Effective Date: April 2023

Millscope Markets (collectively, “Millscope,” “we”, “our” or “us”) respect your privacy and are
committed to protecting the personal data we hold about you. If you have questions, comments, or
concerns about this Privacy Statement or our processing of personal data, please see the bottom of this
Privacy Statement for information about how to contact us.

This Privacy Statement relates to your use of our website located at www.millscopemarkets.com
our services that we may offer from time, or otherwise through your interaction with us (the
website and services, collectively, the “Services”).

Please review the following to understand how we process and safeguard personal data about you. By
using any of our Services, whether by visiting our website or otherwise, and/or by voluntarily providing
personal data to us, you acknowledge that you have read and understand the practices contained in this
Privacy Statement. This Privacy Statement may be revised from time to time, so please ensure that you
check this Privacy Statement periodically to remain fully informed.

1. YOUR RIGHTS REGARDING PERSONAL DATA
• Accessing, Modifying, Rectifying, and Correcting Collected Personal Data
• Your California Privacy Rights
• Your Nevada Rights
2. YOUR CHOICES
• Communications Opt-Out
• Location Information
3. OTHER IMPORTANT INFORMATION SERVICES
• Collection of Personal Data from Children
• Third-Party Websites and Services
• Business Transfer
• Do Not Track
4. MODIFICATIONS AND UPDATES TO THIS PRIVACY STATEMENT
5. ADDITIONAL INFORMATION AND ASSISTANCE

This Privacy Statement relates to your use of our website located at www.millscopemarkets.com, our services related to the offering and sale of our securities under SEC Regulation D Rule 506(c), or SEC Regulation S, or otherwise through your interaction with us (the website and services, collectively, the “Services”). Our Services are limited to facilitating investments in our securities by accredited investors only. We collect information that identifies, relates to, describes, is reasonably capable of being associated
with, or could reasonably be linked, directly or indirectly, with a particular consumer or household
(“personal data”). Personal data does not include anonymized data.

We may collect the below categories of personal data from our users:

1. Identifiers such as a real name, alias, postal address, internet protocol address, email address,
account name, social security number, driver’s license number, passport number, or other similar
identifiers.

2. Accreditation information, such as net worth, income level, investment experience, or other details required to verify accredited investor status under SEC rules."

3. Commercial information, including records of personal property, products or services purchased,
obtained, or considered, or other purchasing or consuming histories or tendencies.

4. Financial information, including, bank account number, credit card number, debit card number,
and other financial information.

5. Internet or other electronic network activity information, including, but not limited to, browsing
history, search history, and information regarding a consumer’s interaction with an internet
website, application, or advertisement.

6. Geolocation data.

7. Professional or employment information, such as title and employer name.

8.  Audio, electronic, visual and similar information, such as calls and messages on our customer
service phone line or images from photographs.
We will not collect additional categories of personal data other than those categories listed above. If we
intend to collect additional categories of personal data, we will provide you with a new notice at or before
the time of collection.

Retained

Retained for 7 years to comply with SEC record keeping or tax laws

Retained

Retained for 7 years to comply with SEC record keeping or tax laws

Retained

Retained for 7 years to comply with SEC record keeping or tax laws

We collect personal data either:

• Directly From You. When you provide it to us directly to perform the Services.
• Automatically or Indirectly From You. For example, through and as a result of your use of and
  access to the Services. We also collect IP addresses and browser types from the devices you use.
• From our Service Providers. For example, we may collect personal data from service providers to
  perform know-your-customer (“KYC”) and anti-money laundering (“AML”) checks.
• From you or third parties during accredited investor verification, such as financial statements or credit reports provided for Reg D 506(c) or Reg S compliance.

We process personal data described in Section 1 (“Personal Information We Collect”) for the following
purposes:

1. To provide the Services, which includes facilitating securities offerings and investments under Reg D 506(c).
2. Verifying your status as an accredited investor under SEC Regulation D Rule 506(c), including reviewing financial documentation
3. Developing, improving, operating, providing, predicting, or performing, including maintaining or
   servicing accounts, enhancing the Services and your experience with them, providing customer
   service, processing or fulfilling transactions, verifying your identity, and processing payments.
4. Communicating with you by email about the Services, verifying your identity, responding to
   support inquiries or, sharing information about the Services.
5. Auditing related to a current interaction with the user and concurrent transactions.
6. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity,
   and prosecuting those responsible for that activity.
7. Debugging to identify and repair errors that impair existing intended functionality.
8. Undertaking internal research for technological development and demonstration.
9. Undertaking activities to verify or maintain the quality or safety of the Services owned,
   manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the
   Services owned, manufactured, manufactured for, or controlled by us.
10. Complying with applicable laws, regulations, rules and requests of relevant law enforcement
    and/or other governmental agencies, or for other purposes, as permitted or required by law.
11. As necessary or appropriate to protect the rights, property, and safety of our users, us, and other
    third-parties.
12. We do not use your data for automated decision-making that produces legal effects (e.g., denying investment based solely on algorithms) without human review.

We will not use the personal data we collected for materially different, unrelated, or incompatible
purposes without providing you with notice and obtaining your consent.

We share personal data with the following categories of third-parties:

• Our service providers, including service providers for accredited investor verification, such as third-party KYC/AML firms or financial data aggregators.
• SEC or other regulators as required for Form D filings or audits (though such filings typically do not include personal data).
• Government agencies or regulators when permitted or required to do so by law; in response to a
  request from a law enforcement agency or authority or any regulatory authority; and/or to
  protect the integrity of the Services or our interests, rights, property, or safety, and/or that of our
  users and others.

We may also share your personal data with our legal advisors; auditors; courts and public authorities; and any acquirer or successor in the event of a corporate sale, merger, reorganization, dissolution, or similar event if any of your personal data is part of the assets or debts we transfer or share in preparation for such a transaction.

We process personal data for, or based on, one or more of the following legal bases:

• Necessary for Performance of a Contract. By using the Services, we will process certain personal  data to fulfill our contractual obligations to you, such as fulfilling securities purchase agreements and verifying accreditation.
• Legitimate Interests. We may process personal data for our legitimate interests, including
  complying with any applicable law, rule or regulation, investigation or remedy; protecting our,
  our users' or others' rights, property and safety; detecting and resolving any fraud or security
  concerns and verifying investor status to comply with SEC rules.
• Consent. We may also ask you for your consent to process your personal data. In cases where you
  provide consent, you may withdraw such consent at any time. However, withdrawing your
  consent does not affect the lawfulness of any processing based on your consent before your
  withdrawal.

You have certain rights regarding the collection and processing of personal data. You may exercise these
rights, to the extent they apply to you, by contacting us at the information provided at the end of this
Privacy Statement, or by following instructions provided in this Privacy Statement or in communications
sent to you.
Your rights vary depending on the laws that apply to you. See “Your California Privacy Rights”, “Your
Nevada Privacy Rights”, and “Your European Union and UK Privacy Rights”, for more information about
certain legal rights.

a. Accessing, Modifying, Rectifying, and Correcting Collected Personal Data

We strive to maintain the accuracy of any personal data collected from you, and will try to respond promptly to update our records when you tell us the information in our records is not correct. However,
we must rely upon you to ensure that the information you provide to us is complete, accurate, and up-todate, and to inform us of any changes. Please review all of your information carefully before submitting it
to us. Please contact us if there are any updates or corrections to your information.

Depending on the laws that apply to you, you may obtain from us certain personal data in our records. If you wish to access, review, or make any changes to personal data you have provided to us through the Services, please contact us at the information provided at the end of this Privacy Statement. We reserve the right to deny access as permitted or required by applicable law.

b. Your California Privacy Rights

California’s “Shine the Light” law, permits our users who are California residents to request and obtain
from us a list of what personal data (if any) we disclosed to third-parties for their own direct marketing
purposes in the previous calendar year and the names and addresses of those third-parties. Requests may
be made only once per year per person, must be sent to the email address below, and are free of charge.
However, we do not disclose personal data protected under the “Shine the Light” law to third-parties for
their own direct marketing purposes.

Please note that we do not “sell” or “share” your personal data as those terms are defined by the
California Consumer Privacy Act (the “CCPA”), as amended by the California Privacy Rights Act (“CPRA”).

c. Your Nevada Privacy Rights

Nevada law permits our users who are Nevada consumers to request that their personal data not be sold
(as defined under applicable Nevada law), even if their personal data is not currently being sold. Requests
may be sent to info@millscopemarkets.com and are free of charge.

d. Your European Union and UK Privacy Rights

In addition to the above-listed rights, European Union and UK privacy law provides individuals with
enhanced rights in respect of their personal data. These rights may include, depending on the
circumstances surrounding the processing of personal data:

• The right to object to decisions based on profiling or automated decision-making that produce
  legal or similarly significant effects on you;
• The right to request restriction of processing of personal data or object to processing of personal
  data carried out pursuant to (i) a legitimate interest (including, but not limited to, processing for
  direct marketing purposes) or (ii) performance of a task in the public interest;
• In certain circumstances, the right to data portability, which means that you can request that we
  provide certain personal data we hold about you in a machine-readable format; and
• In certain circumstances, the right to erasure and/or the right to be forgotten, which means that
  you can request deletion or removal of certain personal data we process about you.
• The right to lodge a complaint with a supervisory authority located in the jurisdiction of your
  habitual residence, place of work, or where an alleged violation of law occurred.
• Right to limit use of sensitive personal information (e.g., financial data for accreditation). Submit requests via info@millscopemarkets.com.
• We respond to verified requests within 45 days (extendable to 90); appeals via email.

Note that we may need to request additional information from you to validate your request. To exercise
any of the rights above, please contact us at info@millscopemarkets.com.

You have choices about certain information we collect about you, how we communicate with you, and
how we process certain personal data. When you are asked to provide information, you may decline to
do so; but if you choose not to provide information that is necessary to provide some of our Services, you
may not be able to use those Services. In addition, it is possible to change your browser settings to block
the automatic collection of certain information.

• Communications Opt-Out. You may opt out of receiving marketing or other communications from
  us at any time through a given communications channel (such as email by following the opt-out
  link or other unsubscribe instructions provided in any email message received, by contacting us
  as provided at the end of this Privacy Notice. We honor opt-out preference signals like Global Privacy Control (GPC) for California residents.
• Location Information. If you want to limit or prevent our ability to receive location information
  from you, you can deny or remove the permission for certain Services to access location
  information or deactivate location services on your device. Please refer to your device
  manufacturer or operating system instructions for instructions on how to do this.
• Cookies and Web Tracking. Please consult our Cookie Notice, located at
  www.millscopemarkets.com/legal/hub, for more information about how to control and/or opt
  out of certain web tracking technologies and/or advertising providers from collecting information
  about you.

We use reasonable and appropriate physical, technical, and organizational safeguards designed to
promote the security of our systems and protect the confidentiality, integrity, availability, and resilience
of personal data. Those safeguards include: (i) the encryption of personal data where we deem
appropriate; (ii) taking steps to ensure personal data is backed up and remains available in the event of a
security incident; and (iii) periodic testing, assessment, and evaluation of the effectiveness of our
safeguards.

However, no method of safeguarding information is completely secure. While we use measures designed
to protect personal data, we cannot guarantee that our safeguards will be effective or sufficient. In
addition, you should be aware that Internet data transmission is not always secure, and we cannot
warrant that information you transmit utilizing the Services is or will be secure.

In case of a data breach, we will notify affected individuals as required by state laws (e.g., 60 days under CCPA)." International persons will be notified as per the required state laws of the specific issue. Refer to the offering memorandum to determine the particular jurisdiction.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or regulatory requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements. For example, accreditation and transaction data is retained for at least 7 years to comply with SEC, IRS, and anti-money laundering rules. We securely delete or anonymize data thereafter.

• Collection of Personal Data from Children. Our Services are not intended for anyone under 18.
  Anyone under 18 years of age is not permitted to use the Services, and we do not knowingly
  collect information from children under the age of 18. By using the Services, you represent that
  you are 18 years of age or older.
• Third-Party Websites and Services. As a convenience, we may reference or provide links to third party websites and services, including those of unaffiliated third-parties, our affiliates, service
  providers, and third-parties with which we do business (including, but not limited to, our service
  providers). When you access these third-party services, you leave our Services, and we are not
  responsible for, and do not control, the content, security, or privacy practices employed by any
  third-party websites and services. You access these third-party services at your own risk. This
  Privacy Statement does not apply to any third-party services; please refer to the Privacy
  Statements or policies for such third-party services for information about how they collect, use,
  and process personal data.
• Business Transfer. We may, in the future, sell or otherwise transfer some or all of our business,
  operations or assets to a third-party, whether by merger, acquisition or otherwise. Personal data
  we obtain from or about you via the Services may be disclosed to any potential or actual third party acquirers and may be among those assets transferred.
• Do Not Track. We currently do not use any cross-site tracking technologies and do not currently
  process or comply with any web browser’s “do not track” signal or similar mechanisms.
• International Use. Your personal data will be stored and/or processed in the United States. By
  your use of the Services, you acknowledge that we will transfer your data to, and store your
  personal data in the United States, which may have different data protection rules than in your
  country, and personal data may become accessible as permitted by law in the other countries,
  including to law enforcement and/or national security authorities in those countries. 

• This Privacy Statement replaces all previous disclosures we may have provided to you about our
  information practices with respect to the Services. We reserve the right, at any time, to modify, alter,
  and/or update this Privacy Statement, and any such modifications, alterations, or updates will be effective
  upon our posting of the revised Privacy Statement. We will use reasonable efforts to notify you in the
  event material changes are made to our processing activities and/or this Privacy Statement, such as by posting a notice on the Services or sending you an email. Your continued use of the Services following our
  posting of any revised Privacy Statement will constitute your acknowledgement of the amended Privacy
  Statement.

This Privacy Statement is subject to other agreements that concern your use of the Services; such
agreements are located at www.millscopemarkets.com/legal/hub. This Privacy Statement applies
regardless of the means used to access or provide information through the Services.

This Privacy Statement does not apply to information from or about you collected by any third-party
services, applications, or advertisements associated with, or websites linked from, the Services. The
collection or receipt of your information by such third-parties is subject to their own privacy policies,
statements, and practices, and under no circumstances are we responsible or liable for any third-party’s
compliance therewith.

If you have any questions or concerns about this Privacy Statement and/or how we process personal data,
please contact us at info@millscopemarkets.com