Additional Privacy Disclosures for United States Residents

Our Privacy Policy explains how we, Outschool, Inc., collect and use personal information when you use our websites, applications, or activities offered through either (collectively “Services”). This Supplemental Notice addresses the required disclosures and rights associated with United States residents. It does not reflect our use or disclosure of United States residents' personal information where an exception under an applicable jurisdiction applies. Our Personal Data Handling Practices over the Preceding Twelve (12) Months In the last twelve (12) months, we collected categories of personal information described in our Privacy Policy.

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, driver’s license number, passport number, or other similar identifiers.

• Information that identifies or is capable of being associated with you, including payment information.

• Characteristics of protected classifications under state or federal law, including age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military status.

• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a state resident’s interaction with an Internet website, application, or advertisement.

• Geolocation information.

• Audio, electronic, visual, or similar information.

• Professional or employment-related information.

• Education information.

• Inferences drawn from any of the information identified above reflecting your preferences and characteristics.

In the last twelve (12) months, we used the personal information we collected for the purposes described in the Information Collection section of our Privacy Policy. In the last twelve (12) months, we disclosed the personal information we collected to the categories of recipients described in the Disclosure of Information of our Privacy Policy. In the last twelve (12) months, we "shared" data about United States residents’ IP addresses and device identifiers and their usage of our Services to third-party analytics and advertising vendors who may use this data to provide them with tailored advertising and for their own purposes. We do not sell personal information for money. We do not have actual knowledge that we sell the personal information of United States residents under 16 years of age. Rights & Choices United States residents have certain legal rights related to their personal information. Except as otherwise provided or excepted by applicable law, you may exercise the following rights:

• Right to Know and Access: You have the right to request disclosure of the personal information we collect, use, purpose, and disclose about them, and to access their personal information.

• Right to Correction: You have the right to correct inaccuracies in your Personal Information.

• Right to Deletion: You may request the deletion of their personal information, subject to certain exceptions. Once the deletion request is verified, we will delete (and direct our service providers to delete, as applicable) your personal information from our records. Please know that if your Outschool account is deleted, you will no longer be able to access the account. You would have to create a new account.

• Right to Opt-Out: You may opt-out of and restrict the processing of your Personal Information for purposes of targeted advertising or profiling, where applicable. We do not “sell” and/or "share" the personal information of United States residents we know are less than 18 years of age, unless we receive affirmative authorization (the “right to opt in”) from either the United States resident who is between 13 and 18 years of age, or the parent or legal guardian of a United States resident that is less than 13 years of age. To opt-out of the "sale" and/or "sharing" of personal information, please visit our Do Not Sell or Share My Personal Information page.

• Right to Data Portability: You may request to receive your Personal Information, in a portable and, to the extent technically feasible, readily usable format.

• Right to Non-Discrimination: We will not discriminate against you because you exercise any of the above rights, or any other rights under the applicable United States state laws. Specifically, if you exercise your rights, we will not deny you access to our Services, charge you different prices or rates for Services or provide you a different level or quality of the services.

Data Minimization: We will limit the personal information we store by reviewing no less than annually whether storage of your information serves a legitimate business purpose and removing that information if no legitimate business purpose is identified. Re-Obtaining Consent: We may re-seek consent from you if you have previously opted out from processing activities. If you have not interacted with us for at least one (1) year, we are required by applicable law to re-obtain your affirmative consent to process any of your information. State Specific Disclosures

• California. Residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted.

• Texas. Rights to be informed about the types of personal information collected and the purposes for which the information is used.

• Right to Appeal: Virginia, Colorado, and Connecticut residents have the right to appeal Outschool's decision regarding a request within a reasonable period of time by contacting us at privacy@outschool.com and specifying your wish to appeal. Within sixty (60) days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions [If the appeal is denied, you may submit a complaint to your state’s Attorney General.

  • Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform

  • Colorado Attorney General at https://complaints.coag.gov/s/contact-us or by phone at (720) 508-6000

  • Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/ or by phone at (860) 808-5420

Exercising Your Rights

• How to Submit a Request: You may submit a request to exercise the rights listed above via our online Data Subject Request Portal.

• Verification Process: As required by law, we will verify your identity before responding to your request. We may ask you to provide sufficient information to reasonably confirm you are the individual whose personal information we collected or an authorized agent. We may limit our response to your rights as permitted by applicable law. Any additional data collected for verification will be retained for legal purposes (e.g., proof of the identity of the requester) in accordance with our Privacy Policy.

• Authorized Agent: You may designate an authorized agent to make a request on your behalf. You may also make a request on behalf of your minor child. As permitted by law, we may require additional verification in response to a request.

• Responding to Requests: We will use commercially reasonable efforts to honor your request within forty-five (45) days from receipt. If additional time is needed, we will notify you of the same, along with an explanation and anticipated timeline for the extension, which shall not exceed ninety (90) days from the date of receipt.