Bloom Invest Privacy Policy

This Privacy Policy ("Policy") covers the following affiliated companies in the Bloom Invest family of companies: Leveredge Association, Leveredge Property Management LLC and funds including but not limited to Leveredge Michigan Holding LLC. Together, these entities as well as other affiliated companies with whom we conduct business are referred to as "Bloom", "Bloom Invest", "our affiliates", "we", "us", or "our" in this Policy.

This Privacy Policy applies to your interaction with Bloom Invest: (1) at any online or mobile application or website that we own and control, unless a different online and/or mobile or other privacy policy is posted relating to a particular application, website, product, or service, or is made available to you and by its terms supplants this Policy; (2) via a Bloom advertisement, page, or account on a Third-Party Site, or (3) at physical offices of Bloom.

We may collect, retain, use, and disclose personal and other information about you in accordance with this Policy. Other privacy policies may also apply in addition to the terms of this Policy.

To the extent permitted by applicable law, by using an application of website or interacting with a Bloom advertisement or page or account on a Third-Party Site, you consent to this Policy, including your consent to our use and disclosure of information about you in the manner described in this Policy.

We are committed to maintaining the privacy and confidentiality of your personal information. This Policy explains what personal information we collect about you, how we use and share that information, and the rights you have in connection with that information, including how you can limit certain uses and sharing of your information. Certain rights, requirements, and disclosures in this Policy may be subject to exemption or otherwise may not apply to you based, for example, on applicable law or regulations. This information is required by law and is not a promotion of Bloom`s products and services. This policy is not a contract and does not seek any basis for contractual rights.

Information we may collect

As described in this Policy, we may collect personal information from or about you in order to provide, enhance, market and offer our products and services, including the products and services of our affiliates (together, "Services") to you and to our clients. "Services" include, among other things, maintaining or servicing accounts, providing customer service, issuing requests to vendors to process trades, withdrawals or deposits, verifying customer information, processing payments, processing investments, determining eligibility for Services, recordkeeping, and related activities.

This section covers the categories of personal information we may collect. For purposes of this Policy, personal information generally includes information that may be used to identify you. You are not required to give us all the personal information identified in this Policy; however, if you do not provide requested personal information, we may not be able to provide you with some or all of our Services. We only collect personal information in accordance with applicable law.

Identifiers

Name, alias, home and work addresses, home and work phone numbers, mobile phone numbers, Social Security number, driver`s license number, passport number, tax identification number, other government-issued identification numbers, alien registration number, date of birth, email address, username, password, social media name, signature, customer identification number, employment status, employer name, occupation, whether you are a "politically exposed person", whether you are a "control person" (pursuant to FINRA Rule 3210), annual personal income range, and average net worth range ("Personal Information"), IP Address, electronic device ("Device" identifier, device type, browser type, platform type, cookies, pixels, and beacons.

Financial Information

Financial account number, account balance, trading activity, transactions, account history, income, assets, revenue, investment experience, risk tolerance, and information about your personal investment goals or objectives.

Protected Class Information

Age, sex, gender, national origin, citizenship, marital status

Internet or similar network activity

Browsing history, search history, clickstream data, session information, navigation paths, and other information about how you interact with our websites and applications.

Geolocation data

Physical location

Sensory data

Audio recordings, video recordings, photographs

Professional information

Employment information (including employer name), employment history.

Sources of Information and Purposes of Collection and Disclosure

This section describes the sources from which we may collect personal information and why we may collect and, if applicable, share personal information.

Applications and Forms

We may collect personal information from you or your authorized representatives during the application or account creation process, through other forms, or through discussions (oral or written) we have with you or your authorized representatives.

We may collect Identifiers, Financial Information, Protected Class Information, Professional information, internet or similar activity through applications and forms.

We collect this information to:

1. Provide the Services

2. Protect against unauthorized access, security incidents, fraud, and other illegal activity

3. Comply with legal and regulatory obligations and to establish, enforce and otherwise exercise our rights and defend against claims.

Communications and Interactions with Us

We may collect personal information when you or your authorized representative uses our Service, including when you use our website, communicate with us via email, sms, phone, when you contact customer support, request information from us, submit inquiries, provide feedback, interact with us on social media, participate in a promotion, contest, survey, or conference.

We may collect Identifiers, Financial Information, Protected Class Information, Professional Information, Sensory data, internet of similar activity.

We collect this information to:

1. Provide the Services

2. Enhance the Services

3. Market, advertise, and promote the Services

4. Protect against unauthorized access, security incidents, fraud, and other illegal activity

5. Comply with legal and regulatory obligations and to establish, enforce and otherwise exercise our rights and defend against claims.

Transaction Activity

We may collect personal information from you or from records we create about you when you make transactions through us.

We may collect Identifiers, Financial Information.

We collect this information to:

1. Provide the Services

2. Enhance the Services

3. Maintain system and process functionality

4. Market, advertise, and promote the Services

5. Protect against unauthorized access, security incidents, fraud, and other illegal activity

6. Comply with legal and regulatory obligations and to establish, enforce and otherwise exercise our rights and defend against claims.

Our Websites and Applications

We may collect personal information from your Device when you visit or interact with our mobile applications or websites.

We may collect Identifiers, Internet or similar network activity, geolocation data.

We collect this information to:

1. Provide the Services

2. Enhance the Services

3. Maintain system and process functionality

4. Market, advertise, and promote the Services

5. Protect against unauthorized access, security incidents, fraud, and other illegal activity

6. Comply with legal and regulatory obligations and to establish, enforce and otherwise exercise our rights and defend against claims.

Social Media and Online Forums

We may collect personal information from third-party social media platforms and sites, when you engage with our social media pages, online communities and forums, and when you mention us on your own or other social media pages, online communities or forums. Please note that online forums may be publicly accessible and other users may view information you post in the forums.

We may collect Identifiers, Internet or similar network activity, geolocation data.

We collect this information to:

1. Provide the Services

2. Enhance the Services

3. Maintain system and process functionality

4. Market, advertise, and promote the Services

5. Protect against unauthorized access, security incidents, fraud, and other illegal activity

6. Comply with legal and regulatory obligations and to establish, enforce and otherwise exercise our rights and defend against claims.

Service Providers, Data Brokers, Government Entities and Business Partners

We may collect personal information from service providers, government entities and business partners.

We may collect Identifiers, Financial information, Protected Class Information, Internet of similar network activity, Geolocation data, Sensory data, Professional information.

We collect this information to:

1. Provide the Services

2. Enhance the Services

3. Maintain system and process functionality

4. Market, advertise, and promote the Services

5. Protect against unauthorized access, security incidents, fraud, and other illegal activity

6. Comply with legal and regulatory obligations and to establish, enforce and otherwise exercise our rights and defend against claims.

Information We May Share and With Whom We May Share It

This section describes the categories of personal information we may share. We may share your personal information for the purposes described in the previous section of this Policy. We do not sell personal information.

Operational Service Providers

We may share your personal information with service providers that help us perform or provide the Services, including for example, companies that provide administrative, telecommunications, system, software, trade execution, payment, and securities clearing services, and that prepare and send account statements and transaction confirmations and other services in connection with the operation of our business.

Security Service Providers

We may share personal information with service providers that detect, protect against, and respond to security incidents or other malicious, deceptive, illegal or fraudulent activity or actual or potential threats to the safety or well-being of any person.

Data Analytics Firms

We may share personal information with service providers that perform data analytics to help us improve our Services and develop new offerings, among other things.

Government Entities

We may share personal information with Government Entities and law enforcement officials. In certain cases, laws and regulations may require us to share personal information with these entities.

Professional Service Firms

We may share personal information with professional services firms that help us comply with our legal and regulatory obligations and establish, enforce, and otherwise exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants.

Business Partners

We may share personal information with business partners.

Affiliates

We may share your personal information with our affiliates.

Merger and Acquisition Activity

We may share your personal information with third parties in connection with the proposed or actual financing, insuring, sale, securitization, assignment, or other disposal of all or part of our business or assets (including accounts) for the purposes of evaluating and performing the proposed transaction.

Use of Cookies and Similar Technologies and Internet-Based Advertising

We and our third-party service providers may use cookies and similar technologies on our websites and applications to improve user experience, for performance and analytics, and to improve our content, products and services. We also use cookies and similar technologies for purposes of marketing and advertising, including interest-based advertising. For more information on interest-based advertising see the "Interest-Based Advertising" section. Certain information may be stored or accessed using tracking technologies such as "cookies" and "web beacons" that may be downloaded to your Device when you visit or interact with our websites and applications. This information may include but is not limited to:

1. IP address, UDID or other unique device identifier, a number that is automatically assigned to your Device and used by us to identify your Device;

2. Device functionality and characteristics (including browser, operating system, hardware and mobile network information);

3. The URL that referred you to our websites;

4. The areas within our websites and applications that you visit and your activities including remembering your preferences; and

5. Device location.

A "cookie" is a small text file that a web server stores in browser software. A browser sends cookies to a server when the browser makes a connection to the server (for example, when requesting a web page from the same domain that created the cookie). The purpose of cookies is to remember the browser over time and distinguish one browser instance (or user) from all others. We use both HTML cookies and Local Shared Objects (sometimes referred to as Flash cookies) that are built for use with the Adobe® Flash® Player for authentication purposes and to enhance navigation and website functionality. Cookies can remember login information, preferences, and similar information. If you access your account online, cookies may be used to verify your identity, to authenticate you as a user on our system and to personalize aspects of your experience on our websites. We also use cookies to let us know how our customers and other visitors are using our websites so that we can optimize their experience. We permit certain third-party advertising providers to set cookies and use related technology such as web beacons or "clear GIFs" through our websites and other websites on which we advertise, and via HTML email messages, to track performance of advertisements and to collect aggregate data on web page viewing. Some cookies and other technologies may serve to track personal information previously entered by a web user on our websites. We may also use web beacons or "pixels," and in certain circumstances may collect IP address, screen resolution and browser software and operating system types, clickstream patterns, dates and times that our websites are accessed, and other categories of data. In addition, we currently use Google Analytics. Please readHow Google uses data when you use our partners' sites or apps for information about how Google Analytics collects and processes data. If you wish to opt out of Google Analytics, please visithttps://tools.google.com/dlpage/gaoptout.

Most browsers allow you to control cookies, including whether to accept them and how to remove them. You can manually delete HTML cookies and set most browsers to refuse to accept HTML cookies. For information on how to disable cookies, refer to your browser`s documentation. Flash cookies or other Local Shared Objects may be removed by managing your Adobe® Flash® Player settings or in your browser`s settings. To delete or prevent placement of Flash cookies, visit the Adobe® Flash® Player Help site at www.adobe.com/go/settingsmanager, click on the hyperlink for "Website Privacy Settings Panel" on the left side of the screen, and follow the instructions for preventing third-party Flash content from storing data on your computer. If you choose to erase or block your cookies, doing so may affect your website experience, and certain parts of our websites may not function correctly.

Internet-Based Advertising

We may use "interest-based" ads, also known as "online behavioral advertising." Interest-based advertising is advertising that is targeted to you based on your web browsing and app usage over time and across websites or apps. You have the option to restrict the use of information for interest-based advertising and to opt-out of receiving interest-based ads. We may partner with ad networks and other advertising providers ("Advertising Providers") who serve ads on behalf of us and others on non-affiliated sites. Some of these third parties may use cookies and other technologies to collect information about your online activities over time and across third-party websites or online services to deliver advertising based on your interests and preferences, as inferred from your browsing history. Some of these ads may be personalized, meaning that they are intended to be relevant to you based on information that Bloom and its Advertising Providers collect about your visits to our websites and elsewhere over time.

To learn more about this type of advertising and how to opt-out of this form of advertising, you may either visit http://www.aboutads.info to opt-out of sites and services participating in the Digital Advertising Alliance ("DAA") self-regulatory program, or visit www.networkadvertising.org/choices/ to opt-out of this form of advertising by members of the Network Advertising Initiative ("NAI"). Note that electing to opt-out will not stop advertising from appearing in your browser or applications, although it may make the ads you see less relevant to your interests. In addition, if you use a different browser or erase cookies from your browser, you may need to renew your opt-out choice.

Do Not Track

Do-Not-Track is a public-private initiative that has developed a "flag" or signal that an Internet user may activate in the user`s browser software to notify websites that the user does not wish to be "tracked" by third-parties as defined by the initiative. Our websites do not alter their behavior when we receive a "Do-Not-Track" signal from browser software. Currently, we do not monitor or take any action with respect to these signals or other similar mechanisms.

How to Exercise Your Rights

In certain cases, you may be able to limit the types of communications you receive and certain sharing of your personal information. This section describes how to exercise those rights.

Updating Your Information

If you believe that your personal information is inaccurate, incomplete, or out-of-date, you also may contact us using the information in the "Contact Us" section of this Policy.

Limiting Direct Marketing

If you would like to stop receiving newsletters or other marketing or promotional messages, notifications, or updates from us, you may follow the unsubscribe instructions that appear in those e-mail communications or you may opt out by contacting us through the information in the "Contact Us" section of this Policy. You may not be able to opt out of receiving certain service or transactional messages from us, including, for example, legal notices.

Information on Individuals Under 18 Years

We do not knowingly collect information from individuals under the age of 18 years without parental consent. If you become aware that an individual under 18 years of age has provided us with personal information without parental consent, please contact us using the information in the "Contact Us" section of this Policy. If we become aware that an individual under 18 years has provided us with personal information without parental consent, we will take steps to remove the data as permitted by law.

Location of Data Storage and Processing

The personal information we collect from you will be stored in the United States and may be stored in other countries that may have different privacy laws and standards than those in your country of residence. Your personal information may be transferred to or processed in the United States by us or by a third-party service provider working for us. If you are located outside of the United States, the transfer of personal information is necessary to provide you with the requested information, products, and services and/or to perform any requested transaction. When we transfer or disclose your personal information to other countries, we will protect that information as described in this Privacy Policy. By submitting personal information via our websites or other means, you agree to such storage, transfers, and processing.

Data Security

We maintain reasonable physical, administrative, and technical safeguards to protect your personal information. Our employees and third-party service providers have access to your personal information on a "need to know" basis.

We take measures to delete your personal information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period, as described in our records management policy.

Links to Other Sites

Our mobile applications or websites may contain links or otherwise provide access to another mobile application, website, or Internet location (collectively "Third-Party Sites"). We have no control over and are not responsible for Third-Party Sites, their content or any goods or services available through the Third-Party Sites. This Policy does not apply to Third-Party Sites.

We encourage you to read the privacy policies of any Third-Party Site with which you choose to interact. One Third-Party Site our mobile applications or websites may use is Plaid Inc. ("Plaid"). Plaid explains how it collects, uses, and shares information in its End User Privacy Policy, and for purposes of using Plaid in connection with your interactions with us you agree to that End User Privacy Policy and to Plaid`s collection, use, and sharing of your information as described in that End User Privacy Policy.

Notice to California Residents

This section describes your rights under the California Consumer Privacy Act ("CCPA") and how to exercise those rights. Your CCPA rights are in addition to the rights described previously in this Policy.

Description of Your Rights

Subject to certain exceptions and limitations, you have the following rights with respect to covered personal information.

1. Right to request access to personal information

2. Right to delete personal information

3. Right to opt-out of the sale of personal information

4. Right to Data Portability

5. Right not to be discriminated against for exercising the rights identified above

Covered Personal Information

The rights described in Section 10.1 do not apply to certain categories of personal information. The personal information excluded from coverage under the CCPA includes, among other things:

• Personal information we collect from or about you when you apply for or obtain a product or service for personal, family or household purposes;

• Personal information about communications or transactions with you when you are acting on behalf of a company or government agency to do business with us; and

• Personal information sold or bought from a consumer reporting agency for use in a consumer report in compliance with applicable law.

We will apply verifiable consumer requests to covered personal information.

How to Submit a Request

You or your authorized agent may submit a CCPA request using one of the following methods:

1. Call Bloom (517) 200-9681

2. Email us at hello@bloominvest.com

We will respond to authorized requests as soon as practicable and as required by law. The above rights are subject to our ability to reasonably verify your identity and authority to make these requests. In order to verify that you are authorized to submit a request, you may be required to provide additional information.

Your CCPA rights are subject to various exclusions and exceptions under the law. Under certain circumstances, we may be unable to implement your request, pursuant to applicable law. We will advise you of any reason for denying or restricting a request to the extent permitted by law.

We will not provide social security numbers, driver`s license numbers or government issued identification numbers, financial account numbers, health insurance or medical identification numbers, account passwords or security questions and answers, or other specific pieces of personal information if the disclosure presents an unreasonable risk to the security of personal information, customer accounts or our systems and network security.

Notice to Nevada Residents

We are providing you with this notice pursuant to state law. You may be placed on our internal Do Not Call list by calling us at (517) 200-9681. For further information, contact the Nevada Attorney General`s office at 555 E. Washington Ave., Suite 3900, Las Vegas, NV 89101; by phone at 702-486-3132; or by email at BCPINFO@ag.state.nv.us.

Updates to this Policy

We may update this Policy from time to time. We encourage you to periodically review this Policy to learn about updates to our privacy practices.

Contact Us

For more information about our privacy practices, or if you have questions or concerns, please call us at (517) 200-9681 or email us athello@bloominvest.com. You may also contact us by mail at the following address:

Leveredge Association

51 Pleasant St, Suite 250

Malden, MA 02148