Privacy Policy

1. Scope

This Privacy Policy applies to information processed by Lemonloop in connection with:

• account creation and authentication;
• Brand and Rep profiles;
• Event Listings;
• Event discovery and applications;
• applicant selection;
• Event bookings;
• Event check-in and check-out;
• maps, venue information, and location functionality;
• Post-Event Forms and Event reporting;
• photographs, documents, certifications, and other media;
• reimbursements;
• payments, refunds, and payouts;
• chat, voice, video, email, and SMS communications;
• disputes;
• ratings and reviews;
• customer support;
• fraud prevention and trust and safety;
• analytics, recommendations, and product development;
• legal and tax compliance; and
• other Platform functionality.

This Policy does not govern a third party's independent processing of information where that third party determines its own purposes and means of processing. Third-party services may have their own privacy notices and terms.

2. Categories of Personal Information We Collect

The information we collect depends on how you use Lemonloop.

A. Identifiers and Contact Information

We may collect:

• name;
• email address;
• telephone number;
• mailing address;
• billing address;
• account identifiers;
• usernames;
• company affiliation; and
• similar identifying information.

B. Authentication Information

If you use Google OAuth to create or access your Lemonloop account, we may receive or process:

• name;
• email address;
• Google account identifier;
• profile picture; and
• authentication credentials or tokens necessary to establish and maintain your authenticated session.

We use authentication tokens only for authentication, account security, and related Platform functionality. We do not sell authentication tokens or use them for third-party marketing.

C. Rep Profile and Professional Information

We may collect:

• profile photographs;
• biography;
• experience;
• professional or work history;
• Event history;
• availability;
• geographic preferences;
• category experience;
• languages;
• licenses;
• certifications;
• permits;
• training records;
• age eligibility;
• marketplace ratings; and
• other qualifications or profile information submitted by the Rep.

D. Brand and Business Information

We may collect:

• company name;
• job title;
• business contact information;
• company address;
• business account information;
• authorized Users;
• Event information;
• agency, distributor, supplier, retailer, or other business relationships; and
• other information associated with Brand use of the Platform.

Information relating solely to a legal entity may not constitute personal information under some privacy laws, but personal information relating to an individual employee, officer, representative, or business contact may remain covered.

E. Event and Marketplace Information

We may collect information concerning:

• Events viewed or searched;
• applications;
• application statuses;
• shortlisting, approvals, declines, and selections;
• Event schedule and location;
• attendance;
• arrival and departure;
• Event instructions;
• Event performance;
• Post-Event Forms;
• sales, sampling, and inventory information;
• consumer feedback;
• reimbursements;
• receipts;
• incidents;
• ratings;
• reviews; and
• Event-related communications.

F. Location Information

Where you use location-dependent functionality or provide applicable device permissions, Lemonloop may collect or process:

• approximate location;
• precise geolocation;
• venue addresses;
• check-in and check-out location;
• distance and route information; and
• location signals used to verify attendance or help prevent fraud.

Depending on its precision, location information may be considered sensitive personal information under applicable law. You may control certain location permissions through your device or browser settings. Disabling location permissions may prevent some Platform features from functioning.

G. Photos, Video, Documents, Certificates, and Other Media

Lemonloop may process:

• profile images;
• Event photographs;
• Event video;
• receipts;
• certificates;
• permits;
• documents;
• Post-Event Form attachments; and
• other files or media uploaded to the Platform.

Event media may incidentally contain consumers, venue staff, or other individuals who do not have Lemonloop accounts.

H. Payment, Payout, and Transaction Information

Payments and payouts are facilitated through Stripe, including Stripe Connect. Depending on your role, payment-related information may include:

• payment card information;
• billing information;
• bank or payout account details;
• transaction amounts;
• transaction history;
• payment status;
• refunds;
• chargebacks;
• payout history; and
• payment-verification or fraud-prevention information.

Complete payment card numbers and certain bank information may be collected directly by Stripe rather than stored by Lemonloop.

I. Tax Information

Where necessary for payment, tax reporting, or legal compliance, Lemonloop or its service providers may collect:

• taxpayer name;
• taxpayer classification;
• taxpayer identification information;
• Form W-9 information; and
• other legally required tax information.

Where practicable, highly sensitive payment or tax information may be collected directly by the applicable payment provider.

J. Credentials, Verification, and Eligibility Information

We may collect or receive information concerning:

• age eligibility;
• identity-verification status;
• professional or promotional credentials;
• alcohol-service certification;
• food-handling certification;
• permits;
• licenses;
• training records; and
• other Event-eligibility information.

If Lemonloop later uses consumer reports or formal background checks, legally required disclosures and authorizations will be provided separately.

K. Chat, Voice, Video, Email, and SMS Communications

Lemonloop may process communications sent through or to the Platform, including:

• Brand-Rep chat messages;
• user and group metadata;
• attachments;
• voice and video call metadata;
• live voice or video communications necessary to provide calling functionality;
• email addresses and names;
• transactional email content and template parameters;
• email attachments;
• telephone numbers;
• SMS content;
• one-time passcodes;
• support communications;
• dispute communications;
• feedback or survey responses.

Lemonloop may review or preserve Platform communications where reasonably necessary to operate the service, investigate fraud or disputes, enforce Platform policies, protect marketplace safety, respond to complaints, or comply with law.

Lemonloop does not intentionally record or store the contents of voice or video calls unless a recording feature is expressly enabled, clearly disclosed, and used in compliance with applicable consent and recording laws. Call metadata, such as participants, time, duration, status, and call type, may be retained as necessary to operate and secure communications functionality.

L. Device, Browser, Log, and Technical Information

We may automatically collect or receive:

• IP address;
• browser type;
• operating system;
• device type;
• device identifiers;
• application version;
• referring pages;
• pages or screens viewed;
• actions taken;
• session information;
• timestamps;
• server logs;
• crash reports;
• deployment or diagnostic information; and
• security logs.

M. Cookies and Similar Technologies

We may use cookies, local storage, software development kits, pixels, session technologies, and similar technologies for:

• authentication;
• account security;
• remembering preferences;
• Platform functionality;
• fraud prevention;
• analytics; and
• performance measurement.

Lemonloop does not currently use personal information for cross-context behavioral advertising or targeted advertising as those terms are defined by applicable comprehensive state privacy laws.

N. Fraud, Safety, Dispute, and Marketplace Integrity Information

We may process information relating to:

• suspected fraud;
• suspicious payment activity;
• false credentials;
• Event no-shows;
• cancellations;
• falsified Post-Event Forms;
• altered receipts;
• chargebacks;
• dispute history;
• complaints;
• harassment reports;
• safety incidents;
• policy violations;
• account compromise; and
• marketplace risk.

O. Inferences, Recommendations, and Analytics

We may derive inferences or analytics concerning:

• Event suitability;
• recommended Events;
• recommended Reps;
• staffing availability;
• Event performance;
• marketplace quality;
• fraud risk;
• operational trends; and
• Platform usage.

3. Sources of Personal Information

We may obtain personal information:

• directly from you;
• automatically from your browser, device, or use of the Platform;
• from Brands;
• from Reps;
• from authorized business Users;
• from Stripe;
• from Google OAuth;
• from communications providers;
• from mapping and location providers;
• from cloud, database, file-storage, and hosting providers;
• from credential or verification providers;
• from venues or Event contacts;
• from other Users involved in a dispute or safety report;
• from publicly available sources where lawful; and
• from other service providers or business partners acting lawfully.

4. How We Use Personal Information

Lemonloop may use personal information for the purposes described below.

A. Provide and Operate the Platform

We use information to:

• create and manage accounts;
• authenticate Users;
• maintain Brand and Rep profiles;
• post and display Events;
• allow Reps to discover and apply for Events;
• allow Brands to evaluate applicants;
• facilitate Event bookings;
• provide messaging, voice, video, email, and SMS functionality;
• support maps, venue information, and location functionality;
• support check-in and check-out;
• process Post-Event Forms;
• process reimbursements;
• facilitate payments, refunds, and payouts; and
• provide customer support.

B. Matching and Recommendations

We may use profile, experience, location, availability, Event, marketplace, and performance information to recommend Events, applicants, or other relevant opportunities.

C. Verification and Eligibility

We may use information to verify identity, age, account ownership, business affiliation, credentials, permits, certifications, payment information, tax information, or Event attendance.

D. Transactions and Financial Administration

We use information to process Brand charges, facilitate Rep payouts, calculate Platform Fees, process reimbursements, handle refunds, investigate payment issues, address chargebacks, maintain transaction records, prevent payment fraud, and comply with tax or financial obligations.

E. Safety, Security, and Fraud Prevention

We may process information to authenticate Users, detect unauthorized access, secure accounts, prevent fraud, investigate falsified documentation, address harassment or safety reports, enforce Platform rules, protect Users, and prevent unlawful or abusive conduct.

F. Dispute Resolution

We may review relevant communications, check-in information, location records, Post-Event Forms, photographs, receipts, transaction records, call metadata, and other evidence when investigating an Event dispute.

G. Platform Improvement, Analytics, and Product Development

We may analyze Platform information to understand use, diagnose issues, improve features, test functionality, improve matching, evaluate marketplace performance, develop analytics, create benchmarks, improve fraud detection, develop new products, and create Aggregated and De-identified Data.

H. Communications

We may contact you regarding Events, applications, payments, refunds, security, account activity, disputes, Platform updates, customer support, legal notices, and marketing where permitted.

I. Legal Compliance and Protection of Rights

We may process information to comply with law, respond to lawful legal process, maintain required financial and tax records, respond to regulators, prevent unlawful activity, enforce agreements, establish legal claims, exercise legal rights, and defend Lemonloop or its Users.

5. How We Disclose Personal Information

Lemonloop may disclose personal information in the following circumstances.

A. Between Brands and Reps

Certain information must be disclosed between Users for the marketplace to function. For example, Brands may receive relevant applicant profile information, while confirmed Reps may receive Brand identity, Event location, Event contacts, schedule, instructions, product information, and other Event details.

Lemonloop attempts to limit User-to-User disclosure to information reasonably related to the marketplace relationship.

B. Service Providers and Processors

We disclose information to vendors that help provide the Platform, including providers of:

• payments and payouts;
• authentication;
• cloud hosting and infrastructure;
• file and media storage;
• database services;
• messaging, voice, and video communications;
• transactional email;
• SMS and telecommunications;
• mapping and location services;
• web hosting and deployment;
• cybersecurity;
• analytics;
• fraud prevention;
• customer support; and
• professional services.

Service providers receive information only as reasonably necessary for the services they provide, subject to applicable contractual and legal requirements.

C. Legal, Safety, and Security Disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with law;
• respond to a subpoena, warrant, court order, or lawful governmental request;
• investigate fraud or unlawful conduct;
• prevent or respond to security incidents;
• prevent imminent harm;
• protect a person's rights or safety;
• enforce agreements; or
• establish, exercise, or defend legal claims.

D. Corporate Transactions

Information may be disclosed or transferred in connection with financing, investment, due diligence, merger, acquisition, restructuring, bankruptcy, sale of assets, or sale or transfer of some or all of Lemonloop or the Platform.

Any recipient remains subject to applicable legal obligations concerning information transferred.

E. At Your Direction or With Consent

We may disclose information where you instruct us to do so or provide legally valid consent.

6. Current Third-Party Services and Data They Handle

The following providers are currently used in connection with the Platform. Not every provider receives every category of personal information, and providers may process data under their own terms in addition to acting as Lemonloop service providers or processors.

We may add, remove, or replace service providers as the Platform evolves. A change to a provider performing substantially the same category of service does not necessarily represent a material change to this Privacy Policy, although we will update disclosures when appropriate or legally required.

7. Payment and Financial Data

Lemonloop uses Stripe to process payments and Stripe Connect payouts. Stripe may collect payment credentials, bank information, identity or verification information, and other financial information directly from Users.

Lemonloop generally seeks to avoid storing full payment card numbers when payment information can be processed directly by Stripe.

Payment and transaction information may be used for processing, refunds, payouts, fraud prevention, chargebacks, dispute resolution, accounting, tax reporting, and legal compliance.

8. Google Authentication

If you choose Google OAuth, Lemonloop receives information permitted by your Google account permissions, such as your name, email address, profile picture, and Google account identifier, and processes authentication tokens needed to maintain your sign-in session.

Lemonloop uses Google authentication information to authenticate you, secure your account, and provide Platform functionality. Lemonloop does not sell Google authentication tokens, use them for targeted advertising, or disclose them for unrelated third-party marketing.

You may be able to revoke Lemonloop's access through your Google account settings. Revoking access may affect your ability to sign in through Google.

9. Communications, Chat, Voice, and Video

Lemonloop uses CometChat to provide in-Platform messaging and voice/video functionality, Brevo to send transactional email, and Telnyx to provide SMS and one-time passcodes.

Chat communications may be stored to provide conversation history, support disputes, maintain marketplace safety, and operate the Platform.

Voice and video communications may transit through communications infrastructure necessary to provide the call. Lemonloop does not intentionally record or retain the contents of voice or video calls unless a recording feature is expressly enabled, clearly disclosed, and operated in compliance with applicable consent and recording laws.

Call metadata, including participants, time, duration, status, and call type, may be processed and retained for Platform operation, security, fraud prevention, support, and dispute resolution.

10. Location Privacy

Lemonloop may use Google Maps and Places and device or browser location functionality for Event discovery, maps, venue information, distance calculations, check-in, check-out, attendance verification, fraud detection, and marketplace safety.

Lemonloop does not currently sell precise geolocation information.

Where applicable law requires consent before processing precise geolocation or other sensitive data, Lemonloop will request the required consent. You may withdraw or change device permissions, although doing so may limit location-dependent features.

11. SMS and Mobile Information

If you separately opt in to receive SMS communications, Lemonloop and Telnyx may process your telephone number, opt-in status, consent records, SMS content, one-time passcodes, delivery status, and messaging metadata.

Lemonloop will not sell or share mobile telephone information, SMS opt-in information, or SMS consent information with third parties for their own promotional or marketing purposes.

Lemonloop may disclose mobile information and SMS consent status to telecommunications carriers, messaging-platform providers, and service providers solely as reasonably necessary to provide the messaging service, maintain security, prevent fraud, or comply with law.

Where supported, Users may reply STOP to unsubscribe from applicable SMS messages and HELP for assistance. Message frequency may vary and message and data rates may apply.

SMS marketing consent, if Lemonloop later offers marketing texts, will be requested separately and will not be bundled with acceptance of these Terms or with consent to receive transactional messages where separate consent is required.

12. Event Photographs and Information About Non-Users

Event photographs or media may contain consumers, retail employees, venue personnel, or other people who do not have Lemonloop accounts.

Brands and Reps are responsible for complying with applicable photography, recording, privacy, publicity, and venue-consent requirements when creating or uploading content.

Users should not intentionally upload unnecessary sensitive information concerning Event attendees.

Lemonloop may process Event media for Event verification, Brand reporting, Post-Event Forms, fraud prevention, dispute resolution, marketplace quality, analytics, and other disclosed Event purposes.

13. Cookies, Technical Data, and Google Fonts

Lemonloop and its service providers may use cookies, local storage, SDKs, session technologies, and similar tools for authentication, security, preferences, Platform functionality, fraud prevention, and analytics.

When the Platform loads Google Fonts from Google servers, Google may receive network or browser information such as an IP address, user-agent information, and request metadata. Lemonloop may later self-host fonts or change font providers, which can reduce or change this third-party data flow.

Vercel and other infrastructure providers may process IP addresses, server logs, request information, and diagnostics when delivering the Platform.

14. Sale, Sharing, and Targeted Advertising

As of the Effective Date:

Lemonloop does not sell personal information for monetary consideration.

Lemonloop also does not currently:

• sell personal information as "sale" is defined by applicable comprehensive U.S. privacy laws;
• share personal information for cross-context behavioral advertising as defined by California law; or
• process personal information for targeted advertising as defined by applicable comprehensive state privacy laws.

If Lemonloop later introduces a practice that constitutes sale, sharing for cross-context behavioral advertising, or targeted advertising under applicable law, Lemonloop will update its disclosures and implement any legally required notice, opt-out mechanism, consent process, universal opt-out handling, contractual protections, or privacy assessments before or when required by law.

This section does not restrict Lemonloop's use or commercialization of information that has been properly aggregated or de-identified so that it is not treated as personal information under applicable law.

15. Aggregated, De-identified, and Commercial Analytics Data

Lemonloop may create aggregated, anonymized, or de-identified information from information processed through the Platform.

This may include commercial and industry insights concerning:

• Event and sampling performance;
• geographic trends;
• venue trends;
• product and category trends;
• staffing availability;
• compensation rates;
• sampling volumes;
• consumer engagement;
• campaign performance;
• operational benchmarks;
• timing and duration; and
• marketplace activity.

Lemonloop may use, disclose, publish, license, sell, and otherwise commercialize Aggregated and De-identified Data for lawful purposes, including analytics, commercial data products, market intelligence, benchmarking, industry research, trend reporting, artificial intelligence, product development, marketplace optimization, and commercial partnerships.

Lemonloop publicly commits to maintaining information represented as de-identified in de-identified form and not attempting to reidentify individuals except where permitted by law solely to test, evaluate, or improve the effectiveness of de-identification safeguards.

Lemonloop will use reasonable measures designed to prevent de-identified information from being associated with an identifiable individual. Where required by law, recipients of de-identified information will be contractually prohibited from attempting to identify or reidentify individuals.

Unless separately authorized, commercially distributed datasets derived from a Brand's confidential information will be structured so they do not expressly identify that Brand.

Lemonloop does not treat raw payment credentials, bank account details, Google authentication tokens, passwords, one-time passcodes, SMS consent records, government identification numbers, tax identifiers, private message content, identifiable voice/video communications, or precise identifiable geolocation as commercial data products.

Aggregated and De-identified Data may be retained indefinitely where permitted by law.

16. Sensitive Personal Information

Depending on the features used, Lemonloop may process information considered sensitive under applicable law, including:

• precise geolocation;
• account login credentials and authentication tokens;
• certain financial account information;
• government identification information;
• taxpayer information; and
• other information classified as sensitive by applicable law.

Lemonloop uses sensitive information only for reasonably necessary purposes such as providing requested Platform functionality, authenticating Users, Event attendance verification, payment processing, tax reporting, identity or credential verification, security, fraud prevention, legal compliance, and protection of Users.

Where applicable law requires consent before processing sensitive information, Lemonloop will obtain the required consent. Where required, you may withdraw consent through the same or a comparably easy method.

Lemonloop does not use sensitive personal information to infer highly sensitive characteristics about individuals for unrelated commercial purposes.

17. Automated Processing and Recommendations

Lemonloop may use automated systems, algorithms, or artificial intelligence to support matching, Event recommendations, applicant recommendations, fraud detection, ranking, marketplace analytics, safety, moderation, support, and product development.

Lemonloop does not intend to use automated processing as the sole basis for decisions producing legal or similarly significant effects concerning individuals unless the processing complies with applicable law and any required notices, assessments, human review, access rights, or opt-out rights are provided.

18. Data Retention

Lemonloop retains personal information only for as long as reasonably necessary and proportionate for the purpose for which it was collected, subject to legal, accounting, fraud-prevention, security, dispute, and recordkeeping requirements.

Our retention criteria generally include:

• Account and profile information: for as long as the account is active and for a reasonable period afterward to address account recovery, fraud, disputes, legal claims, and recordkeeping.
• Event, application, Post-Event Form, reimbursement, and marketplace records: for as long as reasonably necessary to provide the Platform, maintain Event history, resolve disputes, prevent fraud, support reporting, and establish or defend legal claims.
• Payment, payout, tax, and transaction records: for the period required by financial, tax, accounting, anti-fraud, and other applicable laws, which may extend for several years after a transaction.
• Chat and communications records: for as long as reasonably necessary to provide conversation history, support the marketplace, resolve disputes, prevent abuse, enforce policies, and satisfy legal obligations.
• Voice/video call content: Lemonloop does not intentionally retain call content unless a recording feature is expressly enabled and separately disclosed. If recording is enabled, retention will be described in the applicable notice or feature.
• Call logs and communications metadata: for as long as reasonably necessary for Platform operation, support, safety, fraud prevention, and dispute resolution.
• Security, fraud, dispute, and safety records: for as long as reasonably necessary to prevent repeated misconduct, secure the Platform, comply with law, and establish or defend claims.
• Authentication tokens: only for as long as needed to provide authentication, maintain the relevant session or authorized access, or satisfy security requirements, after which they are revoked, expired, or deleted as technically appropriate.
• Backups: for a limited period after information is deleted from active systems, consistent with backup rotation and disaster-recovery practices.
• Aggregated and De-identified Data: may be retained indefinitely where permitted by law.

When information is no longer reasonably necessary, Lemonloop may delete, anonymize, aggregate, or de-identify it, subject to legal obligations and technical limitations.

19. Data Security

Lemonloop uses administrative, technical, and organizational measures designed to protect personal information in light of the nature, volume, and sensitivity of the information involved.

Measures may include, as appropriate:

• authentication controls;
• role-based and least-privilege access;
• encryption in transit;
• secure storage and encryption where appropriate;
• access logging and monitoring;
• secure file access mechanisms;
• backup and recovery procedures;
• vendor and processor controls;
• security testing;
• secrets and credential management; and
• incident-response procedures.

No online service can guarantee absolute security. Users are responsible for protecting account credentials and promptly reporting suspected unauthorized access to support@lemonloop.co.

20. Core U.S. Privacy Rights

To provide a consistent experience, Lemonloop intends to make the following core request mechanisms available to U.S. Users, subject to applicable law, legal exceptions, technical feasibility, and reasonable identity verification.

You may request that Lemonloop:

• confirm whether we process personal information about you;
• provide access to certain personal information;
• correct inaccurate information;
• delete certain personal information; and
• provide a portable copy of certain information.

Depending on applicable state law, you may also have rights to:

• obtain information about categories of third parties receiving personal information;
• opt out of sale;
• opt out of targeted advertising;
• opt out of certain profiling;
• limit certain uses of sensitive personal information;
• withdraw consent to sensitive-data processing; and
• appeal a denied privacy request.

Requests may be sent to support@lemonloop.co with the subject line "Privacy Request." Lemonloop may request information reasonably necessary to verify identity and protect information from unauthorized disclosure.

Lemonloop will not unlawfully discriminate against an individual for exercising a privacy right.

21. Authorized Agents

Where applicable law permits an authorized agent to submit a privacy request, Lemonloop may require evidence that the agent is authorized, verification of the consumer's identity, or confirmation directly from the consumer.

22. Delaware Privacy Rights

This Privacy Policy applies to Delaware residents. Where the Delaware Personal Data Privacy Act applies, qualifying Delaware consumers may have the right to:

• confirm whether Lemonloop processes their personal data and access that data;
• correct inaccuracies;
• delete personal data provided by or obtained about them;
• obtain a portable copy of personal data processed by automated means;
• obtain a list of categories of third parties to which Lemonloop has disclosed personal data; and
• opt out of targeted advertising, sale of personal data, and qualifying profiling in furtherance of solely automated decisions that produce legal or similarly significant effects.

Where required by Delaware law, Lemonloop obtains consent before processing sensitive personal data.

Delaware Appeals

If Lemonloop denies a qualifying Delaware privacy request, the consumer may appeal by emailing support@lemonloop.co with the subject line "Delaware Privacy Appeal."

Lemonloop will respond to qualifying appeals within the period required by applicable law. If the appeal is denied, Lemonloop will provide information about how to contact the Delaware Department of Justice. Delaware consumers may submit privacy complaints to the Delaware Department of Justice at privacy@delaware.gov.

Lemonloop will recognize qualifying universal opt-out mechanisms where required by Delaware law.

23. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents to the extent the California Consumer Privacy Act, as amended ("CCPA"), applies to Lemonloop.

Categories Collected, Purposes, and Retention Criteria

During the preceding 12 months, depending on how a person used the Platform, Lemonloop may have collected the following CCPA categories of personal information:

Lemonloop collects and uses these categories for the purposes described throughout this Privacy Policy.

Lemonloop may disclose these categories to service providers, other Users where necessary for the marketplace, legal authorities where required, and transaction counterparties in a corporate transaction, as described in this Policy.

California Rights

Subject to applicable exceptions, California residents may have rights to:

• know the categories and specific pieces of personal information Lemonloop has collected;
• know the categories of sources, purposes, and categories of recipients;
• correct inaccurate personal information;
• delete personal information;
• opt out of sale or sharing;
• limit certain uses and disclosures of sensitive personal information where applicable; and
• receive nondiscriminatory treatment for exercising privacy rights.

Sale and Sharing

Lemonloop does not currently sell personal information or share personal information for cross-context behavioral advertising.

Lemonloop may license, sell, or otherwise commercialize information that has been properly aggregated or de-identified so that it is not treated as personal information under applicable law.

If Lemonloop later begins selling or sharing personal information in a manner subject to California opt-out requirements, Lemonloop will provide the required "Do Not Sell or Share My Personal Information" mechanism and honor applicable opt-out preference signals.

Notice at Collection

This Privacy Policy is intended to provide the categories of personal information Lemonloop collects, the purposes for collection and use, and the retention criteria applicable to those categories. Lemonloop may also provide shorter just-in-time notices at specific collection points, including for precise location, SMS consent, or other sensitive or context-specific processing.

24. Other State Privacy Laws

Residents of states with applicable comprehensive privacy laws may exercise rights granted by the law applicable to them, which may include access, correction, deletion, portability, sale opt-out, targeted-advertising opt-out, profiling opt-out, sensitive-data rights, authorized-agent rights, and appeal rights.

Privacy requests may be submitted to support@lemonloop.co. Where applicable law requires an appeal process, appeals may be submitted to the same address with the subject line "Privacy Appeal."

25. Universal Opt-Out Preference Signals

Where applicable law requires Lemonloop to recognize a legally valid universal opt-out preference signal, such as Global Privacy Control or another qualifying mechanism, Lemonloop will process supported signals as required by law.

Because Lemonloop does not currently sell personal information or use it for targeted advertising as described above, a universal opt-out signal may not produce a visible change to current Platform functionality.

26. Marketing Choices

Users may unsubscribe from marketing emails using the unsubscribe mechanism provided in the communication.

Opting out of marketing does not prevent Lemonloop from sending non-marketing messages such as Event communications, application updates, payment notices, account messages, security alerts, legal notices, and customer-support communications.

If Lemonloop later offers marketing SMS, Lemonloop will request any separate consent required by law and carrier rules.

27. Children and Age-Restricted Events

The Platform is intended for adults. Users must be at least 18 years old to maintain a Lemonloop account.

Lemonloop does not knowingly permit children under 13 to maintain Platform accounts.

Events involving alcohol generally require participating Reps to be at least 21 years old or satisfy another applicable minimum age.

If Lemonloop learns that it collected personal information from a child in violation of applicable law, it will take reasonable steps to delete the information.

28. International Access

Lemonloop is presently designed primarily for the United States.

If a person accesses Lemonloop from another country, information may be processed in the United States or other locations where Lemonloop's service providers operate.

If Lemonloop materially expands into jurisdictions requiring additional international privacy disclosures, transfer mechanisms, representatives, or rights, Lemonloop may supplement or update this Privacy Policy.

29. Third-Party Links and Independent Services

The Platform may contain links or integrations with third-party services. Those parties may independently process personal information under their own privacy notices and terms.

Lemonloop does not control independent privacy practices of third parties where those parties determine their own processing purposes and means.

30. Corporate Transactions

Personal information and other Lemonloop data may be transferred or disclosed in connection with financing, investment, merger, acquisition, restructuring, bankruptcy, due diligence, asset sale, or transfer of the Platform.

Where legally required, Lemonloop will provide notice or other protections if the recipient intends to use personal information for materially different purposes.

31. Changes to This Privacy Policy

Lemonloop may update this Privacy Policy as Platform functionality, vendors, data practices, laws, or Lemonloop's business model evolve.

The "Last Updated" date will be revised when changes are made. For material changes, Lemonloop will provide additional notice or obtain consent where required by law.

If Lemonloop later begins selling identifiable personal information, sharing personal information for cross-context behavioral advertising, or introducing materially different sensitive-data processing, Lemonloop will implement applicable notices, opt-outs, consent mechanisms, universal opt-out support, and other protections before or when legally required.

32. Contact Lemonloop

Questions, privacy requests, appeals, and concerns may be directed to:

• Lemonloop, LLC
• A Delaware limited liability company
• 148 South Liberty Drive
• Stony Point, NY 10980
• Email: support@lemonloop.co