5. Personal data we collect

We may access the following categories of personal data:

• Identification and contact data: Includes data such as your first name, last name, RUT, email address, phone number, and other contact data. Likewise, identification and contact data of the company or legal entity engaging the Service.
• Credentials: Includes data such as your national identification number or national ID card, passwords or access codes, or other information for authentication and access to the application and website. Likewise, identification data, passwords, access codes, or other information of the company or legal entity engaging the Service.
• User content: Includes data such as communications and files you provide us when using our Services.
• Service payment information: Includes data such as the number and type of your Payment Account, the client's RUT, among other identification data to keep proof that payment was made.
• Device information: Includes data such as IP address, location, browser type, operating system, and internet service provider.

6. How we use your information

We use your information to:

• Provide and manage the Services you engage, which may involve interacting with third parties on your behalf to facilitate the operations you request from us and analyzing and processing data you provide us.
• Provide customer support and improve our Services. To do this, we will use automated tools in the analysis of your data. In relation to the use of the latter, we will keep available to you the information you are entitled to access under the law and this Privacy Policy.
• Anonymize your data, generate and display statistics, whenever possible, in aggregate form.
• Comply with our legal obligations and protect our rights.
• Prevent fraud, abuse, and any other unlawful conduct in relation to applicable regulations, and, in general, comply with DataScope's legal and regulatory obligations and orders from the competent authority.
• Maintain and safeguard the security and integrity of our Services; prevent, detect, and investigate potentially prohibited or illegal activities carried out in connection with the use of our Services.
• Provide information about the Services used to the competent authority when applicable, for example, regarding findings reports.
• Protect the legitimate interests and rights of DataScope or its related companies, for example, processing your data when necessary in the context of a due diligence process, a sale, or a transfer of all or part of DataScope's business or assets to a third party.
• To facilitate onboarding or registration processes for the data subject in case, in the future, they wish to engage or access other services offered by DataScope. This processing seeks to simplify the user experience and avoid repeatedly requesting information already provided, safeguarding at all times the security and confidentiality of their data.

7. How we communicate or transfer your information

To fulfill the purposes of the processing of your data regulated in this Privacy Policy, DataScope may communicate or allow access to your personal data to third parties, who may be located in Chile or abroad.

When DataScope communicates or transfers your data to third parties, it will only share and transmit the data necessary to fulfill the purpose that motivated the communication of your data. Likewise, it will make its best efforts to ensure that all data is treated with absolute confidentiality, securely, and solely for the purposes that motivated the communication of the data and under DataScope's instructions, when we act as the principal of that communication or transfer of data. In this regard, DataScope will seek to ensure that such third parties, prior to receiving such information, assume obligations and responsibility for care, secrecy, and confidentiality of the same standard as those applicable to DataScope, in accordance with current legislation.

In particular, DataScope may communicate or transfer your personal data to the following third parties:

• Service Providers. We may communicate your data to the providers we engage, so that they may provide the services necessary to operate or improve the functioning of our Services. These providers access your data under a data processing mandate from DataScope, and act following our instructions and supervision.
• Related Companies. We may communicate your personal data to companies that belong to the same corporate group as DataScope, and that operate in accordance with common policies and processes.
• Corporate restructuring. In the event of a merger, acquisition, sale, or transfer of all or part of DataScope's business or assets, or in the event of a corporate reorganization, we will communicate or transfer your personal data to the assignee of the business or assets, or to whoever is evaluating becoming so in a due diligence process.
• Regulators and other authorities. DataScope may communicate your data to administrative and/or judicial authorities that, in the exercise of their functions and within the scope of their competence, require information from DataScope. Once DataScope communicates the data to the respective authority, that authority acts as the controller of that data.

8. Retention of your information

Your personal data will be retained for as long as necessary to fulfill the purposes indicated in this Privacy Policy.

The specific length of time we retain your data depends on the type of data, the purposes for which it was collected, and our legal retention obligations.

Accordingly, as long as you do not request termination of the Services and/or the deletion of your personal data, DataScope will store and process your data in accordance with this Privacy Policy.

Once deletion of your account or personal data has been requested, DataScope may retain your personal data after such request has been accepted:

• To comply with legal or regulatory retention obligations; and
• If there are pending claims, judicial and/or administrative actions, or whose statute of limitations has not expired.

In these cases, your data may only be used to fulfill the purposes that motivated the retention and we may not use it for other purposes.

9. Your rights

Data subjects have the following rights:

• Access: Request information about the personal data we retain and process about you, learn its origin and recipients (if any), and the purpose of storage.
• Rectification: Request that your erroneous, inaccurate, ambiguous, or incomplete data be modified, when you provide evidence of this.
• Blocking: Request the temporary suspension of any data processing, except for storage, when you have voluntarily provided your data.
• Cancellation: Request the deletion of personal data when it is outdated, its processing lacks legal grounds, or when you provided it voluntarily.
• Portability: request and receive a copy of the personal data concerning you that we process, in a structured, commonly used, and generic electronic format.
• In addition, you always have the right to revoke, without retroactive effect, the consent you have granted for the processing of your data.

In order to exercise your rights as a data subject, you will need to submit a written request, which must be sent by email to payments@datascope.io and must contain, at a minimum, the following information:

• First name;
• Last name;
• Local identification number (RUT/CURP/RUC, etc.);
• Email address of the account;
• Phone number; and
• Indicate which right or rights you wish to exercise.

Please note that, for security reasons regarding your data and the data of other data subjects for whom we are responsible, we may reasonably require you to verify your identity before responding.

10. External links and features

Our services may contain links to third-party websites, such as social networks. We are not responsible for the practices of those sites.

DataScope is not responsible for the processing of your personal data carried out by third parties, including, without limitation, any third party that operates any site, application, or Platform on which our Service is made available to collect and analyze data. Any personal data you provide through third-party websites, applications, or other means will be governed by their own privacy policies, which we recommend you read carefully.

11. Security of your information

At DataScope, we take measures to protect your information by implementing internationally recognized security standards, conducting periodic testing, and continuously monitoring our platform. Despite this, no system is completely secure, so we will notify you of any security breach so that you can take appropriate action.

12. Changes to our Privacy Policy

We may modify this policy at any time, for which we will request your consent. The most up-to-date version will be available on our website.

Last updated: January 4, 2026