Date of Last Revision: February 25, 2026

Out The Mud Ventures, Inc. ("Vault", "we", "us", or "our") has prepared this Privacy Policy to explain (1) what personal information we collect, (2) how we use and share that information, and (3) your choices concerning our privacy and information practices.

Applicability of this Privacy Policy

Vault provides a platform where users can access an artist's community or vault (the "Artist Vault"), where the artist can upload content such as unreleased music and other content releases ("Drops"), some of which may be available for purchase ("Paid Drops"), and provide access to a chat room with the artist and other users. This Privacy Policy applies to the personal information that we collect from users who have registered an account with us, interact with our website at https://vault.fm/, or whose personal information we receive through third-party platform integrations (such as Instagram), even if they have not created a Vault account. Together, these are referred to as the "Services".

Personal information we collect

We collect several different types of information for various purposes to provide and improve our Service to you.

Information you provide to us:

• Contact information, such as your name, phone number, email, and other similar information when you create an account with us.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, product reviews, or otherwise correspond with us online.
• Usage information, such as your information relating to your use of the Services and how you interact with the artist and other users on the Services.
• Marketing information, such as your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications.
• Transaction information, such as records of Paid Drops you have purchased. Payment card information is collected directly by our third-party payment processor, Stripe, Inc., and is subject to Stripe's privacy policy available at https://stripe.com/privacy. Vault does not receive or store your payment card details.
• Other information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.

Information we obtain from third parties:

• Social media information. We may maintain pages on social media platforms, such as Facebook, LinkedIn, Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider's privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy. If you connect a third-party account such as Instagram to our Services, we may collect information from that platform, including your username or handle, profile information, and content you authorize us to access (such as direct messages sent in response to automated keywords). We collect Instagram direct messages that users voluntarily send in response to automated keyword prompts. Responses to these keywords are configured by the artist and delivered automatically by our system. This data is used solely to facilitate automated responses configured by the artist, such as delivering links to exclusive content or promotional materials when a user sends a designated keyword. We collect this information in accordance with the permissions you grant and the terms of the third-party platform. We do not sell personal information obtained from third-party platforms, including Instagram and Facebook.
• Other Sources. We may obtain your personal information from other third parties, such as marketing partners, data providers, and publicly-available sources.

Automatic data collection. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as:

• Device data, such as your computer's or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area.
• Online activity data, such as the pages or screens you viewed, how long you spent on a page or screen, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them.

We use the following tools for automatic data collection: