Privacy Policy

This Privacy Policy (“Policy”) describes how Crescite Innovation Corporation (“Crescite,” “we,” “us,” or “our”) may collect, use, disclose, and protect information in connection with the Catholic Token website, catholictoken.com, and any related websites, mobile applications, user interfaces, APIs, account portals, wallet-connection tools, token-related features, smart-contract interactions, communications, content, and services that link to or reference this Policy (collectively, the “Website and Services”). Please read this Policy carefully. If you have any questions, contact us at legal@cresciteinnovation.com.

Applicability of This Policy

This Policy applies to the Website and Services, including interactions with Catholic Token-related pages, tools, forms, accounts, communications, token-related features, blockchain-based functionality, or other digital services that Crescite owns, operates, makes available, or links to this Policy.

This Policy does not apply to third-party websites, wallets, exchanges, block explorers, applications, or services that we do not own or control, even if they are linked from, integrated with, or accessible through the Website and Services. Those third parties may have their own privacy policies and terms.

If you do not agree with this Policy, do not access or use the Website and Services or otherwise interact with our business. This Policy does not address our privacy practices relating to job applicants, employees, contractors, or other personnel. This Policy is not a contract and does not create any legal rights or obligations beyond those required by applicable law. We may provide different or additional privacy notices where required by law or where appropriate for a particular product, service, jurisdiction, or interaction.

What We Collect

The categories of information we collect depend on how you interact with us and the Website and Services. We may collect information that you provide directly, information collected automatically, information from third-party sources, and information available on public blockchains.

Information You Provide

We may collect information you provide directly to us, including:

Contact Information, such as your name, email address, mailing address, telephone number, organization, and communication preferences. Account or Profile Information, such as username, password, account settings, eligibility information, and other information you choose to provide when creating or maintaining an account. Financial and Blockchain Information, such as blockchain addresses, connected wallet information, digital asset holdings, transaction history, associated fees, payment information, and information related to token-related activity. Transaction Information, such as the type of transaction, transaction amount, timestamp, transaction status, wallet address, digital asset or token involved, and related confirmations or records. Compliance, KYC, and Diligence Information, where applicable, such as identity verification information, government identification, passport information, photos, proof of address, utility bills, bank account statements, proof of income, source-of-funds information, tax identification information, incorporation documents, beneficial ownership information, accreditation or eligibility information, sanctions screening information, and other information required for legal, regulatory, risk, fraud-prevention, or compliance purposes. Interaction Information, such as information you submit through forms, surveys, waitlists, questionnaires, email, customer support requests, feedback, help chats, social media interactions, event registrations, or other communications with us or our service providers. Information We Collect Automatically

Like many digital platforms, we and our service providers may automatically collect certain information from your device, browser, and interactions with the Website and Services, including:

Online Identifiers and Device Information, such as IP address, browser type and version, operating system, device type, mobile carrier, Internet service provider, MAC address, device identifiers, mobile advertising identifiers, browser fingerprint, user settings, referring and exit pages, pages visited, URL entered, campaign source, date and time of visit, and error logs. Usage Data, such as pages viewed, links clicked, content interacted with, session duration, frequency of visits, navigation paths, search activity, feature usage, and activity before, during, and after using the Website and Services. Location Information, such as general location inferred from IP address, which may be used for security, fraud detection, compliance, customer support, analytics, and product improvement. Cookies and Similar Technologies. We and third parties we authorize may use cookies, pixels, web beacons, embedded scripts, software development kits, local storage, logging technologies, and similar technologies (collectively, “Cookies”) to collect information, operate the Website and Services, remember preferences, improve performance, analyze traffic, understand user activity, prevent fraud, support security, and measure the effectiveness of communications and content. You may configure your browser to reject or alert you about Cookies. Some features of the Website and Services may not function properly if Cookies are disabled. Information from Third Parties and Other Sources

We may obtain personal information from third-party sources and combine it with information we collect directly or automatically. These sources may include:

Affiliates and Related Entities. We may receive information from companies or entities that are related by common ownership or control, or that collaborate with us in providing the Website and Services. Social Media and Public Platforms. If you interact with us on social media or public platforms, we may collect information that you make available through those platforms, including your username, profile information, posts, comments, and communications. Identity Verification and Compliance Providers. We may receive information from service providers that help verify identity, conduct KYC, screen for sanctions, prevent fraud, assess eligibility, or satisfy legal and regulatory obligations. Data Analytics Providers. We may receive analytics, attribution, device, usage, or blockchain-related information from providers that help us understand and improve the Website and Services. Service Providers. We may receive information from vendors that provide hosting, cloud infrastructure, security, customer support, communications, marketing, analytics, compliance, payment, and other services on our behalf. Information Providers. We may obtain information from data providers, public records, credit bureaus, compliance databases, or similar sources to correct, supplement, verify, or evaluate information we collect. Publicly Available Sources. We may collect information from public sources, including public websites, public records, public social media posts, and public blockchains. Our Collection of Blockchain Information

Blockchains are shared ledgers that may publicly record transactions involving digital assets. In connection with the Website and Services, we may collect current and historical blockchain information directly from you, from third parties, or from public blockchains, including:

Account Address: the blockchain address, wallet address, or domain from or to which assets are transferred. Wallet Information: the wallet provider, wallet type, and wallet connected to a specific address or account. Account Balance and Assets: balances, tokens, digital assets, and related holdings associated with a blockchain address. Transaction Details: transaction identifiers, transaction hashes, blockchain position, date and time, transaction type, amount sent or received, fees, sender and recipient addresses, smart contract interactions, and related metadata.

We may combine blockchain information with other information we collect, including where you connect a wallet, create an account, submit compliance information, request support, or otherwise interact with the Website and Services. Because public blockchains are generally public, permanent, and outside our control, information recorded on a blockchain may remain publicly available and may not be capable of being deleted or modified by us.

How We Use Information

We may use your information and blockchain information for the purposes described below, as directed by you, as described in applicable terms, and as permitted or required by law.

Providing the Website, Services, and Features

We may use information to operate, provide, personalize, maintain, and improve the Website and Services, including to:

operate, maintain, customize, test, measure, and improve the Website and Services and our business operations; create, maintain, verify, and administer accounts or user profiles; facilitate, verify, record, and process transactions or requests; provide token-related information, features, tools, content, communications, or support; connect or authenticate wallets, where applicable; send confirmations, notices, updates, technical alerts, security alerts, surveys, and support or administrative messages; communicate with you about the Website and Services, including features, updates, events, educational content, and information we believe may interest you; personalize and improve your experience; monitor and analyze trends, usage, traffic, and activity; and create aggregated, anonymized, or de-identified information. Safety and Security

We may use information to help maintain the safety, security, and integrity of users, the Website and Services, technology assets, and our business, including to:

protect against, investigate, and deter fraudulent, unauthorized, harmful, or illegal activity; monitor and verify identity, eligibility, wallet access, and service access; detect and prevent spam, malware, phishing, abuse, market manipulation, security threats, and other risks; test, diagnose, troubleshoot, and resolve technical or operational problems; enforce agreements, terms, policies, and rights; detect, prevent, investigate, or provide notice of security incidents or malicious, deceptive, fraudulent, or illegal activity; protect the rights, property, safety, and security of Crescite, users, partners, service providers, and others; and comply with applicable security, fraud-prevention, and risk-management obligations. User Support

We may use information to provide support, including to:

respond to inquiries, comments, questions, and requests; direct requests to the appropriate support person or service provider; investigate, troubleshoot, address, and resolve concerns or technical issues; and monitor, improve, and train our support processes and responses. Research and Development

We may use information for testing, research, analytics, and product development. This helps us improve and enhance the Website and Services, develop new features, improve safety and security, prevent misuse, and better understand user needs and preferences.

Legal and Regulatory Compliance

We may use information to comply with legal, regulatory, tax, accounting, sanctions, anti-money laundering, counter-terrorist financing, KYC, fraud-prevention, and risk-management obligations. This may include verifying identity, conducting due diligence, screening against third-party databases and public records, responding to regulators and government authorities, investigating claims or disputes, enforcing terms and policies, facilitating business transactions or reorganizations, maintaining required records, and otherwise complying with applicable law.

Direct Marketing

We may use information to send communications about the Website and Services, features, promotions, surveys, newsletters, updates, events, and related information. You may opt out of marketing emails by selecting the “unsubscribe” link in a marketing email or by contacting legal@cresciteinnovation.com. Even if you opt out of marketing communications, we may still send you non-marketing communications, such as service, security, transactional, legal, or administrative notices.

How We Share and Disclose Information

We may share information and blockchain information in the following circumstances:

With Affiliates and Related Entities. We may share information with entities related by common ownership or control, or with entities that collaborate with us to provide the Website and Services. At Your Direction. We may share information when you direct us to do so, request a transaction, connect a wallet, use a third-party integration, interact with a third-party service, or otherwise consent to disclosure. Third-party uses of your information are subject to their own privacy policies and terms. To Comply with Legal Obligations. We may share information to cooperate with government or regulatory investigations, respond to subpoenas, court orders, legal process, or official requests, report suspected illegal activity, prevent harm, enforce terms or policies, and comply with applicable law. With Service Providers. We may share information with service providers that perform services on our behalf, including hosting, cloud infrastructure, security, customer support, compliance, identity verification, data analytics, marketing, communications, payment, professional, and technology services. We require service providers to use information only as necessary to perform services for us or as otherwise permitted by law. With Identity Verification and Compliance Providers. Where identity verification, KYC, sanctions screening, eligibility verification, fraud prevention, or other compliance checks are required or appropriate, we may share information with third-party providers that assist with those functions. With Public Blockchains. Certain transaction information may be made available on public blockchains to the extent such information is customarily or technically required to complete or record a blockchain transaction. Information recorded on a public blockchain may be visible to others and may be shared freely by third parties. During a Business Transaction. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, dissolution, sale of assets or equity, public offering, or similar transaction or proceeding, or steps in contemplation of such activities, information may be shared or transferred subject to appropriate protections where required by law. For Legal Rights and Protection. We may share information with lawyers, auditors, insurers, advisors, law enforcement, courts, regulators, and other third parties where necessary to obtain advice, protect and manage business interests, establish, exercise, or defend legal claims, protect rights and property, detect or prevent fraud, protect health and safety, or comply with law. Aggregated, Anonymized, or De-identified Data. We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. Legal Bases for Using Your Information

Where applicable law requires us to identify a legal basis for processing personal information, we rely on one or more of the following legal bases:

Performance of a Contract, where processing is necessary to provide the Website and Services, fulfill requests, administer accounts, or perform agreements with you. Legitimate Interests, where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and interests. Legal Obligation, where processing is necessary to comply with applicable legal, regulatory, tax, accounting, sanctions, AML, KYC, or other obligations. Consent, where you have given us permission to process your information for a specific purpose. Your Rights and Choices

Depending on where you live and subject to applicable law, you may have the right to request that we:

provide access to or a copy of certain information we hold about you; correct or update information that is inaccurate or incomplete; delete certain information we hold about you; restrict or object to certain processing of your information; withdraw consent where processing is based on consent; provide certain information in a portable format; or provide additional information about how we collect, use, and disclose your information.

To exercise rights available under applicable law, contact us at legal@cresciteinnovation.com. We may request information necessary to verify your identity before responding. We will consider and respond to requests within the time required by applicable law. Certain information may be exempt from requests, including where we need to retain or process information to comply with legal obligations, protect rights, prevent fraud, complete transactions, maintain security, resolve disputes, or for other lawful purposes.

Data Retention

We retain information for as long as reasonably necessary to provide the Website and Services, fulfill the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, enforce agreements, prevent fraud, support security, and protect rights. Where required by law or appropriate for compliance, risk-management, tax, accounting, or legal purposes, we may retain certain information for a minimum of five (5) years or longer.

To view, update, or request deletion of certain information, contact legal@cresciteinnovation.com. If you stop using the Website and Services, we may continue to process and share information as described in this Policy where necessary for legal, regulatory, compliance, security, fraud-prevention, dispute-resolution, law-enforcement, or rights-protection purposes.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, misuse, alteration, or loss. However, no system, network, blockchain, wallet, or method of transmission is completely secure. We cannot guarantee that information, searches, wallet interactions, transactions, or communications will always remain secure. You are responsible for maintaining the confidentiality of your credentials, wallet keys, seed phrases, devices, and blockchain addresses, and for all activity associated with your accounts, wallets, and blockchain addresses.

Age Limitations

To the extent prohibited by applicable law, the Website and Services are not intended for use by anyone younger than the legal age in the jurisdiction where the person resides. If you believe that a person younger than the applicable legal age has provided personal information to us unlawfully, contact legal@cresciteinnovation.com. We will take appropriate steps to delete such information, close any related account where applicable, and, to the extent possible, prevent continued use of the Website and Services.

International Data Transfers

We may process, store, and transfer information in the United States and other jurisdictions where we, our affiliates, or our service providers operate. These jurisdictions may have data protection laws that differ from those in your location. Where required by law, we use appropriate safeguards for cross-border data transfers.

Changes to This Policy

We may update this Policy from time to time. If we make changes, we will update the “Last Updated” date above. We encourage you to review this Policy periodically. If we make material changes, we may provide additional notice, such as by posting a notice on the Website and Services, sending an email, or using other reasonable means.

Online Tracking Opt-Out Guide

Like many companies, we may use services provided by Google and other companies that use Cookies and similar technologies. These services may collect information from your device about your browsing activity, interactions with websites, and device used to connect to the Internet. You may have several options to limit online tracking:

Blocking Cookies in Your Browser. Most browsers let you remove or reject Cookies, including Cookies used for interest-based advertising. To do this, follow instructions in your browser settings. Many browsers accept Cookies by default until you change your settings. For more information about Cookies, including how to see, manage, and delete Cookies, visit www.allaboutcookies.org. Blocking Advertising ID Use in Mobile Settings. Your mobile device settings may allow you to limit the use of the advertising ID associated with your device for interest-based advertising purposes. Using Privacy Plug-ins or Browsers. You may use privacy-focused browser features, plug-ins, or settings to block certain tracking technologies. Platform Opt-Outs. Some advertising and analytics partners offer opt-out tools. For example, Google provides information about how it uses data and currently available Google Analytics opt-out options through Google’s privacy and analytics resources. Advertising Industry Opt-Out Tools. You may also use industry opt-out tools to limit use of information for interest-based advertising by participating companies. These opt-outs are generally specific to the device or browser on which they are exercised, so you may need to opt out on each browser and device you use. Examples include the Digital Advertising Alliance at optout.aboutads.info and the Network Advertising Initiative at optout.networkadvertising.org. Additional Disclosure for Consumers and Customers

This Additional Disclosure applies to personal information that users provide to initiate, access, or complete interactions with financial, blockchain, token-related, or other features of the Website and Services. If there is a conflict between this Additional Disclosure and another section of this Policy, this Additional Disclosure will govern to the extent required by applicable law.

The types of personal information we collect and share may include:

contact details; transaction history; blockchain addresses; cryptocurrency, token, or digital asset balances; wallet information; identity verification and compliance information; and account, support, and communication records.

When you are no longer our customer or user, we may continue to share information as described in this Policy and as permitted or required by law.

Reasons We Can Share Personal Information

We may share personal information as necessary to operate the Website and Services and our business. This includes:

Everyday Business Purposes. We may share personal information to operate, maintain, provide, secure, support, and improve the Website and Services; process transactions or requests; respond to court orders, legal process, and regulatory inquiries; prevent fraud; maintain records; and comply with law. You generally cannot limit this sharing where it is necessary for these purposes. Marketing Purposes. We may use personal information to offer products, services, updates, newsletters, or events to you. You may opt out of marketing emails as described above. Joint Marketing. We do not share personal information for joint marketing with partner financial companies unless we provide any required notice or obtain consent where required by law. Nonaffiliates to Market to You. We do not share personal information with nonaffiliates for their own marketing purposes, except as described in this Policy, at your direction, or with your consent.

For purposes of this section, “affiliates” means companies related by common ownership or control; “nonaffiliates” means companies not related by common ownership or control; and “joint marketing” means a formal arrangement between nonaffiliated companies that together market products or services.

How Does Crescite Innovation Corporation Protect My Personal Information?

To protect personal information from unauthorized access and use, we maintain administrative, technical, and physical safeguards designed to comply with applicable law. These safeguards may include access controls, monitoring, vendor diligence, security reviews, computer safeguards, and secured files and facilities.

How Does Crescite Innovation Corporation Collect My Personal Information?

We may collect personal information when you visit the Website and Services, register for an account, join a waitlist, connect a wallet, submit a form, request information, interact with token-related features, make or request transactions, withdraw or transfer digital assets where applicable, contact us, interact with support, subscribe to communications, or otherwise engage with us. We may also collect personal information automatically through your use of the Website and Services or from third-party sources as described in this Policy.

Contact Us

Please contact us if you have questions about this Policy or wish to exercise rights available under applicable law. Subject to applicable law, we will respond within a reasonable timeframe.

Crescite Innovation Corporation Email: legal@cresciteinnovation.com Website: catholictoken.com