Privacy Policy

1. Introduction

At Stortech, Inc. ("we", "our", "us", or the "Company"), we take your privacy and the protection of your data seriously. This privacy policy (the "Policy") describes our privacy practices for the activities described below. In accordance with your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data ("Personal Data") refers to any information that, alone or in combination with other available information, can identify an individual.

We are committed to protecting your privacy in accordance with the highest level of data-protection regulation. We follow the obligations set out by the regulations below:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation
• Quebec Law 25
• The EU General Data Protection Regulation (GDPR)
• Brazil's Lei Geral de Proteção de Dados (LGPD)
• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
• Colorado Privacy Act (CPA)
• Utah Consumer Privacy Act (UCPA)
• Connecticut Data Privacy Act (CTDPA)
• Virginia Consumer Data Protection Act (VCDPA)

Scope

This policy applies to the websites, domains, applications, services, and products of Stortech, Inc.

This policy does not apply to third-party applications, websites, products, services, or platforms accessible via links we may provide. These sites are owned and operated independently of us and have their own distinct privacy and data-collection practices. Any Personal Data you provide to those sites will be governed by that third party's own privacy policy.

Processing activities

This policy applies when you interact with us by doing one of the following:

• Using our application and services as an authorized user
• Visiting one of our websites that links to this privacy statement

2. Personal Data we collect

What Personal Data we collect

When you make a purchase or attempt to make one, we collect the following Personal Data:

• Account information such as your name, email address, and password
• Payment information such as your billing address, phone number, credit or debit card number, or any other payment method

When you use our products or features, we collect the same categories of Personal Data as above.

How we collect your Personal Data

From you. You may provide us with your account, payment, financial, demographic, purchase, content, feedback, and product information by filling in forms, using our products or services, entering information online, or corresponding with us by mail, phone, email, or otherwise. This includes Personal Data you provide when you:

• Create an account or purchase products on our website
• Use our products or services
• Create content through our products or services
• Express interest in our products or services
• Download software or our mobile application
• Subscribe to our newsletter
• Complete a voluntary market study
• Contact us for inquiries or to report an issue
• Log in to our website via social media

Automated technologies or interactions. When you interact with our website, we may automatically collect device data about your equipment, usage data about your actions and browsing habits, and contact data when tasks on our site remain unfinished (e.g., incomplete orders or abandoned carts). We collect this data using cookies, server logs, and similar technologies.

Third parties. We may receive Personal Data about you from analytics providers (such as Google), social platforms when you log in via them, fraud-prevention organizations that share data to reduce risk, and from our technical, payment, and delivery service providers.

Purpose and legal basis for processing

We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services, and to understand how to improve them. When we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. Consent is required to initiate services with you, and new consent will be needed if we change the categories of data we collect.

International transfer and storage

Where possible, we store and process data on servers located in the general geographic region where you reside. Your Personal Data may also be transferred to and stored on servers outside your state, province, country, or other jurisdiction, where data laws may differ. We will take appropriate steps to ensure that your Personal Data is processed securely and in accordance with this Policy and applicable data-protection law.

Sharing and disclosure

We will only share your Personal Data with third parties as described in this policy or as set out at the time of collection.

Legal requirement. We may use or disclose your Personal Data to comply with a legal obligation, a request from a public or government authority, or a judicial process; to prevent loss of life or injury; or to protect our rights or property.

Service providers. We may use third-party service providers, independent contractors, agencies, or consultants to deliver and help us improve our products and services (marketing, database services, backup and disaster recovery, email, and others), but only to maintain and improve our products and services.

3. Cookies

What cookies are

A cookie is a small file containing information that your browser stores on your device. The information in this file is typically shared with the site owner and potentially with partners and third parties of that business. This information may be used to operate the site or to improve your experience.

How we use cookies

• Strictly necessary — some cookies are required for our service to work.
• Preference — these help us remember how you like to use our service.
• Personalization — some cookies tailor content to you (for example, your location to show services and offers in your area).

4. Retention and deletion

We will only retain your Personal Data for as long as necessary to fulfill the purpose for which it was collected, and as required by applicable law. When we no longer need your Personal Data, we will delete it from our systems or take steps to anonymize it.

5. Merger or acquisition

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy. In certain circumstances, we may be required to disclose your personal information if required by law or in response to valid requests from public authorities.

6. How we keep your data secure

We have put in place appropriate organizational safeguards and security measures to protect your Personal Data against accidental loss, unauthorized use or access, alteration, or disclosure.

Communication between your browser and our website uses a secure encrypted connection when your Personal Data is involved. We require any third party contracted to process your Personal Data on our behalf to put in place security measures that protect your data. In the event of a data breach, we will notify you and any applicable regulator when we are legally required to do so.

7. Children's privacy

We do not knowingly collect personal data from children under 16 years of age.

8. Your rights regarding your Personal Data

Depending on your location and citizenship, your rights are subject to local data-privacy regulations. These rights may include:

Right of access

You have the right to know whether we process your Personal Data and to request a copy of the Personal Data we process about you.

Right of rectification

You have the right to have incomplete or inaccurate Personal Data about you corrected.

Right to erasure

You have the right to request that we erase the Personal Data we process about you, unless we are required to retain it to comply with a legal obligation or to establish, exercise, or defend legal claims.

Right to portability

You have the right to obtain the Personal Data we hold about you in a structured electronic format and to transmit that data to another controller, where the data is data you provided to us and we process it based on your consent or to perform a contract with you.

Right to opt out

You have the right to opt out of the processing of your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal effects concerning you.

Non-discrimination

You have the right not to be denied service or to receive a degraded experience for exercising your rights.

Withdrawal of consent

If you have consented to the processing of your Personal Data, you have the right to withdraw that consent at any time, free of charge — for example, to opt out of our marketing communications.

How to exercise your rights

You may make a request by writing to us at the address below. For your own security, we may ask you to verify your identity before providing the requested information.

9. Changes to this policy

We may change this Policy at any time. If we make changes, we will publish an updated version on this website. When you use our services, you will be asked to review and accept our Privacy Policy so we can record your acceptance and notify you of future changes.

10. Contact us

To request a copy of your information, unsubscribe from our mailing list, request deletion of your data, or ask a privacy question, write to us at:

Stortech — Data Protection Officer

651 N Broad St, Suite 201, Middletown, Delaware, 19709

Email: privacy@stortech.io