PRIVACY POLICY AI Frontrunners™ — Remote Sales Training TC Inc. Effective Date: September 7, 2026 Last Updated: September 7, 2026 1. Introduction and Scope Remote Sales Training TC Inc., doing business as AI Frontrunners ("Company," "we," "us," or "our"), respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you: visit our websites, landing pages, and funnels (collectively, the "Sites"), including timchaoai.com; register for or attend a webinar, training, or event we host; book or participate in a sales, enrollment, strategy, or support call; purchase, enroll in, or access the AI Frontrunners training program, its communities, live sessions, tools, and materials (the "Program"); communicate with us by email, SMS, phone, chat, or social media; or otherwise interact with us (collectively, with the Sites and Program, the "Services"). This Privacy Policy is incorporated into our Terms of Service. By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Services. This Privacy Policy does not apply to third-party websites, platforms, or services that we do not control, even if we link to them or use them to deliver the Program (see Section 6). 2. Information We Collect 2.1 Information You Provide Directly Registration and contact information: name, email address, phone number, mailing address, company or business name, job title, website, and social-media handles. Webinar and application information: responses to registration questions, surveys, applications, and qualification forms (for example, your business stage, sales experience, goals, and revenue range, if you choose to provide them). Account information: username, password (stored in hashed form by our platforms), profile photo, and preferences. Purchase and billing information: billing name and address, the last four digits and brand of your payment card, payment-plan selection, transaction history, and tax information. Full payment-card numbers are collected and processed directly by our third-party checkout and payment platforms (currently Commas and its payment processors), not by Company. Communications: the contents of emails, text messages, chats, support tickets, community posts, comments, direct messages within Program communities, testimonials, reviews, and feedback you send us or post. Call and session content: your voice, image, screen shares, chat messages, and statements when you participate in recorded webinars, live coaching calls, Q&A sessions, workshops, and sales, enrollment, or support calls (see Section 7). Business information you share: information about your business, clients, deals, results, and challenges that you choose to share in the Program. Identity verification: information reasonably necessary to verify your identity when you exercise privacy rights or dispute a charge. 2.2 Information Collected Automatically When you use the Sites or Program, we and our service providers automatically collect: Device and connection data: IP address, approximate geolocation derived from IP address, device type, operating system, browser type and version, language, screen resolution, and unique device or advertising identifiers. Usage data: pages viewed, links clicked, referring and exit pages, time spent, videos watched (including how much of each lesson you complete), downloads, logins, live-session attendance, community activity, and other interactions with the Services. Consent and transaction records: the date, time, IP address, device information, and the version of the Terms of Service, Refund & Cancellation Policy, EULA, and this Privacy Policy that you accepted at registration or checkout. Cookies and similar technologies: as described in Section 5. 2.3 Information from Third Parties Remote Sales Training TC Inc. d/b/a AI Frontrunners | Privacy Policy | Effective September 7, 2026 Page 1 of 5 Checkout and payment platforms (such as Commas and its payment processors), which provide transaction status, payment-plan status, dispute and chargeback notifications, and fraud signals. Scheduling, video-conferencing, community, course-hosting, email, SMS, and CRM platforms we use to deliver the Services, which provide engagement and attendance data. Advertising and analytics partners, which provide campaign attribution and aggregated audience insights. Business-information and enrichment services, which may supplement your business contact details and company information. Social-media platforms, if you interact with us or log in through them, subject to your settings on those platforms. Referral sources, such as affiliates or partners who refer you to us. 3. How We Use Personal Information We use personal information for the following purposes: Providing the Services: creating and managing your account; delivering webinars, content, communities, live sessions, and tools; processing payments and payment plans; providing customer support; and sending transactional communications (receipts, access instructions, schedule changes, payment reminders, policy updates). Sales and marketing: contacting you about the Program, follow-up after webinars or calls, sending newsletters and promotional communications (subject to your consent where required and your right to opt out), and running, measuring, and improving advertising campaigns. Personalization and improvement: understanding how students engage with the Program, tailoring content and recommendations, developing new offerings, and conducting analytics and research. Recordings and training: recording live sessions for students who cannot attend, for quality assurance, for training our team, and, with your consent as described in Section 7, for testimonials and marketing. Security, fraud prevention, and enforcement: verifying identity; detecting and preventing fraud, credential sharing, unauthorized access, and misuse of our content; enforcing our Terms of Service, EULA, and Refund & Cancellation Policy; and responding to chargebacks and payment disputes with evidence of purchase, consent, delivery, and use. Legal compliance: complying with applicable law, regulation, legal process, and governmental requests; establishing, exercising, or defending legal claims; and maintaining business records. Business operations: accounting, auditing, tax, corporate governance, and, where applicable, business transactions. Other purposes with your consent or as otherwise disclosed at the time of collection. We may aggregate or de-identify personal information so that it no longer identifies you and use such data for any lawful purpose. 4. Legal Bases for Processing (EEA, UK, and Switzerland) If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases: Performance of a contract: to provide the Services you have registered for or purchased. Legitimate interests: to market our services to existing and prospective customers, to secure and improve the Services, to prevent fraud and enforce our agreements, and to operate our business, where those interests are not overridden by your rights. Consent: for certain marketing communications (including SMS), non-essential cookies, and use of your testimonials or likeness in marketing, which you may withdraw at any time. Legal obligations: to comply with laws applicable to us. 5. Cookies, Pixels, and Tracking Technologies 5.1 What We Use. We and our service providers use cookies, web beacons, pixels, tags, software development kits, local storage, and similar technologies to operate the Sites, remember your preferences, authenticate users, analyze traffic, measure the effectiveness of our marketing, and deliver relevant advertising. These include: Essential technologies required for the Sites and Program to function (authentication, security, checkout). Analytics technologies (such as Google Analytics or similar) that help us understand usage. Advertising technologies (such as the Meta Pixel, Google Ads tag, TikTok Pixel, LinkedIn Insight Tag, YouTube, and similar) that allow us and our advertising partners to show you ads for the Program on other websites and platforms, measure ad performance, and build audiences of people similar to our customers. Remote Sales Training TC Inc. d/b/a AI Frontrunners | Privacy Policy | Effective September 7, 2026 Page 2 of 5 5.2 Cross-Context Behavioral Advertising. Our use of advertising technologies may involve disclosing identifiers and activity data to advertising partners, which some U.S. state privacy laws (including California's) define as "sharing" personal information for cross-context behavioral advertising or "targeted advertising." You may opt out as described in Section 11. 5.3 Your Choices. Most browsers allow you to refuse or delete cookies through their settings; doing so may impair some features. You may opt out of interest-based advertising from participating companies at the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), and, in the EU, Your Online Choices (youronlinechoices.eu). You may adjust ad settings directly with Meta, Google, TikTok, and LinkedIn. Where required by law, we will request your consent before setting non-essential cookies. 5.4 Do Not Track and Global Privacy Control. We honor Global Privacy Control ("GPC") signals as a request to opt out of the sale or sharing of personal information where required by applicable law. Because there is no industry standard for "Do Not Track" browser signals, we do not currently respond to them. 6. How We Disclose Personal Information We do not sell your personal information for money. We disclose personal information in the following circumstances: 6.1 Service Providers. We share information with vendors that perform services on our behalf under contractual confidentiality obligations, including: checkout and payment processing (Commas and its payment processors); course and community hosting; video conferencing and recording (such as Zoom); email and SMS delivery; scheduling; customer-relationship management (CRM) and sales-enablement tools; analytics; cloud hosting and storage; identity verification and fraud prevention; transcription and AI-assisted note-taking; customer support; and accounting and legal services. 6.2 Advertising Partners. We disclose identifiers and activity data to advertising platforms as described in Section 5 to measure and deliver advertising. 6.3 Other Students. Content you post in Program communities, your name and profile information, and your voice, image, and statements during recorded group sessions are visible to other participants and to students who watch the recordings. 6.4 Payment Disputes and Enforcement. If you initiate a chargeback or payment dispute, we disclose to your bank, card issuer, payment processors, and card networks the information reasonably necessary to respond, which may include your consent records, purchase details, access and usage logs, and communications with us. We may also share information with fraud-prevention and merchant-protection services and with collection agencies or attorneys as permitted by law. 6.5 Legal Requirements and Protection of Rights. We disclose information when we believe in good faith that disclosure is necessary to comply with law, regulation, subpoena, court order, or governmental request; to enforce our agreements; to protect the rights, property, safety, or security of Company, our students, or others; or to detect, prevent, or address fraud, security, or technical issues. 6.6 Business Transfers. If Company is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy with substantially similar protections. 6.7 Affiliates. We may share information with entities under common ownership or control with Company, which will use it consistently with this Privacy Policy. 6.8 With Your Consent or at Your Direction. We share information when you direct us to (for example, when you ask us to introduce you to a partner) or otherwise consent. 7. Recordings, Community Content, and Testimonials 7.1 Recordings. Webinars, live coaching calls, Q&A sessions, workshops, community events, and sales, enrollment, and support calls may be recorded and transcribed (including by AI-assisted tools). Recordings of group sessions may be made available to other students. Where the law of your jurisdiction requires it, you will be notified at the start of a call that it is being recorded, and continued participation constitutes consent. If you do not wish to appear in a group recording, keep your camera off, do not unmute, and refrain from posting in the chat. 7.2 Community Content. Anything you post in a Program community is visible to other members. Please do not post information you wish to keep private, including sensitive personal information or your clients' confidential information. 7.3 Testimonials and Likeness. If you provide a testimonial, review, results screenshot, or other statement, or if you appear in a recording, we may use your name, likeness, voice, business name, and statements in our marketing as described in Section 11 of the Terms of Service. You may request that we stop future use of a specific testimonial by emailing [email protected]; we will use reasonable efforts to honor such requests within thirty (30) days for future uses. 8. Email, SMS, and Telephone Communications 8.1 Transactional messages (receipts, access details, schedule changes, payment reminders, account and policy notices) are part of the Services. Remote Sales Training TC Inc. d/b/a AI Frontrunners | Privacy Policy | Effective September 7, 2026 Page 3 of 5 8.2 Marketing emails. You may unsubscribe at any time using the link in any marketing email or by contacting [email protected]. You will continue to receive transactional emails while you are a student. 8.3 SMS / text messages. If you provide a mobile number and consent to receive text messages, we (and our SMS providers on our behalf) may send you transactional and, where you have separately consented, marketing text messages, which may be sent using automated technology. Consent to marketing texts is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for assistance. Mobile opt-in data and consent will not be shared with third parties for their own marketing purposes. 8.4 Telephone calls. If you request a call or provide your number, we may call you regarding your inquiry, the Program, or your account. Where you have consented, calls may be placed using automated technology and may be recorded. 9. Data Retention We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, enforce our agreements, and defend legal claims. In particular: Account, purchase, consent, and access records are retained for at least the duration of your Access Period plus the longest applicable statute of limitations (typically six (6) years or longer), because they are essential evidence in payment disputes and legal claims. Recordings of group sessions are retained for the life of the Program to serve current and future students, unless removed earlier at our discretion. Marketing data is retained until you unsubscribe or object, plus a reasonable period to honor your request and maintain suppression lists. Payment-card data is not retained by Company; it is held by our payment platforms under their own retention policies. When information is no longer needed, we delete, de-identify, or securely archive it in accordance with applicable law. 10. Security We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration, including access controls, encryption in transit, and reliance on reputable platform providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for notifying us promptly at [email protected] of any suspected unauthorized access. 11. Your Privacy Rights and Choices 11.1 All Users You may at any time: update your account information through the Program platforms or by contacting us; unsubscribe from marketing emails; reply STOP to opt out of SMS; adjust cookie settings in your browser; and request that we stop future use of a specific testimonial. 11.2 U.S. State Privacy Rights Depending on your state of residence and whether the relevant law applies to Company, you may have the right to: know/access the categories and specific pieces of personal information we have collected about you; correct inaccurate personal information; delete personal information, subject to exceptions (for example, we may retain records needed to complete a transaction, to prevent fraud, to enforce our agreements, to defend legal claims, or as required by law); obtain a portable copy of your information; opt out of the "sale" of personal information, the "sharing" of personal information for cross-context behavioral advertising, or "targeted advertising"; opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling); limit the use of sensitive personal information (we do not use sensitive personal information for purposes requiring such a right); and to be free from discrimination for exercising your rights. How to exercise these rights: email [email protected] with the subject line "Privacy Request," or write to 4901 4th Street N Ste 300, St Petersburg, FL 33702, Attn: Privacy. To opt out of sale/sharing/targeted advertising, you may also use the "Do Not Sell or Share My Personal Information" link on our Sites (where available) or enable Global Privacy Control in your browser. We will verify your identity using information associated with your account (such as your email address and recent transaction details) and may ask for additional information where necessary. You may designate an authorized agent to make a request on your behalf; we may require proof of the agent's authority and direct verification from you. If we deny your request, you may appeal by replying to our decision email with the word "Appeal"; we will respond to appeals within the time required by your state's law and, where required, inform you of how to contact your state Attorney General. 11.3 California Notice at Collection For California residents, the following summarizes the categories of personal information we collect (as defined by the California Consumer Privacy Act, as amended), the purposes described in Section 3, and our retention practices in Section 9: Identifiers (name, email, phone, address, IP address, account identifiers) — collected; disclosed to service providers and advertising partners; may be "shared" for cross-context behavioral advertising. Remote Sales Training TC Inc. d/b/a AI Frontrunners | Privacy Policy | Effective September 7, 2026 Page 4 of 5 Personal information categories under Cal. Civ. Code § 1798.80 (name, address, telephone, payment-card last four digits) — collected; disclosed to service providers. Commercial information (purchases, payment plans, transaction history) — collected; disclosed to service providers. Internet or network activity (browsing, usage, engagement data) — collected; disclosed to service providers and advertising partners; may be "shared." Geolocation data (approximate, from IP address) — collected; disclosed to service providers and advertising partners. Audio, electronic, visual, or similar information (recordings of sessions and calls) — collected; disclosed to service providers and, for group sessions, to other students. Professional or employment-related information (business name, role, experience, revenue range) — collected; disclosed to service providers. Inferences (interests, preferences, engagement level) — derived; disclosed to service providers. We do not knowingly collect sensitive personal information, other than account log-in credentials, and do not use or disclose sensitive personal information for purposes other than those permitted without a right to limit. We do not knowingly sell or share the personal information of consumers under 16 years of age. Personal information may be "shared" with advertising partners as described in Section 5 for the purpose of advertising our own services. 11.4 EEA, UK, and Swiss Residents You have the right to access, rectify, erase, restrict, or object to the processing of your personal information; the right to data portability; the right to withdraw consent at any time (without affecting prior processing); and the right to lodge a complaint with your local data-protection authority (in the UK, the Information Commissioner's Office). You may object to direct marketing at any time. To exercise your rights, contact [email protected]. Company is the controller of your personal information. If we are required to appoint a representative in the EU or UK, their details will be posted here. 11.5 Other Jurisdictions If you are located in Canada, Australia, or another jurisdiction with applicable privacy law, you may have rights of access and correction and the right to complain to your local privacy regulator. Contact [email protected] to exercise them. 12. International Data Transfers Company is based in the United States, and personal information is processed and stored in the United States and in other countries where our service providers operate. These countries may have data-protection laws that differ from those in your country. Where required, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or on your consent. By using the Services, you understand that your information will be transferred to and processed in the United States. 13. Children The Services are intended for adults (18 and older) engaged in business and professional activities. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact [email protected] and we will delete it. 14. Third-Party Platforms and Links The Program is delivered through third-party platforms (for example, checkout and payment platforms, community platforms, video-conferencing services, and AI tool providers), and our Sites and content may link to third-party websites and tools. Those third parties have their own privacy policies, which govern their collection and use of your information. We encourage you to review them. We are not responsible for the privacy practices of third parties. 15. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide notice by email or within the Program. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acknowledgment of the updated Policy. 16. Contact Us Remote Sales Training TC Inc. d/b/a AI Frontrunners 4901 4th Street N Ste 300, St Petersburg, FL 33702 Privacy requests: [email protected] General support: [email protected] Website: timchaoai.com