EverReady.AI (the "Company"), located at 21 Rue Saint Vincent, 92700 Colombes, places great importance on the protection of personal data. EverReady.AI commits to ensuring that the collection and processing of your personal data, carried out from the website https://everready.ai/fr, comply with the French Data Protection Act of 1978 as amended, as well as the General Data Protection Regulation (GDPR) that came into force on May 25, 2018.

The GDPR is a regulation in EU law that establishes a new framework for the processing and protection of personal data of EU residents. It is the most comprehensive European data privacy law in decades and took effect on May 25, 2018.

In addition to enhancing and standardizing user data privacy across EU countries, the regulation imposes new or additional obligations on all organizations that process the personal data of EU citizens, regardless of where the organizations are located.

This Privacy Policy is intended to inform the following individuals about how we process their personal data and about their rights:

• Users of our website https://everready.ai/fr
• Our prospects;
• Our clients and collaborators.

By using the EverReady.AI website ("Site") or any of our EverReady.ai applications available via the application URL: app.EverReady.ai and the mobile EverReady.ai applications: EverReady.ai Mobile and EverReady.ai Connect (collectively, the "Service"), you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you consent to our collecting, using, and sharing your information as described below. The use of information collected through our Service shall be limited to the purpose of providing the service for which the client (the "Client" of EverReady.ai) has engaged EverReady.ai. Specific services offered are governed by the Master Service Agreement of EverReady.ai and the commercial terms of items purchased by the Client through the Order Agreement.

Remember, your use of EverReady.ai's Services is at all times subject to our Master Subscription Agreement, which incorporates this Privacy Policy. All terms we use in this Privacy Policy without defining them have the definitions given to them in the Terms of Use.

As this policy may be updated periodically, you are encouraged to review it regularly.

The privacy policy aims to provide you, as the data subjects of the data processing activities conducted by EverReady.ai, with information regarding the identity of the data controller and about your rights.

What this privacy policy covers:

This Privacy Policy covers how we treat Personal Data that we collect when you access or use our Services. "Personal Data" refers to any information that can identify or relate to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we do not own or control or people we do not manage.

Who is responsible for data processing?

The data controller is EverReady.ai located at 21 Rue Saint Vincent, 92700 Colombes.

What are your rights?

Definitions:

• Right of access: allows you to know what data has been processed and to receive communication via a copy.
• Right of rectification: allows you to correct inaccurate or incomplete information.
• Right to erasure: allows you to request the deletion of data concerning you.
• Right to restrict processing: allows you to limit the use of your data.
• Right to withdraw consent: allows you to withdraw your consent provided that consent is the chosen legal basis.
• Right to object: allows you to object to certain data processing concerning you.
• The right to data portability: allows, when the processing of your data is based on your consent or on a contract and it is carried out using automated processes, to obtain that your data be provided to you in a structured, commonly used, and machine-readable format. The personal data thus obtained can then be transmitted to another data controller without hindrance from us.
• Right to set directives regarding the retention, deletion, and communication of your data after your death: You have the option to organize the fate of your personal data after death.

In accordance with current regulations, you have the following rights:

• The right to access your personal data;
• The right to request rectification or erasure of the data concerning you;
• Where applicable, the right to request a limitation of the processing of your data;
• The right to object to processing;
• The right to withdraw at any time your consent for processing based on this condition of legality.
• In some circumstances, the right to portability of your personal data;
• The right to set general or specific directives regarding the fate of your personal data after your death.

For more information on your rights, we invite you to visit the CNIL website: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.

How to exercise your rights?

You can exercise your rights at any time by contacting us at one of the following addresses:

• By email: gdpr@everready.ai;
• By mail: 21 Rue Saint Vincent, 92700 Colombes.

EverReady.ai has a response period of 1 month following the date of sending your request. If you believe that we are not meeting our obligations or your rights concerning your personal data, you can file a complaint with the CNIL, according to applicable regulations.

Why is your data collected?

Each form on the website https://everready.ai/fr limits the collection of your personal data to what is necessary and indicates:

• The objective and purpose of collecting this data,
• The retention period for the data,
• The person to whom the data is intended.

We process your personal data in order to:

• Respond in writing or by phone to various requests made via contact forms;
• Manage quote requests sent via dedicated contact forms,
• Perform statistical studies on the audience of our website;
• To operate and maintain the Service (for example, to repair malfunctions, test our security systems, etc.)
• To provide you with the features, functions, and benefits of the Service.
• To improve and develop the service (for example, by creating new features or functions, refining the user experience, increasing the technical performance of the service, etc.)
• We will use your contact information to provide you with notices related to your use of the service
• We will use your contact information (such as your email address) to provide you with training and emails containing relevant product information. You can choose not to receive these emails, but in this case, you may not benefit from all the advantages of the service. You can unsubscribe by clicking on the "unsubscribe" link at the bottom of each email.
• To help personalize your experience of the service (for example, by remembering your information so that you do not have to enter it every time you use the service).
• To comply with our legal or contractual obligations, resolve disputes, and enforce our terms of use.
• To respond to law enforcement requests and as required by applicable law, court order, or government regulations.

The use and transfer by EverReady to any other application of the information received from Google's API services will comply with the user data policy of Google's API services, including the requirements of limited use.

In some cases, we may choose to buy or sell assets. In these types of transactions, customer information is generally one of the business assets that are transferred. Moreover, if EverReady.ai or substantially all of its assets were acquired, or in the unlikely event that EverReady.ai goes bankrupt or ceases its activities, customer information would be one of the assets transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of EverReady.ai may continue to use your information as set forth in this privacy policy.

What data is collected?

EverReady.ai collects and processes information such as:

• Name, first name;
• Your professional (or personal, if applicable) postal, telephone, and electronic contact details;
• The subject of your request;
• Email address;
• Metadata from emails and calendars associated with sales opportunities (specifically, the following fields: Sender, recipient, date, time, subject, body content, signature, and attachment name).
• IP address, connection data, and browsing data;

EverReady.ai does not collect or use any geolocation data.

The mandatory or optional nature is indicated during the collection by an asterisk. Some data is collected automatically due to your actions on our website.

On what legal bases do we process your data?

• Managing your various requests
• Legal basis: Legitimate interest of EverReady.ai
• Managing your quote requests
• Legal basis: The execution of pre-contractual measures
• Statistical studies on the audience / Improvement of services
• Legal basis: Legitimate interest of EverReady.ai to improve the quality and ergonomics of its website

The duration of the retention of your data

Personal data collected on the website https://everready.ai/fr are transmitted and stored according to secure protocols and are not retained beyond the duration necessary for the processing of your request.

Cookies: Cookies are not retained beyond 6 months.

Contact forms: Personal data collected via the form are transmitted and stored according to secure protocols for a duration of 6 months.

The recipients of your data

The data concerning you are transmitted according to your request and your need only to personnel authorized to know it by virtue of their functions.

Transfers of data

Transfer to a third party

EverReady.ai does not sell your personal data to other third-party organizations. EverReady.ai also does not transfer rights over your personal data to another party and does not use the data otherwise than for the initial purpose of processing. Any transfer to a third party is solely intended for data processing, and EverReady.ai has secured agreements with downstream subcontractors to protect personal data and enforce GDPR data rights for you.

Focus Telephone calls

Certain features or functions of the Service may require that EverReady.ai access your IOS or Android call history logs. We will only do this with your consent. Specific restrictions on our use of this data are outlined below. EverReady.ai requires read-only access to your call history and address book. EverReady.ai collects call history logs for the sole commercial use of the

user and the Client of EverReady.ai. The following data is processed in real-time but never stored on servers: (Called number, incoming or outgoing call, date, time, duration).

Focus Email and calendar

Certain features or functions of the Service may require that EverReady.ai access your Google Gmail or Microsoft 365 for Business account and certain data from this account through the application programming interface ("API") of Google Gmail or Microsoft 365. We will only do this with your consent (for example, if you or the Gmail or Microsoft 365 administrator of your organization authorizes EverReady.ai to connect to Gmail or Outlook, you grant this consent). Specific restrictions on our use of this data are outlined below. To the extent that these terms differ or conflict with other terms of this Privacy Policy, the latter prevails.

The use and transfer by EverReady to any other application of the information received from the Google or Microsoft 365 APIs will comply with the limited use requirements of Google and Microsoft.

EverReady.ai needs read-only access to your Business Gmail or Outlook 365 account. By allowing EverReady.ai to connect to your account, you give EverReady.ai read-only access to all content in your account as defined by the Google Gmail API or Microsoft 365 Outlook.

EverReady.ai accesses email and calendar metadata for the sole professional use of the user and the Client of EverReady.ai. The following data is processed in real-time but never stored on servers:

Gmail or Microsoft Outlook fields (sender, recipient, date, time, subject, attachment name, body content, signature).

GCalendar or Outlook calendar fields (Meeting Organizer, Guests, Date, Time, Meeting Title, Attachment Name, body content of the message).

The data is used by EverReady.ai to automatically populate your CRM and provide you and your business with visibility into your business activity.

We may also use the data (i) if we reasonably believe that such use is required by a law, regulation, or government body or court, (ii) if necessary to help prevent a threat to the security of the Service, and (iii) to help improve the Service internally.

EverReady.ai will not sell your data and will not use it to deliver advertisements.

The data obtained is subject to these additional restrictions:

• EverReady.ai will not transfer the data to third parties, except (i) if it is necessary to comply with a law, regulation, or government body or court, or (ii) as part of a merger, acquisition, or sale of EverReady.ai's assets.
• EverReady.ai will not use this Gmail data to deliver advertisements.
• EverReady.ai will not sell your data.
• The Service will not allow humans to read this data, except if it proves necessary to comply with applicable laws or regulations and for occasional assistance purposes.
• The use by EverReady.ai of the information received and the transfer by EverReady.ai of information to any other application from Google's or Microsoft 365's APIs will comply with Google's and Microsoft's limited use requirements.

What you can do with your personal data

Modification of your profile

Upon request, EverReady.ai will provide you with information about whether we hold, or process on behalf of a third party, any of your personal data. To request this information, please contact us at gdpr@EverReady.ai. If you would like to access your personal data, correct it, or request its deletion, please contact us at gdpr@EverReady.ai.com. EverReady.ai does not have a direct relationship with the individuals whose personal data it processes as part of its Service. An individual seeking to access, or seeking to correct, amend, or delete inaccurate data should direct their query to the Client of EverReady.ai (the data controller). If the Client requests EverReady.ai to delete the data, we will respond to their request within 30 days. If, as an individual, you wish to identify the specific Client acting as the data controller of your Information, please contact privacy@EverReady.ai.com, and we will provide their contact details subject to EverReady.ai receiving approval for the disclosure of this information from the data controller.

Deletion of your account

You can delete your account by sending an email to support@EverReady.ai.com. Subject to the "Limits of Deletion" section below, when you ask us to delete your account for the Service, your data may be permanently deleted from our servers, and access to your account will be disabled. We may retain your information as long as your account is active or as needed to provide you with services, comply with our legal obligations, resolve disputes, and enforce our agreements.

EverReady.ai will retain personal data we process on behalf of our Clients for as long as needed to provide services to our Client. EverReady.ai will retain and use this personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Limits of deletion

Moreover, copies of your information may remain visible elsewhere to the extent that they have been publicly published by you or otherwise shared by you with others (such as your user

submissions).

We may also indefinitely retain and use any aggregated data derived from or incorporating your information after you update or delete it, but not in a manner that would identify you personally.

We may also retain information collected by third-party usage tracking services in aggregated form, to maintain historical information about the use of our services.

We may also retain your information to the extent necessary to comply with any law or regulation (or if we reasonably judge it necessary in light of such regulation).

Choices

We partner with a third party to manage our advertising on other sites. Our third-party partner may use cookies or similar technologies to provide you with advertising based on your browsing activities and interests. If you wish to opt out of interest-based advertising, click here, or if you are located in the European Union, click here. Please note that you will continue to receive generic advertisements.

You can sign up to receive emails, newsletters, or other communications from us. If you no longer wish to receive this information, you can update your email preferences using the "Unsubscribe" link in the emails we send you or by contacting us at support@EverReady.ai.

We collect information for our clients. If you are a client of one of our clients and no longer wish to be contacted by one of our clients that uses our service, please contact the client you are interacting with directly.

State-Specific Privacy Rights

Rights of California Residents

Under sections 1798.83-1798.84 of the California Civil Code, residents of California have the right to contact us to prevent the disclosure of personal data to third parties for direct marketing purposes; to submit such a request, please contact us at support@EverReady.ai.

If you are a resident of California, you also have the rights provided by the CCPA, as outlined in this section. Please see the "Exercising Your Rights" section below for instructions on how to exercise these rights. In the event of a conflict between this section and any other provision of this privacy policy and if you are a resident of California, the most protective part of personal data will prevail to the extent of this conflict. If you have questions about this section or if any of the following provisions apply to you, please contact us at support@EverReady.ai.

Access Rights

You have the right to request certain information about our collection and use of your personal data over the past 12 months. We will provide you with the following information:

• The categories of Personal Data that we have collected about you.
• The categories of sources from which this personal data was collected.
• The business or commercial purpose for collecting or selling your personal data.
• The categories of third parties with whom we have shared your personal data.
• The specific pieces of personal data that we have collected about you.
• If we have disclosed your personal data for business purposes over the past 12 months, we will identify the categories of personal data shared with each category of third-party recipient.

Deletion

You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.

Exercising Your Rights

To exercise the rights described above, you must send us a request that: (1) provides enough information to allow us to verify that you are the person about whom we have collected Personal Data (for example, by providing the business email address used to sign up for the Services), and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Any request that meets these two criteria will be considered a "valid request." We may not respond to requests that do not meet these criteria. We will use the personal data provided in a valid request only to verify you and to respond to your request.

We will endeavor to respond to your valid request within 45 days of its receipt. We will not charge you a fee for making a Valid Request, unless your Valid Request is excessive, repetitive, or manifestly unfounded. If we determine that your valid request warrants a fee, we will notify you of this decision and explain it before processing your request.

You can submit a Valid Request using the following methods:

• by sending us an email at the following address: support@EverReady.ai

We will not discriminate against you for exercising your rights under the CCPA.

We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our products or services, charge you different prices or rates, and provide you with a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different levels of our services, as allowed by applicable data privacy laws (including the CCPA), with different prices, rates, or quality levels of the goods or services you receive, depending on the value of the personal data we receive from you.

Rights of Nevada Residents

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal data to third parties who intend to license or sell this personal data. You can exercise this right by contacting us at support@EverReady.ai with the subject "Nevada Do Not Sell Request" and providing your name and the email address associated with your account.

Rights of Data Subjects in the European Union

EU Residents

If you are located in the EU, the United Kingdom, Liechtenstein, Norway, or Iceland, you may benefit from additional rights under the European Union's General Data Protection Regulation (the "GDPR"). For more information on EverReady.ai's compliance with the GDPR, please visit our dedicated GDPR page.

Privacy Shield Protections

EverReady.ai participates and has certified its compliance with the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield frameworks. EverReady.ai commits to subject all personal data received from EU member countries and Switzerland, respectively, based on the Privacy Shield framework, to the applicable principles of the framework. To learn more about the Privacy Shield frameworks, visit the U.S. Department of Commerce's Privacy Shield List: https://www.privacyshield.gov.

EverReady.ai is responsible for the processing of personal data it receives, under the Privacy Shield frameworks, and any subsequent transfers to a third party acting as an agent on its behalf. EverReady.ai complies with the Privacy Shield principles for all onward transfers of personal data from the EU and Switzerland, including the provisions regarding liability for onward transfers.

With respect to personal data received or transferred pursuant to the Privacy Shield frameworks, EverReady.ai is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, EverReady.ai may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In certain conditions, described in more detail on the Privacy Shield website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

Sale of Personal Data

We do not sell your personal data.

Security and Data Retention

EverReady.ai takes robust information security measures to protect your information and limit the risk that it could be accessed without authorization, including the use of certain standard industry technologies and practices. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. That said, we cannot guarantee the security of such information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. No security system is perfect – your use of the service is therefore at your own risk.

If we become aware of a security systems breach, we may try to notify you electronically by email, by phone, by mail, or by a message on your service account page, so that you can take appropriate protective steps. In accordance with our terms of use, you have consented to receive this notification electronically (understanding that this consent is void where prohibited by applicable law). To receive a free written notice of a security breach, or if you have questions about the security of the service, please contact us at support@EverReady.ai.com.

In addition to the security measures mentioned above, your Service account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and information by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.

Cookies

EverReady.ai uses a limited number of cookies and similar technologies, and asks for your consent to non-essential cookies via a cookie banner.

• Strictly necessary cookies: required for the website to function properly (for example, security and load balancing). These do not require your consent.
• Audience measurement: our website analytics are provided by Framer and run without cookies; no identifier is stored on your device.
• Third-party cookies (scheduling): when you open our "Book a demo" page, the Calendly scheduling widget loads and may place its own cookies to operate the booking. These third-party cookies are used solely to provide the scheduling feature; see Calendly's own cookie policy for details.

You can accept or refuse non-essential cookies at any time via the cookie banner, and you can manage or delete cookies through your browser settings. Cookies are not retained beyond 6 months. Refusing non-essential cookies does not prevent you from browsing the site, but some embedded third-party features (such as the scheduler) may be limited.

Contact Forms

The Everready.AI website, located at 21 Rue Saint Vincent, 92700 Colombes, collects personal data (name, first name, email address) to process requests via contact forms.

This processing is based on the consent of the individuals concerned.

The collected data will be communicated to the following recipients: only to Everready.AI personnel authorized to know it by virtue of their functions.

The data is retained for the duration necessary to process the request.

You can access the data concerning you, rectify it, or exercise your right to restrict the processing as well as your right to the portability of this data. The right to object does not apply in this case. This consent can be withdrawn at any time. To exercise these rights or for any questions about the processing of your data, you can contact the service responsible for managing requests to exercise rights by email at gdpr@everready.ai or at the following address: 21 Rue Saint Vincent, 92700 Colombes.

If you believe that your "Informatique et Libertés" rights are not being respected, you can file a complaint with the CNIL. Visit cnil.fr for more information on your rights.