Privacy Policy for California Residents

This Privacy Policy for California Residents provides additional information in conjunction with PaidKash's Privacy Policy and is applicable exclusively to all individuals residing in the State of California, referred to as "consumers" or "you." We have adopted this notice to adhere to the provisions of the California Consumer Privacy Act of 2018 (CCPA). Any terms defined in the CCPA maintain the same meanings when utilized in this Policy.

Our Website gathers information that can be linked, directly or indirectly, to a specific consumer, household, or device, which is referred to as "personal information." Personal information does not encompass the following:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.

In particular, within the last twelve (12) months, our Website has collected personal information falling into the following categories from consumers:

Our Website acquires the categories of personal information mentioned above from the following sources:

• Directly from you, such as from forms you complete (e.g., to register for our services or participate in surveys).
• Indirectly from you, by observing your actions on our Website.
• Third parties, which may involve collecting additional profiler information.

• To fulfill or meet the reason you provided the information. For instance, if you share your name and contact details to register for an account or inquire about our products or services, we will use that information to respond to your inquiry. Similarly, if you provide personal information to accept an offer and redeem your rewards.
• To provide, support, customize, and enhance our Website, products, and services.
• To establish, manage, customize, and secure your account with us.
• To process your requests, offers, transactions, and reward-based payments on our Website while preventing transactional fraud.
• To offer support and address your inquiries, including investigating and resolving your concerns, and enhancing our responses.
• To personalize your Website experience and deliver content, product, and service offers that match your interests, including targeted offers and advertisements through our Website, third-party sites, email, or text messages (with your consent, where required by law).
• To maintain the safety, security, and integrity of our Website, products, services, databases, technology assets, and business.
• For testing, research, analysis, and product development, which includes improvements to our Website, products, and services.
• To comply with law enforcement requests and as mandated by applicable law, court orders, or governmental regulations.
• As explained to you when collecting your personal information or as otherwise outlined in the CCPA.
• For conducting surveys.
• To evaluate or carry out a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or a similar proceeding, where personal information held by us about our Website users is among the transferred assets.

We will not collect additional categories of personal information or use the personal information we collected for significantly different, unrelated, or incompatible purposes without providing you with notice.

We may share your personal information by disclosing it to third parties for business purposes. These business purpose disclosures are exclusively made under written contracts that explicitly outline the purposes, mandate the recipient to maintain confidentiality, and prohibit the use of disclosed information for any purpose other than contract performance. In the preceding twelve (12) months, PaidKash has disclosed personal information for business purposes to the categories of third parties indicated in the chart below.

Additionally, we may share your personal information by selling it to third parties, subject to your right to opt-out of such sales. Our personal information sales do not include information about individuals under the age of 16. In the preceding twelve (12) months, PaidKash has sold the following categories of personal information to the categories of third parties indicated in the chart below. For more details on your personal information sale rights, please refer to the Personal Information Sales Opt-Out and Opt-In Rights section.

The CCPA restricts third parties from reselling personal information unless you have received explicit notice and an opportunity to opt-out of further sales. You consent to certain businesses purchasing your personal information from us, and these businesses may resell your personal information. However, you retain the right to opt-out. To exercise your right to opt-out of these sales, please visit our opt-out section here.

The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the "right to know"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
• Sales, identifying the personal information categories that each category of recipient purchased.
• Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
• The specific pieces of personal information we collected about you (also called a data portability request).

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal information (e.g., storing information with earned credits).
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech or comply with the law.
• Engage in public or peer-reviewed scientific, historical, or statistical research.
• Enable internal uses that align with consumer expectations.
• Comply with a legal obligation.

We do not provide these deletion rights for B2B personal information.

To exercise your rights to know or delete described above, please submit a request by either:

• Emailing us at [email protected]
• Visiting https://paidkash.com

Only you or someone legally authorized to act on your behalf may make a request to know or delete your personal information. You may only submit a request to know twice within a 12-month period.

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

For instructions on exercising your sale opt-out or opt-in rights, see Personal Information Sales Opt-Out and Opt-In Rights.

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected].

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by email.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If you are age 16 or older, you have the right to direct us to not sell your personal information at any time (the "right to opt-out"). We do not sell the personal information of consumers we know are less than 16 years old. Consumers who opt-in to personal information sales may opt-out of future sales at any time.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by emailing [email protected]. We will wait at least twelve (12) months before asking you to reauthorize personal information sales.

You do need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.

We want to make it clear that we will not engage in any form of discrimination or retaliation against you, which is prohibited by applicable U.S. State Privacy Laws, for exercising your Consumer privacy rights. In certain cases, we may adjust the price, rate, or offer a different level or quality of goods or services, to the extent that such adjustments are reasonably related to the value of the data in question.

Our policy is to publish any revisions we make to our privacy policy on this page. In the event of substantial changes in how we handle your personal information, we will notify you through either the primary email address provided in your account or by posting a notice on the Website's home page. The date of the last revision to the privacy policy can be found at the top of this page.

It is your responsibility to ensure that we have an accurate, current, and functional email address on file for you. Additionally, we recommend that you periodically visit our Website and review this privacy policy to stay informed about any updates.

Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

If you have any questions or comments concerning this notice, how PaidKash collects and utilizes your information as detailed in this notice and our Privacy Policy, your options and entitlements concerning such utilization, or if you wish to exercise your rights under California law, please don't hesitate to reach out to us at: