GENERAL MOTORS COMPANY U.S. CONNECTED SERVICES PRIVACY STATEMENT Last Updated: July 2021 The General Motors Family of Companies (including General Motors Company, OnStar, LLC (“OnStar”), and affiliates) (collectively, "GM" or "we") provides this U.S. Connected Services Privacy Statement (“Privacy Statement”) to address the personal information we collect and how we use and share that information when you use connected services made available by GM in connection with GM vehicles, products, services, programs, websites, infotainment systems, social media sites, and mobile applications (products and services). This Privacy Statement applies to the products and services offered by GM, but excludes products and services with separate privacy statements that do not incorporate this Privacy Statement. For example, General Motors Financial Company, Inc. maintains its own privacy statement. Key points about our information practices: Collection We may collect information about you and your accounts with us, such as your name and address. And when you use our connected vehicle products and services, we may collect information about your vehicle, including diagnostics, use, and vehicle location. We may also collect various types of information about you from dealers and others who provide information to us. See below to learn more. Use We may use your information to improve the quality, safety, and security of our products and services, to develop new products and services, and for marketing. See below to learn more. Sharing We may share your information to provide you with products and services, to improve the quality, safety, and security of products and services, to comply with applicable law, to respond to your requests, to allow recipients to use it for marketing, and other purposes subject to your consent where required. See below to learn more. Choices You have choices regarding how we use and share your information for marketing and other purposes. See below to learn more. Your Given the nature of our products and services, there may be times when someone other than Obligations you is using one of the products and services we provide to you (for example, you let someone else drive your vehicle). We rely on you to inform such person about this Privacy Statement and the privacy choices you have made. Cookies and We may use cookies and similar technologies to help provide our products and services, Tracking understand and customize your preferences, and display relevant advertising to you. See below to learn more. Third Party In connection with our products and services, you may be offered the opportunity to use third Products and party products and services that are not owned or controlled by GM and are governed by Services separate user terms and privacy statements. See below to learn more. Access and You may access your online accounts to update your information or you may contact us to Update learn about how to do so. See below to learn more. 39546987.2 Security We maintain reasonable and adequate security controls to protect your information and measures require our service providers by contract to do the same. See below to learn more. Retention We keep information for as long as necessary to provide our products and services, operate our business, and comply with legal obligations. See below to learn more. Children's We do not target or knowingly collect any information from children under the age of 13. See privacy below to learn more. International We maintain appropriate protections for cross-border transfers as required by law. See below Data Transfers to learn more. Changes We will notify you of any material changes by posting the updated version of this Privacy Statement and taking other steps as needed. See below to learn more. Contact Us Please contact us by mail, email, or phone with any questions. See below to learn more. INFORMATION WE MAY COLLECT We may collect the following information when you use our connected products or services, and otherwise with your consent. We may also collect your information from GM dealers, licensees, partners, service providers, and independent third party sources. The types of information that we may collect include: • Information about you and your that must be reported for government accounts with us: such as your name, tax purposes postal address, telephone number, date of birth, e-mail address, screen name, • Information about your vehicle: such account ID, customer number, login as license plate number, vehicle information, demographic data or identification number (VIN), mileage, protected classification information, oil/battery status, fuel or charging gender, password, PIN, emergency history, electrical system function, gear contact information, information about status, and diagnostic trouble codes. the acquisition and financing of your vehicle, like whether or not you have • Information about the use of your financed or leased your vehicle, the vehicle, including operational and lease/financing term, and billing safety related information: such as information, like your credit card GPS location, speed, air bag number, CVV code and expiration date. deployments, crash avoidance alerts, We may also collect information related impact data, safety system status, to My Rewards and the My GM Rewards braking and swerving/cornering events, Card Program (“GM Card”) including event data recorder (EDR) data, seat belt rewards points, account type, tier status, settings, vehicle direction (heading), enrollment, and redemption. In limited audio or video information such as circumstances, we may collect a Social information collected from camera Security Number, for example if you win images and sensor data, voice command a sweepstakes or receive compensation information, stability control or anti-lock events, security/theft alerts, and 39546987.2 infotainment (including radio and rear- and services, including apps and seat infotainment) system and WiFi data websites: such as IP address, browser usage. type, unique device identifier, cookie data, associated identifying and usage • Information about your devices and information from your mobile phone, how you interact with our products laptop, or other device. HOW WE MAY USE YOUR INFORMATION We may use your information in order to: • provide our products. programs, and • collect outstanding debts for products services and services • improve the quality, safety, and security • for research, evaluation of use, and of our products and services troubleshooting purposes • develop new products and services, • protect the safety of you or others including autonomous vehicle and car- • verify eligibility for vehicle purchase and sharing products and services incentive programs • maintain customer relationships and • verify eligibility for GM card and provide communicate with you GM card account management services • administer your account(s) and process • perform marketing, including interest your payments for products and services based marketing and advertising across • operate our websites and applications, your devices (with necessary consents) including online registration processes • administer your participation in • provide customer and vehicle support contests, quizzes, surveys, promotions and service (for example, recall and offers information, servicing and maintenance • customize and improve communication or warranty service) content and your experience with GM • for warranty administration and and validation • comply with legal, regulatory or • provide product and service updates contractual requirements • evaluate the quality, safety, and security of our products and services Where required, we will anonymize your information in a way that it can't reasonably be associated with you or your vehicle. We may use anonymized information or share it with third parties for any legitimate business purpose. Communications with you in connection with these uses may be via mail, telephone, e-mail, text message and other electronic messages, through the in-vehicle infotainment or OnStar system or via our websites and applications. Subject to the GM Consolidated SMS Policy (“Texting Policy”), which can be found at gm.com/texting-policy.html, GM and those acting on behalf of GM may send you text messages using an automated telephone dialing system to the mobile number you have provided. Message and data rates may apply. See “Choices” below to learn more about how you can manage your communication preferences. 39546987.2 HOW WE MAY SHARE YOUR INFORMATION We may share your information as follows for the uses described below (and where required we will obtain additional consent or anonymize the information): GM Family of Companies: Within the GM family safety, or the safety of others, to detect, of companies (for example, including OnStar) for investigate and prevent fraud, or to conduct the above uses. screening to ensure you are not on any government list of restricted parties. Emergency Service Providers: With emergency service providers, such as law enforcement, Business Transfers: With a prospective or roadside assistance providers, and ambulance completed sale, transfer, or financing of a part of providers, in order to deliver related services (for a GM business or its assets. example, Stolen Vehicle Assistance Services). Business Partners and Independent Third Parties: With business partners, such as SiriusXM, in connection with their products and services; research institutes, for research and development purposes (for example, improving