: • music; • recordings; • vocals; • lyrics; • compositions; • artwork; • photographs; • videos; • artist branding; • artist likenesses. Artist content may only be processed as reasonably necessary to provide Platform functionality requested by the artist. SECTION 10 NO AI TRAINING ON FAN CONTENT Press Play shall not knowingly use fan-generated content to train general-purpose artificial intelligence models intended for use outside the Press Play Ecosystem. This includes: • comments; • reviews; • fan commentary; • audio commentary; • video commentary; • private messages; • user-generated content. Press Play does not sell fan content to artificial intelligence companies. SECTION 11 AI-GENERATED OUTPUTS Where Platform features generate AI-assisted outputs, such outputs may include: • descriptions; • summaries; • promotional materials; • recommendations; • metadata; • organizational content. Users retain ownership of original content. Press Play claims no ownership in user-created content solely because AI-assisted features were used. Press Play may retain limited rights necessary to store, display, process, and deliver AI-generated outputs within the Platform. SECTION 12 DATA SHARING AND DISCLOSURE Press Play does not sell personal information to data brokers. Press Play may share information with: • payment processors; • cloud hosting providers; • analytics providers; • fraud prevention providers; • security vendors; • communication vendors; • customer support providers; • legal and compliance providers. Information is shared only to the extent reasonably necessary to operate and secure the Platform. SECTION 13 SERVICE PROVIDERS Third-party service providers may assist with: • payment processing; • cloud infrastructure; • content delivery; • analytics; • communications; • customer support; • fraud prevention; • cybersecurity. Such providers are generally permitted to access information only as necessary to perform services on behalf of Press Play. SECTION 14 STRIPE AND PAYMENT PROCESSING Payments on the Platform may be processed by Stripe or successor payment providers. Payment processors may collect information including: • billing information; • payment information; • transaction information; • fraud prevention information. Use of payment services may also be governed by the terms and privacy policies of those providers. Press Play is not responsible for the privacy practices of independent payment providers. SECTION 15 LEGAL COMPLIANCE DISCLOSURES Press Play may disclose information where reasonably necessary to: • comply with laws; • comply with court orders; • respond to legal process; • investigate fraud; • investigate abuse; • enforce Terms of Service; • protect rights and safety; • protect artists; • protect users; • protect the Platform. SECTION 16 BUSINESS TRANSFERS In connection with a merger, acquisition, financing, restructuring, asset sale, bankruptcy proceeding, or similar transaction, user information may be transferred as part of the transaction. Any successor entity shall remain subject to applicable privacy obligations. SECTION 17 DATA RETENTION Press Play retains information for as long as reasonably necessary to: • operate the Platform; • provide services; • maintain records; • comply with legal obligations; • resolve disputes; • enforce agreements; • maintain security. Retention periods may vary depending upon the nature of the information and applicable legal requirements. SECTION 18 ACCOUNT DELETION Users may request deletion of their accounts by contacting: privacy@songmates.com or support@songmates.com Deletion requests may be subject to: • legal obligations; • fraud prevention requirements; • payment processing requirements; • tax record requirements; • dispute resolution requirements; • security obligations. Certain information may be retained where legally required or reasonably necessary for legitimate business purposes. SECTION 19 USER RIGHTS Subject to applicable law, users may have the right to: • access personal information; • correct personal information; • delete personal information; • restrict processing; • object to processing; • obtain copies of information; • withdraw consent where applicable. Requests may be submitted to: privacy@songmates.com Press Play may verify identity before processing requests. SECTION 20 STATE PRIVACY RIGHTS Residents of certain jurisdictions may have additional privacy rights under applicable law. Where required by law, Press Play shall provide users with applicable rights concerning: • access; • deletion; • correction; • portability; • opt-out rights; • non-discrimination. Nothing in this Policy shall be interpreted to limit rights granted by applicable law. SECTION 21 CHILDREN'S PRIVACY The Platform is not directed toward children under the age of thirteen (13). Press Play does not knowingly collect personal information from children under thirteen (13). If Press Play becomes aware that information has been collected from a child under thirteen (13) without appropriate authorization, reasonable efforts will be made to delete such information. Parents or guardians who believe a child has submitted personal information may contact: privacy@songmates.com SECTION 22 INTERNATIONAL USERS The Platform is operated from the United States. Users accessing the Platform from outside the United States understand that information may be transferred to, processed in, and stored within the United States. By using the Platform, users consent to such transfers where permitted by law. SECTION 23 SECURITY Press Play employs commercially reasonable administrative, technical, and organizational safeguards designed to protect information. However, no security system is completely secure. Users acknowledge that: • internet transmissions are not guaranteed secure; • unauthorized access may occur; • no method of storage is completely risk-free. Users are responsible for maintaining the confidentiality of account credentials. SECTION 24 THIRD-PARTY LINKS AND SERVICES The Platform may contain links to third-party websites, services, applications, artist stores, payment providers, social networks, and external resources. Press Play is not responsible for the privacy practices, policies, content, products, or services of third parties. Users should review applicable third-party policies before providing information. SECTION 25 PRIVACY POLICY CHANGES Press Play reserves the right to modify this Privacy Policy from time to time. Material changes may be communicated through: • Platform notices; • email notifications; • website postings; • updated documentation. Continued use of the Platform after updates become effective constitutes acceptance of the revised Policy. SECTION 26 CONTACT INFORMATION Song Mates, Inc. 126 W. Van Buren Street Columbia City, Indiana 46725 Privacy Requests: privacy@songmates.com General Support: support@songmates.com Legal Notices: legal@songmates.com Copyright Notices: copyright@songmates.com DMCA Notices: dmca@songmates.com Artist Support: artists@songmates.com Billing Support: billing@songmates.com Press & Media: press@songmates.com Partnerships: partnerships@songmates.com Investor Relations: investors@songmates.com SECTION 27 ENTIRE PRIVACY POLICY This Privacy Policy and AI Data Processing Policy constitutes the complete privacy statement of Press Play regarding the collection, use, disclosure, storage, and protection of personal information within the Press Play Ecosystem. END OF PRIVACY POLICY AND AI DATA PROCESSING POLICY