Privacy Policy

Last Updates: July 8, 2025

Supernormal OpCo (BVI) Ltd. ("Supernormal," "we," "us"), a subsidiary of Supernormal Foundation, provides this privacy policy (“Privacy Policy”) to describe how Supernormal may collect, use and disclose information, and your choices regarding this information. Please read this document carefully to get a clear understanding of how we collect, use, protect or otherwise handle your personal information in accordance with the applicable law. This Privacy Policy applies exclusively to the website supernormal.foundation ("Site"), and any websites, apps, or services that link to this Privacy Policy .

1. Purpose of this Policy

This Privacy Policy describes how Supernormal collects and processes personal data relating to users in relation to the services we provide through the Site (collectively, the “Services”). The data we process differs depending on your interactions with us, as detailed more fully below. It also describes certain legal rights you may have, subject to applicable law, and how you can exercise them. 

This Privacy Policy does not apply to your use of the Mezo Network and/or software, which is open source and maintained by a distributed network. However, if you access Mezo Network-content from a hyperlink on our Site, we may collect the information described in the “Information We Collect Automatically” section below in connection with your use of the Site.

If you do not agree with the terms of this Privacy Policy, do not access or use the Site, Services or utilize any other aspect of our business. By using the Site and Services, you agree to this Privacy Policy.

2. What is personal information?

Personal information is any information relating to an identified or identifiable individual. Under certain laws that may apply to you, personal information may also include information that identifies a specific household or device.

3. Information that we collect

We may collect personal information from you based on the Services that you choose to access and use. The personal information that we may collect from you in connection with your use of the Services is as follows:

• Identity Information: when you use the Services, we may collect information such as your name, e-mail address, mailing address, and phone number. Where necessary, we may be required by applicable law to collect information to verify your identity, such as government-issued identification documentation.

• Contact Information: If you contact us or if you subscribe to receive updates from us about new features available on our Site or through the Services, we collect records and copies of your correspondence, including e-mail addresses and other contact information.

• Marketing Information: Your preferences, including preferences for receiving marketing communications from us and how you interact with our marketing communications.

• User Communications: Personal opinions and information you share with us when you contact us with questions, ask for support, provide feedback, respond to surveys, or any other information you provide to us directly or indirectly through your interactions with us.

• Social Media Information: Your unique handle or identifier and other profile information when you interact with us through social media channels.

• Biographical Information: If you apply for a job with us, we collect all information provided through our jobs forum, including name, email, phone, work and immigration status, and any other resume, cover letter, or free form text you include.

3.1 Information We Collect Automatically.

Cookies. We automatically collect information about your use of our Services through cookies, web beacons, and other technologies to record your preferences, track the use of our Sites and mobile apps, and collect information about the use of the Services, as well as about our interactions with you. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data, and information about your interactions with the communications we send to you. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, please note that some parts of our Services may not function properly.

Aggregate Data. Analytics about aggregate numbers of users and usage types (i.e., number of page views, event counts, and aggregate acquisition metrics), and information such as how many users in the aggregate are using the Services; and aggregate location data across users including countries and regions from which users access the Services or the Site. We may use such aggregated and de-identified data for any purpose, including but not limited to for research and marketing purposes, and may also share such data with any third parties, including advertisers, promotional partners, sponsors, event promoters, and others.

4. Use of your personal information

We use the personal information that we collect to provide you with the functionality, features, and communications that are available through the Services and to enable us to manage, maintain, and develop our operations. Specifically, we may use your personal information for the following purposes:

• maintaining, providing, and improving our products and Services.

• managing our relationship with you, including by assisting you to create an account, communicate with us, and provide you with the Services that you request;

• allowing you to participate in, subscribe to, and receive information, news, updates, and promotional marketing materials from us and third parties;

• complying with your requests and preferences regarding your use of the Services and the manner in which we communicate with you;

• understanding your preferences and values so that we can tailor the Services and communications to you;

• protecting us against error, fraud, theft, and damage to our Services, business, and property;

• conducting research, analysis, evaluation, and development activities to understand the way the Services are used and to improve the Services and Site, and our general operations, including with respect to the development of new products, services, and opportunities; 

• establishing, exercising or defending legal claims; 

• We may verify your identity to determine your eligibility to access the Services by comparing the personal information you provide against third-party databases and public records. We may use the information we collect to investigate or address claims or disputes relating to use of our Services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries; or

• allowing us to comply with applicable laws and regulatory purposes.

Information for California residents. Other than with your consent, Supernormal does not sell or share your personal information. The terms “sell”, “share”, and “personal information” are defined by the California Consumer Privacy Act (the “CCPA”) and the California Privacy Rights Act (“CPRA”).

7. Disclosure and transfers of personal information

We may share your information in the following circumstances:

• With Your Consent: For example, you may let us share personal information with others for their own marketing uses. Those uses will be subject to their own privacy policies.

• To Comply with Our Legal Obligations: We may share your information: (A) to cooperate with government investigations; (B) when we are compelled to do so by subpoena, court order, or similar legal procedure; (C) when we believe in good faith that the disclosure of personal information is necessary to prevent harm to another person; (D) to report suspected illegal activity; or (E) to investigate violations of our Terms of Use or any other applicable policies.

• With Services Providers: We may share your information with service providers who help facilitate business and compliance operations such as marketing and technology services. Our contracts require these service providers to only use your information in connection with the services they perform for us.

• During a Change to Our Business: If we engage in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of our assets or stock, financing, public offering of securities, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of your information may be shared or transferred, subject to standard confidentiality arrangements.

• Aggregated or De-identified Data: We may share aggregated and/or anonymized data with others for marketing, advertising, research, or other purposes.

• Analytics Providers/Advertisers: We may share information with analytics providers and advertisers to assist us in implementing and evaluating relevant advertising. Typically, this information is collected from you through cookies and other tracking technologies on our Site.

• Companies in our Corporate Group.

9. Retention of personal information

We do not keep your personal information forever. We will retain your personal information for as long as is reasonably necessary for us to complete our dealings with you, or as may be required by law, whichever is longer. We also retain personal information for as long as is necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes, and to enforce our agreements and to protect our and others’ interests.

The precise periods for which we retain your personal information vary depending on the nature of the information and the purposes for which we use it. Factors we consider include any minimum retention period required by applicable or recommended best practices and the period during which a claim can be made with respect to an agreement or other matter.

10. Security and protection of personal information

Supernormal uses generally accepted administrative, physical, and technical safeguards we believe are appropriate to protect the confidentiality, integrity and availability of your personal data. Although we make reasonable efforts to protect personal data from loss, misuse, or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the internet and storing information electronically. Supernormal cannot and does not guarantee absolute security.

11. Your rights related to your personal information

You are entitled to certain legal rights in relation to your Personal information, these include:

• Right to Access: you have the right to request access to any of your personal information that we hold, and to obtain information about the processing of that data.

• Right to Correct: we will take steps in accordance with applicable legislation to keep your personal information accurate, complete and up-to-date. You are entitled to have any inadequate, incomplete or incorrect personal information corrected (that is, rectified).

• Right to Erasure: you are entitled to have your personal information erased under specific circumstances, such as where you have withdrawn your consent, where you object to processing based on legitimate interests and we have no overriding legitimate grounds (see below) or where personal information is unlawfully processed.

• Data Portability: where we are relying (as the legal basis for processing) upon your consent, or the fact that the processing is necessary to perform a contract to which you are party or to take steps at your request prior to entering a contract, and the personal information is processed by automated means, you have the right to receive all such personal information which you have provided us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.

• Right to Restriction of Processing: you have the right to restrict our processing of your personal information (that is, allow only its storage) where:

• you contest the accuracy of the personal information, until we have taken sufficient steps to correct or verify its accuracy;

• where the processing is unlawful but you do not want us to erase the personal information;

• where we no longer need your personal information for the purposes of the processing, but you require such personal information for the establishment, exercise or defense of legal claims; or

• where you have objected to processing justified on legitimate interest grounds (see below), pending verification as to whether we have compelling legitimate grounds to continue processing.

• Where your personal information is subject to restriction, we will only process it with your consent or for the establishment, exercise or defense of legal claims.

• Right to Object to Processing (including profiling): you can object to our processing of your personal information based on our legitimate interests. We will no longer process your personal information unless we can demonstrate an overriding legitimate purpose.

• Right To Object To Direct Marketing (including profiling): you have the right to object to our use of your personal information (including profiling) for direct marketing purposes, such as when we use your personal information to invite you to our promotional events.

• Right to Withdraw Consent: in the event your personal information is processed on the basis of your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal information infringes applicable law.

If you want to exercise your rights, please contact us to do so. We may request specific information from you to enable us to confirm your identity, if necessary, as well as to search for and provide you with the personal information that we hold about you. If you require assistance in preparing your request, please contact us.

12. Links to third party resources

The Services may contain links to other websites that may be subject to less stringent privacy standards. These links are provided for your convenience only and you assume all risk in clicking these links to other websites. We do not assume any responsibility for the privacy practices, policies or actions of the third parties that operate these websites. We are not responsible for how such third parties collect, use or disclose your personal information. You should review the privacy policies of these websites before providing them with personal information.

13. Cookies and Automatic Data Collection

Our websites may use automatic data collection technologies to distinguish you from other website users. This helps us deliver a better and more personalized service when you browse our website. It also allows us to improve our websites by enabling us to:

• Estimate our audience size and usage patterns.

• Store your preferences so we may customize our websites according to your individual interests.

• Recognize you when you return to our website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer.

• Web Beacons, Pixel Tags, Clear Gifs. Our website pages and emails may contain small transparent embedded images or objects known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile other similar statistics such as recording website content popularity or verifying system and server integrity.

Opt-out preference signals or Global Privacy Controls (GPC) provide consumers with a simple and easy-to-use method by which consumers interacting with us online can automatically exercise their opt-out of sale/sharing rights. We will process any opt-out preference signals that meet the following requirements:

• A signal that is in a format commonly used and recognized by businesses; and

• The technology or mechanism that sends the opt-out preference signal makes clear to the consumer that the use of the signal is meant to have the effect of opting the consumer out of sale and sharing of their personal information. For example, such technology or mechanism may be an HTTP header field, JavaScript Object, or most commonly, a browser tool or extension that allows users to send the opt-out signal.

14. Changes to this Privacy Policy

We may make changes to this Privacy Policy from time to time. These changes may be made as a result of changes to our legal obligations or the ways in which we collect, use, disclose, or otherwise process your personal information.

We will post an updated version of our Privacy Policy on our website when we make changes and may also notify you of the changes we have made in other ways if we are required to do so by applicable law. We encourage you to check this Privacy Policy for updates on a regular basis.

15. Contact information

If you have any questions or concerns regarding this Privacy Policy, you should contact us at legal@supernormal.foundation.

**If you choose to communicate with us via email, please be aware that email is not a 100% secure medium for sending any personal or confidential information to us. **

Additional information for users in the EEA, UK or Switzerland

This section is applicable to you only if you are in the EEA, Switzerland or the UK. To the extent there is any inconsistency in this Privacy Policy between what we say in this section and in the rest of the Privacy Policy, this section will govern if you are based in the EEA, UK or Switzerland.

For the purposes of the (1) GDPR, as it applies both in the EEA and the UK; and (2) Swiss data protection law, Supernormal is a data controller and can be contacted using the details in Section 16 of this Privacy Policy above.

Supernormal is a data controller subject to the GDPR only insofar as we are offering goods or services to individuals in the EEA / UK or where the Supernormal Services may be used to monitor individuals’ behavior as far as their behavior takes place in the EEA or UK.

Our legal bases for using personal information

Data controllers need a lawful basis to collect and use your personal information.

We describe below the purposes of our processing (why we process your information) and our processing operations (how we process your information to achieve each purpose). We also list the categories of your information that we process for each purpose and the legal basis we rely upon to do so.