EXPORTLY PRIVACY POLICY

Frontier Talent, Inc.

Last Updated: July 13, 2026

Frontier Talent, Inc. (“Frontier,” “Exportly,” “we,” “us,” or “our”) provides sales prospecting, data enrichment, account intelligence, automation, and related workflow tools through our website, browser extension, software platform, integrations, and related services (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and protect personal information, and describes the privacy rights and choices that may be available to you.

1.  Scope of This Privacy Policy

This Privacy Policy applies to personal information we process when you visit our websites; request a demo or contact sales; create or use an Exportly account; install or use our browser extension; use our platform, integrations, or other Services; or interact with our marketing, support, or business operations.

This Privacy Policy does not replace any written agreement we have with a customer, including any Master Services Agreement, Data Processing Agreement (“DPA”), order form, or other customer contract.

When we process personal information on behalf of a customer through the Services, we generally act as that customer’s processor, service provider, or subprocessor, as applicable. In those cases the customer controls the personal information and our processing is governed by our agreement with that customer, including our DPA. When we process personal information for our own purposes (for example, to operate our website, market our Services, and run our business), we act as a controller.

2.  Personal Information We Collect

A. Information You Provide to Us

B. Account and Service Information

C. Customer Data Processed Through the Services

Customers and their authorized users may submit, upload, connect, generate, enrich, or sync information through the Services. Depending on how a customer configures the Services, this may include professional contact information, employment history, company and prospect information, CRM records and field values, enrichment data, sales-workflow data, meeting-preparation and account-intelligence data, draft outreach content, and login information relating to the customer’s authorized users. We process this information on behalf of the relevant customer and in accordance with our agreement with that customer.

D. Information From Integrations and Third-Party Services

If you or your organization connects the Services to third-party tools, we may receive information from those tools to provide the Services, such as Clay workspace and enrichment data, CRM records and fields, sales-engagement or sequencing data, authentication tokens needed to maintain integrations, and account, contact, company, or prospect data made available through connected services. You should only connect third-party services and provide data you are authorized to use with Exportly.

E. Information Collected Automatically

When you visit our website or use the Services, we may automatically collect your IP address, device and browser characteristics, operating system, referring and exit pages, pages viewed, dates and times of visits, clicks and interactions, log data, approximate location derived from IP address, and identifiers from cookies and similar technologies.

F. Information From Third Parties and Public Sources

We may receive information from business-data and enrichment providers, integration partners, publicly available sources, customers and users, and analytics and marketing providers. For example, the Services may help users enrich professional profiles, identify relevant business contacts, prepare account research, or sync information into customer-designated systems.

G. Browser Extension Information

When you install and use the Exportly browser extension, it operates on the supported websites and tools you choose to use it with. Depending on the features you enable, the extension may access the content of pages you view on supported sites while using the extension (such as a prospect’s profile page or a CRM record) in order to provide enrichment, research, and workflow features; information you select, enter, or generate within the extension; and authentication tokens needed to connect to integrations you authorize. The extension accesses this information only to provide the features you request, processes it consistent with this Privacy Policy, and does not sell it. We do not collect the content of websites that are unrelated to the functionality of the Services.

H. Sensitive Personal Information

We do not intentionally collect sensitive personal information through the website or Services unless specifically required for a customer-configured workflow or legally necessary. You should not submit sensitive personal information unless your organization has authorized you to do so and appropriate safeguards are in place.

3.  How We Use Personal Information

We use personal information to:

4.  Artificial Intelligence and Automated Features

Some Exportly features use artificial intelligence, machine learning, automation, or third-party AI service providers to help generate outputs such as account research, meeting preparation, draft outreach, enrichment, lead scoring, or workflow recommendations. We process inputs and outputs from these features to provide, maintain, secure, and improve the Services, subject to our agreements with customers.

We do not use Customer Data to train third-party foundation models unless the relevant customer has authorized us to do so. AI-generated outputs may be incomplete or inaccurate and may require human review; users are responsible for reviewing outputs before relying on or sending them.

5.  Google API and Chrome Web Store Limited Use

Exportly’s use and transfer of information received from Google APIs and through the Exportly browser extension adheres to the Chrome Web Store User Data Policy and the Google API Services User Data Policy, including their Limited Use requirements. In particular:

If our handling of this data materially changes, we will update this Privacy Policy and, where required, obtain any additional consent.

6.  How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

A list of our subprocessors is available on request and, for customers, as referenced in our DPA. These parties are authorized to process personal information only as necessary to provide services to us or as otherwise permitted by law and contract.

7.  Sale or Sharing of Personal Information

We do not sell Customer Data, and we do not sell personal information in exchange for monetary consideration.

We use cookies and similar technologies for necessary operations and analytics and, where enabled, for advertising and measurement. Depending on the technologies in use, some of these disclosures may be considered a “sale” or “sharing” (including “sharing” for “cross-context behavioral advertising” or “targeted advertising”) under certain U.S. state privacy laws. You can exercise choices over these activities as described in “Your Privacy Rights and Choices” below. We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit under applicable law.

8.  Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies to operate the website and Services, remember preferences, authenticate users, analyze usage, improve performance, secure the Services, and — where enabled and permitted by law — support marketing and advertising. Some cookies are necessary for the website or Services to function; others may be used for analytics or advertising where permitted.

You can control cookies through your browser settings. Where required by law, we treat recognized opt-out preference signals (such as Global Privacy Control) as a valid request to opt out of the sale or sharing of personal information for the browser or device from which we receive them.

9.  Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Account-related information is generally retained while an account is active and for a limited period afterward. For Customer Data, retention is governed by the applicable customer agreement and DPA, and customers may request return or deletion of Customer Data as provided in their agreement with us. We may retain certain information in backups or logs where deletion is not immediately practical, provided we protect it and limit further processing as required by law.

10.  Security

We use technical and organizational measures designed to protect personal information from unauthorized access, acquisition, disclosure, alteration, loss, misuse, or destruction. These measures may include access controls, authentication, encryption, monitoring, vendor controls, and security policies. Information about our security program is available through our Trust Center at https://app.drata.com/trust/718c4714-290a-47bd-9f23-dccf3bb764b5. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11.  International Data Transfers

Frontier Talent, Inc. is based in the United States, and we may process personal information in the United States and other countries where we, our service providers, or our subprocessors operate. Where required by applicable law, we use appropriate safeguards for international transfers, which may include the European Commission’s Standard Contractual Clauses, the UK Addendum, adequacy decisions, or other lawful transfer mechanisms. Copies of the relevant safeguards can be provided on request.

12.  Your Privacy Rights and Choices

Depending on where you live and how we process your personal information, you may have the right to request access to your personal information; request correction of inaccurate information; request deletion; request a copy or portability; object to or restrict certain processing; withdraw consent where processing is based on consent; opt out of marketing communications; opt out of the sale or sharing of personal information or targeted advertising; limit certain uses of sensitive personal information; and appeal a privacy-rights decision, where applicable.

Your Privacy Choices

To exercise your rights, or to opt out of the sale or sharing of personal information or targeted advertising, contact us at get-help@befrontier.com or use the contact details in “How to Contact Us” below. You may also use browser-based opt-out preference signals as described in “Cookies and Similar Technologies.” We may need to verify your identity before fulfilling a request, and we may decline or limit requests where permitted by law. We will not discriminate against you for exercising your rights.

Customer-Controlled Data

If your personal information was submitted to the Services by one of our customers, that customer is generally the controller or business responsible for the information. In that case, please direct your request to the relevant customer. We will assist our customer in responding as required by our agreement and applicable law.

13.  U.S. State Privacy Notice

This section supplements the rest of this Privacy Policy for residents of California and other U.S. states with comprehensive privacy laws. In the preceding twelve (12) months, we may have collected the following categories of personal information:

We collect this information from the sources described in Section 2 and use and disclose it for the purposes described in Sections 3 and 6. We do not sell personal information for monetary consideration; to the extent any use of advertising or analytics technologies is considered a “sale” or “sharing” under applicable law, you may opt out as described above. We retain personal information as described in Section 9.

U.S. state residents may have the right to know, access, correct, delete, obtain a copy of, and opt out of the sale or sharing of personal information, to limit the use of sensitive personal information where applicable, and not to be discriminated against for exercising these rights. To exercise these rights, contact us at get-help@befrontier.com. You may use an authorized agent to submit a request, subject to verification. California’s “Shine the Light” law permits California residents to request information about disclosures for third parties’ direct-marketing purposes; you may submit such requests to the contact below.

14.  European, UK, and Swiss Privacy Notice

This section applies to individuals in the European Economic Area, the United Kingdom, and Switzerland. For personal information we process for our own business purposes, Frontier Talent, Inc. is the controller. For Customer Data processed through the Services, we generally act as a processor or subprocessor on behalf of our customer, who is responsible for determining the lawful basis for that processing.

Where required, we rely on the following legal bases: performance of a contract; our legitimate interests (such as operating, securing, and improving the Services and supporting our marketing); consent (where required, for example for certain cookies or marketing); and compliance with legal obligations. You may have the right to access, correct, delete, restrict, or object to processing, request portability, and withdraw consent, and you may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner). If your request relates to Customer Data, we may direct you to the relevant customer.

15.  Children’s Privacy

The Services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under 18 years of age. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

16.  Third-Party Links and Services

Our website and Services may contain links to third-party websites, applications, integrations, or services. We are not responsible for the privacy practices of third parties, and your use of third-party services is governed by their own terms and privacy policies.

17.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date above indicates when it was last revised. If we make material changes, we may provide additional notice as required by law.

18.  How to Contact Us

If you have questions or comments about this Privacy Policy, or to exercise your privacy rights, you may contact our Data Protection Officer:

Frontier Talent, Inc., Attn: Data Protection Officer

3790 El Camino Real, Palo Alto, CA 94306, United States

Email: elliot@befrontier.com  |  Privacy requests: get-help@befrontier.com

Phone: +1 (415) 741-7588

Trust Center: https://app.drata.com/trust/718c4714-290a-47bd-9f23-dccf3bb764b5

Exportly Privacy Policy — Frontier Talent, Inc.   |   Page  of