Uniform Legal Notice

DIGITAL DEPTHS MINING UNIFORM LEGAL NOTICE

This Uniform Legal Notice ("ULN" or "Notice") is issued by Digital Depths Mining ("Company," "DDM," "we," "us," or "our") and governs all interactions with the Company's services, platforms, websites, communications, and resources (collectively, "Company Resources").

By accessing, using, or interacting with any Company Resource — including but not limited to our website (digitaldepthsmining.com), automated email and SMS communications, dealer portal, onboarding forms, and any services provided through our platform — you ("User," "you," or "your") acknowledge that you have read, understood, and agree to be bound by the terms and conditions contained in this Notice and all appendices attached hereto.

This Notice supersedes all prior agreements, representations, and understandings between the parties relating to the subject matter herein. In the event of a conflict between this Notice and any other agreement, the terms most protective of the Company shall prevail unless explicitly stated otherwise in a separately executed written agreement.

Archived versions of this Notice are maintained at digitaldepthsmining.com/legal-notice and identified by document version number and effective date.

PRELIMINARY TERMS AND DEFINITIONS

For purposes of this Notice, the following terms shall have the meanings ascribed to them below:

• "Authorized User" — Any individual or entity granted access to Company Resources through a valid subscription, onboarding process, or written authorization
• "BDC Services" — Business Development Center services provided by the Company, including but not limited to automated lead follow-up via email and SMS, lead management, appointment setting, and customer engagement on behalf of automotive dealerships
• "Company Resources" — All websites, platforms, portals, applications, APIs, communications, documentation, and services owned, operated, or provided by the Company
• "Dealer" or "Dealership" — An automotive dealership or dealer group that has entered into a service agreement with the Company for BDC Services
• "End User" or "Consumer" — An individual whose contact information is processed through the Company's platform for the purpose of receiving communications on behalf of a Dealer
• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, including but not limited to name, email address, phone number, and vehicle interest data
• "Platform" — The Company's proprietary BDC automation software, including the scheduling engine, email sender, SMS integration, dealer portal, and associated infrastructure

NATURE OF COMPANY AND SERVICES

Digital Depths Mining is a technology company that provides AI-powered Business Development Center (BDC) automation services for automotive dealerships. The Company operates a software platform that automates lead follow-up communications — including email sequences and SMS text messages — on behalf of subscribing dealerships.

The Company is NOT:

• A dealership or automotive retailer
• A financial institution or lender
• A credit reporting agency
• A licensed attorney or law firm
• A healthcare provider
• An insurance company or broker
• A government agency

The Company's services are limited to technology-enabled communication automation. The Company does not sell vehicles, arrange financing, provide legal advice, or make decisions regarding the sale or purchase of any product or service. All communications sent through our platform are sent on behalf of and at the direction of the subscribing Dealer.

APPLICABILITY AND SCOPE

This Notice applies to:

• All visitors to Company websites and online resources
• All Dealers and their authorized personnel who access or use BDC Services
• All End Users who receive communications through the Company's platform
• All individuals who submit information through Company forms, portals, or onboarding processes
• All individuals who communicate with the Company or its automated agents via email, SMS, or any other channel

This Notice applies regardless of the method of access (desktop, mobile, tablet, API, or any other means) and regardless of geographic location, subject to applicable law.

DISCLAIMERS AND LIMITATIONS

GENERAL DISCLAIMER: Company Resources are provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory, or otherwise, including but not limited to implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

NO GUARANTEE OF RESULTS: The Company does not guarantee any specific results, appointment rates, lead conversion rates, or revenue outcomes from the use of BDC Services. Past performance is not indicative of future results. Marketing materials and case studies are provided for illustrative purposes only.

COMMUNICATION DELIVERY: The Company does not guarantee the delivery, timing, or receipt of any email or SMS communication. Delivery is subject to factors beyond the Company's control, including but not limited to carrier filtering, spam filters, network congestion, device settings, and regulatory restrictions.

THIRD-PARTY SERVICES: Company Resources may integrate with or rely upon third-party services (including but not limited to Twilio for SMS delivery, email delivery providers, and cloud hosting providers). The Company is not responsible for the availability, performance, privacy practices, or terms of any third-party service.

LIMITATION OF LIABILITY: To the fullest extent permitted by applicable law, the Company, its officers, directors, employees, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, regardless of the theory of liability, even if the Company has been advised of the possibility of such damages. The Company's total aggregate liability arising from or related to this Notice or the use of Company Resources shall not exceed the amount paid by the applicable Dealer to the Company during the twelve (12) months immediately preceding the event giving rise to the claim.

INDEMNIFICATION: You agree to indemnify, defend, and hold harmless the Company and its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (a) your use of Company Resources; (b) your violation of this Notice; (c) your violation of any applicable law or regulation; or (d) any content or data you provide to or through the Company's platform.

GENERAL PROVISIONS

GOVERNING LAW: This Notice shall be governed by and construed in accordance with the laws of the State of Wisconsin, without regard to its conflict of law provisions. Any legal action or proceeding arising under this Notice shall be brought exclusively in the state or federal courts located in St. Croix County, Wisconsin, and the parties hereby consent to personal jurisdiction and venue therein.

SEVERABILITY: If any provision of this Notice is found to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent.

ENTIRE AGREEMENT: This Notice, together with all appendices and any separately executed service agreements, constitutes the entire agreement between the parties regarding the subject matter herein.

AMENDMENTS: The Company reserves the right to modify this Notice at any time. Material changes will be communicated through the Company's website and, where applicable, via email to registered Dealers. Continued use of Company Resources after notification of changes constitutes acceptance of the modified terms. The current version supersedes all prior versions.

ASSIGNMENT: The Company may assign its rights and obligations under this Notice without restriction. Users may not assign their rights or obligations without the prior written consent of the Company.

WAIVER: The failure of the Company to enforce any provision of this Notice shall not constitute a waiver of that provision or any other provision. Any waiver must be in writing and signed by an authorized representative of the Company.

FORCE MAJEURE: The Company shall not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including but not limited to acts of God, natural disasters, pandemics, government actions, power failures, internet or telecommunications failures, cyberattacks, or carrier outages.

NOTICES: All legal notices to the Company shall be sent to: Digital Depths Mining, Email: zach@digitaldepthsmining.com. Notices to Users shall be sent to the email address on file.

CONTACTING THE COMPANY

For questions, concerns, or requests related to this Notice, please contact:

Digital Depths Mining
Email: zach@digitaldepthsmining.com
Website: digitaldepthsmining.com

For privacy-related inquiries, please reference our General Privacy Policy (Appendix A) and direct requests to the email address above with the subject line "Privacy Request."

For data processing inquiries from Dealers, please reference the Data Processing Terms (Appendix C).

APPENDIX A: GENERAL PRIVACY POLICY

This General Privacy Policy describes how Digital Depths Mining collects, uses, stores, and protects Personal Data in connection with the provision of BDC Services.

INFORMATION WE COLLECT:

• Contact information (name, email, phone number) provided by Dealers or collected through lead sources
• Vehicle interest data and inquiry details
• Communication records (emails sent/received, SMS messages, delivery status, read receipts)
• Consent and opt-in/opt-out records with timestamps
• Portal login credentials and session data (for Dealer personnel)
• Usage data and analytics related to platform performance
• Onboarding form submissions

HOW WE USE INFORMATION:

• To send automated follow-up communications on behalf of Dealers
• To manage lead sequences and appointment scheduling
• To generate performance reports for subscribing Dealers
• To honor opt-out and communication preference requests
• To maintain compliance records (consent logs, opt-out records)
• To improve and maintain our platform and services
• To communicate with Dealers regarding their account and services

HOW WE SHARE INFORMATION:

We do not sell Personal Data. We share information only with:

• The Dealer on whose behalf communications are sent
• Service providers necessary for platform operation (SMS delivery, email delivery, cloud hosting), who are contractually bound to protect data
• Law enforcement or government agencies when required by law or legal process

DATA SECURITY:

We implement technical and organizational security measures including:

• Encryption of data in transit (TLS/SSL)
• Access controls and authentication requirements
• Regular security monitoring and integrity checks
• Secure credential management
• US-based server infrastructure

DATA RETENTION:

Personal Data is retained for the duration of the Dealer's service agreement plus thirty (30) days. Upon termination, data is deleted unless required by law or necessary for legitimate business purposes (such as compliance records).

YOUR RIGHTS:

Subject to applicable law, you may have the right to:

• Request access to Personal Data we hold about you
• Request correction of inaccurate information
• Request deletion of your Personal Data
• Opt out of communications at any time
• Lodge a complaint with a supervisory authority

CALIFORNIA RESIDENTS: Under the CCPA/CPRA, California residents have additional rights including the right to know what Personal Data is collected, the right to request deletion, and the right to opt out of the sale of Personal Data. We do not sell Personal Data.

APPENDIX B: ELECTRONIC COMMUNICATIONS CONSENT

By providing your contact information to a Dealer that uses Digital Depths Mining's platform, and by affirmatively opting in to receive communications, you consent to receive automated communications as described below.

EMAIL COMMUNICATIONS:

• Automated follow-up emails related to your vehicle inquiry
• Emails are sent on behalf of the Dealer you interacted with
• Every email contains an unsubscribe link
• Unsubscribe requests are honored promptly
• Email communications comply with the CAN-SPAM Act

SMS/TEXT MESSAGE COMMUNICATIONS:

• Before receiving any marketing text messages, you will receive a single consent request message
• You must reply YES or Y to confirm your consent to receive automated text messages
• Your opt-in reply is recorded with a timestamp as documented proof of consent
• If you do not confirm, no further text messages will be sent
• Message frequency varies based on the follow-up sequence (typically up to 8 messages over 30 days)
• Message and data rates may apply depending on your carrier and plan
• SMS communications comply with TCPA requirements and CTIA guidelines

OPT-OUT:

• SMS: Reply STOP to any text message at any time. Additional keywords: CANCEL, UNSUBSCRIBE, QUIT, END
• Email: Click the unsubscribe link in any email
• Opt-out requests are processed immediately
• You will receive a confirmation of your opt-out

HELP: Reply HELP to any text message for assistance, or contact us at zach@digitaldepthsmining.com.

LEAD SOURCES:

Contact information processed through our platform may be sourced from:

• Dealership-provided data (website inquiries, in-person visits, phone inquiries)
• Third-party lead providers (AutoTrader, CarGurus, TrueCar, Cars.com, and similar platforms)
• Publicly available records and databases

Regardless of source, no marketing text messages are sent until the End User affirmatively opts in.

APPENDIX C: DATA PROCESSING TERMS

These Data Processing Terms apply to the processing of Personal Data by Digital Depths Mining on behalf of subscribing Dealers.

ROLES AND RESPONSIBILITIES:

• The Dealer acts as the Data Controller, determining the purposes and means of processing
• Digital Depths Mining acts as the Data Processor, processing data on behalf of and at the instruction of the Dealer
• The Company processes Personal Data only as necessary to provide BDC Services and as instructed by the Dealer

DEALER OBLIGATIONS:

The Dealer represents and warrants that:

• All leads uploaded to the platform have been obtained lawfully
• Appropriate consent has been obtained or a lawful basis exists for processing
• The Dealer maintains records of consent and can produce them upon request
• The Dealer will comply with all applicable data protection laws

COMPANY OBLIGATIONS:

The Company shall:

• Process Personal Data only in accordance with the Dealer's documented instructions
• Implement appropriate technical and organizational security measures
• Not engage sub-processors without prior notice to the Dealer
• Assist the Dealer in responding to data subject rights requests
• Delete or return all Personal Data upon termination of services, at the Dealer's election
• Make available information necessary to demonstrate compliance

DATA TRANSFERS:

All data is stored and processed on servers located in the United States. The Company does not transfer Personal Data outside the United States.

BREACH NOTIFICATION:

In the event of a Personal Data breach, the Company shall notify the affected Dealer without undue delay (and in no event later than 72 hours after becoming aware of the breach), providing sufficient detail to enable the Dealer to fulfill its own notification obligations.

APPENDIX D: AI DEVELOPMENT TOOLS DISCLOSURE

TRANSPARENCY STATEMENT:

Digital Depths Mining's platform was developed using third-party AI development tools, including AI-assisted code generation and development environments. This disclosure is provided in the interest of full transparency.

KEY FACTS:

• AI development tools were used solely for building and developing the platform's codebase
• These tools do NOT have access to, retain, or process any Dealer data, End User data, or Personal Data
• No customer data is transmitted to, shared with, or accessible by any AI development tool provider
• AI development tools have no persistent access to the Company's systems, servers, or databases
• All Dealer and End User data is stored exclusively on Company-controlled infrastructure within the United States

OPERATIONAL AI FEATURES:

The Company's platform utilizes AI-powered features in its operation, including automated reply generation, lead follow-up sequencing, and communication optimization. These operational AI features involve the following data processing:

• Anthropic API: The Company's AI agent sends lead message content (including consumer names, inquiry details, and message history) to Anthropic's Claude API to generate personalized follow-up replies. Anthropic processes this data solely to generate a response and does not retain, train on, or share API inputs per Anthropic's commercial API data policy.
• All other data processing (lead storage, consent management, scheduling, reporting) occurs on Company-controlled infrastructure within the United States
• No consumer data is sold to, shared with, or used by any AI provider for purposes other than generating the requested response
• The Company does not use AI to make final decisions about consumer eligibility, pricing, or access to services — AI is used solely to draft and send follow-up communications on behalf of the Dealer

AI AUTOMATED DECISION-MAKING DISCLOSURE:

The Company's AI agent makes the following automated decisions on behalf of Dealers:

• Determining the timing and content of follow-up emails and SMS messages to leads
• Generating personalized reply text based on consumer inquiries
• Deciding when to hand off a conversation to a human sales representative

These automated decisions relate solely to the scheduling and content of marketing communications. No automated decisions are made regarding consumer creditworthiness, vehicle pricing, financing terms, or any other substantive transaction terms. Consumers may opt out of automated communications at any time by replying STOP to any SMS or clicking unsubscribe in any email.

This disclosure distinguishes between AI tools used in development (which have no data access) and AI features used in operation (which transmit limited data to Anthropic's API solely for reply generation, as described above).

APPENDIX E: SERVICE TERMINATION AND DATA OFFBOARDING

This appendix governs the handling of Dealer Data and End User Personal Data upon termination, cancellation, or non-renewal of BDC Services (collectively, "Termination"). These terms apply regardless of which party initiates the Termination and regardless of the reason for Termination.

1. IMMEDIATE EFFECTS OF TERMINATION:

Upon Termination, the Company shall immediately:

• Cease all automated outbound communications (email and SMS) on behalf of the Dealer
• Pause all active lead follow-up sequences
• Cancel all queued but unsent messages
• Disable the Dealer's AI agent from sending new communications

2. DATA EXPORT AND RETURN:

Prior to data deletion, the Company shall:

• Generate a complete export of all Dealer Data, including lead records, communication history, and activity logs
• Make the export available to the Dealer in a standard, machine-readable format (CSV)
• Maintain the export for download for a period of thirty (30) days following Termination
• Notify the Dealer via email that the export is available for download

The Dealer is responsible for downloading and retaining the export within the 30-day availability window. After 30 days, the export file will be permanently deleted from Company systems.

3. DATA DELETION TIMELINE:

Following the 30-day export availability period, the Company shall permanently delete or anonymize the following data within thirty (30) calendar days:

• Personal Data: Lead names, email addresses, phone numbers, and any other personally identifying information
• Communication Content: The body text and subject lines of all emails and SMS messages sent or received
• Dealer Configuration: Templates, branding, agent customizations, and dealer-specific settings
• Portal Access: All user accounts, passwords, sessions, and authentication credentials associated with the Dealer

4. DATA RETAINED AFTER DELETION:

Notwithstanding the above, the Company shall retain the following records as required by applicable law and for the legitimate purposes described herein:

• Consent Records: Records of SMS opt-in consent, opt-out requests, and email unsubscribe requests, retained for a minimum of five (5) years to comply with TCPA requirements and to ensure continued honoring of opt-out preferences
• Communication Metadata: Non-identifying records of message direction, channel, timestamp, delivery status, and template name, retained for a minimum of three (3) years for compliance auditing
• Opt-Out Lists: Anonymized records sufficient to prevent future contact with individuals who opted out, retained indefinitely
• Billing and Invoicing Records: Retained for seven (7) years as required by federal tax law
• Audit Trail: A log of the offboarding process itself, including timestamps, steps completed, and confirmation of deletion

5. ANONYMIZATION METHODOLOGY:

Where data is anonymized rather than deleted (to preserve aggregate metrics while removing personal identifiers), the Company uses the following approach:

• Names are replaced with non-identifying placeholders
• Email addresses are replaced with irreversible cryptographic hashes directed to an invalid domain
• Phone numbers are set to null
• Message content is permanently removed while metadata is retained

Anonymized data cannot be re-identified or linked to any individual. The anonymization process is irreversible.

6. AGENTMAIL INBOX:

The dedicated email inbox created for the Dealer's AI agent (e.g., dealername@agentmail.to) will be permanently deleted. Any emails remaining in the inbox at the time of deletion will be permanently lost. The Company is not responsible for preserving inbound emails that were not processed prior to Termination.

7. CONFIRMATION:

Upon completion of the offboarding process, the Company shall provide the Dealer with written confirmation (via email to the Dealer's primary contact) that:

• All automated communications have ceased
• The data export was made available
• Personal Data has been deleted or anonymized
• Portal access has been revoked
• Only legally required compliance records have been retained

8. DEALER OBLIGATIONS AT TERMINATION:

The Dealer acknowledges that:

• It is the Dealer's responsibility to download the data export within the 30-day availability window
• Any outstanding invoices or balances remain due and payable regardless of Termination
• The Dealer must independently notify its own customers of any changes to communication handling, as appropriate
• The Company bears no liability for data that the Dealer fails to export within the designated period

APPENDIX F: CONSUMER DATA RIGHTS

This appendix describes how Digital Depths Mining handles consumer data rights requests, including but not limited to those arising under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and substantially similar state privacy laws (collectively, "Applicable Privacy Laws").

1. SCOPE:

This appendix applies to the Personal Data of End Users (consumers/leads) that is processed by the Company on behalf of subscribing Dealers. The Company acts as a Service Provider / Data Processor. The Dealer, as the Data Controller, is the primary point of contact for consumer rights requests. However, the Company maintains systems and processes to assist Dealers in fulfilling these requests.

2. RIGHT TO KNOW / RIGHT OF ACCESS:

Upon verified request from a Dealer (acting on behalf of a consumer), the Company can provide:

• The categories of Personal Data collected about the consumer
• The specific pieces of Personal Data held about the consumer
• The business purpose for which the data was collected and processed
• The categories of third parties with whom the data was shared (if any)

The Company does not sell Personal Data and does not share Personal Data for cross-context behavioral advertising.

3. RIGHT TO DELETE:

Upon verified request from a Dealer (acting on behalf of a consumer), the Company shall:

• Identify all records associated with the consumer within the requesting Dealer's data
• Permanently anonymize the consumer's Personal Data (name, email, phone number)
• Remove the content of all messages sent to or received from the consumer
• Cancel any pending or queued communications to the consumer
• Archive consent and opt-out records as required by law (see Section 5 below)
• Generate a deletion certificate confirming the action taken

Deletion requests will be completed within forty-five (45) calendar days of receipt. If additional time is required, the Company will notify the Dealer and complete the request within ninety (90) calendar days.

4. RIGHT TO CORRECT:

Upon verified request from a Dealer, the Company shall correct inaccurate Personal Data in its systems. Corrections are applied to the active lead record and take effect immediately for all future communications.

5. EXCEPTIONS TO DELETION:

Consistent with Applicable Privacy Laws, the Company may retain certain data after a deletion request where retention is necessary to:

• Complete a transaction or provide services reasonably anticipated within the business relationship
• Detect, prevent, or investigate security incidents or fraud
• Comply with a legal obligation, including TCPA consent record retention
• Exercise or defend legal claims
• Ensure another consumer who has exercised a privacy right is not contacted again (opt-out enforcement)

Retained data is limited to the minimum necessary for the applicable exception and is stored in a separate compliance archive accessible only for the stated purpose.

6. NON-DISCRIMINATION:

The Company does not discriminate against any consumer for exercising their privacy rights. Exercising data rights will not result in different pricing, service quality, or access for the associated Dealer.

7. VERIFICATION:

Consumer rights requests may be submitted in any of the following ways:

• Directly to the Company: Consumers may submit requests through the Company's Privacy Request Form or by emailing privacy@digitaldepthsmining.com. After submission, the Company will send a verification email to the consumer's email address on file. The consumer must click the verification link to confirm their identity before the request is processed.
• Through the Dealer: Consumers may also submit requests through the Dealer (as the Data Controller). The Dealer is responsible for verifying the consumer's identity before forwarding the request to the Company.

In all cases, the Company verifies the consumer's identity before executing any access, deletion, correction, or opt-out request to protect against unauthorized access to personal information.

8. RESPONSE PROCESS:

Upon receiving a verified consumer rights request from a Dealer, the Company's process is as follows:

1. Acknowledge receipt within two (2) business days
2. Locate all records associated with the consumer
3. Execute the requested action (access, deletion, or correction)
4. Provide the Dealer with a written confirmation or certificate within forty-five (45) days
5. Log the request and its resolution in the Company's compliance audit trail

9. CONTACT FOR DATA RIGHTS:

Dealers may submit consumer data rights requests to:

• Email: zach@digitaldepthsmining.com
• Subject Line: "Consumer Data Rights Request - [Dealer Name]"

Include the consumer's name, email address (as it appears in the system), and the specific right being exercised.