Consumer Data Request Procedure

Owner: Capalty LLC / MonthlyIQ. Security owner: Eric Zhivalyuk, Founder (security@monthlyiq.com). Effective September 27, 2026.

Requests may be submitted through our Privacy Request form (https://monthlyiq.com/data-request), in-product controls, or privacy@monthlyiq.com. Requests are logged with type, date received, status, owner, verification status, completion date and notes.

We verify the requestor using reasonable methods appropriate to the sensitivity of the request, and do not request unnecessary sensitive information solely for verification. Information is never disclosed to an unverified requestor.

• Log the request.
• Verify identity and authority.
• Determine applicable rights, exceptions and response deadline.
• Locate relevant information across active systems and service providers.
• Complete access, correction, deletion or other required action.
• Revoke Plaid connections where applicable.
• Document lawful exceptions or retained records.
• Communicate completion.
• Keep minimal evidence of handling for compliance.

Complex, disputed or legally sensitive requests are escalated to management and qualified counsel. This procedure is reviewed at least annually.

Capalty LLC, doing business as MonthlyIQ (“MonthlyIQ,” “we,” “us,” or “our”).

• Privacy: privacy@monthlyiq.com
• Support: support@monthlyiq.com
• Security: security@monthlyiq.com
• Mail: 500 S. Australian Ave., Ste 600 #1072, West Palm Beach, FL 33480