SUPPLYCO Platform Privacy Policy

SUPPLYCO ("we," "us," or "our") wants you to be familiar with how we collect, use, and disclose information. This Privacy Policy describes our practices in connection with information that we collect through:

• The SUPPLYCO Platform and its related applications;
• Software application(s) made available by us for use on or through computers and mobile devices;
• HTML-formatted email messages that we send to you that link to this Privacy Policy.

Collectively, we refer to the platform, app(s), and related services as the "Platform Services."

Personal Information

"Personal Information" is information that identifies you as an individual or relates to an identifiable individual. We collect Personal Information through or in connection with the Platform Services, such as:

• Name
• Postal address
• Telephone number
• Email address
• IP address (we may also derive your approximate location from your IP address)
• Payment information
• Social media account ID

Collection of Personal Information

We and our service providers collect Personal Information in a variety of ways, including:

Through the Platform Services

We collect Personal Information through the Platform Services, such as when you create an account, contact customer service, or use Platform features.

From Other Sources

We receive your Personal Information from other sources, such as publicly available databases.

If you connect your social media account to your Platform Services account, you will share certain Personal Information from your social media account with us, including your name, email address, photo, connections, and any other information that may be accessible to us when you connect your accounts.

Use of Personal Information

We and our service providers use Personal Information for the following purposes:

Providing the functionality of the Platform Services and fulfilling your requests

• To provide the Platform Services' functionality to you, such as arranging access to your account.
• To complete your transactions, process cancellations, returns, and exchanges, and verify your information.
• To provide you with benefits, promotions, and customer service.
• To respond to your inquiries and fulfill your requests.
• To send administrative information to you, such as changes to our terms, conditions, and policies.

Providing you with our newsletter and/or other marketing materials and facilitating social sharing

• To send you marketing related emails.
• To facilitate social sharing functionality that you choose to use.

Analyzing Personal Information for business reporting and providing personalized services

• To analyze use of the Platform Services.
• To better understand your interests and preferences, so that we can personalize our interactions with you.

Aggregating and/or anonymizing Personal Information

We may aggregate and/or anonymize Personal Information so that it will no longer be considered Personal Information. We do so to generate other data for our use, which we may use and disclose for any purpose, as it no longer identifies you or any other individual.

Accomplishing our business purposes

• For audits, to verify that our internal processes function as intended and to address legal, regulatory, or contractual requirements;
• For fraud prevention and security monitoring purposes, including to detect and prevent cyberattacks or attempts to commit identity theft;
• For developing new products and services;
• For enhancing, improving, repairing, maintaining, or modifying our current products and services, as well as undertaking quality and safety assurance measures;
• For identifying usage trends, for example, understanding which parts of our Platform Services are of most interest to users;
• For determining the effectiveness of our promotional campaigns;
• For operating and expanding our legitimate business activities.

Disclosure of Personal Information

We disclose Personal Information:

To our service providers, to facilitate services they provide to us.

These can include providers of such services as cloud hosting, data analysis, payment processing, order fulfillment, fraud prevention, information technology and related infrastructure provision, customer service, email delivery, and auditing.

Other Uses and Disclosures

We may also use and disclose Personal Information as we believe to be necessary or appropriate: (a) to comply with applicable law, to respond to warrants pertaining to active investigations, and to fulfil other legal obligations; (b) to enforce our terms and conditions; and (c) to protect our rights, privacy, safety, or property, and/or that of you or others. We may use, disclose, or transfer Personal Information to a third party in connection with any proposed or actual reorganization, bankruptcy, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our assets or stock.

Information Collected Automatically

We and our service providers may collect information automatically in a variety of ways, including:

Your browser or device

Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, and Internet browser type and version. We use this information to ensure that the Platform Services function properly.

Your use of our Platform

When you use our Platform, we and our service providers may track and collect usage data, such as the date and time the Platform on your device accesses our servers and what information and files have been accessed. We use this information to understand how the Platform is used and improve it.

Cookies

Cookies are pieces of information stored directly on your computer. Cookies allow us to collect such information as browser type, time spent on the Platform Services, pages visited, language preferences, and traffic data. We use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also gather statistical information about use of the Platform Services in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding them. If you do not want information collected through the use of cookies, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting particular cookies from a particular website. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Platform Services.

Analytics

We use analytics services, such as Google Analytics, which use cookies and similar technologies to collect and analyze information about use of the Platform Services and report on activities and trends. These services may also collect information regarding the use of other websites, apps, and online services. You can learn about Google's practices by going to www.google.com/policies/privacy/partners/ and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Uses and Disclosures of Information Collected Automatically

If we are required to treat such information collected automatically as Personal Information under applicable law, we may use and disclose it for the purposes for which we use and disclose Personal Information, as detailed in this Privacy Policy. In some instances, we may combine information collected automatically with Personal Information. If we do, we will treat the combined information as Personal Information so long as it is combined.

Data Minimization

We collect only the Personal Information reasonably necessary to provide the Platform Services and fulfill the purposes described in this Privacy Policy.

Your Rights

Depending on your location, you may have certain rights regarding your Personal Information:

Right to Access

You may request a copy of the Personal Information we hold about you.

Right to Correction

You may request that we correct inaccurate or incomplete Personal Information.

Right to Deletion

You may request that we delete your Personal Information, subject to certain exceptions (such as legal obligations or ongoing service provision).

Right to Opt-Out

You may opt out of:

• Marketing communications (via unsubscribe links or by contacting us)
• Certain cookies and tracking technologies (see "Cookies" section above)

Exercising Your Rights

To exercise any of these rights, contact us at info@supplyco.ai. We will respond to verified requests within 30 days. We may request additional information to verify your identity before processing your request.

Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Account Information: Retained while your account is active and for a reasonable period thereafter to fulfill legal, accounting, or reporting obligations.
• Platform Logs: Retained for 365 days from collection.
• Customer Data: Upon termination of services, Customer Data is deleted or returned within 30 days of written request, unless retention is required by law.

Security

We seek to use reasonable organizational, technical, and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the "Contact Us" section below.

Data Breach Notification

In the event of a security breach affecting your Personal Information, we will notify affected individuals in accordance with applicable law. Where required, we will provide notice within 72 hours of becoming aware of the breach, describing the nature of the breach and steps you can take to protect yourself.

Consent

By using the Platform Services, you consent to the collection and processing of your Personal Information as described in this Privacy Policy. Where required by law (such as for sensitive data or marketing communications), we will obtain your explicit consent before collection or processing.

Privacy-Protective Settings

Where the Platform offers settings that affect your privacy, these are configured to the most protective option by default. You may adjust these settings at any time through your account preferences.

Third-Party Services

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating a website or service to which the Platform Services link. The inclusion of a link on the Platform Services does not imply our endorsement of the linked site or service.

Use of the Platform Services by Minors

The Platform Services are not directed to individuals under the age of twenty-one (21), and we do not knowingly collect Personal Information from individuals under 21.

Jurisdiction and Cross-Border Transfer

We are located in the United States. We may store and process your Personal Information in any country where we have facilities or in which we engage service providers. By using the Platform Services, you understand that your information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.

Sensitive Information

Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., Social Security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, or criminal background) on or through the Platform Services or otherwise to us.

Updates to this Privacy Policy

The "Last Updated" legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Platform Services.

Contact Us

If you have any questions about this Privacy Policy, please contact us at info@supplyco.ai. Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.