Do Not Call / TCPA Policy

This policy outlines Indymae's commitment to complying with the Telephone Consumer Protection Act (TCPA), the National Do Not Call (DNC) Registry, and all related federal and state telemarketing laws.

The TCPA prohibits specific types of calls and messages made for commercial purposes. Telemarketing includes initiating a call or message encouraging the purchase or investment in property, goods, or services. Indymae enforces strict adherence to these requirements.

All Indymae employees, agents, independent contractors, and vendors must comply with the following rules:

— Maintain and honor an Internal Do Not Call (DNC) Policy — Provide a copy of the DNC Policy to any requesting consumer — Limit outbound calls to the hours of 8:00 a.m. to 9:00 p.m. local time of the recipient — Avoid calling or texting numbers listed on the National DNC Registry — Do not contact numbers listed on Indymae's Internal DNC List — Use auto-dialers or prerecorded messages only with prior express written consent from the recipient — Clearly identify the caller's name, company name, and contact information during each call

It is prohibited to send unsolicited advertisements to fax machines unless:

— There is an existing business relationship — The recipient voluntarily shared the fax number — The message includes a valid opt-out mechanism

This policy applies to all Indymae associates, producers, registered representatives, third-party contractors, agencies, and affiliates who engage in outbound communication on behalf of Indymae.

Indymae maintains an Internal DNC List. If any person (client or prospect) requests not to be contacted, that request must be reported to the Privacy Office within five (5) business days. The Internal DNC List is updated regularly and accessible to authorized personnel.

Telephone solicitations are prohibited to:

— Any number on the Internal DNC List — Numbers on a State or National DNC Registry, unless the caller has: · An existing business relationship within the past 18 months · Express written consent within the past 3 months · A personal relationship with the recipient

Outbound telemarketing calls must not occur before 8:00 a.m. or after 9:00 p.m. local time of the recipient, unless consent is given.

Callers must disclose:

— Their full name — The name and phone number or address of Indymae or their affiliated representative (900 numbers are not allowed) — That the purpose of the call is to solicit a product or service

Violations of this policy must be reported to the Privacy Office immediately. The Privacy Office oversees enforcement and may take disciplinary action, including termination of contracts or employment, as appropriate.

Noncompliance with telemarketing laws can result in legal and financial penalties.

To report a violation or file a complaint:

Privacy Office Indymae, LLC 100 S. Ashley Drive, Suite 600 Tampa, FL 33602

Phone: 1-888-326-6888 Email: privacy@indymae.com

To learn more about the TCPA and your rights, visit the FCC's website at: https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts