FAMOSOS, INC. PERSONAL DATA PROCESSING POLICY

1. PURPOSE AND SCOPE OF APPLICATION

Famosos, Inc. (hereinafter referred to as "Famosos" or the "Company") issues this Personal Data Processing Policy (hereinafter, the “Policy”) in strict compliance with the applicable personal data protection regulations. This Policy sets forth general guidelines for the protection of any information related to or that may be associated with one or more identified or identifiable natural persons ("Personal Data"), based on the prior Authorization granted by the Data Subjects.

This Policy applies to all Data Subjects who have a relationship with the Company and/or whose Personal Data has been collected and processed in any manner as a result of or in connection with a relationship established with the Company (including the use of Famosos’ website), regardless of whether such Processing is carried out directly by Famosos or by third parties on its behalf.

This Policy applies to all Processing activities carried out in the United States and, as applicable, by third parties with whom any activity related to Personal Data Processing is agreed upon.

2. DEFINITIONS

For purposes of this Policy, the following definitions shall apply:

1. Authorization: Prior, express, and informed consent of the Data Subject for the Processing of Personal Data.
2. Personal Data: Any information linked or that may be associated with one or more identified or identifiable natural persons.
3. Sensitive Data: Data that affects the privacy of the Data Subject or whose misuse may lead to discrimination, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, social or human rights organization affiliations, party-related information, health data, sexual life data, and biometric data.
4. Data Processor: Any natural or legal person, public or private, that performs Personal Data Processing on behalf of the Data Controller.
5. Personal Data Processing Policy: This document.
6. Data Controller: The natural or legal person, public or private, who alone or jointly with others determines the purposes and means of Processing Personal Data. In this case, it refers to Famosos.
7. Data Subject: A natural person whose Personal Data is subject to Processing.
8. Processing: Any operation or set of operations performed on Personal Data, such as collection, storage, use, circulation, or deletion, through communications, queries, interconnections, assignments, or data messages.

3. AUTHORIZATION, PROCESSING AND STORAGE OF PERSONAL DATA

From the effective date of this Policy, Famosos will request prior Authorization from Data Subjects at the time of collection of Personal Data, informing them of the specific purposes for which the data is collected and processed, unless an exception provided by applicable law applies.

Famosos will process Personal Data voluntarily provided by the Data Subject. In general, the Company will collect, store, use, and circulate Personal Data as applicable. This information may only be used by Famosos, its employees, consultants, advisors, affiliated group companies, and expressly authorized commercial or strategic partners who require access to such information. Upon request, Famosos will provide the Data Subject with a complete list of authorized individuals or third parties involved in Processing their Personal Data.

Famosos may request Sensitive Data at any time, notifying the Data Subject at the time of collection of the nature of such data and the type of Sensitive Data to be collected. Famosos may only process Sensitive Data if the Data Subject gives explicit and voluntary consent for the specified purposes. Additionally, the Company may collect such information if the Processing is necessary to comply with legal obligations, protect the vital interests of the Data Subject or another natural person, or is mandatory under applicable law. Famosos will strictly observe legal limitations for the Processing of Sensitive Data. Under no circumstances will Famosos condition any activity on the provision of Sensitive Data. Sensitive Data will be handled with the utmost diligence and with the highest security standards. Restricted access to Sensitive Data will be a guiding principle to safeguard privacy, and only authorized personnel may access such information.

Authorization from Data Subjects may be expressed by: (i) written form, (ii) verbal form, (iii) online buttons, or (iv) unequivocal conduct that reasonably demonstrates Authorization.

Famosos will preserve records of Authorizations appropriately, using physical or technological means, always respecting confidentiality and privacy principles.

4. PURPOSES OF PERSONAL DATA PROCESSING.

Personal Data collected by Famosos will be included in corresponding databases accessible only to authorized personnel in the performance of their duties. Under no circumstance will data be used for purposes other than those described herein or those directly communicated to the Data Subject at the time of collection.

The purposes of collecting and processing clients' Personal Data include:

1. Executing the contractual relationship between Famosos and its clients.
2. Contacting Data Subjects for product delivery, service provision, or information related to contractual obligations.
3. Providing Data Subjects with necessary information via website or mobile applications regarding Famosos’ products and services.
4. Managing billing and collections.
5. Sending and receiving communications (texts, emails, etc.) for informational, advertising, or customer service purposes, to offer the Company's goods and services and maintain personalized client contact.
6. Enhancing Famosos’ commercial and promotional initiatives.
7. Storing and processing all information provided by Data Subjects in one or more databases in a format deemed appropriate.
8. Collecting information for commercial research and marketing purposes.
9. Transmitting Personal Data to third parties for contractual performance or data analysis, or transferring them when expressly authorized.

The information provided by the Data Subject will be used solely for the stated purposes. Once the need for Processing ends, the data will be deleted from Famosos’ databases. Data related to contracts or employment will be retained as required by applicable laws regarding statute of limitations for legal or administrative claims.

If Famosos requests Sensitive Data, Data Subjects are reminded that providing such data is never mandatory and refusal will not result in any retaliation. Such data will be handled diligently and with high security standards.

5. RIGHTS OF THE DATA SUBJECT

Data Subjects have the following rights:

• To know, update, and correct their Personal Data with Data Controllers or Data Processors. This includes incomplete, inaccurate, or unauthorized data.
• To request proof of the Authorization granted, except where the law does not require it.
• To be informed upon request about the use of their Personal Data.
• To file complaints before the competent authority for violations of applicable laws.
• To revoke Authorization and/or request deletion of data, unless a legal or contractual obligation requires its retention.
• To access their Personal Data free of charge at least once per calendar month, and each time substantial changes are made to the Processing Policy.

6. CONTACT INFORMATION AND MECHANISMS PROVIDED BY FAMOSOS FOR THE EXERCISE OF DATA RIGHTS

7. PROCEDURES FOR EXERCISING DATA SUBJECT RIGHTS
   Data Subjects may exercise their rights through Famosos’ Legal Department by emailing legal@famosos.com.

For any questions regarding Google user data specifically, please contact the same address: legal@famosos.com.

1. Consultation Procedure

Data Subjects or their legal representatives may consult the data stored in Famosos’ databases under the following conditions:

1. The request will be analyzed to verify the Data Subject’s identity. If submitted by another party, appropriate legal representation must be demonstrated, or the request will be denied.
2. All consultations will be responded to within ten (10) business days from receipt. If this is not possible, the reason for the delay and the estimated response date will be provided within five (5) business days following the initial term.

1. Claims Procedure

Data Subjects or their representatives who believe data should be corrected, updated, deleted, or that legal obligations have been violated may submit a claim under the following rules:

1. Identity will be verified as above.
2. The claim must include: (i) Data Subject’s identity; (ii) contact details; (iii) supporting documents; (iv) clear description of data in question; (v) explanation of claim; (vi) evidence, if any; (vii) signature and ID number.
3. If the claim is incomplete, Famosos will request corrections within five (5) business days. If unaddressed within two (2) months, the claim will be considered withdrawn.
4. If the receiving department is not competent to resolve the claim, it will be forwarded within two (2) business days, and the Data Subject will be informed.
5. Once complete, a legend “claim in process” will be included in the database within two (2) business days and maintained until resolved.
6. The claim will be resolved within fifteen (15) business days. If this is not possible, reasons for the delay and the final resolution date will be provided within eight (8) business days after the original deadline.

The Data Subject may request deletion of Personal Data at any time. Deletion implies total or partial removal as requested. However, Famosos may deny deletion in the following cases: (i) Legal or contractual obligations require data retention; (ii) Deletion hinders legal, tax, criminal, or administrative proceedings; (iii) Data is necessary to protect legitimate interests, act in the public interest, or comply with legal duties.

8. DATA ACCESSED (GOOGLE USER DATA)
   Famosos may access certain Google user data when the user connects their Google or YouTube account to the Famosos platform. Specifically, the application may access:

• Google account basic profile information (name, email address, and profile picture).
• YouTube channel ID, channel name, and basic public metrics (such as subscriber count and video performance).

This data is accessed solely for the purpose of authenticating the user’s identity, enabling campaign analytics, and providing influencer marketing services.
Famosos does not access, collect, or store private messages, passwords, or non-public content.

9. DATA USAGE
   The Google user data accessed through the Famosos application is used exclusively for the following purposes:

• Authenticating users and linking their Google or YouTube accounts to Famosos’ platform.
• Analyzing campaign performance and generating engagement metrics using aggregated and anonymized data.
• Displaying verified user information to brands and agencies as part of influencer collaboration processes.

Famosos does not use Google user data for advertising targeting, reselling, or unrelated commercial purposes.

10. DATA SHARING
    Famosos does not share Google user data with third parties except in the following cases:

• With data processors (such as cloud hosting providers or analytics services) that process the information on behalf of Famosos, under strict confidentiality and data protection obligations.
• When required by law or court order.

Under no circumstance will Famosos sell or disclose Google user data for marketing, profiling, or advertising purposes.

11. DATA STORAGE AND PROTECTION.

All Google user data collected by Famosos is stored on secure, encrypted servers located in the United States. Access to such data is restricted to authorized personnel only and protected through industry-standard security measures, including encryption, firewalls, and secure access credentials.

Famosos applies organizational and technical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of personal data.

12. DATA RETENTION AND DELETION

Google user data is retained only for as long as necessary to fulfill the purposes described in this Policy or as required by law.

Users may request deletion of their Google user data at any time by contacting legal@famosos.com. Upon verification, Famosos will permanently delete the user’s data from its systems and revoke all access tokens granted through the Google API.

When a user disconnects their Google account from Famosos, all associated tokens and stored data are automatically deleted within 30 days.

13. EFFECTIVE DATE AND MODIFICATIONS

Personal Data will remain in Famosos’ databases based on the duration of the contractual or service relationship, the persistence of the original purpose, applicable legal requirements, and statute of limitations.

Famosos may amend this Policy at any time without prior notice, provided changes are not substantial. Material changes regarding purposes or Data Controller details will be communicated to Data Subjects, and if required by law, new Authorization will be requested.

Any updates required by Google API Services or YouTube API policies will be promptly incorporated into this Policy, and the updated version will be published at https://famosos.com/privacy-policy.

This Policy is effective as of October 15, 2025.