Multi-State Privacy Notice

Residents of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia may have additional rights under relevant privacy laws, including under the Colorado Privacy Act (“CPA”), Connecticut Data Privacy Act (“CTDPA”), Delaware Personal Data Privacy Act (“DPDPA”), Iowa Consumer Data Protection Act (“ICDPA”), Minnesota Consumer Data Privacy Act (effective July 31, 2025) (“MNCDPA”), Montana Consumer Data Privacy Act (“MTCDPA”), Nebraska Data Privacy Act (“NDPA”), New Hampshire Consumer Data Privacy Act (“NHCDPA”), New Jersey Data Protection Act (“NJDPA”), Oregon Consumer Privacy Act (“OCPA”), Tennessee Information Protection Act (effective July 1, 2025) (“TIPA”), Texas Data Privacy and Security Act (“TDPSA”), Utah Consumer Privacy Act (“UCPA”), and Virginia Consumer Data Protection Act (“VCDPA”), as applicable. The following additional information is required to be provided by covered businesses under applicable state laws. This Multi-State Privacy Notice (the “Multi-State Notice”) supplements the information contained in the Convexity Scientific Inc. Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the States of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia ("consumers" or "you"). We adopt this notice to comply with relevant privacy law. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement.

1. SHARING / DISCLOSING PERSONAL DATA

The CPA, CTPDA, DPDPA, ICDPA, MNCDPA, MTCDPA, NDPA, NHCDPA, NJDPA, OCPA, TIPA, TDPSA, UCPA and VCDPA requires covered businesses to provide residents of their respective states with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with /disclosed to third parties and the categories of third parties with whom such personal data has been shared / disclosed. Residents of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia can find this information below:

2. “SALES” OR PROCESSING FOR TARGETED ADVERTISING

Residents of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see the “How to Update, Correct and/or Delete Your Personal Information” section above). For purposes of this paragraph the definition of “targeted advertising”, “sale”, “sell” or “sold” has the meaning set forth in applicable privacy law. However, please note, in accordance with applicable privacy law certain specific exceptions to “sale” and/or “targeted advertising” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by emailing support@wellinks.com. We have not “sold” or processed for targeted advertising personal data in the preceding twelve months.

3. STATE-SPECIFIC RIGHTS TO OPT-OUT

A. Colorado, Connecticut, Delaware, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas and Virginia. Residents of Colorado (or an authorized agent thereof), Connecticut (or an authorized agent thereof), Delaware, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Montana, Oregon, Tennessee, Texas and Virginia may request to opt-out of the processing of your personal data for the purpose(s) of: (i) targeted advertising; (ii) sale of personal data; or (iii) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal).

B. Iowa and Utah. Iowa and Utah residents may request to opt-out of the processing of your personal data for the purpose(s) of: (i) targeted advertising; or (ii) sale of personal data. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law.

4. CONNECTICUT RIGHT TO APPEAL A DENIED APPEAL

If you are a resident of the State of Connecticut and your request for reconsideration of Wellinks’ refusal to take action in accordance with the exercise of your rights in the “How to Update, Correct and/or Delete Your Personal Information” section of the Privacy Policy is denied, you have the right to file a complaint with the Connecticut Office of the Attorney General by visiting the “File a Compliant” page here or contacting the Consumer Assistance Unit at 860-808-5420.

5. ADDITIONAL MINNESOTA RIGHTS

If you are a resident of the State of Minnesota, you have the right to: (a) request the specific third parties to whom Wellinks has disclosed Personal Information; and/or (b) question the results of Wellinks’ profiling to the extent it produced legal effects.