Privacy

Mythos Privacy Policy

Last updated September 25, 2026‍

Thank you for choosing to be part of our community at MoreVang including Mythos and Banjo. We are committed to protecting your personalinformation and your right to privacy. If you have any questions or concernsabout this privacy notice, or our practices with regards to your personalinformation, please contact us at contact@morevang.com.

When you visit our websites at https://www.morevang.com/, https://www.mythoshq.com/, or https://www.mythosplatform.com/ (the“Websites”), use the Mythos platform application (the 'Platform'), and moregenerally, use any of our services (the “Services”, which include theWebsites), we appreciate that you are trusting us with your personalinformation. We take your privacy very seriously. In this privacy notice, weseek to explain to you in the clearest way possible what information wecollect, how we use it and what rights you have in relation to it. We hope youtake some time to read through it carefully, as it is important. If there areany terms in this privacy notice that you do not agree with, please discontinueuse of our Services immediately.

This privacy notice applies to all information collectedthrough our Services (which, as described above, includes our Websites), aswell as, any related services, sales, marketing or events.

Please read this privacy notice carefully as it will helpyou understand what we do with the information that we collect.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WECOLLECT?

2. HOW DO WE USE YOURINFORMATION?

3. WILL YOUR INFORMATION BESHARED WITH ANYONE?

4. DO WE USE COOKIES ANDOTHER TRACKING TECHNOLOGIES?

5. HOW LONG DO WE KEEP YOURINFORMATION?

6. HOW DO WE KEEP YOURINFORMATION SAFE?

7. DO WE COLLECT INFORMATIONFROM MINORS?

8. WHAT ARE YOUR PRIVACYRIGHTS?

9. CONTROLS FOR DO-NOT-TRACKFEATURES

10. DO CALIFORNIA RESIDENTSHAVE SPECIFIC PRIVACY RIGHTS?

11. DO WE MAKE UPDATES TO THISNOTICE?

12. HOW CAN YOU CONTACT USABOUT THIS NOTICE?

13. HOW CAN YOU REVIEW, UPDATEOR DELETE THE DATA WE COLLECT FROM YOU?

‍

1. WHAT INFORMATION DO WECOLLECT?

PERSONALINFORMATION YOU DISCLOSE TO US

In Short: We collect personal information that you provideto us.

We collect personal information that you voluntarilyprovide to us when you express an interest in obtaining information about us orour products and Services, when you participate in activities on the Websitesor otherwise when you contact us.

The personal information that we collect depends on thecontext of your interactions with us and the Websites, the choices you make andthe products and features you use. The personal information we collect mayinclude the following:

Personal Information Provided by You. Wecollect names; email addresses; phone numbers; and company information.

All personal information that you provide to us must betrue, complete and accurate, and you must notify us of any changes to suchpersonal information.

INFORMATIONAUTOMATICALLY COLLECTED

In Short: Some information — such as your Internet Protocol(IP) address and/or browser and device characteristics — is collectedautomatically when you visit our Websites.

We automatically collect certain information when youvisit, use or navigate the Websites through cookies and similar technologies.This information does not reveal your specific identity (like your name orcontact information) but may include device and usage information, such as yourIP address, browser and device characteristics, operating system, languagepreferences, referring URLs, device name, country, location, information abouthow and when you use our Websites and other technical information. Thisinformation is primarily needed to maintain the security and operation of ourWebsites, and for our internal analytics and reporting purposes.

The information we collect includes:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Websites and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings and information about your activity in the Websites (such as the date/time stamps associated with your usage, pages and files viewed, searches and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called ‘crash dumps’) and hardware settings).
Device Data. We collect device data such as information about your computer, phone, tablet or other device you use to access the Websites. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model Internet service provider and/or mobile carrier, operating system and system configuration information.
Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Websites. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. Note however, if you choose to opt out, you may not be able to use certain aspects of the Services.
Authentication and Security Event Data. When you log in to or attempt to log in to the Platform, we automatically collect information related to the authentication event, including your email address or single sign-on (SSO) identifier, whether the attempt was successful or failed, multi-factor authentication challenge and response status, IP address, geographic location (derived from IP address), device type, operating system, and browser or client application. This information is collected and retained to protect the security of your account and the Platform, to detect and investigate unauthorized access attempts, and to meet our compliance and audit obligations.

Informationcollected from other sources

In Short: We may collect limited data from publicdatabases, marketing partners, and other outside sources.

In order to enhance our ability to provide relevantmarketing, offers and services to you and update our records, we may obtaininformation about you from other sources, such as public databases, jointmarketing partners, affiliate programs, data providers, as well as from otherthird parties. This information includes mailing addresses, job titles, emailaddresses, phone numbers, intent data (or user behavior data), InternetProtocol (IP) addresses, social media profiles, social media URLs and custom profiles,for purposes of targeted advertising and event promotion.

2. HOW DO WE USE YOURINFORMATION?

In Short: We process your information for purposes based onlegitimate business interests, the fulfillment of our contract with you,compliance with our legal obligations, and/or your consent.

We use personal information collected via our Websites fora variety of business purposes described below. We process your personalinformation for these purposes in reliance on our legitimate businessinterests, in order to enter into or perform a contract with you, with yourconsent, and/or for compliance with our legal obligations. We indicate thespecific processing grounds we rely on next to each purpose listed below.

We use the information we collect or receive:

To facilitate account creation and logon process. If you choose to link your account with us to a third-party account (such as your Google or Facebook account), we use the information you allowed us to collect from those third parties to facilitate account creation and logon process for the performance of the contract.
To post testimonials. We post testimonials on our Websites that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and the content of the testimonial. If you wish to update, or delete your testimonial, please contact us at jhirschorn@morevang.com and be sure to include your name, testimonial location, and contact information.
Request feedback. We may use your information to request feedback and to contact you about your use of our Websites.
To enable user-to-user communications. We may use your information in order to enable user-to-user communications with each user’s consent.
To manage user accounts. We may use your information for the purposes of managing our account and keeping it in working order.
To send administrative information to you. We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies.
To protect our Services. We may use your information as part of our efforts to keep our Websites safe and secure (for example, for fraud monitoring and prevention).
To monitor and secure authentication to the Platform. This includes logging and retaining records of login attempts, multi-factor authentication events, and session activity to detect unauthorized access, support incident investigation, and satisfy our compliance and audit obligations.
To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements or in connection with our contract.
To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
To send you marketing and promotional communications. We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. For example, when expressing an interest in obtaining information about us or our Websites, subscribing to marketing or otherwise contacting us, we will collect personal information from you. You can opt-out of our marketing emails at any time (see the “WHAT ARE YOUR PRIVACY RIGHTS?” below).
Deliver targeted advertising to you. We may use your information to develop and display personalized content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness. You may opt out of this using one of the following options:
Digital Advertising Alliance (DAA)’s self-regulatory opt-out (http://optout.aboutads.info/)
For other business purposes. We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Websites, products, marketing and your experience. We use and store this information in aggregated form using Google Analytics so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without your consent.

3. WILL YOUR INFORMATIONBE SHARED WITH ANYONE?

In Short: We only share information with your consent, tocomply with laws, to provide you with services, to protect your rights, or tofulfill business obligations.

We may process or share your data that we hold based on thefollowing legal basis:

Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.
Third Party Service Providers/Vendors: We share your information with third parties who provide services on our behalf to help with our business activities. These companies are authorized to use your personal information only as necessary to provide these services to us, pursuant to written instructions. In such cases, these companies must abide by our data privacy and security requirements, and are not allowed to use PI they receive from us for any other purpose.
Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data orshare your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. DO WE USE COOKIES ANDOTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other trackingtechnologies to collect and store your information.

We may use cookies and similar tracking technologies (likeweb beacons and pixels) to access or store information. Specific informationabout how we use such technologies and how you can refuse certain cookies isset out in our Cookie Notice.

5. HOW LONG DO WE KEEPYOUR INFORMATION?

In Short: We keep your information for as long as necessaryto fulfill the purposes outlined in this privacy notice unless otherwiserequired by law.

We will only keep your personal information for as long asit is necessary for the purposes set out in this privacy notice, unless alonger retention period is required or permitted by law (such as tax,accounting or other legal requirements). No purpose in this notice will requireus keeping your personal information for longer than 2 years.

When we have no ongoing legitimate business need to processyour personal information, we will delete such information, or, if this is notpossible (for example, because your personal information has been stored inbackup archives), then we will securely store your personal information andisolate it from any further processing until deletion is possible.

6. HOW DO WE KEEP YOURINFORMATION SAFE?

In Short: We aim to protect your personal informationthrough a system of organizational and technical security measures.

We have implemented appropriate technical andorganizational security measures designed to protect the security of anypersonal information we process. However, despite our safeguards and efforts tosecure your information, no electronic transmission over the Internet orinformation storage technology can be guaranteed to be 100% secure, so wecannot promise or guarantee that hackers, cybercriminals, or other unauthorizedthird parties will not be able to defeat our security, and improperly collect,access, steal, or modify your information. Although we will do our best toprotect your personal information, transmission of personal information to andfrom our Websites is at your own risk. You should only access the Websiteswithin a secure environment.

7. DO WE COLLECTINFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or marketto children under 18 years of age.

We do not knowingly solicit data from or market to childrenunder 18 years of age. By using the Websites, you represent that you are atleast 18 or that you are the parent or guardian of such a minor and consent tosuch minor dependent’s use of the Websites. If we learn that personalinformation from users less than 18 years of age has been collected, we willdeactivate the account and take reasonable measures to promptly delete suchdata from our records. If you become aware of any data we may have collectedfrom children under age 18, please contact us at jhirschorn@morevang.com.

8. WHAT ARE YOUR PRIVACY RIGHTS?[kJ1] [RH2]

Summary Paragraph ofIndividual Rights

Your Data Protection Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you hold specificdata protection rights regarding your personal data. You may exercise any ofthese rights at any time by contacting us using the details provided at thebottom of this policy:

Right of Access: The right to request copies of your personal data.
Right to Rectification: The right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure ("Right to be Forgotten"): The right to request that we erase your personal data, under certain legal conditions.
Right to Restrict Processing: The right to request that we limit how we process your personal data under specific circumstances.
Right to Object to Processing: The right to object to our processing of your personal data, such as for direct marketing purposes.
Right to Data Portability: The right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, commonly used format.
Right to Withdraw Consent: The right to withdraw your consent at any time where we relied on your consent to process your personal information.

Specific "Right toRestrict Processing" Clause

Right to Restrict the Processing of YourPersonal Data
You have the right to request that we restrict the processing of your personalinformation. When processing is restricted, we are permitted to store yourdata, but not to further process or use it. This right applies in the followingcircumstances:

You contest the accuracy of the personal data, for a period enabling us to verify its accuracy.
The processing is unlawful, and you oppose the erasure of the data and request restriction instead.
We no longer need the personal data for the purposes of the processing, but you require it to establish, exercise, or defend legal claims.
You have objected to the processing pending verification of whether our legitimate grounds override yours.

In Short: You may review, change, or terminate your accountat any time.

If you are a resident in the EEA or UK and you believe weare unlawfully processing your personal information, you also have the right to complain to yourlocal data protection supervisory authority. You can find their contact details[kJ3] [RH4] here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

In accordance with Article 18 of the GDPR, you also havethe right to request the restriction of processing of your personalinformation. This applies if you contest the accuracy of your data, believe theprocessing is unlawful but oppose erasure, require the data for legal claims,or have objected to the processing pending verification of our legitimategrounds.

If you are a resident in Switzerland, the contact detailsfor the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

For all other countries, please send an email to contact@mythosplatform.com withyour full name to request the correction, deletion, and to withdraw consent ofthe processing of your information.

Cookies and similar technologies: Most Web browsers are setto accept cookies by default. If you prefer, you can usually choose to set yourbrowser to remove cookies and to reject cookies. If you choose to removecookies or reject cookies, this could affect certain features or services ofour Websites. To opt-out of interest-based advertising by advertisers on ourWebsites visit http://www.aboutads.info/choices/.

9. CONTROLS FORDO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems andmobile applications include a Do-Not-Track (“DNT”) feature or setting you canactivate to signal your privacy preference not to have data about your onlinebrowsing activities monitored and collected. At this stage no uniformtechnology standard for recognizing and implementing DNT signals has beenfinalized. As such, we do not currently respond to DNT browser signals or anyother mechanism that automatically communicates your choice not to be tracked online.If a standard for online tracking is adopted that we must follow in the future,we will inform you about that practice in a revised version of this privacynotice.

10. DO CALIFORNIARESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you aregranted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the“Shine The Light” law, permits our users who are California residents torequest and obtain from us, once a year and free of charge, information aboutcategories of personal information (if any) we disclosed to third parties fordirect marketing purposes and the names and addresses of all third parties withwhich we shared personal information in the immediately preceding calendaryear. If you are a California resident and would like to make such a request,please submit your request in writing to us using the contact informationprovided below.

If you are under 18 years of age, reside in California, andhave a registered account with the Websites, you have the right to requestremoval of unwanted data that you publicly post on the Websites. To requestremoval of such data, please contact us using the contact information providedbelow, and include the email address associated with your account and astatement that you reside in California. We will make sure the data is notpublicly displayed on the Websites, but please be aware that the data may notbe completely or comprehensively removed from all our systems (e.g. backups,etc.).

CCPAPRIVACY NOTICE

The California Code of Regulations defines a “resident” as:

1. every individual who is inthe State of California for other than a temporary or transitory purpose and

2. every individual who isdomiciled in the State of California who is outside the State of California fora temporary or transitory purpose

All other individuals are defined as “non-residents.”

If this definition of “resident” applies to you, we mustadhere to certain rights and obligations regarding your personal information.

What categories of personal information do we collect?

We have collected the following categories of personalinformation in the past twelve (12) months:E

Category

Examples

Collected

A. Identifiers

Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name

YES

B. Personal information categories listed in the California Customer Records statute

Name, contact information, education, employment, employment history and financial information

YES

C. Protected classification characteristics under California or federal law

Gender and date of birth

D. Commercial information

Transaction information, purchase history, financial details and payment information

E. Biometric information

Fingerprints and voiceprints

F. Internet or other similar network activity

Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems and advertisements

YES

G. Geolocation data

Device location

YES

H. Audio, electronic, visual, thermal, olfactory, or similar information

Images and audio, video or call recordings created in connection with our business activities

I. Professional or employment-related information

Business contact details in order to provide you our services at a business level, job title as well as work history and professional qualifications if you apply for a job with us

J. Education Information

Student records and directory information

K. Inferences drawn from other personal information

Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics

YES

We may also collect other personal information outside ofthese categories instances where you interact with us in-person, online, or byphone or mail in the context of:

Receiving help through our customer support channels;
Participation in customer surveys or contests; and
Facilitation in the delivery of our Services and to respond to your inquiries.

How do we use and share your personal information?

More information about our data collection and sharingpractices can be found in this privacy notice.

You may contact us by email at contact@morevang.com, byvisiting https://www.morevang.com/contact/, or byreferring to the contact details at the bottom of this document.

If you are using an authorized agent to exercise your rightto opt-out we may deny a request if the authorized agent does not submit proofthat they have been validly authorized to act on your behalf.

Will your information be shared with anyone else?

We may disclose your personal information with our serviceproviders pursuant to a written contract between us and each service provider.Each service provider is a for-profit entity that processes the information onour behalf.

We may use your personal information for our own businesspurposes, such as for undertaking internal research for technologicaldevelopment and demonstration. This is not considered to be “selling” of yourpersonal data.

More Vang has not disclosed or sold any personalinformation to third parties for a business or commercial purpose in thepreceding 12 months. More Vang will not sell personal information in the futurebelonging to website visitors, users and other consumers.

Your rights with respect to your personal data

Right to request deletion of the data – Request to delete

You can ask for the deletion of your personal information.If you ask us to delete your personal information, we will respect your requestand delete your personal information, subject to certain exceptions provided bylaw, such as (but not limited to) the exercise by another consumer of his orher right to free speech, our compliance requirements resulting from a legalobligation or any processing that may be required to protect against illegalactivities.

Right to be informed – Request to know

Depending on the circumstances, you have a right to know:

whether we collect and use your personal information;
the categories of personal information that we collect;
the purposes for which the collected personal information is used;
whether we sell your personal information to third parties;
the categories of personal information that we sold or disclosed for a business purpose;
the categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
the business or commercial purpose for collecting or selling personal information.

In accordance with applicable law, we are not obligated toprovide or delete consumer information that is de-identified in response to aconsumer request or to re-identify individual data to verify a consumerrequest.

Right to Non-Discrimination for the Exercise of aConsumer’s Privacy Rights

We will not discriminate against you if you exercise yourprivacy rights.

Verification process

Upon receiving your request, we will need to verify youridentity to determine you are the same person about whom we have theinformation in our system. These verification efforts require us to ask you toprovide information so that we can match it with information you havepreviously provided us. For instance, depending on the type of request yousubmit, we may ask you to provide certain information so that we can match theinformation you provide with the information we already have on file, or we maycontact you through a communication method (e.g. phone or email) that you havepreviously provided to us. We may also use other verification methods as thecircumstances dictate.

We will only use personal information provided in yourrequest to verify your identity or authority to make the request. To the extentpossible, we will avoid requesting additional information from you for thepurposes of verification. If, however, we cannot verify your identity from theinformation already maintained by us, we may request that you provideadditional information for the purposes of verifying your identity, and forsecurity or fraud-prevention purposes. We will delete such additionally providedinformation as soon as we finish verifying you.

Other privacy rights

you may object to the processing of your personal data
you may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the data
you can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
you may request to opt-out from future selling of your personal information to third parties. Upon receiving a request to opt-out, we will act upon the request as soon as feasibly possible, but no later than 15 days from the date of the request submission.

To exercise these rights, you can contact us by email atcontact@morevang.com, by visiting https://www.morevang.com/contact/, or byreferring to the contact details at the bottom of this document. If you have acomplaint about how we handle your data, we would like to hear from you.

11. DO WE MAKE UPDATES TOTHIS NOTICE?

In Short: Yes, we will update this notice as necessary tostay compliant with relevant laws.

We may update this privacy notice from time to time. Theupdated version will be indicated by an updated “Revised” date and the updatedversion will be effective as soon as it is accessible. If we make materialchanges to this privacy notice, we may notify you either by prominently postinga notice of such changes or by directly sending you a notification. Weencourage you to review this privacy notice frequently to be informed of how weare protecting your information.

12. HOW CAN YOU CONTACT USABOUT THIS NOTICE?

If you have questions or comments about this notice, youmay contact our Data Protection Officer (DPO), Joshua Hirschorn, by email atjhirschorn@morevang.com, by phone at 703-751-3611, or by post to:

More Vang / Mythos / Banjo
Joshua Hirschorn
3670 Wheeler Ave.
Alexandria, VA 22304
United States

If you have an unresolved privacy or data use concern thatwe have not addressed satisfactorily, please contact our U.S.-based third partydispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

13. HOW CAN YOU REVIEW,UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may havethe right to request access to the personal information we collect from you,change that information, or delete it in some circumstances. To request toreview, update, or delete your personal information, please visit: https://www.morevang.com/contact/.

Privacy

Mythos Privacy Policy

Ready to transform your stewardship reporting?