Data Privacy Policy

Last Updated: September 11, 2026

This Privacy Policy describes how Endgame Labs, Inc. ("Endgame," "we," or "us") collects, uses, discloses, and otherwise processes information. This Privacy Policy applies to information we collect when you access or use our website (the "Website"), and when organizations and their users ("Customers") use our AI-enabled revenue intelligence and deal-preparation platform and related applications, integrations, and support services (collectively with the Website, the "Services").

When we process personal information about a Customer's own customers, prospects, and other business contacts ("Contacts") in order to provide the Services, we do so as a service provider or processor acting on that Customer's instructions. The Customer's own privacy notice governs its collection and use of Contact information, and this Policy describes how Endgame handles that information on the Customer's behalf, including the categories of information involved, how long we keep it, and the choices available.

This Privacy Policy is effective as of the "Last Updated" date above. We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the "Last Updated" date. Where required by law, we will provide you with additional notice (such as by adding a statement to the Website or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

1. COLLECTION OF INFORMATION

1.1 Information You Provide to Us

We collect information directly from you when you create an account, request customer support, or otherwise communicate with us. The categories of information we collect include:

• Identification and Contact Information: we collect your name, email address, phone number, and size of your sales team.
• Communication Information: we collect information included in your communications with us.

We may also collect any other information you choose to provide.

1.2 Information We Collect Automatically

We automatically collect the following categories of information:

• Internet Activity Information: we collect information about how you access our Website, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, and browser type. We also collect information about your activity on our Website and interaction with our communications, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Website.
• Support Information: If you call or chat with our customer service team, we may monitor and retain those conversations.
• Information Collected by Cookies and Similar Tracking Technologies: We use tracking technologies, such as cookies and pixels, to collect information about your interactions with our Website and communications. These technologies help us improve our Website and communications, see which areas and features of our Website are popular, count visits, and track clicks. You may be able to adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Website.

1.3 Information We Collect from Other Sources

We may also obtain information from other sources. For example, we may collect information like contact and employment information about Endgame customers and potential customers from advertising networks and lead generation providers. We also collect lead enhancement information like contact information, employment and/or education information, social media activity, and broad/course location information like city/country of residence ("Lead Enhancement Information") about our customers' current, former, and potential customers from third-party data providers, social media platforms, and publicly available sources.

1.4 Customer Data We Process to Provide the Services

When a Customer and its authorized users use the Services, the Services collect and process the following categories of information, whether supplied directly by a Customer's users, drawn from a Customer's connected business systems, or generated by the Services (collectively, "Customer Data"):

• User and Connection Information: your Endgame account and email address, your organization or workspace, your CRM user identity, your time zone, and application or session identifiers used to authenticate and operate the Services.
• Requests and Context: the searches, questions, filters, names, email addresses, record IDs, and other content that a Customer's users submit to the Services or that the Services supply as inputs when invoking a connected tool or data source ("Tool Inputs").
• Business Records and Communications: information drawn from a Customer's connected systems, including CRM accounts, contacts, opportunities, and notes; meeting information; and facts, quotes, summaries, and references drawn from emails, Slack messages, call transcripts, and documents that the Customer has connected to, or otherwise made available through, the Services.
• Professional Profiles and Relationships: information about individuals associated with a Customer's accounts and prospects, including contact information, titles, employers, employment history, education, LinkedIn information, reporting relationships, account ownership, and other stakeholder relationships.
• Derived Insights: information the Services generate by analyzing the categories above using artificial intelligence and machine learning models, including inferred roles and relationships, confidence assessments, summaries, commitments, preferences, and deal assessments ("Derived Insights").

We process Customer Data as directed by our Customers and consistent with our written agreements with them, in order to provide, maintain, secure, and improve the Services.

1.5 Derived Information

We may also derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address. Derived Insights generated within the Services are described in Section 1.4 above.

2. USE OF INFORMATION

We use the categories of information we collect for the following business and commercial purposes:

• Service Delivery: we use information to provide and maintain the Website and Services, including executing Tool Inputs against a Customer's connected business systems (such as CRM, email, Slack, calendar, call-recording, and document-storage tools) at the Customer's direction, and generating Derived Insights such as summaries, commitments, preferences, and deal assessments.
• AI Processing: we use Tool Inputs, Business Records and Communications, and Professional Profile information as inputs to our AI models — including third-party large language models we engage as sub-processors — to generate responses and Derived Insights. We log AI conversation and query activity, and the underlying model request and response payloads, to operate, secure, troubleshoot, and audit the Services, subject to the retention periods described in Section 5.
• Model Improvement: unless a Customer has opted out of model-training use under its agreement with us, we may use Customer Data to improve, evaluate, and train our AI models and to develop new product features.
• Communication: we use information to communicate with you about Endgame and our Services, including to send you newsletters, respond to your questions, inform you of price or Services changes, and send you other transactional or relationship messages.
• Marketing and Advertising: we use information to send direct marketing messages (including via email) and target advertisements to you on third-party platforms and websites as described below. You can opt out of direct marketing messages we send by following the instructions in those communications (such as by clicking "unsubscribe" in the emails) or by contacting us.
• Conducting Analytics: we use information to monitor and analyze Website and Service usage and trends, improve our Website and Services, and generate de-identified or aggregated data.
• Protection and Compliance: we use information to detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of Endgame and others, and comply with our legal and financial obligations.

3. TARGETED ADVERTISING AND ANALYTICS

We engage others to provide analytics services, serve advertisements, and perform related services. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Website and your activities across third-party websites and mobile apps, including your IP address, web browser and mobile network information, pages viewed, time spent on pages, and links clicked. This information is used to deliver advertising targeted to your interests on other companies' websites or mobile apps and to analyze and track data, determine the popularity of certain content, and better understand your activity.

You can also learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance, by visiting www.aboutads.info/choices.

4. DISCLOSURE OF INFORMATION

We disclose the categories of information described above as follows:

• Vendors and Sub-processors: we disclose information to vendors, service providers, contractors, and consultants that need this information to provide services to us, such as companies that assist us with web hosting, payment processing, customer service, analytics, marketing and advertising, and the AI model and infrastructure providers we use to process Tool Inputs and generate Derived Insights.
• Connected Third-Party Services: at a Customer's direction, the Services connect to and exchange information with the Customer's own CRM, email, Slack, calendar, call-recording, and document-storage systems (each, a "Connected Service") in order to retrieve Business Records and Communications and to write back Derived Insights. Each Connected Service's own privacy practices govern its handling of information outside the Services, and we are not responsible for those practices.
• Customers: we make Derived Insights, Professional Profiles, and Lead Enhancement Information available to the Customer whose authorized users requested it.
• Professional Advisors: we disclose information to our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
• Legal Authorities: we may disclose information to legal authorities and others for the Protection and Compliance purposes described above, including if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements and if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Endgame, our users, the public, or others.
• Corporate Transactions: we reserve the right to disclose information in connection with, or during negotiations of certain corporate transactions, including the merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliates: we reserve the right to disclose information between and among Endgame and any current or future parents, affiliates, subsidiaries, and other companies under common control and ownership.
• Consent: we may disclose information when we have your consent or you direct us to do so.

We also disclose de-identified information that cannot reasonably be used to identify you.

5. RETENTION OF INFORMATION

We retain information for as long as needed to provide the Services and for legitimate business purposes, such as maintaining Service performance, complying with our legal obligations, resolving disputes, enforcing our agreements, and supporting the purposes described in Section 2. Customer Data and Service-generated logs are retained according to the schedule below, after which we delete or de-identify the information unless a longer period is required by law, an active dispute, or our agreement with the relevant Customer.

"Sanitized MCP invocation events" refers to records of the Services' calls to Connected Services, with content minimized or redacted, that we retain for security, reliability, and audit purposes.

6. TRANSFER OF INFORMATION

Endgame is headquartered in the United States and we have operations and vendors in the United States and other countries. Therefore, we and those that perform work for us may transfer your information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction.

7. APPLICANT INFORMATION

When you apply for a position with Endgame, we collect the information that you provide in connection with your application. This includes name, contact information, professional credentials and skills, educational and work history, and other information that may be included in a resume or provided during interviews (which may be recorded). This may also include demographic or diversity information. We may also conduct background checks and receive related information.

We use applicants' information to facilitate our recruitment activities and process applications, including evaluating candidates and monitoring recruitment and hiring statistics. We use successful candidates' information to administer the employment or independent contractor relationship. We may also use and disclose applicants' information (a) to improve our Website, (b) as otherwise necessary to comply with applicable laws, (c) to respond to subpoenas or warrants served on Endgame, and (d) to protect and defend the rights or property of Endgame or others.

8. YOUR RIGHTS AND CHOICES

You have the following rights and choices regarding your information:

• Deletion of Personal Information: If you would like us to delete your personal information, please email privacy@endgame.io with the subject Forget me.
• Correction of Inaccurate Personal Information: If you believe any personal information we have about you is inaccurate and would like it corrected, please email privacy@endgame.io with the subject Personal Information Correction.
• Opting Out of the Sale or Sharing of Personal Information: If you wish to opt out of the sale or sharing of your personal information, please email privacy@endgame.io with the subject Personal Information Sharing Opt-Out.
• Opting Out of AI Model Training: Customers may opt out of having their Customer Data used to improve or train our AI models by contacting their account representative or emailing privacy@endgame.io with the subject "Model Training Opt-Out."
• Managing Connected Services: Customer administrators may disconnect a Connected Service at any time from the Services' administrative settings, which stops further collection of Business Records and Communications from that source going forward.
• Automated Request Access: If you are interested in accessing an API for automating such requests, please email privacy@endgame.io with the subject Automated Personal Information Management.

Because Customer Data is collected and used at the direction of the relevant Customer, individuals who wish to exercise rights over their information as it appears in a Customer's account should generally direct their request to that Customer in the first instance. We will support our Customers in responding to such requests as required by applicable law and our agreements with them.

9. CONTACT US

If you have any questions about this Privacy Policy, please contact us at legal@endgame.io.