Privacy Policy

At GoArt Inc. (“GoArt”, “GoArt Metaverse”, “we” and/or “our”), accessible at www.goartmetaverse.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document is designed to help you understand how we collect, use, and safeguard the information you provide to us and to fulfill our clarification obligation under the Personal Data Privacy Laws.

SCOPE

By accessing our website (the “Site”) and/or our GoArt Metaverse mobile application (the “App”), to any of our Services (the “Services”, which include the Website and App) you accept our Privacy Policy.

Your personal information as specified in this Privacy Policy is collected and processed by GoArt during your registration as a user (“User”) to the Application and when you use any of our Services.

To become a User of the App you will need to create a personal profile by registering with the App with Know Your Customer (“KYC”) compliance. To register you will need to enter your name, surname, email address and create a username and a password. By registering, you are authorizing us to collect, store and use your data in accordance with this Privacy Policy.

INFORMATION COLLECTED

1. PERSONAL INFORMATION PROVIDED BY THE USER

Personal information is an information that, directly or indirectly, can be used to identify or contact a single person. We collect, store, and use only that personal information which is necessary for us to provide you to register to the App and to provide you the Services based on the Agreement.

You give us Personal Information when you make a purchase through us, subscribe to our publications, register for a location-based event, enter a competition, promotion, sweepstakes, or survey, or communicate with us. Depending on which of these Services you use, that may include your name, mailing address, phone number, country of residency, age, and email address. We use that information to fulfil those Services to you and to provide related customer support to you.

When you use our Services, we may collect the following kinds of information:

<u>Account Information.</u>Upon registering as an authorized user for our Services, you will be required to provide us with personal information for your use of the App and providing the Services based on the Agreement. Such information may include your name, date of birth, email address, gender, phone number, login details for our Site and Apps, unique account number, unique customer identification, marketing preferences, complaints details and any notes added to your account.

<u>Contact Information.</u>In order for you to sign up for our newsletter, seek customer or technical support, or communicate with us, we will collect personal information from you, which may include your email address and phone number.

<u>Payment Information.</u>Our Services enable in-app purchases. We do not process payments for in-app purchases nor have access to your credit card information. When you make purchases within our Services, we only collect data about purchase transaction types and spend you have made using virtual items in the Services. Payment transactions for in-app purchases are completed through the app store via your App Store account or Google Play account (payment service providers). You are requested to provide your payment details and personal information directly to such payment service providers. We are not involved in the collection and processing of such information: instead, we will only receive a notification by the relevant payment service provider as to whether payment has been successfully completed. Any post-purchase processes are controlled by the Apple, Google Stores and are subject to specific terms of such Apple, Google Stores. Please review privacy policy and terms of service of your payment service provider.

<u>Spatial and Visual Data.</u>Our games and apps include innovative features which allow you and other players to view and interact with the same virtual objects at the same time in a shared physical space. They also allow you to leave persistent virtual objects at real world locations, so other players can see them even when you are not there, and so you can see them when you return. In order to provide you with these AR experiences, we need to collect geospatial data and images from your device camera and sensors during your AR experiences.

<u>Surveys.</u>We may contact you to participate in surveys if you have given us permission to send you marketing communications. If you decide to participate, you may be asked to provide certain information which may include personal information.

<u>Registration for Contests or Prizes.</u>We may run contests in GoArt Metaverse. Your name and contact information may be used to inform you about the contest. In addition, we may need to process additional personal data for the purpose of distributing/delivering prizes to the winners. We may also need your crypto-wallet address if the prizes are in the form deliverable to your crypto wallets. Further, this information may be used for other promotional, marketing and business purposes, if permitted by law or with your explicit consent.

2. INFORMATION COLLECTED AUTOMATICALLY

By visiting our Site and/or App, our servers automatically collect information provided by your browser. This information does not reveal your specific identical information (such as your identity, contact information), but this data may include:

<u>Usage data.</u> We collect data about how users interact with our Services. This includes access dates and times, app features or pages viewed, browser type, and app crashes and other system activity such as which pages you visit, which content you view and what links and buttons you click. This information may be collected through cookies or similar technologies.

<u>Device data and other Technical Information.</u>We collect data about the devices used to access our Services, including the hardware models, device IP address or other unique device identifiers, operating systems and versions, software, preferred languages, advertising identifiers, device motion data, mobile network data and logs of installation and deletion of the Apps. Technical information may include browser information, browsing actions and patterns, time zone setting and location, information about operating system, platform, and other technologies on the devices you use to access our Services.

<u>Communications data.</u>We collect data regarding phone, text or in-app communications between users that are enabled through the Services. This includes date and time, as well as the content of text or in-app messages. We may also collect the content of phone calls with your consent and solely where Users are notified in advance that the call may be recorded.

<u>General Location Information.</u>The device or computer you use to access the Site, or the Apps will provide us with your IP address. The IP address tells us which city, state or country you are accessing the Site or Apps from, but does not give us detailed information about your location.

<u>Game data. </u>We collect your in-game actions data such as achieved game levels, rewards, completed events, virtual currency and statistics including the playtime or the use of the various features as well as the data associated with any bugs and malfunctions. We also collect data about account history such as, what games you have participated in. We collect this data to provide you with access to our games, for example to your saved game and unlocked or purchased content and to improve your experience and the security of our Services. We also use this data to show in-game sponsored locations that are in your vicinity as part of the gameplay experience.

USES OF PERSONAL INFORMATION

We use personal information or data for several purposes, primarily to provide the Services. We also use such information to: • Fulfill our contract with you, • Manage your information, • Communicate with you about your account, activities on the Services and Privacy Policy changes, • Respond to questions, comments, and other requests, • Provide access to certain areas, functionalities, and features of the Services, • Answering requests for customer or technical support, • Allow you to register for events and Spaces (Portals), • Allow you to file complaints and/or receive complaints about yours or others conduct in GoArt Metaverse, • Enhance the safety and security of our users and services for customer support, • Develop new products the services, • Enable communications between users, • Conduct marketing and advertising, • Perform necessary operations to maintain our services, including to troubleshoot software bugs and operational problems, • Comply with our legal obligations.

<u>Consent. </u>We may use certain personal information with your consent for additional purposes that we will notify you when you provide the information. You have the right to withdraw your consent regarding our collection, usage, or disclosure of your personal information at any time.

<u>Customer support.</u>GoArt Metaverse uses the information we collect (which may include call recordings with your prior notification) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.

We perform the above activities on the grounds that they are necessary to fulfill the terms of our agreements with Users or for purposes of our legitimate interest in monitoring and improving customer support services.

<u>Research and development.</u>We use data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our Services more convenient and easier-to-use, enhance the safety and security of our services, and develop new services and features.

<u>Marketing and Advertising.</u>We may customize and deliver content and advertisements to you based on your personal information. This will be done in compliance with applicable laws and may include sending emails, text messages, push notification, and in-app messages or other communications marketing or advertising our products, services, features, offers, promotions, sweepstakes, news, and events.

This data may include using location, trip and order history, and usage data to send marketing communications that are personalized based on Users observed or inferred interests and characteristics.

If you wish to opt out of the use of your personal information for marketing purposes or if you have any queries regarding our marketing practices, please follow the instructions below: • Email marketing: to opt-out from emails, use the unsubscribe link provided within any email you receive or manage your preferences through the “Account Details” section of the Site or App. • Post Marketing: to opt-out from receiving marketing by post, you can manage your preferences through the “Account Details” section of the Site or App. • Push notifications: to opt-out from receiving push notifications, you can disable push notifications on your device or browser settings.

<u>Social Media Marketing.</u>We may also use information you provide to us to show you relevant advertising and personalized content on certain third-party social media platforms made available to us through those services (e.g. Facebook, Twitter, Instagram). We do not control the way these social media platforms operate and collect your information and you should read their respective privacy notices online to understand how they use your personal information. If you no longer want to receive personalized and targeted advertisements from the social media platforms, you can manage your advertising preferences and decide what you do or do not want to see using the settings in your relevant social media platform account.

<u>Profiling.</u> We may also carry out certain profiling of you and your activity on our Services in order to send you more relevant marketing communications. This may include profiling the way in which you engage with advertisements that may be served on our Services or included in our marketing communications of the brands of our Platforms, our group companies and our carefully selected third parties. This profiling will be undertaken based on your use of our Services and your selected preferences for marketing communications.

<u>Non-marketing communications.</u>We may use data to send surveys and other communications that do not aim to market the services or products of GoArt Metaverse or our partners. We perform the above activities on the grounds that they are necessary to fulfill the terms of our agreements with Users, or to serve GoArt Metaverse and our Users legitimate interests in informing them about events that may have an impact on their use of our services.

<u>Legal proceedings and requirements.</u>We use data to investigate or address claims or disputes relating to use of GoArt Metaverse’s services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement. We perform the above activities on the grounds that they are necessary for purposes of our legitimate interests in investigating and responding to claims and disputes relating to use of our services and features, and/or necessary for compliance with applicable legal requirements.

DISCLOSING INFORMATION

GoArt Metaverse does not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent, except as otherwise stated in this Privacy Policy.

We may share Personal Information, only within the scope of the provisions of the applicable Personal Data Privacy laws regarding the transfer of personal data within the country and abroad, for the purposes specified in this Privacy Policy.

We may process or share your data on the following legal basis, such as: • If you have given us explicit consent to use your personal information for a specific purpose, • If it is needed to fulfill the performance of the contract • If it is required to disclose such information in order to comply with applicable law, governmental requests, court order etc.

Further, we may be required to process your data or disclose your personal information in the following circumstances:

<u>Service Providers.</u>We may share personal Information with third parties that we have a contractual relationship with that specialize in providing services that we cannot provide in-house as further detailed below. For information on how they handle personal and non-personal information they collect, please see their respective privacy policies. • Firebase (Google Analytics): GoArt Metaverse uses Firebase to monitor usage patterns of the Service for continuous User experience optimization efforts. • Photon: Multiplayer networking and gameplay. • Unity: GoArt Metaverse is built in part using Unity Technology.

<u>Business Partners.</u>For example, if a user requests a service through a partnership or promotional offering made by a third party, we may share certain data with those third parties. This may include other services, platforms, apps, or websites that integrate with our APIs; services; those with an API or service with which we integrate; or other GoArt Metaverse business partners and their users in connection with promotions, contests, or specialized services.

<u>Event and Spaces (Portals) Partners.</u>This may include your email address in connection with Events and Spaces (Portals), the number of times you have attended Events and Spaces (Portals), and through which device you attend the Events and Spaces (Portals). We may provide your demographic information (gender, age, and interests) to our Event and Spaces (Portals) partners during your participation to their Events and Spaces (Portals). Within the App, if you elect to use your real name in connection with your avatar on the service, your name will be visible, and your friends will be able to locate you in GoArt Metaverse and likewise you will be able to locate your friends. You are also able to freely communicate in GoArt Metaverse. Like being out in public, anyone around you will be able to hear your conversations. Please be mindful and respectful and review our Terms of Use regarding your communications in GoArt Metaverse.

<u>APIs and Software Development Kits.</u>As part of the features of our Services, we may incorporate third-party APIs and software development kits ("SDKs"). These APIs and SDKs may permit third parties, subject to applicable laws, to gather your personal information in order to provide you with more relevant content.

<u>Other Users.</u> When you use the Services, and in particular when you play our games, use social features within those games (including cross-game features), or take part in location-based events, we will share certain Personal Data with other players. This Personal Data includes your in-game profile (such as your username, your avatar), your in-game actions and achievements, your in-game voice chats and related content you share with other players.

You acknowledge and agree that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. We recommend that you check the Website periodically to stay updated on how your information is used.

PROTECTION MEASURES

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password. We further protect your information from potential security breaches by implementing certain technological security measures such as third-party wallet providers for your crypto wallet. However, these measures do not guarantee that your information will not be accessed, disclosed, altered, or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

CHILDREN’S INFORMATION

Unless stated otherwise for a particular Service, children are not allowed to use the Services, and we do not knowingly collect Personal Data from them. We define “children” as follows: • Residents of the UK: anyone under 13 years old. • Residents of the EEA: anyone under 16 years old, or the age needed to consent to the processing of personal data in your country of residence. • Residents of the Republic of Korea, anyone under 14 years old. • Residents of other regions: anyone under 13 years old or the age needed to consent to the processing of personal data in that region. Each game has an intended age rating which you can find in the App Store, Google Play Store listing. Keep this age rating in mind when sharing content and use discretion when interacting with others.

USER RIGHTS REGARDING THE USE OF PERSONAL INFORMATION

By applying to GoArt, we inform you that you have the right to; • Find out if your personal data has been processed, • Request information about your personal data if it has been processed, • To find out the purpose of processing your personal data and whether they are used for their intended purpose, • Learning about third parties to whom your personal data is transferred at home or abroad, • Requesting correction of your personal data if it is in complete or incorrectly processed, • Requesting the deletion or destruction of your personal data, • Requesting notification of the transactions made pursuant to subparagraphs(e) and (f) above, to the third parties to whom your personal data has been transferred, • Objecting to the emergence of a result against you by analyzing your processed data exclusively through automated systems, • Requesting compensation for damages if you suffer damages due to unlawful processing of your personal data.

DATA RETENTION AND DELETION

GoArt Metaverse retains user data for as long as necessary for the purposes described above, including to provide its Services and comply with legal obligations.

The period for which we retain user data is determined by the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.

The length for which GoArt Metaverse retains user data may further be determined by legal and regulatory requirements, purposes of safety, security, and fraud prevention, or by issues relating to the user’s account such as an outstanding credit or an unresolved claim or dispute.

For example, we retain data for the life of users’ accounts if such data is necessary to provide our services (e.g., user profile information and credentials).

Users may request deletion of their accounts at any time through the Settings > Privacy menus in the GoArt Metaverse App. GoArt Metaverse may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy.

Following an account deletion request, GoArt Metaverse deletes the User’s account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute.

LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to other websites or applications that are not owned or controlled by us. Please be aware that this Privacy Policy applies solely to information collected by us through the App, Website, and the Service. We encourage you to read the privacy terms of other websites before proceeding to use them.

GoArt Metaverse and our partners use cookies and other identification technologies on our apps, websites, emails, and online ads for purposes described in this notice, and GoArt Metaverse’s Cookie Policy.

Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. GoArt Metaverse uses cookies and similar technologies for purposes such as: • authenticating users, • remembering user preferences and settings, • determining the popularity of content, • delivering and measuring the effectiveness of advertising campaigns, • analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our services.

We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services.

Please see our Cookie Policy for more information regarding the use of cookies and other technologies described in this section.

CONTACT

In case of any questions or concerns regarding this Privacy Policy or the practices of this Website, we encourage you to contact us at GoArt Inc. addressed at 11130 Jollyville Rd Suite 303, Austin, TX 78759 USA with a petition, or you can send them through a notary public. In addition, you can send your requests to the email address of info@goartmetaverse.com by using a secure electronic signature, mobile signature or your e-mail address in our system, which was previously notified to our company and confirmed by us.

UPDATES TO THIS NOTICE

We may occasionally update this policy. We will notify users in advance of the changes through the GoArt Metaverse apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices.

Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.

GOART TEKNOLOJİ ANONİM ŞİRKETİ

2023 GoArt, All rights reserved.