Dessa - the Conversation Model trained only on speech

Privacy Notice Effective Date: October 21, 2026 This Privacy Notice describes how Block, Inc. and our affiliates (collectively, “Block,” “we,” and “us”) collect, use, disclose, transfer, store, retain or otherwise process your information when you interact with the dessa.com website (the “Services”).This Privacy Notice applies only to information collected in connection with your access to and use of our Services. Please read this Privacy Notice carefully. By continuing to interact with our Services, you are consenting to the practices described in this Privacy Notice. This privacy notice does not cover the processing of your information when using other Block websites, products, or services, such as Square, Cash App, Afterpay, or TIDAL. Each of these offerings is governed by its own applicable privacy notice. We may also include links to other websites, including social media platforms. For example, you may be given the option to share a news or blog article on a social media platform. This privacy notice does not apply to the data processing practices of other websites, and we encourage you to read the privacy notices available on any other website you visit. Additionally, this privacy notice does not cover information processed about candidates for employment or contractual services. For details on privacy practices related to employment or contractual candidates, please click here. INFORMATION WE COLLECT ABOUT YOU We collect information about you when you interact with the Services or or when you voluntarily choose to provide information to us directly. Information You Provide We collect information from you, including: Identification Information. Your name; email address; mailing address; and phone number. Other Information You Provide. Information that you voluntarily provide to us, including correspondence with us, or any other actions performed on the Services. Information We Collect Automatically from Your Use of our Services We collect information about you and the devices you use to access the Services, such as your computer, mobile phone, or tablet. The information that we collect includes: Device information. Information about your device, including your hardware model, operating system and version, device name, unique device identifier, mobile network information, and information about the device’s interaction with our Services. Internet or other electronic network activity information. Information about how you use and interact with our Services, including your access time, browser type and language, country and language setting on your device, Internet Protocol (“IP”) address, the domain name of your internet service provider, other attributes about your browser, mobile device and operating system, features you use, and the date and time of your visit to or use of the Services. SOURCES OF INFORMATION We only collect (and/or have collected during at least the 12-month period preceding the effective date of this Privacy Notice) information directly from you, and from how you use our Services. HOW WE USE YOUR INFORMATION We may collect, use and share (or have collected, used or shared during at least the 12-month period preceding the effective date of this Privacy Notice), information about you for the following reasons: Providing, Improving, and Developing our Services Determining whether the Services are available in your country; Providing, maintaining, and improving our Services; Developing new products and services; Delivering the information and support you request; Improving, personalizing, and facilitating your use of our Services; Measuring, tracking, and analyzing trends and usage in connection with your use or the performance of our Services; and Otherwise providing you with the products and features you choose to use. Communicating with You About our Services Sending you surveys and getting your feedback about our Services; and Sending you information we think you may find useful or which you have requested from us about our products, services and other company updates, such as when you sign up for investor email alerts. Protecting our Services and Maintaining a Trusted Environment Conducting investigations, complying with and enforcing any applicable laws, regulations, legal requirements, and industry standards, and responding to lawful requests for information from the government or to valid legal process; Contacting you to resolve disputes and help you with our Services; Debugging to identify and fix errors that impair how our Services function; Enforcing our Terms of Service or other applicable agreements or policies; Investigating, detecting, preventing, recovering from, or reporting fraud, misrepresentations, security breaches or incidents, or other potentially prohibited, malicious, or illegal activities; Protecting our, or your rights or property, or the security or integrity of our Services; Verifying or maintaining the quality and safety of our Services; and Verifying your identity. Other Uses For any other reason we may tell you about from time to time. WHEN AND WITH WHOM WE SHARE YOUR INFORMATION We may share the information described in the “Information We Collect About You” section with the following categories of service providers and third parties: With our Affiliates and Group Companies With our group companies and corporate affiliates, such as Cash App, Square, Afterpay, or TIDAL, for the reasons outlined above. For example, we may share your information internally to understand how you engage with Block company products to help make our Services better for you and for everyone, and to help us build Services tailored to your preferences. With Our Service Providers With service providers who help us to provide, maintain, and improve our Services, including service providers who access information about you to perform services on our behalf (e.g., vendors who help us with fraud prevention, identity verification, and fee collection services), and other entities that help us provide the Services. Business Transfers and Corporate Changes To a subsequent owner, co-owner, or operator of one or more of the Services; or If we do or try to do a corporate merger, consolidation, or restructuring (including during due diligence and negotiation of these); the sale of substantially all of our stock and/or assets; the financing, acquisition, divestiture, or dissolution of all or a portion of our business; or other corporate change. Safety and Compliance with Law If we believe that disclosure is reasonably necessary (i) to comply with any applicable law, regulation, legal process or governmental request (e.g., from creditors, tax authorities, law enforcement agencies, in response to a garnishment, levy, or lien notice, etc.); (ii) to establish, exercise or defend our legal rights; (iii) to enforce or comply with our Terms of Service or other applicable agreements or policies; (iv) to protect our or our customers’ rights or property, or the security or integrity of our Services; (v) for an investigation of suspected or actual illegal activity; or (vi) to protect us, users of our Services, or the public from harm, fraud, or potentially prohibited or illegal activities. With Your Consent With your consent. For example: At your direction or as described at the time you agree to share; or When you authorize a third party application or website to access your information. With Others With other companies who deliver services on our behalf, including via the use of cookies and similar automated technologies. Aggregated and Anonymized Information We also may share (within our group of companies or affiliates, or with service providers or other third parties) aggregated and anonymized information that does not specifically identify you or any individual user of our Services. COOKIES AND OTHER SIMILAR AUTOMATED TECHNOLOGIES When you interact with our online services, or open emails we send you, we obtain certain information using automated technologies, such as cookies, web server logs, web beacons, and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag, or clear GIF, is a tiny graphic image that may be used in our websites or emails.We use these automated technologies to collect your device information, internet activity information, and inferences as described above. These technologies help us to: Remember your information so you do not have to re-enter it; Track and understand how you use and interact with our online services and emails; Tailor our online services to your preferences; Measure how useful and effective our services and communications are to you; and Otherwise manage and enhance our products and services. We set some of these automated technologies ourselves, but others are set by third parties who deliver services on our behalf. For example, we may use other companies’ web analytics services, which use automated technologies to help us evaluate how customers use our websites.Your browser can alert you when cookies are placed on your device, and how you can stop or disable them via your browser settings. Please note, however, that without cookies all of the features of our online services may not work properly. If you use a mobile device, you can manage how your device and browser share certain device data by changing the privacy and security settings on your mobile device. You can learn more about cookies and how to manage your preferences by visiting http://www.allaboutcookies.org. HOW LONG WE KEEP YOUR INFORMATION