Privacy Notice v1.2

OWNER APPROVED LAUNCH CANON — EXTERNAL USE REMAINS SUBJECT TO THE BVG LAUNCH GATE BVG VELOCITY ASSESSMENT — PRIVACY NOTICE v1.2 This Privacy Notice describes how Success Masters LLC d/b/a Business Velocity Group (“BVG,” “we,” “us”) handles information associated with the BVG website, Velocity Assessment inquiries, purchases, onboarding, evidence review, fulfillment, and related communications. 1. INFORMATION WE COLLECT We may collect information you provide, including name, business name, work email, phone number if provided, website, business goals, operating context, workflow/tool information, evidence references, documents or notes you choose to provide, consent/acceptance records, and communications with BVG. We may also collect basic technical and transaction metadata needed to operate the website and service, such as source/referral information, timestamps, request/error logs, checkout/session identifiers, payment status, and assessment case/version identifiers. 2. PAYMENT INFORMATION Payments are processed by third-party payment processors such as Stripe. BVG does not require you to send full payment-card details through website forms, email, or assessment evidence. Payment processors handle card data under their own terms and privacy practices. 3. HOW WE USE INFORMATION We use information to: • provide and administer the Velocity Assessment; • verify payment and create the correct assessment case; • conduct adaptive onboarding and determine evidence readiness; • organize and evaluate evidence, identify constraints/opportunities, and prepare recommendations; • create the assessment, Quick Win, roadmap, and supporting artifacts; • conduct human review and provide requested support; • schedule optional meetings; • maintain security, audit, quality, and transaction records; • respond to inquiries and, where separately permitted, send relevant marketing communications; • comply with applicable legal obligations and protect BVG, clients, and systems from misuse. 4. AI-ASSISTED PROCESSING BVG may use supervised AI-assisted tools, including Theo and other model/tool providers, to organize evidence, challenge assumptions, prepare analysis, generate drafts, and support fulfillment. Material client-facing conclusions and deliverables remain subject to BVG review in the initial commercial release. Client-specific confidential information will not silently become public proof, a client case study, or Theo product-training data. Any separate use of identifiable client information for a testimonial/case study, or retention of client-specific/de-identified learning for product research beyond what is necessary to perform and improve the specific engagement, requires separate permission where applicable. 5. DATA MINIMIZATION Please provide only information reasonably necessary for the assessment. Prefer redacted evidence when possible. Do not submit passwords, authentication secrets, full payment-card data, protected health information, highly sensitive personal data, regulated data, or third-party confidential information unless BVG expressly requests it, you are authorized to provide it, and any additional required data-processing or security terms have been agreed in writing. 6. SERVICE PROVIDERS BVG may use service providers for hosting, security, payments, email, calendars, documents/storage, workflow automation, analytics, and CRM-style tracking. Providers process information as necessary to support the relevant BVG function and are subject to their own contractual/privacy obligations. 7. SHARING BVG does not sell personal information. We may disclose information to service providers supporting the service, when reasonably necessary to perform requested work, to comply with law or valid process, to protect rights/safety/security, or in connection with a legitimate business transfer subject to applicable obligations. 8. RETENTION Assessment evidence has a default retention target of approximately 30 days after delivery unless longer retention is reasonably required for ongoing support, an authorized implementation engagement, dispute/security handling, a legal hold, subpoena or other valid legal process, tax/accounting or other legal/compliance obligations, or another agreed purpose. Free AI Opportunity Snapshot submitted inputs and generated Snapshot analysis are retained for 30 days after Snapshot delivery. If the lead becomes a paid Assessment client, the case transitions to the active paid-client retention policy rather than silently duplicating or extending the free-tier record. Marketing opt-in is separate and optional: when a person opts in, BVG may retain only the contact, consent, suppression, and engagement data reasonably needed for that marketing relationship until unsubscribe or suppression, while the Snapshot analysis remains subject to the 30-day free-tier clock unless the paid-client policy applies. If there is no marketing opt-in, BVG deletes the free-tier contact and Snapshot data at the end of the 30-day period except for minimum suppression, security, compliance, or other records reasonably needed to honor opt-outs, prevent prohibited re-contact, or satisfy valid operational or legal obligations. Do-not-contact, unsubscribe, and suppression records may be retained as necessary to enforce the person’s preference. Payment, contract/acceptance, audit, tax/accounting, and basic business records may be retained longer where reasonably required. When records are no longer reasonably needed, BVG may delete or de-identify them consistent with operational and legal obligations. 9. MARKETING COMMUNICATIONS Marketing consent is separate from purchasing the Velocity Assessment. Where BVG offers marketing opt-in, you may opt out of marketing communications using the provided method or by contacting BVG. Transactional/service messages needed to administer a purchase or assessment are not marketing messages. 10. YOUR REQUESTS You may request reasonable access, correction, or deletion of information you provided by contacting BVG. Some information may need to be retained for payment, contractual, security, recordkeeping, dispute, or legal purposes. 11. SECURITY BVG uses reasonable administrative and technical safeguards appropriate to the service. No system can guarantee absolute security, and clients should follow the data-minimization guidance above. 12. CHANGES Material changes to this notice will be versioned. Changes will not silently alter signed/purchased commercial terms. Where required, BVG will provide additional notice or obtain consent. 13. CONTACT Success Masters LLC d/b/a Business Velocity Group Columbus, Ohio info@businessvelocitygroup.com Version: v1.2 Prepared: August 15, 2026 Owner approved with free-Snapshot retention correction: August 26, 2026 Status: OWNER APPROVED LAUNCH CANON — FREE-SNAPSHOT RETENTION POLICY INCORPORATED