GREENDEX PRIVACY POLICY

Effective Date: August 25th 2026

United Green Connections, LLC (“Company,” “we,” “us,” or “our”) operates the Greendex platform, including Menu Builder, Exchange, and Wholesale Data (Index) (collectively, the “Services”), as further described in our Master Subscription Agreement. This Privacy Policy explains how we collect, use, share, and protect personal information in connection with our website and the Services, and describes the choices available to individuals whose personal information we handle. This Policy is incorporated by reference into the Master Subscription Agreement.

1. Scope of This Policy

This Policy applies to personal information we collect through our website, the Services, and related business communications. It applies to individuals associated with our business customers (such as company contacts, account administrators, and billing contacts), individuals who visit our website, and individuals who communicate with us. This Policy does not apply to Cannabis Market Data or other business data that does not identify a specific individual; that data is governed by the Master Subscription Agreement.

2. Information We Collect

• Account and Business Contact Information: name, business title, business email, phone number, and business mailing or billing address, submitted when a Customer registers for or administers the Services.

• License on File: the cannabis license number and related documentation Customer submits, as described in Section 3 of the Master Subscription Agreement.

• Payment Information: billing details processed through our third-party payment processor. We do not directly store full payment card numbers. We do store bank account details, such as routing and account numbers, when Customer provides them: to receive payouts for Exchange sales, to show payment instructions on invoices sent through Menu Builder, or by sending them to us directly (for example, a voided check or ACH form). Bank account numbers entered in the payout and invoice payment forms are encrypted before they are stored. Details and documents sent to us directly are kept in internal records that only our personnel can access. Access to bank account details is limited to Customer's own users, our personnel who need them to make or reconcile payments, and the recipients of invoices Customer chooses to send.

• Transaction and Usage Data: listings, menus, pricing entries, messages exchanged through the Services, and general usage/analytics data (e.g., pages visited, features used, log data, device and browser information, cookies described in Section 6).

• Communications: records of communications with us, including support requests, and text messages if Customer or its personnel opt in to SMS communications as described in our SMS/Text Messaging Terms.

3. How We Use Information

• To create and administer accounts and provide the Services.

• To process payments and manage billing.

• To facilitate introductions and brokerage services between Exchange users, consistent with the Exchange Schedule.

• To generate, maintain, and publish Cannabis Market Data in aggregated, non-attributable form.

• To communicate with Customer about the Services, including service notices, billing, and (where opted in) SMS updates.

• To maintain the security of the Services and detect or prevent fraud, misuse, or violations of our Acceptable Use Policy.

• To comply with applicable law, respond to legal process, and enforce our agreements.

4. How We Share Information

4.1 Service Providers. We share information with vendors who perform services on our behalf, such as payment processing, hosting, analytics, and SMS delivery, under confidentiality and data protection obligations appropriate to the service provided.

4.2 Brokerage and Exchange Counterparties. If Customer participates in Exchange, we share the minimum information necessary to facilitate a transaction with a counterparty, consistent with the anonymization terms of the Exchange Schedule. We do not disclose a Customer’s identity to other Exchange users except as described in that Schedule.

4.3 Aggregated Data. We publish and license Cannabis Market Data only in aggregated, non-attributable form. We do not publicly identify individual buyers, sellers, or contributors in any published index, report, or figure.

4.4 Legal and Safety. We may disclose information where required by law, regulation, or legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Company, our users, or others.

4.5 Business Transfers. We may disclose information in connection with a merger, acquisition, financing, or sale of assets relating to the Services, including to a separate Greendex entity, subject to customary confidentiality protections.

4.6 No Sale of Personal Information for Third-Party Advertising. We do not sell personal information to third parties for their own advertising purposes.

5. Data Retention

We retain account and business contact information for as long as reasonably necessary to provide the Services and for a reasonable period thereafter to comply with legal, tax, or recordkeeping obligations. As described in Section 8.1 of the Master Subscription Agreement, Cannabis Market Data, including data derived from Customer’s transaction data, is retained indefinitely in aggregated form to preserve the historical depth and reliability of the Index, even after a Customer’s subscription ends. This aggregated retention does not include information that identifies a specific individual.

6. Cookies and Tracking Technologies

Our website and Services use cookies and similar technologies to operate core functionality, remember preferences, and analyze usage. Depending on Customer’s location, Customer or its personnel may have rights to control non-essential cookies through browser settings or an in-product cookie preference tool, where available.

7. SMS / Text Messaging

If Customer or its personnel opt in to receive text messages from us (for example, transaction alerts or account notifications), that communication is governed by our separate SMS/Text Messaging Terms, which describe message frequency, applicable rates, and how to opt out. We do not share mobile opt-in information with third parties for their own marketing purposes.

8. Your Privacy Rights

Depending on the state in which an individual resides, they may have rights to request access to, correction of, or deletion of their personal information, or to opt out of certain uses. Where applicable law provides these rights, we will honor a verifiable request submitted through the contact method in Section 12 within the time required by law. We will not discriminate against any individual for exercising these rights.

9. Cannabis-Specific Disclosures

Customer acknowledges that cannabis remains illegal under federal law notwithstanding its legal status in the states where the Services are offered, as further described in Section 2.2 of the Master Subscription Agreement. License on File information is used solely to support eligibility and brokerage functions described in the Master Subscription Agreement and is not independently verified by Company.

10. Children’s Privacy

The Services are business-to-business and are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from individuals under 18.

11. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Contact Us

Questions about this Policy, or requests regarding personal information, may be directed to: United Green Connections, LLC, Attn: Privacy, 3252 University Drive - Suite 170, Auburn Hills, MI 48326, info@unitedgreenbrands.com.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be provided by posting a revised version with an updated Effective Date, and, where required by law, additional notice will be provided.