This Privacy Policy is effective as of April 1st, 2020. ________________ This Heroic Labs Privacy Policy ("Policy") outlines the personal information that GameUp Online, Inc. d/b/a Heroic Labs ("Heroic", "We", "Us" or "Our"), gathers how We use that personal information, and the options You have to access, correct, or delete such personal information. You are referred to herein as "You." ________________ HEROIC'S PROMISE We are committed to communicating transparently, providing security, and protecting the privacy of data on Our systems. We keep Your personal information personal and private. We will not sell or rent Your personal information to anyone. We will not share or otherwise disclose Your personal information except as necessary to provide the Services or Our Heroic Cloud product to You, or as otherwise described in this Policy, without first providing You with notice and the opportunity to consent. 1. POLICY APPLICATION This Policy is incorporated into and is subject to the Heroic Cloud Terms (https://cloud.heroiclabs.com/terms.txt) and our Terms of Service (https://heroiclabs.com/tos.txt) (collectively, the "Terms"). Capitalized terms used but not defined in this Policy have the meaning given to them in the Terms. This Policy applies to Heroic's collection, use, and disclosure of the personal information of the following categories of data subjects: * Website Visitors: Those who visit our Websites (each a "Website Visitor"), including those who may opt to provide an email address or other contact information to receive communications or customer support from Heroic, fill out a survey, or provide feedback. For the purposes of this Policy, "Websites" refer collectively to www.heroiclabs.com as well as any other websites that Heroic operates on its own behalf and that link to this Policy. For clarity, "Websites" does not include any sites owned or operated by Our Customers (as defined below). * Customers: Individuals or entities who enter into an agreement (including but not limited to the Heroic Cloud Terms (https://cloud.heroiclabs.com/terms.txt)) with Heroic (or its authorized partner) and to whom Heroic provides Heroic Cloud or other products and services to pursuant to such agreement (each a "Customer"). * Authorized Users: Those with login credentials for a Heroic Cloud account and/or those who are authorized by a Customer to use Heroic Cloud while performing duties within the scope of their employment or assignment with such Customer. In some cases, an Authorized User and Customer may be the same individual. In other cases, an Authorized User may be an agent acting on behalf of a Customer. * End Users: Those who access or use a Customer Game. This Policy does not apply to Our Customers' domains, websites, games, applications, and networks (collectively, the "Customer Systems"), which may have their own terms and privacy policies. Our Customers are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, including those relating to the collection of personal information, in connection with the use of Heroic Cloud by Authorized Users and/or End Users with whom our Customers interact. If You have any questions about the specific practices of the Customer Systems that You use, please contact the Customer. The Websites and Heroic Cloud are not intended for, nor designed to attract, individuals under the age of 18. Heroic does not knowingly collect personal information from any person under the age of 18. 2. INFORMATION WE COLLECT (Categories of Data Subjects) Website Visitors * Name, email address, and other contact information: We ask for and-at Your option-collect personal information from You when You submit web forms on our Websites, including opportunities to sign up for and agree to receive email communications from Us. We also may ask You to submit such personal information if You choose to use interactive features of the Websites, including participation in forums, surveys, promotions, studies, requesting customer support, submitting Feedback, or otherwise communicating with Us. We will send such communications in accordance with applicable law. * Log files: Just as when You visit and interact with most websites and services delivered via the Internet, when You visit our Websites, including the Nakama Community Forum, We gather certain information and store it in log files. This information may include but is not limited to Internet Protocol ("IP") addresses, system configuration information, search terms, URLs of referring pages, and locale and language preferences. * Cookies and other tracking technologies: We may use cookies and other information-gathering technologies for a variety of purposes, such as providing Us with information about how You interact with our Websites and assisting Us in our marketing efforts. You can control how websites use cookies by configuring Your browser's privacy settings (please refer to Your browser's help function to learn more about cookie controls). Note that if You disable cookies entirely, our Websites may not function properly. * Material contributed in Interactive Areas: The Websites may offer publicly accessible blogs, community forums, comments sections, discussion forums, or other interactive features ("Interactive Areas"). If You choose to participate in any of these Interactive Areas, please be aware that any information that You post in an Interactive Area might be read, collected, and used by others who access it. If You wish to remove Your personal information from any of our Interactive Areas, please see Section 9 below. Customers and Authorized Users * Account Information: When You register for an account, We collect contact information. Depending on Your reason for registering for an account and Your subscription level, this contact information may include Your name, the name of the Customer You are associated with, Your email address and the email addresses of Your Authorized Users, telephone number, and addresses necessary to process payment and delivery of Heroic Cloud and associated services (if applicable). In addition, when You use Heroic Cloud, We collect information about how You configure Your account and Heroic Cloud and We maintain logs of Authorized Users' activity. We refer to all of this information collectively as "Customer Account Information" for the purposes of this Policy. Customer Account Information is required to enable Your access to Your Heroic account and Heroic Cloud. By providing Us with any personal information, You represent that (i) such personal information is complete and accurate and (ii) You are the owner of such personal information or otherwise have the requisite consent to provide it to Us. * Payment information: We do not require Customers or Authorized Users to have payment information on file with Us unless they have a paid subscription to Heroic Cloud. When You sign up for one of our paid subscriptions to Heroic Cloud, You must provide payment and billing information. The information You will need to submit depends on which payment method You choose. For example, if You pay with a credit card, We use Stripe to collect Your card information and billing address and process the payments, and We do not store full credit card numbers or personal financial account numbers but may store the last four digits of Your payment account numbers. End Users * Personal Information and Log Data: Heroic processes End Users' information on behalf of our Customers. This information is processed when End Users access or use Customer Game(s) that use Heroic Cloud. The information processed may include but is not limited to name, email address, phone number, IP addresses, system configuration information, and other information about traffic to and from a Customer Game and any other data that an End Users submits to a Customer Game (collectively, "End User Data"). Our Customers are the data controllers of all End User Data and We process End User Data on behalf of and pursuant to our Customers' instructions. If You have any requests related, to or questions about, the specific practices of the Customer, please contact the Customer. 3. HOW WE USE INFORMATION WE COLLECT Heroic only processes personal information in a way that is compatible with and relevant to the purpose for which it was collected or authorized. For all categories of data described in Section 2 above, We may use the information (including personal information, to the extent applicable) to: * Provide, operate, maintain, improve, and promote the Services and Heroic Cloud (and associated services) for all users of the Services and Heroic Cloud (and associated services); * Enable You to access and use the Services and Heroic Cloud; * Process and complete transactions, and send You related information, including purchase confirmations and invoices; * Send transactional messages, including responses to Your comments, questions, and requests; provide customer service and support; and send You technical notices, updates, security alerts, and support and administrative messages; * Send commercial communications, in accordance with Your communication preferences, such as providing You with information about products and services, features, surveys, newsletters, offers, promotions, and events about Us and Our partners; and send other news or information about Us and Our partners. See Section 10 below for information on managing Your communication preferences. * Monitor and analyze trends, usage, and activities in connection with the Services and Heroic Cloud and for marketing or advertising purposes; * Protect systems from potential security attacks and abuse; * Comply with legal obligations, enforce this Policy and investigate and prevent fraudulent transactions, unauthorized access to Heroic Cloud, and other illegal activities; * Personalize the Services and Heroic Cloud, including by providing features or content that match Your interests and preferences; and * Process for other purposes for which We obtain Your consent. End User Data. We use and process the End User Data from End Users to fulfill our obligations under our Customer agreements and as may be required by law. We act as a data processor and service provider pursuant to data processing instructions by our Customers. Information from Third Party Services. We may combine information We collect as described in Section 2 above with personal information We obtain from third parties. For example, We may combine information entered on a Heroic sales submission form with information We receive from a third-party sales intelligence platform vendor to enhance our ability to market our products and services to Customers or potential Customers. 4. DATA AGGREGATION Heroic may aggregate data that We acquire about our Customers, Authorized Users, and End Users. We use this aggregated data for analytics, to improve our products and services, and for other purposes. Non-personally identifiable, aggregated data may be shared with third parties. 5. COOKIES AND SIMILAR TECHNOLOGIES Cookies are small text files sent by Us to Your computer or mobile device, which enables certain features and functionality. They are unique to Your account or Your browser. Session-based cookies last only while Your browser is open and are automatically deleted when You close Your browser. Persistent cookies last until You or Your browser delete them or until they expire. We use cookies and similar technologies like single-pixel gifs and web beacons. We use both session-based and persistent cookies. We set and access our own cookies on the Websites. In addition, We use third party cookies, like Google Analytics. Some cookies are associated with Your account and personal information in order to remember that You are logged in and which workspaces You are logged into. Other cookies are not tied to Your account but are unique and allow Us to carry out analytics and customization, among other similar things. Responding to "Do Not Track Signals." If our Websites and/or Heroic Cloud can detect a "Do Not Track" signal or preference from a browser, then our Websites and Heroic Cloud will disable all non-essential analytics and integrations. Essential tools and integrations that are required to perform critical functionalities and functions of the Websites and Heroic Cloud will remain enabled. 6. NOTICE TO UK AND EU RESIDENTS Please note that the "personal information" and "personal data" referenced in this Policy means "personal data" as that term is defined under the European Union ("EU") General Data Protection Regulations ("GDPR") and its United Kingdom ("UK") GDPR counterpart. Heroic is a data controller for the personal data collected from all Website Visitors listed above except for the personal data of Customers, Authorized Users and End Users. Heroic processes the personal data of Customers, Authorized Users, and End Users on behalf of its Customers. If You are an individual from the European Economic Area (the "EEA"), the UK or Switzerland, please note that Our legal basis for collecting and using Your personal data will depend on the personal data collected and the specific context in which We collect it. We normally will collect personal data from You only where: (a) We have Your consent to do so, (b) where We need Your personal data to perform a contract with You (e.g. to deliver the Services or Heroic Cloud or information You have requested), or (c) where the processing is in Our legitimate interests. Please note that in most cases, if You do not provide the requested information, Heroic will not be able to provide the requested product or service to You. In some cases, We may also have a legal obligation to collect personal data from You, or may otherwise need the personal data to protect Your vital interests or those of another person. Where We rely on Your consent to process Your personal data, You have the right to withdraw or decline consent at any time. Where We rely on our legitimate interests to process Your personal data, You have the right to object. If You have any questions about or need further information concerning the legal basis on which We collect and use Your personal information, please contact Us at legal@heroiclabs.com. 7. INFORMATION SHARING We work with other companies who help Us run our business ("Service Providers"). These companies provide services to help Us deliver customer support (such as Slack), process credit card payments (such as Stripe), manage and contact our existing Customers and Authorized Users as well as sales leads (such as Intercom), provide marketing support, and otherwise operate and improve our products and services (such as AWS, GCP, Google Analytics, and Heap Analytics). These Service Providers may only process personal information pursuant to our instructions and in compliance both with this Policy and other applicable confidentiality and security measures and with applicable laws and regulations. Specifically, We do not permit our Service Providers to sell any personal information We share with them or to use any personal information We share with them for their own marketing purposes or for any purpose other than in connection with the services they provide to Us. In addition to sharing with Service Providers as described above, We also may share Your information with others in the following circumstances: * Within the Heroic Group (defined for the purposes of this Policy as GameUp Online d/b/a Heroic Labs, Inc. (United States) and its subsidiaries and affiliates); * In the event of a merger, sale, change in control, or reorganization of all or part of our business; * When We are required to disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise Our legal rights or defend against legal claims; * Where We have a good-faith belief sharing is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms and/or agreements between You and Heroic; or as otherwise required to comply with Our legal obligations; or * As You may otherwise consent from time to time. Links to Third Party Sites and Services. The Services, Heroic Cloud and our other products and services may contain links to other websites and services. We are not responsible for the practices employed by such other websites or services, nor the information or content provided to or contained therein. Please remember that when You use a link to go from the Services, Heroic Cloud or another of Our products and services to another website, this Policy does not apply to those third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link in the Services, Heroic Cloud or Our other products or services, are subject to that third party's own rules and policies. Please read those rules and policies before proceeding. Notice to California Residents. We do not sell, rent, or share personal information with third parties as defined under the California Consumer Privacy Act of 2018 (California Civil Code Sec. 1798.100 et seq.)(collectively, "CCPA"), nor do We sell, rent, or share personal information with third parties for their direct marketing purposes as defined under CCPA. 8. INTERNATIONAL INFORMATION TRANSFERS Heroic is a U.S.-based, global company. We primarily store Your information in the United States and the EEA. To facilitate Our global operations, We may transfer and access such information from around the world, including from other countries in which the Heroic Group has operations for the purposes described in this Policy. Whenever Heroic shares personal information originating in the EEA, the UK, or Switzerland with another entity in the Heroic Group that is outside the EEA, the UK, or Switzerland, We will do so on the basis of the EU standard contractual clauses (adjusted to address transfers from the UK). If You are accessing or using our Services, Heroic Cloud or Our other products or services, or otherwise providing information to Us, You are agreeing to the transfer of Your personal information to the United States and other jurisdictions in which We operate. 9. DATA SUBJECT RIGHTS AND CHOICES For any subject access request ("SAR") from a Website Visitor, We will need to verify a requestor is inquiring about their own information before We can assist. Where a SAR may implicate the personal data of another individual, We must balance the request against the risk of violating another person's privacy rights. We will comply with SARs to the extent required by applicable law. In the EEA, the UK, and Switzerland, You also have the right to lodge a complaint with a supervisory authority. Website Visitors, Customers, and Authorized Users. You have the right to access, correct, update, export, or delete Your personal data. You may email Us at legal@heroiclabs.com with any such SARs and We will respond within 30 days. If You have an account with Heroic, You also can access, correct, export, or update Your account information by editing Your profile or organization record within Your account. End Users. Heroic has no direct relationship with End Users. Accordingly, We rely upon our Customers to comply with the underlying legal requirements for subject access requests. If an End User requests that We access, correct, update, or delete their information, or no longer wishes to be contacted by one of our Customers that use Heroic Cloud, We will direct that End User to contact the Customer with which they interacted directly. Our Customers are solely responsible for ensuring compliance with all applicable laws and regulations with respect to their users and customers. 10. COMMUNICATION PREFERENCES Heroic will send You commercial communications based on the communication preferences in Your account settings. Heroic also will send You service-related communications. You may manage Your receipt of commercial communications by clicking on the "unsubscribe" link located on the bottom of such emails, through Your account settings if You have a Heroic account, or You may send a request to legal@heroiclabs.com. 11. DATA SECURITY, DATA INTEGRITY, AND ACCESS We take all reasonable steps to protect information We receive from You from loss, misuse or unauthorized access, disclosure, alteration and/or destruction. We have put in place appropriate physical, technical and administrative measures to safeguard and secure Your information, and We make use of privacy-enhancing technologies such as encryption. If You have any questions about the security of Your personal information, You can contact Us at legal@heroiclabs.com. 12. NOTIFICATION OF CHANGES If We make changes to this Policy that We believe materially impact the privacy of Your personal information, We will promptly provide notice of any such changes (and, where necessary, obtain consent), as well as post the updated Policy on this website noting the effective date of any changes. 13. BUSINESS TRANSACTIONS We may assign or transfer this Policy, as well as information covered by this Policy, in the event of a merger, sale, change in control, or reorganization of all or part of Our business. 14. CONTACT Please contact Us with any questions regarding this Policy at legal@heroiclabs.com.