PRIVACY POLICY

Last updated: March 2026

General: This Privacy Policy describes how Avalanche Treasury Co. ("AVAT," "we," "us," or "our") collects, uses, and shares information about you when you access or use our website at avat.com (the "Site") or otherwise interact with us. By using the Site, you agree to the collection and use of information in accordance with this policy. AVAT may update this Privacy Policy at any time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Site after any update constitutes your acceptance of the revised policy. For questions about this policy, please contact us at legalnotices@avat.com or through the contact form at avat.com.

1. Who We Are: AVAT is a Nasdaq-listed operating company. Our website is located at avat.com.

2. What Information We Collect:
Information you provide directly
When you submit a contact form on the site, we collect your name, email address, and the contents of your message. We do not collect payment information or account credentials.
Information collected automatically. When you visit the Site, we automatically collect certain technical information including your IP address, browser type, operating system, referring URLs, and pages visited. This information is collected via Google Analytics and standard server logs.
Cookies We use cookies and similar tracking technologies to understand how visitors use the Site. These include analytics cookies placed by Google Analytics. You can control cookie preferences through your browser settings or via our cookie consent banner.

3. How We Use Your Information: We use the information we collect to respond to inquiries submitted through our contact form. We also use information to understand how the Site is being used and improve its content and performance. Comply with legal and regulatory obligations. Protect the security and integrity of the Site. We do not sell your personal information. We do not use your information for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR): If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases:
Legitimate interests — for analytics and site improvement, where our interests are not overridden by your rights.
Contract performance — to respond to inquiries and fulfill requests you have made.
Legal obligation — where processing is required to comply with applicable law. Consent — for non-essential cookies, where we have obtained your consent via our cookie banner.

5. How Long We Keep Your Information: Contact form submissions are retained for up to 24 months. Analytics data is retained in accordance with Google Analytics default retention settings. You may request deletion of your data at any time by contacting us at legalnotices@avat.com.

6. Who We Share Your Information With:
Service providers — we use Google Analytics to process analytics data on our behalf. Google acts as a data processor under our instructions.
Legal requirements — we may disclose your information if required by law, court order, or regulatory authority, including in connection with our obligations as a Nasdaq-listed company.
Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We do not share your personal information with third parties for marketing purposes.

7. International Data Transfers: We are based in the United States. If you are accessing the Site from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. For visitors in the EEA, UK, or Switzerland, where we transfer your data to the United States we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

8. Your Rights:
All users — the right to request access to the information we hold about you, the right to request correction of inaccurate information, and the right to request deletion of your information.
EEA, UK, and Switzerland users
— in addition to the above, you have the right to object to processing, the right to restrict processing, the right to data portability, and the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.
California users — under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise any of these rights, please contact us at legalnotices@avat.com or through the contact form at avat.com/contact.

9. Security: We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Third-Party Links: The Site may contain links to third-party websites including SEC filings, news coverage, and partner sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before engaging with their content.

11. Children: The Site is not intended for use by minors under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at legalnotices@avat.com and we will take steps to delete it.

12. Contact Us: For questions about this Privacy Policy or how we handle your personal information, please contact us at legalnotices@avat.com or through the contact form at avat.com/contact.