PRIVACY NOTICE

Last updated May 25, 2026

This Privacy Notice for Maprios LLC (“Company,” “we,” “us,” or “our”) describes how and why we access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our marketing website at http://www.maprios.com (http://www.maprios.com)
• Access or use the Clarity Assessment Platform at https://insight.maprios.com (https://insight.maprios.com)
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@maprios.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you register for or use our Services, we collect personal information including your name, email address, church or ministry affiliation, and assessment responses. See Section 1.
• Do we process any sensitive personal information? Your church or ministry affiliation may reveal your religious beliefs, which is considered sensitive (special category) data under certain data protection laws. We process this information only with your explicit consent. See Section 1.
• Do we collect any information from third parties? We receive limited profile information(name, email, profile picture) from Google when you choose to sign in with Google. We do not collect information from public databases, marketing partners, or other outside sources. See Section 5.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. See Section 2.
• In what situations and with which parties do we share personal information? We share information with specific service providers necessary to operate our platform: Google (Analytics and OAuth), Meta (conversion tracking), and Abacus AI (hosting). See Section 3.
• What are your rights? You may review, download, or delete your personal information at any time directly within the platform. See Sections 9 and 13.
• How do you exercise your rights? Log in to your account at insight.maprios.com and navigate to Settings. All data rights are self-service. You may also contact us at privacy@maprios.com.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.

Table of Contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. When and With Whom Do We Share Your Personal Information?
4. Do We Use Cookies and Other Tracking Technologies?
5. How Do We Handle Your Social Logins?
6. Is Your Information Transferred Internationally?
7. How Long Do We Keep Your Information?
8. Do We Collect Information From Minors?
9. What Are Your Privacy Rights?
10. California Privacy Rights (CCPA/CPRA)
11. Controls for Do-Not-Track Features
12. Do We Make Updates to This Notice?
13. How Can You Review, Update, or Delete the Data We Collect From You?
14. Data Breach Notification
15. How Can You Contact Us About This Notice?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us when you register for and use the

Clarity Assessment Platform.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

When you register for and use our Clarity Assessment, we collect the following categories of personal information:

• Account Information: Full name, email address, and password (stored in encrypted/hashed form)
• Organizational Affiliation: Church or ministry name, church size, and staff capacity
• Assessment Responses: Your answers to our 21-question stewardship assessment, including operational hours per workflow, pain-level ratings, error frequency, process speed satisfaction, ministry priorities, volunteer engagement levels, growth trajectory, decision-maker roles, change orientation, and desired outcomes
• Financial Estimates: Hourly labor rate you provide, from which we derive calculated values such as Annual Labor Cost, Kingdom Return projections, and Stewardship Health Index scores
• Session Scheduling Data: Clarity Session dates, times, and scheduling preferences
• Consent Records: Timestamp and privacy notice version at the time you granted consent
• Login Activity: Date and time of your most recent sign-in

If you register using Google Sign-In, we also receive your Google account profile information (name, email address, and profile picture) as described in Section 5 below.

Sensitive personal information

Your church or ministry affiliation may reveal your religious beliefs. Under the EU General Data Protection Regulation (GDPR), this is classified as “special category” data under Article 9. We process this information solely to provide the Clarity Assessment Services and only with your explicit consent, which you provide during registration. You may withdraw this consent at any time (see Section 9), which will result in the deletion of your account and associated data.

Information automatically collected

In Short: Some information – such as your Internet Protocol (IP) address and/or browser and device characteristics – is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. See

Section 4 for details.

All personal information that you provide to us must be true, complete, and accurate, and you must

notify us of any changes to such personal information.

2. How do we process your information?

In Short: We process your information for specific, documented purposes, each with a legal basis

under applicable law.

We process your personal information for the following purposes:

Automated calculations

We use automated calculations to generate assessment scores and recommendations based on the information you provide. These include the Stewardship Health Index, Ministry Impact Multiplier, Excellence Factor, and Quick Win recommendations. These calculations are advisory tools designed to help you understand your church’s operational efficiency. They do not produce legal effects or similarly significant outcomes. You may request an explanation of any score by contacting us at privacy@maprios.com.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information with specific third-party service providers necessary to operate our platform. We do not sell or share your personal information for cross-context behavioral advertising. We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice.

We use the following third-party service providers to operate our Services:

Google Analytics and Meta Pixel are blocked by default and only activated if you explicitly consent via our cookie consent banner. See Section 4 for details.

We Do Not Sell or Share Your Personal Information. We do not sell your personal information to any third party. We do not share your personal information for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA/CPRA).

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies and other tracking technologies to collect and store your information. Non-essential cookies are blocked by default and activated only with your explicit consent.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We use the following cookies and tracking technologies:

Essential cookies are required for the application to function and cannot be disabled.

Analytics cookies (Google Analytics) are blocked by default and only activated when you enable

analytics tracking in our cookie consent banner.

Marketing cookies (Meta Pixel) are blocked by default and only activated when you enable

marketing tracking in our cookie consent banner.

You may manage your cookie preferences at any time. On insight.maprios.com, you can reset the

cookie consent banner by clearing your browser’s local storage, which will prompt the consent banner to reappear with separate controls for analytics and marketing cookies.

The maprios.com marketing website uses only essential technical cookies required for site functionality. Non-essential cookies (analytics and marketing) are set only on insight.maprios.com.

For more information about our use of cookies, please see our Cookie Policy.

5. How do we handle your social logins?

In Short: If you choose to register or log in to our Services using Google Sign-In, we receive limited

profile information from Google.

Our Services offer you the ability to register and log in using your Google account. Where you choose to do this, we will receive the following profile information from Google:

• Your name
• Your email address
• Your profile picture

We will use the information we receive only for the purposes described in this Privacy Notice. Please note that we do not control, and are not responsible for, other uses of your personal information by Google. We recommend that you review Google’s privacy policy to understand how they collect, use, and share your personal information.

6. Is your information transferred internationally?

In Short: Our servers are located in the United States.

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored by, and processed by us and our service providers in the United States.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, these countries may not have data protection laws as comprehensive as those in your jurisdiction. We implement the technical and organizational safeguards described in this Privacy Notice to protect your information regardless of where it is processed, including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, and comprehensive audit logging.

Google Analytics data may be processed in Google’s global infrastructure. Meta Pixel data may be processed in Meta’s global infrastructure. Both are subject to their respective privacy policies and transfer mechanisms.

7. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice, subject to the specific retention periods below.

We apply the following retention periods:

When we anonymize data, we remove all information that could directly or indirectly identify you or your organization. Anonymized data is no longer personal data under applicable data protection law and may be retained for aggregate analytics and benchmarking purposes beyond the retention periods stated above.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information. If deletion is not immediately possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@maprios.com.

9. What are your privacy rights?

In Short: You may exercise your privacy rights directly within the application at any time – no form submission or email required.

GDPR Rights (EEA, UK, Switzerland residents)

Withdrawing your consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent by:

• Using the “Withdraw Consent” option in Settings (this deletes your account)
• Clearing your browser’s local storage to reset cookie preferences
• Contacting us at privacy@maprios.com

Withdrawing your consent will not affect the lawfulness of any processing conducted prior to withdrawal.

Supervisory authority

If you are a resident in the EEA and you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority.

If you are a resident in the UK, you may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk (https://ico.org.uk).

Manage cookie preferences

Clear your browser’s local storage for insight.maprios.com to reset the cookie consent banner, then select your preference for each cookie category.

10. California Privacy Rights

In Short: If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of personal information collected

In the preceding twelve (12) months, we have collected the following categories of personal information (as defined by the CCPA):

Your California privacy rights

• Right to know. You have the right to request that we disclose what personal information we have collected about you. Exercise this right at Settings > My Data.
• Right to delete. You have the right to request deletion of your personal information. Exercise this right at Settings > Delete My Account. Deletion is immediate and permanent.
• Right to correct. You have the right to request correction of inaccurate personal information. Update your profile at Settings.
• Right to opt-out of sale or sharing. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information. You may request that we limit our use of your sensitive personal information (church affiliation) to what is necessary to provide the Services. Contact us at privacy@maprios.com.
• Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Exercising your rights

You can exercise your rights through the self-service tools at insight.maprios.com (https://insight.maprios.com) (Settings > My Data), or by contacting us at privacy@maprios.com.

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing.

If you use an authorized agent to submit a request on your behalf, we may require proof that the agent has been authorized to act on your behalf, plus verification of your identity.

11. Controls for do-not-track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not- Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

12. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

When material changes are made, existing users will be prompted to review and acknowledge the updated notice upon their next login.

13. How can you review, update, or delete the data we collect from you?

You can review, download, or delete your personal information at any time by logging into your account at insight.maprios.com (https://insight.maprios.com) and navigating to Settings > My Data.

From Settings > My Data, you can:

• View all personal information we hold about you, including account details, assessment responses, calculated metrics, and session history
• Download a machine-readable JSON file containing all your personal information
• Delete your account and all associated data immediately and permanently

If you are unable to access your account or have questions about your data, you may contact us at privacy@maprios.com. We will respond to all data subject access requests within 30 days (or 45 days for CCPA requests, with a possible 45-day extension upon written notice).

14. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where feasible, in accordance with GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay, in accordance with GDPR Article 34.

15. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact us at:

Maprios LLC

2108 N ST, STE N

Sacramento, CA 95816

United States

privacy@maprios.com