ONE VERTICAL TIER, INC. | WEBSITE PRIVACY Privacy Policy One Vertical Tier, Inc. Effective Date: 2026 Last Updated: 2026 1. About One Vertical Tier and This Policy One Vertical Tier, Inc. (“OVT,” “we,” “us,” or “our”) helps enterprises move AI and automation from pilot to accountable production. Starting with one high-value workflow, our Execution Readiness Blueprint shows what needs to change, who is responsible, and how results will be measured, giving leadership the evidence to decide what to move forward. This Privacy Policy explains how OVT handles personal information associated with our website, service inquiries, Workflow Fit Calls, business communications, and prospective client relationships. Personal information means information that identifies, relates to, or can reasonably be linked to an individual. It can include professional contact information, such as a person’s name, business email address, and job title. OVT website: https://www.oneverticaltier.com/ 2. Information Covered by This Policy This policy covers personal information associated with: Visiting OVT’s website. Contacting OVT about an enterprise workflow or business need. Requesting or participating in a Workflow Fit Call. Discussing an Execution Readiness Blueprint or another OVT engagement. Exchanging proposals, scheduling information, and related business correspondence. Requesting OVT publications or marketing communications. Communicating with OVT as a prospective client, business contact, or delivery partner. OVT determines how it uses information for its own website administration and business relationships. Personal information entrusted to OVT for a client engagement may be subject to additional privacy notices, client instructions, and agreements addressing confidentiality, services, and data processing. Those arrangements do not remove rights or obligations established by applicable law. 3. Information You Provide and How OVT Uses It The information OVT receives depends on what you provide and the purpose of the interaction. Interaction with OVTInformation involvedPurpose General inquiryYour name, email address, organization, role, and any telephone number or other details you includeRespond to your request and identify the appropriate next discussion Workflow Fit CallContact details, scheduling preferences, participants, and information you share about the workflow and business issueArrange the discussion, understand the request, and evaluate whether OVT’s services fit your needs Execution Readiness Blueprint inquiryInformation you provide about the proposed workflow, stakeholders, intended outcomes, constraints, and timingDiscuss a potential scope and prepare relevant follow-up or engagement documents Business correspondenceMessages, attachments, contact details, and records of agreed next stepsMaintain the business conversation and administer the relationship Communication preferencesRequests to receive or stop receiving OVT communicationsManage subscriptions, follow-up preferences, and suppression records Privacy requestContact information, the request itself, and any information reasonably needed to verify itEvaluate, respond to, and document the request You choose what to include in an initial inquiry. Please provide only the information needed to explain your business need and arrange a discussion. Choosing not to provide necessary contact or scheduling information can prevent OVT from responding or arranging a requested call. 4. Information Provided by Other People A colleague, client, or business partner may introduce you to OVT or include you in a discussion. In that situation, OVT receives the information included in the introduction, such as your name, professional contact details, role, and relationship to the proposed work. OVT uses that information to address the introduction and associated business request. If you provide another person’s information to OVT, share only what you are authorized to disclose and what is relevant to the discussion. 5. Website Data, Cookies, and Tracking Choices This section describes personal information collected through the operation of OVT’s website, including collection by website providers and embedded tools. Cookies and similar technologies Browser settings can provide options to block or delete cookies. Blocking certain cookies can affect website functionality. Browser cookie settings do not necessarily control every form of information collection. Do Not Track Global Privacy Control and other recognized opt-out signals 6. Workflow Fit Calls and Confidential Enterprise Information A Workflow Fit Call is an initial discussion about your organization’s needs and whether an OVT engagement is appropriate. An initial discussion does not require access to production systems, credentials, customer records, or complete enterprise datasets. Do not include the following in a general website inquiry or unsolicited email: Passwords, access tokens, or production credentials. Patient records or sensitive employee information. Financial account information or payment credentials. Confidential customer datasets. Restricted system configurations. Documents requiring an NDA or a specially approved submission method. Information you are not authorized to disclose. If OVT needs confidential or sensitive information to evaluate or perform an engagement, contact us first to establish the appropriate agreements and transfer arrangements. An unsolicited inquiry does not automatically create an NDA. Existing confidentiality obligations and applicable legal protections continue to apply. 7. Client Information Used in an OVT Engagement An Execution Readiness Blueprint or another paid engagement can involve information beyond ordinary website and business-contact information. The applicable engagement documents establish the authorized scope, information requirements, responsibilities, and handling arrangements. Where OVT processes personal information on a client’s behalf, OVT’s processing must remain within the applicable instructions, agreements, and legal requirements. This Privacy Policy does not independently authorize OVT to reuse client-controlled information for unrelated marketing or other purposes. If your request concerns information controlled by an OVT client, contact that organization first. OVT will support the request as required by its role, the applicable agreement, and law. 8. AI Tools, Meeting Recordings, and Transcripts OVT’s work in enterprise AI does not, by itself, authorize the use of your inquiry, meeting content, or client materials to train an AI model. Submitting information to OVT does not automatically grant permission to publish that information or use it for unrelated purposes. Where notice or permission is required for a recording, transcription, or particular use of personal information, OVT will provide that notice or obtain that permission before proceeding. 9. Disclosure of Personal Information OVT’s disclosures must relate to the interaction, service, or legal obligation involved. The relevant recipient categories are: Business service providers: Providers supporting OVT’s website, email, scheduling, document handling, and other business functions that involve the information described in this policy. Personnel supporting the interaction: People working for OVT who need the information to respond to the inquiry or perform an assigned responsibility. Selected delivery partners: Partners involved in evaluating or delivering a requested engagement, where disclosure is authorized and subject to applicable confidentiality and data-handling requirements. Professional advisers: Legal, accounting, insurance, or other advisers where information is necessary for their work. Authorities and other legally entitled recipients: Where disclosure is required by law or reasonably necessary to address fraud, security incidents, legal claims, or threats to someone’s rights or safety. Parties to a business transaction: Where necessary in connection with a proposed or completed merger, acquisition, financing, or transfer of business assets, subject to applicable protections. Recipients you authorize: Where you direct OVT to make an introduction or provide information to a specified person or organization. A company’s appearance on OVT’s website as a partner or technology provider does not mean that it receives every visitor’s or prospect’s information. 10. Sale, Sharing, and Targeted Advertising Privacy laws can define “sale,” “sharing,” and “targeted advertising” more broadly than exchanging personal information for money. Website advertising tools and certain disclosures to third parties can fall within those definitions. 11. OVT Communications and Subscription Choices OVT uses your contact information to respond to your inquiry, arrange requested discussions, and communicate about the associated business relationship. Sending a service inquiry does not, by itself, mean that you have requested a newsletter subscription. For marketing communications sent directly by OVT, you can request that they stop by: Using the unsubscribe option included in the communication, where provided. Replying to the message with your request. Emailing inforequest@oneverticaltier.com with the subject OVT Communication Preferences. Stopping marketing communications does not necessarily stop messages needed to address an active engagement, a privacy request, or a legal obligation. If you subscribe to an OVT publication through an external platform, use that platform’s subscription settings to manage communications it sends. OVT’s handling of any personal information it receives from that platform remains subject to the applicable disclosures in this policy. 12. Retention of Personal Information OVT’s retention decisions account for: Whether an inquiry or business discussion remains active. Whether information is needed for an agreed engagement. Applicable recordkeeping and legal obligations. The need to address a dispute or preserve relevant evidence. Your communication preferences and the need to honor an unsubscribe request. Operational requirements for deletion from active systems and backups. A legal requirement or preservation obligation can require certain records to be retained longer. Retaining information for that reason does not authorize unrelated use. 13. Information Security No website, email service, or storage system can guarantee absolute security. If you believe personal information sent to OVT has been exposed or accessed without authorization, contact: inforequest@oneverticaltier.com Suggested subject: OVT Privacy or Security Concern Do not include passwords, access tokens, or additional sensitive records in the initial report. 14. Processing Locations and International Transfers OVT is based in Columbus, Ohio, United States. Where additional regional disclosures are required, those disclosures must identify the relevant processing purposes, legal bases, rights, transfer arrangements, and applicable contact or representative details. 15. Your Privacy Choices and Rights You can contact OVT to request a correction to your contact information or change your communication preferences. Depending on your location, the information involved, and applicable law, you may also have rights to: Obtain information about OVT’s processing and access personal information. Correct inaccurate personal information. Request deletion of personal information. Receive a portable copy of certain information. Withdraw consent where processing relies on consent. Object to or restrict certain processing. Opt out of applicable sales, sharing, targeted advertising, or specified profiling. Limit certain uses of sensitive personal information. Appeal a decision concerning a privacy request. Submit a complaint to a competent privacy authority. These rights are subject to the conditions and exceptions established by applicable law. To submit a request: Email: inforequest@oneverticaltier.com Suggested subject: OVT Privacy Request Explain the request and identify the email address or business interaction associated with it. Do not send identity documents or sensitive credentials unless OVT specifically requests appropriate information through an agreed method. For requests that require verification, OVT may ask for information reasonably necessary to confirm identity or authority. Verification requirements do not apply identically to every request, including requests to exercise certain opt-out rights. An authorized representative may submit a request where applicable law permits. OVT may require appropriate evidence of that authority. OVT will respond within the time required by applicable law, including any permitted extension. If OVT cannot fulfill a request, its response will explain the applicable reason and any available appeal process. OVT will not unlawfully discriminate against you for exercising a privacy right. 16. Children’s Information OVT’s website and enterprise services are intended for adult business professionals. OVT does not seek information about children through its service inquiries or Workflow Fit Calls. If you believe a child has submitted personal information to OVT, contact inforequest@oneverticaltier.com so that OVT can review the circumstances and take appropriate action under applicable law. 17. External Websites and Platforms OVT’s website can link to independently operated websites, including professional networks and technology providers. Those organizations determine their own information-handling practices. Review their privacy notices when you use their services. An external link and a tool embedded within OVT’s website can involve different information flows. Collection through tools operating on OVT’s website must be addressed in the applicable website-data, recipient, and tracking disclosures in this policy. 18. Changes to This Policy OVT may update this policy when its information-handling practices, website features, services, or legal obligations change. The updated policy will appear at the URL below and identify its effective date and last updated date: https://www.oneverticaltier.com/privacy-policy For material changes, OVT will provide additional notice where required, such as a prominent website notice or direct communication to affected individuals. Where a change requires consent or another legal authorization, posting an updated policy does not substitute for obtaining it. 19. Contact One Vertical Tier, Inc. For questions about this policy or OVT’s handling of personal information, contact: One Vertical Tier, Inc. Attention: Privacy Inquiries Location: Columbus, Ohio, USA Email: inforequest@oneverticaltier.com Website: https://www.oneverticaltier.com/ Contact Page: https://www.oneverticaltier.com/contact Privacy Policy: https://www.oneverticaltier.com/privacy-policy Terms of Use: https://www.oneverticaltier.com/terms-of-use