Olevus Privacy Policy Monetization and Payments Addendum

This Olevus Privacy Policy Monetization and Payments Addendum (the “Addendum”) supplements the Olevus Privacy Policy. Olevus is operated by Aurion Consulting LLC, doing business as Olevus (“Olevus,” “we,” “us,” or “our”).

This Addendum explains how Olevus collects, uses, retains, discloses, and protects personal information when members purchase or gift coins, participate in monetization, offer products or services, create a Stripe Connected Account, complete identity or tax verification, receive earnings or seller proceeds, or request a payout.

If this Addendum conflicts with the Olevus Privacy Policy on a matter specifically concerning monetization, payments, Stripe Connect, tax reporting, or payouts, this Addendum controls for that matter. The Privacy Policy continues to govern all other processing.

1. Scope

This Addendum applies to personal information processed in connection with:

• Olevus coin purchases, coin balances, gifting, refunds, reversals, and chargebacks;

• The Olevus Support Economy and other creator-earnings programs;

• Digital products, premium content, paid communities, subscriptions, events, services, and other seller programs;

• Stripe Connect onboarding, connected-account administration, transfers, and payouts;

• Identity, business, banking, sanctions, fraud, and tax verification;

• Tax-information collection and information-return reporting;

• Customer orders, seller fulfillment, refunds, disputes, and support;

• Accounting, reconciliation, reserves, negative balances, and unclaimed-property administration; and

• Related legal, regulatory, risk, security, and compliance activities.

Different monetization programs may collect different information. Olevus will seek to collect only information reasonably necessary for the applicable program, transaction, or legal obligation.

2. Categories of Personal Information We May Collect

2.1 Account and Contact Information

• Olevus username and user ID;

• Legal and display names;

• Email address, telephone number, and mailing address;

• Date of birth or age-confirmation information;

• Profile, community, role, and account-status information; and

• Communication preferences and support history.

2.2 Identity and Verification Information

• Government-issued identification information;

• Images of identity documents;

• Selfie, liveness, or identity-verification information collected by Stripe or another verification provider;

• Business ownership, representative, control-person, and beneficial-owner information;

• Verification results, status, requirements, and restriction information; and

• Sanctions, watchlist, fraud, or compliance screening results.

Depending on the verification method, Stripe or another provider may collect identity images or biometric-derived information under its own privacy terms. Olevus may receive verification results and the underlying information that the provider makes available to Olevus.

2.3 Tax Information

• Taxpayer identification number, Social Security number, employer identification number, or foreign tax identifier;

• Federal tax classification and exempt-payee status;

• Form W-9, Form W-8, treaty, withholding, and certification information;

• Tax residency and, where relevant, the location where services are performed;

• TIN-verification, mismatch, B-notice, and backup-withholding status;

• Electronic-delivery consent for tax forms; and

• Information needed to prepare, correct, file, or furnish Forms 1099, 1042-S, or other tax records.

2.4 Banking, Payment, and Payout Information

• Bank-account or debit-card payout information;

• Account-holder name, financial institution, account type, routing information, and masked account details;

• Payment tokens, card brand, last four digits, expiration information, and billing address where made available;

• Stripe Connected Account ID, account capabilities, balance, transfer, and payout status;

• Transaction, settlement, fee, refund, dispute, chargeback, reserve, and negative-balance information; and

• Payout requests, transfer identifiers, bank-payout status, failures, reversals, and repayment activity.

Olevus generally does not receive or store full payment-card numbers when Stripe, Apple, Google, or another provider processes the payment. Those providers may provide Olevus with tokens, masked details, receipts, and transaction metadata.

2.5 Coin, Earnings, Commerce, and Transaction Information

• Coin packages purchased, price, currency, taxes, and purchase channel;

• Purchased, promotional, restored, or administrative coin classifications;

• Funding-lot ancestry, balances, gifting, consumption order, and transaction history;

• Creator-earnings calculations, hold dates, available balances, fees, offsets, and tax-reportable amounts;

• Products, services, listings, pricing, orders, subscriptions, customer communications, delivery, and fulfillment;

• Refunds, cancellations, disputes, chargebacks, complaints, and supporting evidence; and

• Accounting classifications, reconciliation records, reserves, journal entries, and audit history.

2.6 Device, Security, and Risk Information

• IP address, device identifiers, browser, operating system, and app version;

• Approximate location derived from network or device information;

• Login, authentication, session, and account-security events;

• Payment, gifting, selling, and payout velocity or behavioral patterns;

• Fraud, abuse, collusion, self-dealing, and account-linkage signals;

• Risk scores and outputs received from Stripe or other service providers; and

• Records of investigations, restrictions, appeals, and enforcement actions.

3. Sources of Personal Information

Olevus may obtain monetization and payment information from:

• You, when you provide information, complete onboarding, make a purchase, create a listing, communicate with support, or request a payout;

• Stripe and other identity, tax, payment, banking, fraud, or compliance service providers;

• Apple, Google, app stores, card networks, banks, and payment processors;

• Purchasers, customers, creators, sellers, community operators, and other transaction participants;

• Public records, sanctions lists, government agencies, tax authorities, and lawful verification sources;

• Your device and use of Olevus features; and

• Our internal coin, earnings, commerce, accounting, audit, and security systems.

4. How We Use Monetization and Payment Information

Olevus may use the information covered by this Addendum to:

• Create, maintain, and administer Olevus and Stripe Connected Accounts;

• Verify identity, age, business authority, beneficial ownership, tax status, and payout eligibility;

• Process coin purchases, orders, subscriptions, refunds, transfers, and payouts;

• Calculate creator earnings, seller proceeds, platform fees, payout fees, withholding, and offsets;

• Operate holds, reserves, minimum payouts, negative balances, and recovery procedures;

• Provide transaction history, dashboards, tax records, receipts, and customer or creator support;

• Detect, investigate, prevent, and respond to fraud, collusion, self-dealing, money laundering, account compromise, and payment abuse;

• Reconcile Stripe, bank, coin, creator-payable, customer-liability, and general-ledger records;

• Prepare, file, furnish, and correct tax forms and comply with withholding obligations;

• Comply with consumer-protection, marketplace, sanctions, unclaimed-property, accounting, legal, regulatory, and court requirements;

• Enforce Olevus terms, investigate violations, resolve disputes, and protect Olevus, members, customers, and service providers;

• Improve monetization, payments, risk controls, customer support, and platform reliability; and

• Perform other purposes disclosed at collection or authorized by you.

5. Stripe Connect and Other Payment Providers

Olevus uses Stripe Connect and may use other payment, identity, tax, banking, fraud, or app-store providers. These providers process personal information under their own terms and privacy policies as well as instructions or authorizations associated with Olevus services.

When you create or connect a Stripe Connected Account, you authorize the exchange of information between Olevus and Stripe as reasonably necessary to provide onboarding, identity verification, tax reporting, payments, transfers, payouts, fraud prevention, account support, compliance, and related platform services.

Information Olevus may receive from Stripe includes:

• Connected-account identity and business information;

• Verification status, requirements, capabilities, and restrictions;

• Bank and payout-method information made available to the platform;

• Transaction, balance, transfer, payout, refund, dispute, and fee data;

• Tax information and tax-verification status when applicable;

• Customer and transaction information related to Olevus activity; and

• Fraud, risk, and security model outputs.

Olevus may submit corrections or updates to Stripe based on information you provide. Stripe may independently request additional information, restrict an account, delay processing, or retain data under its own legal obligations.

6. Tax Reporting and Government Disclosures

Olevus may use and disclose personal information to satisfy federal, state, local, and international tax, withholding, reporting, audit, and unclaimed-property obligations.

This may include disclosing legal name, address, taxpayer identification number, tax classification, gross payment or compensation amounts, withholding, transaction counts, and other required information to:

• The Internal Revenue Service;

• State or local tax agencies;

• Foreign tax authorities where applicable;

• Unclaimed-property administrators;

• Stripe or another filing and delivery provider; and

• Accountants, auditors, attorneys, and other professional advisers assisting with compliance.

Olevus may retain tax and financial records after account closure when required for filing, correction, audit, dispute, withholding, or legal-compliance purposes.

7. How We Disclose Personal Information

Olevus may disclose information covered by this Addendum to the following categories of recipients:

Recipient category	Purpose
Stripe and payment providers	Onboarding, identity and tax verification, payment processing, transfers, payouts, refunds, disputes, fraud prevention, and compliance.
Banks, card networks, and app stores	Payment authorization, settlement, currency conversion, receipts, refunds, disputes, and payout delivery.
Creators, sellers, operators, and customers	Transaction fulfillment, customer support, order records, receipts, disputes, and communications necessary for the transaction.
Tax and government authorities	Information returns, withholding, sanctions, lawful requests, unclaimed property, regulatory reporting, and legal compliance.
Service providers	Cloud hosting, security, analytics, communications, customer support, document management, accounting, and professional services.
Professional advisers	Legal, accounting, tax, audit, insurance, financing, compliance, and risk advice.
Corporate transaction parties	Due diligence, financing, merger, acquisition, restructuring, or asset transfer, subject to appropriate confidentiality and legal requirements.
Law enforcement and courts	Valid legal process, protection of rights and safety, fraud investigation, and enforcement of agreements.

8. Seller and Customer Information

When a creator, seller, or community operator sells a product or service, Olevus may provide that seller with information reasonably necessary to fulfill the transaction, provide customer support, comply with law, and resolve refunds or disputes. This may include the customer’s name, contact information, order details, delivery information, and transaction status.

Sellers must use customer information only for lawful transaction fulfillment, support, compliance, and other purposes disclosed to the customer. Sellers may not use customer payment or order information for unrelated marketing, profiling, resale, or disclosure unless they have an independent lawful basis and provide all required notices and choices.

Where applicable law requires Olevus to collect, verify, or disclose information concerning high-volume marketplace sellers, Olevus may collect and process bank, tax, contact, identity, and business information and may display or disclose seller information as legally required.

9. Sensitive Personal Information

Taxpayer identification numbers, bank-account details, government-identification documents, identity-verification data, precise financial records, and authentication credentials require heightened protection.

Olevus policy for sensitive monetization data Olevus does not sell taxpayer identification numbers, bank-account details, government-identification documents, or identity-verification data. Olevus does not use those categories for targeted advertising or unrelated marketing. They are used and disclosed only for monetization, payments, tax, identity, fraud, security, legal, and compliance purposes described in this Addendum.

Any separate disclosures concerning advertising, cookies, analytics, or state-law “sale” or “sharing” of other personal information remain governed by the main Olevus Privacy Policy.

10. Fraud Prevention, Risk Review, and Automated Tools

Olevus and its providers may use automated systems, rules, models, and human review to detect or assess fraud, payment risk, identity concerns, sanctions, account compromise, collusion, self-dealing, refund abuse, chargeback risk, or other prohibited conduct.

These systems may consider transaction patterns, account history, device and network information, connected accounts, identity and payment signals, gifting relationships, refund behavior, and provider-generated risk outputs.

A risk review may result in a transaction delay, additional verification, a hold, reserve, payout restriction, account limitation, or referral for manual review. Where required by applicable law, Olevus will provide available rights concerning decisions made solely through automated processing that produce legal or similarly significant effects.

11. Data Retention

Olevus retains monetization and payment information only for as long as reasonably necessary for the purposes described in this Addendum, including legal, tax, accounting, security, dispute, fraud, unclaimed-property, and contractual obligations.

Retention periods vary by record type. Olevus’s current working retention approach is:

Record category	General retention approach
Tax forms, certifications, TIN status, and withholding records	Generally up to seven years after the relevant reporting year, or longer if required for audit, correction, litigation, or law.
Coin, earnings, sales, payouts, refunds, disputes, and accounting records	Generally up to seven years after the transaction, account closure, or final resolution, subject to longer legal or unclaimed-property requirements.
Identity and business verification records	For the connected-account relationship and a reasonable period afterward, subject to provider and legal retention obligations.
Bank and payout-method information	For as long as needed to provide payouts and meet legal, fraud, accounting, and dispute obligations; full details may be retained by Stripe rather than Olevus.
Risk, security, and enforcement records	For as long as reasonably necessary to protect accounts, investigate abuse, prevent repeat fraud, and support legal claims.
Customer support and communications	For as long as needed to resolve the request and support legal, operational, and quality obligations.

Olevus may retain information longer when required by law, legal hold, court order, tax audit, unresolved dispute, chargeback, negative balance, unclaimed-property obligation, fraud investigation, or enforcement need. Olevus may retain deidentified or aggregated information where it cannot reasonably be linked back to an individual.

12. Security

Olevus uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Safeguards may include access controls, authentication, encryption in transit or at rest where appropriate, audit logging, vendor controls, monitoring, backups, incident response, and role-based access.

No system is completely secure. You are responsible for protecting your Olevus and Stripe credentials, maintaining control of your devices and email account, and promptly reporting suspected unauthorized access.

Olevus seeks to limit employee and contractor access to sensitive monetization information to individuals who need it for authorized business purposes.

13. Security Incidents and Breach Notices

Olevus may investigate suspected security incidents involving monetization or payment information, take steps to contain and remediate the incident, coordinate with service providers, and notify affected individuals or authorities when required by law.

A notice may be delivered through email, the Olevus platform, account messaging, postal mail, public notice, or another method permitted by applicable law and the Olevus Terms of Service.

14. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have rights to:

• Request confirmation of whether Olevus processes your personal information;

• Access or obtain a copy of personal information;

• Correct inaccurate personal information;

• Delete certain personal information;

• Obtain portable data where required;

• Restrict or object to certain processing;

• Withdraw consent where processing relies on consent;

• Opt out of certain sales, sharing, targeted advertising, or profiling where applicable;

• Limit certain uses of sensitive personal information where applicable;

• Appeal a denied privacy request where applicable; and

• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

Olevus may need to verify your identity and authority before completing a request. Some information cannot be deleted or restricted when it is required for tax, accounting, fraud prevention, security, legal claims, payouts, unresolved transactions, negative balances, unclaimed property, or other legal obligations.

Requests concerning information held directly by Stripe may also need to be submitted to Stripe. Olevus will direct you to the appropriate provider when Olevus does not control the requested information.

15. Account Closure and Deletion Requests

Closing an Olevus account does not immediately delete all monetization and payment information. Olevus may retain or restrict records necessary to:

• Complete or reverse transactions;

• Pay valid balances;

• Resolve refunds, disputes, chargebacks, and negative balances;

• Prepare or correct tax forms;

• Comply with recordkeeping and unclaimed-property laws;

• Prevent fraud and repeat abuse;

• Enforce agreements or defend legal claims; and

• Comply with lawful government requests.

Where possible, Olevus may delete, anonymize, or limit access to information that is no longer required.

16. Minors

Olevus monetization and payout programs are intended for adults who are at least 18 years old or the age of legal majority in their jurisdiction. Olevus does not knowingly permit a minor to create a connected payout account or receive creator payouts without a legally valid arrangement expressly approved by Olevus and its payment provider.

Coin purchases by minors, where permitted, remain subject to the Olevus Terms of Service, Coin Purchase Terms, app-store controls, and any legally required parent or guardian authorization.

17. International Data Processing

Olevus, Stripe, and other service providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live.

When required, Olevus will use legally recognized safeguards for cross-border transfers. Availability of monetization and payouts may be limited by country, and the initial creator-payout rollout may be restricted to verified U.S. persons.

18. Legal Bases Where Applicable

Where a law requires Olevus to identify a legal basis for processing, Olevus may rely on:

• Performance of a contract or steps requested before entering a contract;

• Compliance with tax, financial, sanctions, consumer-protection, and other legal obligations;

• Olevus’s legitimate interests in providing services, preventing fraud, securing the platform, improving operations, and enforcing agreements;

• Consent, where required or requested; and

• Protection of vital interests or establishment, exercise, or defense of legal claims.

19. Changes to This Addendum

Olevus may update this Addendum to reflect changes in monetization programs, payment architecture, service providers, legal requirements, data practices, or security controls.

Olevus will provide notice of material changes through the platform, email, an updated policy, or another method permitted by law. Where required, Olevus will obtain renewed consent before applying a material change.

20. Contact and Privacy Requests

Questions, complaints, or privacy requests concerning monetization and payment information may be directed to:

Olevus Operated by Aurion Consulting LLC Privacy email: legal@olevus.com Legal email: legal@olevus.com Support email: support@olevus.com Website: olevus.com

Olevus may request information necessary to verify your identity, jurisdiction, account, and authority to make a request.

21. Relationship to Other Agreements

This Addendum should be read together with the Olevus Privacy Policy, Terms of Service, Terms of Service Monetization Amendment, Monetization, Seller, and Payout Terms, applicable program schedules, Coin Purchase Terms, Community Guidelines, and applicable Stripe or app-store privacy terms.

Nothing in this Addendum limits a privacy right that cannot legally be waived or expands Olevus’s right to use personal information beyond the disclosures and lawful purposes stated here and in the main Privacy Policy.

Appendix A — Monetization Data Processing Summary

This summary is provided for transparency. The detailed provisions above control if a summary entry is incomplete.

Data or activity	Primary purpose	Typical recipients
Identity and business verification	Legal identity, authority, sanctions, connected-account eligibility	Stripe, verification providers, regulators, advisers
Tax reporting	W-9/W-8, TIN validation, withholding, Forms 1099/1042-S	Stripe or filing providers, IRS, state and foreign tax agencies
Payments and payouts	Purchases, settlement, transfers, bank payouts, failures	Stripe, banks, card networks, app stores
Coins and support earnings	Funding lots, gifts, holds, creator share, reversals	Creators and supporters as displayed; accounting and service providers
Commerce and seller activity	Listings, orders, fulfillment, refunds, customer support	Buyers, sellers, payment providers, service providers
Fraud and security	Device, account, transaction and provider risk signals	Stripe, security and fraud providers, authorities where required
Accounting and compliance	Reconciliation, reserves, audits, disputes, unclaimed property	Accountants, auditors, attorneys, government authorities
Customer support	Questions, evidence, communications, complaint handling	Support vendors, sellers or customers as needed to resolve the matter