Privacy Policy

This Privacy Policy applies to GrowStrata Network only (accessible at growstrata.com/network and related subpaths). It does not govern the main growstrata.com website, financial education programs, mentorship services, or any other Keep It Simple Financial Growth® LLC product.

When you create a GrowStrata Network account, we collect: • Name and email address • Username • Date of birth (used solely for age eligibility verification — see below) • Password (stored as a one-way cryptographic hash; we cannot recover your password) • IP address and user agent at the time of registration and sign-in (for security purposes) When you use GrowStrata Network, we also collect: • Content you post, comment, or send in direct messages • Profile information you choose to provide (bio, location, profession, photo) • Interactions (follows, reactions, saves, reposts, post views) • Reports you file against content or members • Notification preferences and read status

Date of birth collection: We require your date of birth to verify that you meet the minimum membership age of 18 years old. This is a legal and safety requirement. How we handle your date of birth: • Your raw date of birth is used only at the moment of age calculation and is never stored in our database. • We store only a SHA-256 cryptographic hash of your date of birth in "YYYY-MM-DD" format. This hash cannot be reversed to recover your birth date. • The hash is retained solely for audit trail purposes — to establish that an age check was performed. • Your date of birth is never included in your public profile, search results, feed, or any API response accessible to other members or the public. • Your date of birth is never shared with third parties. Retention after restriction: If your account is restricted or banned due to confirmed underage status, we will retain only the minimum data required by applicable law. We will delete or anonymize all other personal data associated with the account within 30 days of the restriction, subject to any legal hold obligations. Audit records: Administrative actions related to age eligibility (including age verification attempts, restrictions, and dispute resolutions) are recorded in our immutable audit log. These records are retained for compliance and safety purposes.

We use the data we collect to: • Operate and maintain GrowStrata Network • Verify age eligibility and enforce the minimum age requirement • Authenticate your identity and maintain your session • Deliver notifications and direct messages • Moderate content and enforce the Community Standards • Detect and prevent fraud, abuse, and security threats • Maintain audit records of administrative actions • Comply with applicable law We do not sell your personal data. We do not use your data for advertising targeting.

We do not sell, rent, or trade your personal data to third parties. We may share data with: • Service providers who operate infrastructure necessary to run GrowStrata Network (hosting, email delivery, database services), under confidentiality obligations • Law enforcement or regulatory authorities when required by applicable law or to protect the safety of members • Successor entities in the event of a merger, acquisition, or sale of assets, subject to the same privacy protections Your public profile information (name, username, bio, photo, posts, and public interactions) is visible to other authenticated GrowStrata Network members. Your email address, date of birth hash, IP address, and private messages are never publicly visible.

You have the right to: • Access the personal data we hold about you • Correct inaccurate personal data • Request deletion of your account and associated personal data, subject to legal retention obligations • Dispute an age restriction determination (see the Terms of Service for the dispute process) • Withdraw consent where processing is based on consent To exercise any of these rights, contact us through the Connect page at growstrata.com/connect.

We implement technical and organizational measures to protect your personal data, including: • Passwords stored as one-way cryptographic hashes (bcrypt) • Session tokens stored as cryptographic hashes; raw tokens are never logged • HTTPS-only transmission • HTTP-only, SameSite session cookies • Image uploads validated by magic-byte inspection before storage • Immutable audit logs for all administrative actions No system is completely secure. If you believe your account has been compromised, contact us immediately through the Connect page.

We may update this Privacy Policy from time to time. Material changes will be communicated to members via the platform. Continued use of GrowStrata Network after changes take effect constitutes acceptance of the updated Policy.

Questions about this Privacy Policy, your personal data, or an age eligibility dispute may be directed to us through the Connect page at growstrata.com/connect. Keep It Simple Financial Growth® LLC