• Contact information such as name, business name, email address and phone number.

• Business information such as industry, state, locations, approximate processing volume, average ticket andpayment channels

• Information submitted through contact, scheduling, qualification and application workflows.

• Technical information such as browser/device details, IP address, referral source and site-usage data whenanalytics or security tools are enabled.

• Communication preferences and consent records where applicable

• Merchant statement information only through the approved dedicated statement-analysis workflow.

• Sensitive application information only through the approved secure merchant-account application platform.

• Respond to inquiries and provide requested merchant-services information.

• Qualify and route prospective merchants to relevant products, services or specialists.

• Schedule consultations and manage follow-up.

• Support statement-analysis and application workflows.

• Create or update contact records and pipeline activity in GoHighLevel or another approved CRM.

• Improve website content, AI Max responses, user experience and conversion paths.

• Maintain security, prevent abuse and troubleshoot technical issues.

• Meet legal, compliance, contractual and recordkeeping obligations.

Current merchant processing statements should be uploaded through the dedicated statement-analysis software selected for thatpurpose. The website should clearly identify the upload path and applicable privacy terms. AI Max may explain the workflow butshould not receive or technically analyze the raw statement in ordinary chat.

Sensitive identity, banking, tax and underwriting information required for a merchant-account application should be submittedthrough the approved secure application platform rather than a general website form or ordinary AI chat. The processor,acquiring institution and application provider may have their own privacy notices and information-handling requirements.

• With processors, acquiring institutions, underwriting providers and application platforms as necessary to evaluateor establish merchant services.

• With the dedicated merchant-statement analysis provider when a visitor intentionally uploads a statement.

• With GoHighLevel or another approved CRM/scheduling provider for lead management, appointments and followup

• With website hosting, analytics, security, communications and technical service providers that support the site

• With professional advisers, regulators, courts or law-enforcement authorities when legally required or reasonablynecessary

• In connection with a business transaction such as a merger, acquisition or sale, subject to applicable law.

The website may use cookies, pixels, analytics tools and similar technologies for functionality, security, performance measurementand marketing attribution. The final policy and cookie banner should identify the actual tools used at launch, distinguishnecessary from optional technologies where required, and provide appropriate consent or preference controls.

When a visitor requests information, schedules an appointment, starts an application or otherwise opts in, we may use the contactdetails provided to send service-related communications and permitted marketing messages. Email and SMS workflows shouldrespect consent, opt-out requests, frequency controls and applicable law.

Information should be retained only for as long as reasonably necessary for the purposes described in this Policy, legitimatebusiness needs, contractual requirements, legal obligations and dispute resolution. The final retention schedule should reflect theactual systems used and the sensitivity of the data involved.

We should use reasonable administrative, technical and organizational safeguards appropriate to the information and systemsinvolved. No online service can guarantee absolute security. Sensitive underwriting and banking information should be handledonly through approved secure systems with appropriate access controls.

Depending on where a visitor lives and applicable law, they may have rights to request access, correction, deletion or informationabout certain uses or disclosures of personal information, or to opt out of certain marketing communications. The final policyshould include the verified request method, response process and any state-specific disclosures required at launch.

The website may link to or integrate with third-party tools, processors, application platforms, statement-analysis services,scheduling systems and other providers. Those third parties may collect information under their own privacy policies and terms.Visitors should review the applicable third-party disclosures when leaving or interacting outside the Southeast Merchant Services website.

The website is intended for business owners and authorized business representatives and is not directed to children. We do notknowingly design merchant-services workflows to collect personal information from children.

We may update this Privacy Policy as the website, vendors, laws and business practices change. The effective date should berevised when material updates are published, and additional notice should be provided when legally required.

Privacy questions or requests should be submitted through the verified contact method published on the final Southeast MerchantServices website. Before launch, this section should be updated with the final legal contact information and any dedicated privacyrequest method required by applicable law.

Privacy questions should be directed through the verified Contact page and final privacy-request method published atlaunch.