PRIVACY POLICY

This Privacy Policy was last updated on 4-01-2024.

This privacy policy (“Privacy Policy”) of REPOT BOX INC. (“REPOT BOX” or “us” or “we” or “our”) applies to the operations of REPOT BOX that we offer through our web application and mobile application (the “Service”). This Privacy Policy applies to any Service offered or provided by REPOT BOX, regardless of how you access or use it. It provides the policies and procedures for collecting, using, and disclosing the information of each user of the Service ("you", "your", or the "User"). This Privacy Policy has been compiled to explain how information, including personal information, is collected or used. By accessing, browsing, or otherwise using the Service, you agree to our collection, storage, use and disclosure of your information, as described in this Privacy Policy and the Terms of Service. For the purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could be linked, directly, or indirectly, with a particular individual or household. Personal information does not include publicly available information.

All updates to this Privacy Policy are noted at the top of this page, with time-date reference for your convenience. REPOT BOX reserves the right in its sole discretion to amend this Privacy Policy at any time, and you should regularly check this Privacy Policy for any amendments. This Privacy Policy does not apply to websites that post different privacy policies or statements.

PRIVACY OF CHILDREN

Our Service is not intended for children or persons under the age of 21. Children or persons under the age of 21 are not allowed to use our Service. If we learn or have reason to suspect that a user is under age 21, we will promptly deactivate that user’s account (“Membership Card”) and delete any Personal Information collected in connection therewith. If you believe we might have any information from or about a child or person under the age of 21, please contact us at privacy@REPOT BOX.io.

Categories of Information We Collect:

Business Data

By using the Service, you agree to give us access to data about your company’s medical and/or recreational cannabis inventory or any cannabis-related inventory and/or transaction information and product information (“Business Data”). When you provide us with your Business Data, you grant us and our affiliates and service providers (defined below) the right to use, reproduce, modify, perform, display, distribute and otherwise disclose to third parties or our affiliates any such material. This information is collected by REPOT BOX in order to help us and our affiliates develop and offer our new products and services (which may be offered by REPOT BOX, an affiliate, or by a third party), improve our existing products and services, conduct due diligence and to comply with recordkeeping requirements relating to the sale of cannabis or cannabis related products. You represent that you have access to this information lawfully and can give us and our affiliates permission to access and share it.

Personal Information

When you contact us or opt in by creating a Membership Card, utilizing our Service, registering to receive alerts or other information via email, text, or instant message, we may collect your age, gender, location information, email address, phone number, as well as other information, including demographic information, that you directly give us. We collect your Personal Information for the purposes described in this Privacy Policy. In the past twelve months we may have collected the following types of information:

• Identifiers and contact information, such as your name, address, phone number, email address, or social media IDs;

• Information collected from our partner retailers. Retailers may provide us with information about you. For example, Retailers may obtain additional Personal Information from you in the course of fulfilling an order placed after utilizing our Service, such as the items you purchase, shipping address, and contact information (such as for receipts or order updates) and share this information with us;

• Payment information, such as your payment method and payment information (such as debit or credit card number and information), and billing address;

• Preference information, such as your contact and marketing preferences, and brand and merchandise interests;

• Profile and account information, which may include contact, purchase, and preference information as well as your account password, items in your online shopping cart or saved for future purchase, product review information, address book entries and other information about your profile or account;

• Communications and interactions, which may include email messages, chat sessions, text messages, and phone calls that we exchange with you;

• Demographic information, which may include age or birthdate, gender, racial or ethnic origin, ZIP code, and other information about you;

• Call recordings, including information about your call and that you share when you call us on the phone;

• Location or geolocation information of your device that you use to access the Service, if your device settings allow us to collect location information;

• Device and browsing information and other Internet activity information, including information about your phone, tablet, computer, or device, and online browsing activity (collectively, “automatically collected information”). Automatically collected information may include IP addresses, unique device identifiers, cookie identifiers, device and browser settings and information, and Internet service provider information. Automatically collected information also may include information about when and how you access and use our Service, such as the date and time of your visit or use, the websites you visit before coming and after leaving our website, how you navigate and what you search for using our Service, the pages and items you view using our Service, and the items you purchase; and

• Inferences about any of the information above that may relate to your preferences, or other matters. We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends and to learn more about the demographics of our users.

How We Collect Information

The information we collect on or through our Service includes information that you provide by contacting us, registering or using the Service, and through any other communications with you. We also obtain information from you and from third parties. For example, we collect and obtain information:

• You provide, such as when you register for a Membership Card, make a purchase, contact us, provide product reviews or feedback, participate in a promotion, respond to a survey, apply for employment, or sign up for emails or marketing;

• From Wi-Fi and mobile devices, such as information about your device when you use our Service;

• From third parties, such as Service Providers that we use, analytics companies, advertising networks and cooperatives, demographic companies, third parties that provide us with information about you and the different devices you use online, and other third parties that we choose to collaborate or work with;

• From social media platforms and networks that you use in connection with our Service, or that share or allow you to share information with us, such as Facebook, Twitter, Pinterest, and Instagram. For example, if you use functionalities, plugins, widgets, or tools from social media platforms or networks in connection with our Service (e.g., to log into an account, or to share inspiration, finds, purchases, and other content with your friends and followers on social media), we will collect the information that you share with us, or that those social media platforms or networks share with us. For more information about social media platform and network privacy practices, please review the privacy policies and settings of the social media platforms and networks that you use;

• Using cookies and automatic collection methods. For example, we and third parties we work with may collect information from the computer, tablet, phone, or other device that you use to access our Service, or that you use to open an email or click on an advertisement from us. Methods we use include:

o Cookies (which may be session-based or persistent, and are typically small data files that are stored on your hard drive or in connection with your Internet browser);

o Web beacons or tags (small images embedded into websites or emails that send information about your computer, tablet, phone, or other device when you use our Service, including when you visit our website, use or mobile application, or open an email we send to you);

o Website and mobile application log files (which we tend to create automatically in connection with access to and use of our Service);

o Flash cookies or Local Stored Objects (which may be placed using Adobe Flash software— learn more about privacy and storage settings for Flash cookies here); and

o Other technologies (which may be similar to or different than the methods noted above).

Cookies are used to help us understand your preferences for future visits based on previous or current website activity. We also use cookies to compile aggregate data about website traffic and website interaction so that we can offer better experiences, tools and Services in the future.

You may choose to have your computer warn you each time a cookie is being sent. Your browser can also be set to block cookies, but some features of the Service may not properly work. You can make these changes in your browser settings, however, since each browser is a little different, look at your browser’s “Help Menu” to learn the correct way to modify your cookies settings. If you turn cookies off, some of the features that make your user experience more efficient may not function properly or otherwise be available to you.

How We Use Your Information

We use the information provided by you to help us improve your experience using the Service.

Business Data. You acknowledge and agree that the Service collects inventory and/or transactional information about your cannabis business. We aggregate and interpret this information to be able to present reports to you that represent your Business Data in meaningful ways. You acknowledge and agree that we may collect, transmit, store, and use your Business Data to fulfill your requests or provide you with other products, services, or information related to the Service. You agree to receive communications about additional products or services that we may provide in the future or about business opportunities in related fields. You give us permission to use and share your Business Data with data from our other customers in order to perform analytics. You also agree that we may disclose and copy your Business Data to third parties engaged by us that can assist us with offering you our Service (which includes but is not restricted to database management, data entry and processing, third-party information technology, call-center service providers, services and products alerts, payment extension services, delivery services, verification services, credit-worthiness, and membership authentication) ("Service Providers"). These Service Providers are under a commitment of confidentiality to us and authorized to utilize your Business Data for the purposes stated above. We do not claim ownership of your Business Data. However, by providing Business Data, you grant us and our affiliates and Service Providers, and each of their and our respective licensees, successors, and assigns the right to use, reproduce, modify, perform, display, distribute, and otherwise disclose to third parties any such material. In addition, we generally anonymize or aggregate data collected through the Service and may use and disclose it for any purpose without your authorization. You have the right to ask us to delete your information from the Service, after which we will not share your Business Data with third parties, including competing businesses, without your consent or without first aggregating and anonymizing your Business Data.

Personal Information. REPOT BOX will not publish any of your operational or profile data in any personally identifiable way. We may use your Personal Information we collect to:

• Provide customer support to respond to customer service requests, comments and questions; • Improve our Service, functionality, and overall user experience;

• Deliver our Service to you;

• Perform data analysis and market research to better cater and market to our users, as well as learn about preferences and usage habits;

• Send periodic emails, notifications, and text messages regarding our Service; • Follow up with you after correspondence (live chat, email, or phone inquiries); • Communicate about our partners’ products, services, and special offers;

• Automatically update the Service on your device;

• Send periodic product updates as well as Service updates;

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;

• Troubleshoot technical difficulties and errors;

• Link or combine user information with other Personal Information;

• As permitted or required by applicable law or regulatory requirements; and

• For any additional purposes for which we have obtained your consent to the use or disclosure of your Personal Information.

Non-Personal Information. We may use and share Non-Personal Information (anonymized data that is in a statistical or summary form that does not include any personal identifiers) in the aggregate for any purpose without your authorization, for example to compile data trends, and otherwise analyze the performance of our Service. Non-Personal Information will also facilitate the provision of software updates, product support, and other services to you. This aggregate data will in no way personally identify you or any other users of the Service.

Membership Card Registration

To access the Service, REPOT BOX requires users to register and create a Membership Card, and the following information may be collected if the user chooses to create a Membership Card:

• Age;

• Email address;

• Phone Number;

Once a Membership Card is created, users are encouraged, but not required, to complete a profile, which may request the following:

• Date of birth;

• Gender

Once a Membership Card is created, users may also provide information about:

• Location information; and

• Product Usage Data.

If you are a Company, when you create an account you will need to provide information for your company and products associated with your company, including but not limited to Business Data. The information gathered from your company includes but is not limited to:

• Company Name

• Company Address

• Company Website

• Company Phone Number

• Company Position

• Company License Number(s)

• Company License Type(s)

• A List of Product Names and Details

• Photos of Products (optional)

Who Do We Share Your Information With?

Except as disclosed in this Privacy Policy, we do not disclose your information to any companies not part of REPOT BOX or its parent, subsidiaries or related entities. In no event will we ever sell or rent any identifying Personal Information, except in the form of aggregate consumer information, as described below. We may, however, share Business Data and Personal Information as follows:

• We may share information for legal, protection, and safety purposes.

• We may share information to comply with laws or as permitted by laws.

• We may share your email address with our dispensary partners;

• We may share information to respond to lawful requests and legal processes.

• We may share information with other companies and brands owned or controlled by REPOT BOX, including our subsidiaries.

• We may share information to protect the rights and property of REPOT BOX, our agents, customers, and others. This includes enforcing our agreements, policies, and Terms of Service.

• We may share information in an emergency. This includes protecting the safety of our employees and agents, our customers, or any other person.

• We may share your information with our affiliates, vendors, Service Providers, business partners, contractors and agents in connection with the performance of services on our behalf. These Service Providers are prohibited from using your information except as needed to perform our work or as required by law.

• We may share information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.

We may also share your information with our employees, contractors, consultants, affiliates and other parties who require such information to assist us with managing our relationship with you, including Service Providers and third parties that provide services to us or on our behalf.

Finally, we may also sell, rent, or share aggregate consumer information (i.e., anonymized summary data) with others for their own uses. Specifically, if you register to use our Service and create a Membership Card, we may sell, rent or share certain aggregate consumer information that we compile using Personal Information and Product Usage Data collected about you and other users. This aggregate consumer information will never include your name, phone number, email address, or mailing address. We may sell, rent or share this aggregate consumer information with our partners and other companies for their own marketing, product development, research, or other uses.

We do not sell, trade, or otherwise transfer to outside parties your information outside of the situations detailed above, unless you consent otherwise.

Product Usage Data

We do not collect any user data without the explicit consent of the user. We may, as described below, collect information about a user’s experiences and preferences related to the consumption of cannabis or cannabis products (“Product Usage Data”). As stated in the Terms of Service, to the extent it pertains to cannabis, REPOT BOX may only be used by residents of states and localities with laws authorizing and/or regulating the medical or recreational use of cannabis, and only to the extent permitted by such laws. Cannabis is a Schedule I controlled substance under the federal Controlled Substances Act, and, therefore, the possession, cultivation and distribution thereof, or conspiring with or assisting others to do the same, is federally illegal and can result in significant criminal and civil penalties. Additionally, medical use is not recognized as a valid defense under federal laws regulating cannabis, and interstate transportation of cannabis is a federal offense. ENGAGING IN ACTIVITIES OR BUSINESS RELATED TO CANNABIS IS AT YOUR OWN RISK. We may also collect information about a user’s experiences and preferences related to the consumption of hemp or hemp products, which also constitutes Product Usage Data.

You may optionally share Product Usage Data regarding your usage of a variety of such products, such as which products you used, how effective those products were in connection with your desired goals, the environment in which you used a product, and other relevant data that may affect the user’s product experience). We use this Product Usage Data to help improve our Service, and to create aggregate consumer information. We only collect Product Usage Data with your consent, and we take appropriate measures to protect it. You can opt out at any time; however, this may limit your access to certain Services.

As stated in the Terms of Service, REPOT BOX’s collection and utilization of such Product Usage Data, including any ratings or reviews, does not constitute or imply REPOT BOX’s endorsement, recommendation, or favoring of any product, whether or not the product is included on the Service.

Security and Protection of Your Data

We take the security of your information seriously and use reasonable electronic, personnel and physical measures to protect it from loss, theft, alteration or misuse. However, please be advised that even the best security measures cannot fully eliminate all risks. While we take reasonable steps to protect your information, we cannot and do not warrant the security or integrity of any information you transmit to us when registering for our Service or otherwise. We cannot guarantee that only authorized persons will view your information. All such transmission of information is at your own risk. We are not responsible for third-party circumvention of any privacy settings or security measures.

Whenever we collect Personal Information, Business Data, or Product Usage Data, that information is encrypted and transmitted in a secure way. We will not ask you to provide payment card information (such as credit card number, expiration date, CVV, and billing address). However, if a third-party service you have found through the Service collects such payment card information or any other sensitive information from you, you should ensure that information is encrypted and transmitted in a secure way. In most instances, you can verify that a website is secured by looking for a closed lock icon at the bottom of your web browser or looking for “https” at the beginning of the address of the web page.

We are dedicated to protecting all information to the greatest extent possible. However, if you create a

Membership Card, you are responsible for maintaining the confidentiality of your Personal Information by keeping your information confidential.If you learn of any incident involving the loss of or unauthorized access to or disclosure of Personal Information that is in our custody, you should notify us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. You can find our latest Privacy Policy on our website. We may also send emails to any user who has created a Membership Card containing a link to the revised Privacy Policy. Your continued use of the Service after we make changes is deemed to be an acceptance of those changes, so please check the Privacy Policy periodically for updates.

Consent

By using our Service, we assume that you have consented to the collection, use and disclosure of your Personal Information and/or Business Data as explained in this Privacy Policy. You may change or withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer using the contact information set out below. All communications with respect to such withdrawal or variation of consent should be addressed to our Privacy Officer. Please note that in some circumstances, withdrawing or changing your consent to certain uses of your Personal Information may affect: (i) our ability to provide you with the Service you request; and (ii) your ability to access to the Service.

Please refer to the Terms of Service, which incorporates this Privacy Policy by reference, for instructions regarding opting out of receiving push notifications, text messages, and emails from REPOT BOX. Additional information regarding your rights with respect to the collection of your personal data is included below.

Updating Your Personal Information

It is important that the information contained in our records is both accurate and current. If you would like to review, correct, update, or suppress Personal Information that you have previously provided through the Service or otherwise, you may do so by emailing us at hello@repotbox.app. Please note that REPOT BOX may retain certain information for recordkeeping purposes, and residual information may remain within our databases and other records. REPOT BOX is not responsible for removing information from the databases of third-party entities or from third-parties with whom REPOT BOX has already shared, or which have been provided Personal Information. In some circumstances we may not agree with your request to change your Personal Information and will instead append an alternative text to the record in question.

Access to Your Personal Information

Subject to applicable laws, you can review, verify or correct your Personal Information. Please review the information in the “Your Rights” section below regarding your rights with respect to the collection of your personal data or contact our Privacy Officer for further details.

In the event that we cannot provide you with access to your Personal Information, we will endeavor to

inform you of the reasons why, subject to any legal or regulatory restrictions.

Your Choices About Data We Collect and How to Opt Out

You have a choice about how we use your Personal Information. Although you cannot opt out of all data collection when you use our Service, you can limit the collection, use, and sharing of your personally identifiable information. Please note that this may affect your ability to access certain Services. You may opt out at any time by visiting repotbox.com and changing your data collection preferences or by contacting us at hello@repotbox.app

Email Choices. You can opt-out of marketing or advertising emails by using the “unsubscribe” link or mechanism noted in marketing or advertising emails you receive from us or emailing us at hello@repotbox.app You may also request to opt-out of marketing or advertising emails by contacting us through one of the methods specified in the “Contact Us” section below and sharing the email address at which you are receiving marketing or advertising emails.

Telephone Choices (calls and texts). We will not place a call or send a text message for informational or marketing purposes without obtaining your consent. If you have opted-in, REPOT BOX provides alerts, information, promotions, specials, and other marketing offers via text messages through your wireless provider to the mobile number you provided. By opting-in, you agree to receive recurring messages each month. You may need to confirm your consent, such as by following the instructions contained in an initial text message we send. Messages may be sent using an automatic telephone dialing system or artificial or pre-recorded messages. You understand that consent to receive such text messages is not required as a condition of purchasing any goods or services. Message and data rates may apply. You will have the ability to opt-out of receiving text messages, at any time, by texting “STOP” in response to a text message that you receive. You can also opt-out of receiving marketing or advertising calls or text messages by contacting us through one of the methods specified in the “Contact Us” section below and sharing the phone number that you would like to opt-out. You agree to provide us with a valid mobile number. If you change your mobile number, you agree to opt out of the Service prior to changing your mobile number.

Do Not Track Signals

We honor do not track signals and do not track, plant cookies or use advertising when a Do Not Track (DNT) browser mechanism is in place.

Your Rights

With respect to the collection of your personal data, you have the right to:

1) Update or amend personal data that we have collected about you if it is inaccurate or incomplete;

2) Request a copy of the Personal Information that we hold about you;

3) Request the categories of sources from which your Personal Information is collected; 4) Request the categories of third parties with whom we share Personal Information; 5) Request the commercial purpose for collecting your Personal Information;

6) Request the categories of Personal Information sold and the categories of third parties to whom

the Personal Information was sold;

7) Request that we erase or restrict personal data;

8) Object to the processing of your personal data with respect to direct marketing purposes; and 9) Not receive discriminatory treatment for the exercise of your privacy rights.

You have the right to request this information up to two times in a 12-month period. You have the right to designate an authorized agent to make a request on your behalf. To request this information, please contact us at hello@repotbox.app

Your California Privacy Rights

If you are a California resident, you have the right to receive the above information up to two times in a 12-month period, free of charge. You have the right to designate an authorized agent to make a request on your behalf. To request this information, please contact us at hello@repotbox.app or the mail address set forth in the section entitled “Contact Us” below. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are not required to respond to requests made by means other than through the provided email, telephone number, or mail address.

We do not sell, trade, otherwise transfer your Personal Information outside of the situations detailed above, and we will not sell it without providing you the opportunity to opt out. However, California law defines “sale” broadly in such a way that the term sale may include using targeted advertising we use on the Service, or how third-party services are used on our Service. We use these services to enable us to provide the Service and relevant offers to you, including at your request. To limit such advertising, please see our Cookies and other automated collection methods described in the section above for more information. If you have questions about these practices, please contact us at hello@repotbox.app.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your rights under the California Consumer Privacy Act. Unless permitted by the Act, we will not:

• Deny you products or Services.

• Charge you different prices or rates for products or Services, including through the use of discounts or other benefits or imposing penalties.

• Provide you with a different level or quality of products or Services.

• Suggest that you will receive a different price or rate for products or Services or a different level or quality of products or Services.

Accessibility

Individuals who need assistance accessing this Privacy Policy or need technical or customer support in an alternative format can do so by contacting us at the email address below.

These services include:

• Product Documentation

Users may download free documentation, reference materials, and user guides by reaching out to hello@repotbox.app (e.g., URL/documentation). In addition, users may request product documentation and reference materials in alternate formats.

Your European Privacy Rights

If you are a data subject in Europe, you have the right to access, rectify, or erase any personal data we have collected about you through the Service. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you through the Service. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us.

To exercise any of these rights, contact us at the address set forth in the section entitled “Contact Us” below and specify which right you intend to exercise. We will respond to your request within 30 days. We may require additional information from you to allow us to confirm your identity. Please note that we store information as necessary to fulfill the purposes for which it was collected and may continue to retain and use the information even after a data subject request for purposes of our legitimate interests, including, as necessary, to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

If you have any issues with our compliance, you have the right to lodge a complaint with a European supervisory authority.

This Privacy Policy is subject to the Terms of Service, a copy of which is available on our website. It is important that you read the Terms of Service, as where there is a conflict between this Privacy Policy and the Terms of Service, the Terms of Service shall prevail.

If you have any questions or requests relating to this Privacy Policy, please contact: Attn: REPOT BOX Privacy Policy

Email: hello@repotbox.app